A method, device, equipment and medium for constructing a network range based on virtual-real combination

Abstract

The present invention proposes a method, device, equipment and medium for constructing a network range based on the combination of virtual and real, and relates to the field of network security technology. The method includes: obtaining a user's construction request; determining the device type of each device node, and configuring the device port according to the network topology diagram and the device type, generating device configuration information and associated information of the device node; obtaining the docking status of the device node, performing configuration verification according to the device configuration information and the associated information of the forwarding device on the device interconnection path, and updating the context relationship in the network topology diagram when it is determined that the configuration verification passes. The present invention only needs to use a forwarding device to perform the docking of virtual devices and physical devices, which greatly simplifies the network hierarchy of the network range. At the same time, the device nodes can be mapped one by one to the network range, which is convenient for user operation and maintenance, and the use efficiency is greatly improved.

Description

Technical Field

[0001] The present invention relates to the field of network security technology, and in particular to a method, device, equipment and medium for constructing a network target range based on a combination of virtual and real. Background Art

[0002] Network security has become a crucial topic in the field of network technology. Cyber ​​Range is a virtualization-based technology. Cyber ​​Range products can initially meet the interconnection needs of virtual devices in network security equipment (such as common routers, switches, firewalls, PCs) and real physical devices (such as Web application protection systems, next-generation firewalls, intrusion protection systems).

[0003] However, the interconnection process between virtual devices and physical devices in current network target range products is complicated, requiring at least three levels of structure: virtual simulation platform, software (SW), and software-defined network. The network hierarchy is complex, and the management of SDN devices must be achieved through the configuration of SDN controllers. The SDN controller configuration needs to be manually configured as the scene switches, and the operation is complicated. Summary of the invention

[0004] In view of this, the present invention proposes a network range construction method, device, equipment and medium based on the combination of virtual and real to solve the problem of complex network hierarchy structure of the current network range.

[0005] The technical solution of the present invention is achieved in this way:

[0006] According to a first aspect, an embodiment of the present invention provides a method for constructing a network range based on a combination of virtual and real, the method being applied to a service side, the method comprising:

[0007] Obtaining a construction request from a user; the construction request includes a network topology diagram of the network range, and the network topology diagram includes device nodes and contextual relationships of the device nodes;

[0008] Determine the device type of each of the device nodes, configure the device port according to the network topology diagram and the device type, generate device configuration information of the device node and association information of the forwarding device as an intermediate device; the device type includes virtual devices and physical devices, the device configuration information includes first configuration information of the virtual device and second configuration information of the physical device, and the association information is obtained by associating the device configuration information of the device nodes on the device interconnection path;

[0009] The docking status of the two interconnected device nodes is obtained, and a configuration check of the docking status is performed according to the device configuration information and the associated information of the forwarding device on the device interconnection path. When it is determined that the configuration check passes, the context relationship in the network topology diagram is updated.

[0010] In combination with the first aspect, in a first implementation of the first aspect, determining the device type of each of the device nodes, configuring the device port according to the network topology diagram and the device type, and generating device configuration information of the device node and association information of a forwarding device as an intermediate device specifically include:

[0011] When it is determined that the device type is a virtual device, performing virtual device port configuration on a host machine of the virtual device to generate first device information and first configuration information of the virtual device;

[0012] According to the network topology diagram, the physical device interconnected with the virtual device is determined, the physical device port is configured according to the first device information and the first configuration information, and the second configuration information of the physical device is generated.

[0013] In combination with the first implementation of the first aspect, in the second implementation of the first aspect, when determining that the device type is a virtual device, performing virtual device port configuration on the host machine of the virtual device to generate first device information and first configuration information of the virtual device specifically includes:

[0014] When it is determined that the device type of the device is a virtual device, mapping the port of the virtual device to the port of its host machine according to the container mapping;

[0015] Perform port configuration of a virtual device to generate the first configuration information of the virtual device;

[0016] The first device information of the virtual device is obtained, the first configuration information and the first device information are added to the virtual LAN identifier generated by the host machine, and the virtual device is bound to the interface corresponding to the physical network card on the host machine.

[0017] In combination with the first aspect, in a third implementation manner of the first aspect, determining the device type of each of the device nodes, configuring the device port according to the network topology diagram and the device type, and generating device configuration information of the device node and association information of a forwarding device as an intermediate device further specifically include:

[0018] In the case where the device type is determined to be the physical device, determining the device type of the device node interconnected with the physical device according to the network topology diagram;

[0019] In the case where it is determined that the device type of the interconnected device node is the virtual device, obtaining first device information and first configuration information obtained by the virtual device based on the host machine, performing port configuration of the physical device according to the first device information and the first configuration information, generating the second configuration information of the physical device, and sending the first configuration information and the second configuration information to the forwarding device according to the network topology diagram;

[0020] When it is determined that the interconnected device type is a physical device, port configuration of the two interconnected physical devices is performed, second configuration information of the physical device is generated, and the second configuration information is sent to the forwarding device according to the network topology diagram.

[0021] In combination with the first aspect, in a fourth implementation manner of the first aspect, obtaining the docking status of the two interconnected device nodes, performing a configuration check of the docking status according to the device configuration information and the associated information of the forwarding device on the device interconnection path, and updating the context relationship in the network topology diagram when it is determined that the configuration check passes, specifically includes:

[0022] Obtain the connection status of two interconnected device nodes, as well as the device configuration information and node information of the device nodes;

[0023] Perform configuration verification on the device configuration information of the two interconnected device nodes according to the association information of the forwarding device on the device interconnection path and the node information of the device node;

[0024] When the device configuration information is consistent with the associated information, the context relationship of the corresponding device node in the network topology diagram is updated.

[0025] In combination with the first aspect, in a fifth implementation of the first aspect, obtaining the docking status of the two interconnected device nodes, performing a configuration check of the docking status according to the device configuration information and the associated information of the forwarding device on the device interconnection path, and updating the context relationship in the network topology diagram when it is determined that the configuration check passes, further specifically includes:

[0026] When the device configuration information is inconsistent with the associated information, modify the network topology diagram and change the relevant configuration of the corresponding device node.

[0027] In combination with the first aspect, in a sixth implementation of the first aspect, before determining the device type of each of the device nodes, configuring the device port according to the network topology diagram and the device type, and generating device configuration information of the device node and association information of a forwarding device as an intermediate device, the method further includes:

[0028] Verify the legitimacy of the data interface connection of each device node.

[0029] According to a second aspect, an embodiment of the present invention provides a network range construction device based on virtual-real combination, the device is applied to a service side, and the device includes:

[0030] Obtaining a construction request from a user; the construction request includes a network topology diagram of the network range, and the network topology diagram includes device nodes and contextual relationships of the device nodes;

[0031] Determine the device type of each of the device nodes, configure the device port according to the network topology diagram and the device type, generate device configuration information of the device node and association information of the forwarding device as an intermediate device; the device configuration information includes first configuration information of the virtual device and second configuration information of the physical device, and the association information is obtained by associating the device configuration information of the device nodes on the device interconnection path;

[0032] The docking status of the two interconnected device nodes is obtained, and a configuration check of the docking status is performed according to the device configuration information and the associated information of the forwarding device on the device interconnection path. When it is determined that the configuration check passes, the context relationship in the network topology diagram is updated.

[0033] According to a third aspect, an embodiment of the present invention provides an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, the steps of the method for constructing a network target range based on the combination of virtual and real as described in any one of the above items are implemented.

[0034] According to a third aspect, an embodiment of the present invention provides a non-transitory computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps of the method for constructing a network target range based on the combination of virtual and real as described in any one of the above items.

[0035] The network range construction method, device, equipment and medium based on the combination of virtual and real in the present invention have the following beneficial effects compared with the prior art:

[0036] The device ports are configured according to the network topology and device type in the user's construction request. The device configuration information includes the first configuration information of the virtual device and the second configuration information of the physical device. The association information is obtained by associating the device configuration information of the device nodes on the device interconnection path. The ports of the devices corresponding to the configured device nodes are used for subsequent interconnection between devices. In this way, the interconnection between virtual devices and physical devices does not require the use of SDN devices, but only requires the use of forwarding devices for docking, which greatly simplifies the network hierarchy of the network target range. At the same time, the interconnection between device nodes can be mapped one by one to the network target range based on the device configuration information and the association information of the forwarding device as an intermediate device, so that it only needs to be processed in one environment and one platform, without switching and integration on multiple different platforms, which is convenient for user operation and maintenance and greatly improves the usage efficiency. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0038] Figure 1 It is a flow chart of the method for constructing a network range based on the combination of virtual and real in the present invention;

[0039] Figure 2 It is a schematic diagram of a network range actually constructed in the method for constructing a network range based on the combination of virtual and real in the present invention;

[0040] Figure 3 Another schematic diagram of the process of constructing a network range based on the combination of virtual and real in the present invention;

[0041] Figure 4 Another schematic diagram of the process of constructing a network range based on the combination of virtual and real in the present invention;

[0042] Figure 5 Another schematic diagram of the process of constructing a network range based on the combination of virtual and real in the present invention;

[0043] Figure 6 Another schematic diagram of the process of constructing a network range based on the combination of virtual and real in the present invention;

[0044] Figure 7 The schematic diagram of the structure of the network range construction device based on the combination of virtual and real provided by the present invention is shown;

[0045] Figure 8A structural schematic diagram of an electronic device provided by the present invention is shown. DETAILED DESCRIPTION

[0046] The following will be combined with the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0047] Cyber ​​security has become a crucial topic in the field of network technology. Cyber ​​Range is a technology based on virtualization. It is a technology or product that simulates and reproduces the operating status and operating environment of network architecture, system equipment, and business processes in real cyberspace, so as to more effectively realize learning, research, testing, competition, exercises and other behaviors related to cyber security, thereby improving the cyber security confrontation level of personnel and institutions.

[0048] The network target range products are mainly composed of virtual simulation platforms, software-defined networking (SDN) products, serial port servers, etc., and the network target range products are mainly system integration of existing products, which can initially meet the interconnection between virtual devices in network security equipment (such as common routers, switches, firewalls, PCs) and real physical devices (such as Web application protection systems, next-generation firewalls, intrusion protection systems).

[0049] However, the interconnection process between virtual devices and physical devices in the current network target range products is complicated, and requires at least three levels of structure: virtual simulation platform, software (SW), and software-defined network. For some devices that cannot be virtualized and simulated temporarily (such as industrial control equipment), or situations that require real network attack and defense (such as network protection operations), it is necessary to use virtual-real technology to connect physical devices and the real network environment to the target range environment. However, as the scale of physical devices increases, the number of traffic network cards of the virtual simulation platform needs to be continuously increased, and the physical devices cannot be completely mapped to the virtual environment for simulation and reproduction, and there is a lack of virtual-real device linkage management mechanism.

[0050] The method, device, equipment and medium for constructing a network range based on the combination of virtual and real provided in this specification are intended to simplify the network hierarchy of the network range and unify the operation configuration.

[0051] See also Figure 1 , Figure 1A flowchart of a method for constructing a network range based on a combination of virtual and real is shown in an embodiment of the present invention. The method is applied to a service side, such as a server side. The method may include the following steps:

[0052] S101. Obtain a construction request from a user, wherein the construction request includes a network topology map of a network range, and the network topology map includes device nodes and contextual relationships between the device nodes.

[0053] In this embodiment, the build request can be generated by the user's autonomous configuration, or the build request can be generated by the electronic device according to the user's needs. For example, the electronic device can generate a corresponding build request once every set time according to the user's pre-settings, or it can generate a corresponding build request once at a specified time point.

[0054] In the build request, the user will create a network topology diagram of the target range environment. It can be understood that the network topology diagram contains several device nodes. When the user creates each device node in the network topology diagram, the user can also configure the node information of the device node by himself. The above-mentioned node information includes but is not limited to: startup file, running space, device information, Internet Protocol address (IP) of the device, media access control address (MAC), etc.

[0055] Since each device node in the network topology diagram is a network element, when the service side receives a construction request from the user, it also receives the network topology diagram constructed by the user and forms a contextual relationship on the device network element with the data interface as the basic unit.

[0056] S102, determine the device type of each device node, and configure the device port according to the network topology diagram and the device type, generate device configuration information of the device node and association information of the forwarding device as the intermediate device. The device configuration information includes the first configuration information of the virtual device and the second configuration information of the physical device, and the association information is obtained by associating the device configuration information of the device node on the device interconnection path. Configure the port of the device corresponding to the device node for subsequent interconnection between devices. The device type includes virtual devices and physical devices.

[0057] If the interconnection type is virtual device-physical device, then the association information is obtained by associating the first configuration information of the virtual device and the second configuration information of the physical device on the device interconnection path; if the interconnection type is physical device-physical device, then the association information is obtained by associating the second configuration information corresponding to the two physical devices on the device interconnection path.

[0058] Device types include virtual devices and physical devices. For a device corresponding to a device node, there is a corresponding device type.

[0059] In this embodiment, it is determined whether the device type corresponding to the device node is a virtual device or a physical device through the mapping relationship of the COM port (Communication Port) in the serial communication interface.

[0060] Specifically, based on the IP address in the device management information, the IP address 127.0.0.1 is determined to be a virtual device, otherwise it is a physical device. At the same time, the physical device needs to be mapped to the corresponding COM port through the TCP / IP OVER COM instruction.

[0061] In this way, both virtual devices and physical devices can be mapped one by one to the network target range based on the device configuration information and the associated information of the forwarding device as an intermediate device. The constructed network target range centrally and uniformly processes all devices, so that they are only processed in one environment and on one platform, without the need to switch and integrate on multiple different platforms. This facilitates user operation and maintenance and greatly improves usage efficiency.

[0062] S103, obtaining the docking status of two interconnected device nodes, performing configuration verification of the docking status according to the device configuration information and the associated information of the forwarding device on the device interconnection path, and updating the context relationship in the network topology diagram when it is determined that the configuration verification passes.

[0063] When the device configuration information is consistent with the associated information, it means that the configuration verification passes and the configuration takes effect. Otherwise, if the configuration verification fails, the configuration becomes invalid. When the configuration becomes invalid, the user is prompted to perform subsequent operations, which include but are not limited to: modifying the network topology diagram, changing the relevant configuration of the corresponding device node, etc.

[0064] See also Figure 2The network range constructed based on this method can interconnect various device nodes, especially the interconnection between virtual devices and physical devices, and then build a network range based on the combination of virtual and real. The network range is a virtual simulation platform, and then manages and configures various device nodes contained in the network topology diagram in the construction request, including: the control of virtual devices is directly implemented by sending to the virtual machine of the corresponding device; the control of physical devices is implemented by sending to the serial port of the corresponding device through the serial port manager; the forwarding device configuration before the virtual device communicates with the physical device is automatically synchronized and configured; the association of the host machine physical network card corresponding to the virtual device is configured through the virtual switch on the host machine. After the network range maps the physical devices one by one to the virtual simulation platform, it can centrally and uniformly process all devices, so that they are only used in one environment and one platform for processing, without switching and integration on multiple different platforms, which is convenient for user operation and maintenance, and greatly improves the efficiency of use.

[0065] The method for constructing a network range based on the combination of virtual and real in the present invention configures the device port according to the network topology diagram and the device type in the user's construction request. The device configuration information includes the first configuration information of the virtual device and the second configuration information of the physical device. The association information is obtained by associating the device configuration information of the device nodes on the device interconnection path. The ports of the devices corresponding to the configured device nodes are used for subsequent interconnection between devices. In this way, the interconnection between virtual devices and physical devices does not require the use of SDN devices, and only forwarding devices are needed for docking, which greatly simplifies the network hierarchy of the network range. At the same time, the interconnection between device nodes can be mapped one by one to the network range based on the device configuration information and the association information of the forwarding device as the intermediate device, so that it is only used in one environment and one platform for processing, without switching and integration on multiple different platforms, which is convenient for user operation and maintenance, and greatly improves the use efficiency.

[0066] See also Figure 3 , Figure 3 Another flow chart of the method for constructing a network range based on the combination of virtual and real in an embodiment of the present invention is shown. The method is applied to the service side, such as the server side. The method may include the following steps:

[0067] S201, obtaining a user's construction request, wherein the construction request includes a network topology diagram of the network range, and the network topology diagram includes device nodes and contextual relationships of the device nodes. For details, refer to step S101.

[0068] S2021. When it is determined that the device type is a virtual device, configure the virtual device port on the host machine of the virtual device to generate first device information and first configuration information of the virtual device.

[0069] More specifically, step S2021 includes the following steps:

[0070] When it is determined that the device type is a virtual device, the port of the virtual device is mapped to the port of its host machine according to the container mapping, and the virtual local area network (VLAN) is configured on the host machine where the container environment of the virtual device is located through port mapping. For example, according to the container mapping relationship, the serial port of the virtual device is mapped to the IP: Port of the corresponding physical device of its host machine, and then logged in through telnet.

[0071] Different from virtual devices, physical devices are the name of physical devices relative to virtual devices. Physical devices can provide the hardware environment required for the operation of virtual devices. Therefore, virtual devices need corresponding host / host physical devices, which serve as the host of virtual devices.

[0072] For example, a virtual machine (VM) is a complete computer system that is simulated by software and has complete hardware system functions and runs in a completely isolated environment. Any work that can be done in a physical computer, that is, a physical machine, can be done in a virtual machine. Through the cooperation of physical machines and virtual machines, multiple operating systems can be installed on a computer, that is, an external operating system and several operating systems in the virtual machine, and the above operating systems can also communicate with each other, just like multiple computers communicating, so that they can be accessed in a way that benefits from the original configuration. This new virtual view of resources is not limited by the implementation, geographical location, or physical configuration of the underlying resources.

[0073] In this embodiment, the port configuration of the virtual device is also performed according to the device model, manufacturer and other information to generate the first configuration information of the virtual device.

[0074] Start the configuration of the host machine, obtain the first device information of the virtual device, add the first configuration information and the first device information to the virtual LAN identifier (VID) generated by the host machine, and bind the (sub) interface corresponding to the physical network card on the host machine, so that the running space of the virtual device is associated with the physical network card of the virtual device and its host machine, for example, the above binding operation is completed by Bridge. Among them, the VID can be randomly generated by the host machine,

[0075] In this embodiment, the first device information includes but is not limited to: the virtual device startup file, COM port location, running space, identification (ID), IP address, MAC address and other information. Then, the virtual local area network identification carrying the above first configuration information and the first device information is sent to the background server, and the background server saves this information for subsequent use.

[0076] S2022. According to the network topology diagram, determine the physical device that is interconnected with the virtual device, configure the port of the physical device according to the first device information and the first configuration information, generate second configuration information of the physical device, and send the first configuration information and the second configuration information to the forwarding device to obtain association information. Synchronizing the configuration of the virtual device to the physical device can reduce the configuration complexity of the physical device.

[0077] More specifically, step S2022 includes the following steps:

[0078] The physical device interconnected with the virtual device is determined according to the network topology diagram, the VID of the virtual device is sent to the physical device, and the VID carrying the first configuration information and the first device information is parsed. Since the network topology diagram contains the context relationship of the device nodes, each device can find the device interconnected with it according to the context relationship, so that the interconnected physical device obtains the first configuration information and the first device information of the virtual device, and then the physical device is virtually locally configured based on the first configuration information and the first device information to generate the second configuration information of the physical device.

[0079] In this embodiment, before generating the second configuration information of the physical device, the port configuration of the physical device will also be performed to complete the interface configuration command of the physical device. For example, the serial port mapped to the physical device that interconnects with the virtual device is logged in according to the IP address to complete the corresponding interface configuration command.

[0080] According to the network topology diagram, the first configuration information and the second configuration information are sent to the forwarding device (such as a router, a switch, etc.), and the association information of the forwarding device is obtained, so that the path configuration of the intermediate device can be completed. For example, after the forwarding device is found according to the context relationship, add interface vlan XXX is sent to the forwarding device, and the association information includes the first configuration information of the virtual device on the path and the second configuration information of the physical device, and the device configuration information of the two device nodes on the path are associated with each other.

[0081] In particular, when the user configures the node information of the device nodes while constructing the network topology diagram, the first / second configuration information mentioned above can be obtained from the node information provided by the user.

[0082] It can be seen that, unlike the existing network range platform, which requires at least three levels of structure to achieve interconnection between virtual devices and physical devices, since the virtual device running space is associated with the physical network card of the virtual device host, the interconnection does not require the use of SDN devices. Only forwarding devices with VLAN functions need to be used as intermediate devices. Virtual devices can be connected to external physical devices, which greatly simplifies the network hierarchy of the range environment, facilitates networking and maintenance, and reduces the construction cost of the network range platform. At the same time, the configuration information of physical devices and virtual devices is linked to reduce the complexity and difficulty of configuration, and reduces the configuration workload.

[0083] S203, obtaining the docking status of two interconnected device nodes, performing configuration verification of the docking status according to the device configuration information and the associated information of the forwarding device on the device interconnection path, and updating the context relationship in the network topology diagram when it is determined that the configuration verification passes. For details, refer to step S103.

[0084] See also Figure 4 , Figure 4 Another flow chart of the method for constructing a network range based on the combination of virtual and real in an embodiment of the present invention is shown. The method is applied to the service side, such as the server side. The method may include the following steps:

[0085] S301, obtaining a user's construction request, wherein the construction request includes a network topology diagram of the network range, and the network topology diagram includes device nodes and contextual relationships of the device nodes. For details, refer to step S101.

[0086] S3021. When it is determined that the device type is a physical device, determine the device type of the device node interconnected with the physical device according to the network topology diagram.

[0087] S3022: When it is determined that the device type of the interconnected device node is a virtual device, obtain the first device information and the first configuration information obtained by the virtual device based on the host machine, configure the physical device port according to the first device information and the first configuration information, generate the second configuration information of the physical device, and send the first configuration information and the second configuration information to the forwarding device according to the network topology diagram. For details, refer to steps S2021 to S2022.

[0088] S3023. When it is determined that the interconnected device type is a physical device, perform port configuration of the two interconnected physical devices, generate second configuration information of the physical device, and send the second configuration information to the forwarding device according to the network topology diagram. For details, refer to step S2022 for the generation method of the second configuration information and how to send it to the forwarding device to complete the path configuration of the intermediate device.

[0089] The interconnection types in the network target range platform include not only virtual device-physical device, but also physical device-physical device. When the interconnection type is determined to be physical device-physical device, the relevant configuration and interconnection between the two physical devices can be performed according to the conventional configuration relationship.

[0090] S303, obtaining the docking status of two interconnected device nodes, performing configuration verification of the docking status according to the device configuration information and the associated information of the forwarding device on the device interconnection path, and updating the context relationship in the network topology diagram when it is determined that the configuration verification passes. For details, refer to step S103.

[0091] See also Figure 5 , Figure 5 Another flow chart of the method for constructing a network range based on the combination of virtual and real in an embodiment of the present invention is shown. The method is applied to the service side, such as the server side. The method may include the following steps:

[0092] S401, obtaining a user's construction request, wherein the construction request includes a network topology diagram of the network range, and the network topology diagram includes device nodes and contextual relationships of the device nodes. For details, refer to step S101.

[0093] S402, determine the device type of each device node, and configure the device port according to the network topology diagram and the device type, generate device configuration information of the device node and association information of the forwarding device as the intermediate device. The device configuration information includes the first configuration information of the virtual device and the second configuration information of the physical device, and the association information is obtained by associating the device configuration information of the device node on the device interconnection path. Configure the port of the device corresponding to the device node for subsequent interconnection between devices. For details, refer to step S102.

[0094] S4031, obtaining the docking status of two interconnected device nodes, as well as the device configuration information and node information of the device nodes. Similarly, for a physical device, the second device information of the physical device can be obtained according to the node information on its device node.

[0095] In this embodiment, similarly, in this embodiment, the second device information includes but is not limited to: the startup file of the physical device, the location of the COM port, the running space, the identification (ID), the Internet Protocol address (IP), the media access control address (MAC), etc. Then, the second configuration information and the second device information are sent to the background server, and the background server saves the information for subsequent use.

[0096] Among them, the basic device information such as the startup file, COM port location, running space, ID, etc. in the first / second device information can be configured by the user, and the information such as IP, MAC address, etc. can be obtained through the serial port manager.

[0097] S4032: Perform configuration verification on the device configuration information of two interconnected device nodes according to the association information of the forwarding device on the device interconnection path and the node information of the device node.

[0098] S4033. When the device configuration information is consistent with the associated information, the context relationship of the corresponding device node in the network topology diagram is updated; otherwise, the user is prompted to perform subsequent operations, including but not limited to: modifying the network topology diagram, changing the relevant configuration of the corresponding device node, etc.

[0099] See also Figure 6 , Figure 6 Another flow chart of the method for constructing a network range based on the combination of virtual and real in an embodiment of the present invention is shown. The method is applied to the service side, such as the server side. The method may include the following steps:

[0100] S501, obtaining a user's construction request, wherein the construction request includes a network topology diagram of the network range, and the network topology diagram includes device nodes and contextual relationships of the device nodes. For details, refer to step S101.

[0101] S502, verify the legitimacy of the data interface connection of each device node, that is, confirm whether each device node can be connected before interconnecting the device nodes, so as to simplify the construction operation of the network target range and improve the construction efficiency.

[0102] S503, determine the device type of each device node, and configure the device port according to the network topology diagram and the device type, generate device configuration information of the device node and association information of the forwarding device as the intermediate device. The device configuration information includes the first configuration information of the virtual device and the second configuration information of the physical device, and the association information is obtained by associating the device configuration information of the device node on the device interconnection path. Configure the port of the device corresponding to the device node for subsequent interconnection between devices. For details, refer to step S103.

[0103] S504, obtaining the docking status of two interconnected device nodes, performing configuration verification of the docking status according to the device configuration information and the associated information of the forwarding device on the device interconnection path, and updating the context relationship in the network topology diagram when the configuration verification is determined to be passed. For details, refer to step S103.

[0104] The following describes an apparatus provided by an embodiment of the present invention. The apparatus described below and the method described above can refer to each other.

[0105] See also Figure 7 , Figure 7 A flowchart of a method for constructing a network range based on a combination of virtual and real is shown in an embodiment of the present invention. The method is applied to a service side, such as a server side. The device may include:

[0106] The request acquisition module 10 is used to obtain the user's construction request, wherein the construction request includes a network topology map of the network target range, and the network topology map includes device nodes and contextual relationships between the device nodes.

[0107] In this embodiment, the build request can be generated by the user's autonomous configuration, or the build request can be generated by the electronic device according to the user's needs. For example, the electronic device can generate a corresponding build request once every set time according to the user's pre-settings, or it can generate a corresponding build request once at a specified time point.

[0108] In the build request, the user will create a network topology diagram of the target range environment. It can be understood that the network topology diagram contains several device nodes. When the user creates each device node in the network topology diagram, the user can also configure the node information of the device node by himself. The above-mentioned node information includes but is not limited to: startup file, running space, device information, Internet Protocol address (IP) of the device, media access control address (MAC), etc.

[0109] Since each device node in the network topology diagram is a network element, when the service side receives a construction request from the user, it also receives the network topology diagram constructed by the user and forms a contextual relationship on the device network element with the data interface as the basic unit.

[0110] The port configuration module 20 is used to determine the device type of each device node, configure the device port according to the network topology diagram and the device type, generate the device configuration information of the device node and the association information of the forwarding device as the intermediate device. The device configuration information includes the first configuration information of the virtual device and the second configuration information of the physical device, and the association information is obtained by associating the device configuration information of the device node on the device interconnection path. The port of the device corresponding to the device node is configured to perform the subsequent interconnection between the devices. The device type includes virtual devices and physical devices.

[0111] If the interconnection type is virtual device-physical device, then the association information is obtained by associating the first configuration information of the virtual device and the second configuration information of the physical device on the device interconnection path; if the interconnection type is physical device-physical device, then the association information is obtained by associating the second configuration information corresponding to the two physical devices on the device interconnection path.

[0112] Device types include virtual devices and physical devices. For a device corresponding to a device node, there is a corresponding device type.

[0113] In this embodiment, it is determined whether the device type corresponding to the device node is a virtual device or a physical device through the mapping relationship of the COM port in the serial communication interface.

[0114] Specifically, based on the IP address in the device management information, the IP address 127.0.0.1 is determined to be a virtual device, otherwise it is a physical device. At the same time, the physical device needs to be mapped to the corresponding COM port through the TCP / IP OVER COM instruction.

[0115] In this way, both virtual devices and physical devices can be mapped one by one to the network target range based on the device configuration information and the associated information of the forwarding device as an intermediate device. The constructed network target range centrally and uniformly processes all devices, so that they are only processed in one environment and on one platform, without the need to switch and integrate on multiple different platforms. This facilitates user operation and maintenance and greatly improves usage efficiency.

[0116] The configuration verification module 30 is used to obtain the docking status of two interconnected device nodes, perform configuration verification of the docking status according to the device configuration information and the associated information of the forwarding device on the device interconnection path, and update the context relationship in the network topology diagram when it is determined that the configuration verification passes.

[0117] When the device configuration information is consistent with the associated information, it means that the configuration verification passes and the configuration takes effect. Otherwise, if the configuration verification fails, the configuration becomes invalid. When the configuration becomes invalid, the user is prompted to perform subsequent operations, which include but are not limited to: modifying the network topology diagram, changing the relevant configuration of the corresponding device node, etc.

[0118] The network range construction device based on the combination of virtual and real in the present invention configures the device port according to the network topology diagram and the device type in the user's construction request. The device configuration information includes the first configuration information of the virtual device and the second configuration information of the physical device. The association information is obtained by associating the device configuration information of the device nodes on the device interconnection path. The ports of the devices corresponding to the configured device nodes are used for subsequent interconnection between devices. In this way, the interconnection between virtual devices and physical devices does not require the use of SDN devices, and only forwarding devices are needed for docking, which greatly simplifies the network hierarchy of the network range. At the same time, the interconnection between device nodes can be mapped one by one to the network range based on the device configuration information and the association information of the forwarding device as the intermediate device, so that it only needs to be processed in one environment and one platform, without switching and integration on multiple different platforms, which is convenient for user operation and maintenance and greatly improves the use efficiency.

[0119] Figure 8 An example of a physical structure diagram of an electronic device is shown in FIG. Figure 8 As shown, the electronic device may include: a processor 810 (processor), a communication interface 820 (Communications Interface), a memory 830 (memory) and a communication bus 840, wherein the processor 810, the communication interface 820, and the memory 830 communicate with each other through the communication bus 840. The processor 810 may call the logic instructions in the memory 830 to execute the following method:

[0120] Obtaining a construction request from a user; the construction request includes a network topology diagram of the network range, and the network topology diagram includes device nodes and contextual relationships of the device nodes;

[0121] Determine the device type of each of the device nodes, configure the device port according to the network topology diagram and the device type, generate device configuration information of the device node and association information of the forwarding device as an intermediate device; the device type includes virtual devices and physical devices, the device configuration information includes first configuration information of the virtual device and second configuration information of the physical device, and the association information is obtained by associating the device configuration information of the device nodes on the device interconnection path;

[0122] The docking status of the two interconnected device nodes is obtained, and a configuration check of the docking status is performed according to the device configuration information and the associated information of the forwarding device on the device interconnection path. When it is determined that the configuration check passes, the context relationship in the network topology diagram is updated.

[0123] It should be noted that the electronic device in this embodiment can be a server, a PC, or other devices in specific implementation, as long as its structure includes the following: Figure 8 The processor 810, communication interface 820, memory 830 and communication bus 840 shown in the figure, wherein the processor 810, communication interface 820, memory 830 communicate with each other through the communication bus 840, and the processor 810 can call the logic instructions in the memory 830 to execute the above method. This embodiment does not limit the specific implementation form of the electronic device.

[0124] In addition, the logic instructions in the above-mentioned memory 830 can be implemented in the form of a software functional unit and can be stored in a computer-readable storage medium when it is sold or used as an independent product. Based on such an understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art or the part of the technical solution, can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk and other media that can store program codes.

[0125] Furthermore, an embodiment of the present invention discloses a computer program product, the computer program product comprising a computer program stored on a non-transitory computer-readable storage medium, the computer program comprising program instructions, and when the program instructions are executed by a computer, the computer can perform the methods provided by the above-mentioned method embodiments, for example, including:

[0126] Obtaining a construction request from a user; the construction request includes a network topology diagram of the network range, and the network topology diagram includes device nodes and contextual relationships of the device nodes;

[0127] Determine the device type of each of the device nodes, configure the device port according to the network topology diagram and the device type, generate device configuration information of the device node and association information of the forwarding device as an intermediate device; the device type includes virtual devices and physical devices, the device configuration information includes first configuration information of the virtual device and second configuration information of the physical device, and the association information is obtained by associating the device configuration information of the device nodes on the device interconnection path;

[0128] The docking status of the two interconnected device nodes is obtained, and a configuration check of the docking status is performed according to the device configuration information and the associated information of the forwarding device on the device interconnection path. When it is determined that the configuration check passes, the context relationship in the network topology diagram is updated.

[0129] On the other hand, an embodiment of the present invention further provides a non-transitory computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, the transmission method provided in the above embodiments is implemented, for example, including:

[0130] Obtaining a construction request from a user; the construction request includes a network topology diagram of the network range, and the network topology diagram includes device nodes and contextual relationships of the device nodes;

[0131] Determine the device type of each of the device nodes, configure the device port according to the network topology diagram and the device type, generate device configuration information of the device node and association information of the forwarding device as an intermediate device; the device type includes virtual devices and physical devices, the device configuration information includes first configuration information of the virtual device and second configuration information of the physical device, and the association information is obtained by associating the device configuration information of the device nodes on the device interconnection path;

[0132] The docking status of the two interconnected device nodes is obtained, and a configuration check of the docking status is performed according to the device configuration information and the associated information of the forwarding device on the device interconnection path. When it is determined that the configuration check passes, the context relationship in the network topology diagram is updated.

[0133] The device embodiments described above are merely illustrative, wherein the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this embodiment. Ordinary technicians in this field can understand and implement it without paying creative labor.

[0134] Through the description of the above implementation methods, those skilled in the art can clearly understand that each implementation method can be implemented by means of software plus a necessary general hardware platform, and of course, it can also be implemented by hardware. Based on this understanding, the above technical solution is essentially or the part that contributes to the prior art can be embodied in the form of a software product, and the computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, a disk, an optical disk, etc., including a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in each embodiment or some parts of the embodiments.

[0135] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A method for constructing a network range based on the combination of virtual and real, characterized in that: The method is applied to the service side, and the method includes: Obtaining a construction request from a user; the construction request includes a network topology diagram of the network range, and the network topology diagram includes device nodes and contextual relationships of the device nodes; Determine the device type of each of the device nodes, configure the device port according to the network topology diagram and the device type, generate device configuration information of the device node and association information of the forwarding device as an intermediate device; the device type includes virtual devices and physical devices, the device configuration information includes first configuration information of the virtual device and second configuration information of the physical device, and the association information is obtained by associating the device configuration information of the device nodes on the device interconnection path; The docking status of the two interconnected device nodes is obtained, and a configuration check of the docking status is performed according to the device configuration information and the associated information of the forwarding device on the device interconnection path. When it is determined that the configuration check passes, the context relationship in the network topology diagram is updated.

2. The method for constructing a network range based on the combination of virtual and real as claimed in claim 1, characterized in that: The determining of the device type of each of the device nodes, configuring the device port according to the network topology diagram and the device type, and generating device configuration information of the device node and associated information of a forwarding device as an intermediate device specifically includes: When it is determined that the device type is a virtual device, performing port configuration of the virtual device on a host machine of the virtual device to generate first device information and first configuration information of the virtual device; According to the network topology diagram, the physical device that is interconnected with the virtual device is determined, the port of the physical device is configured according to the first device information and the first configuration information, the second configuration information of the physical device is generated, and the first configuration information and the second configuration information are sent to a forwarding device to obtain associated information.

3. The method for constructing a network range based on the combination of virtual and real as claimed in claim 2, characterized in that: When determining that the device type is a virtual device, performing port configuration of the virtual device on the host machine of the virtual device to generate first device information and first configuration information of the virtual device specifically includes: When it is determined that the device type of the device is a virtual device, mapping the port of the virtual device to the port of its host machine according to the container mapping; Perform port configuration of a virtual device to generate the first configuration information of the virtual device; The first device information of the virtual device is obtained, the first configuration information and the first device information are added to the virtual LAN identifier generated by the host machine, and the virtual device is bound to an interface corresponding to a physical network card on the host machine.

4. The method for constructing a network range based on the combination of virtual and real as claimed in claim 3, characterized in that: The determining, according to the network topology diagram, the physical device interconnected with the virtual device, performing port configuration of the physical device according to the first device information and the first configuration information, generating second configuration information of the physical device, and sending the first configuration information and the second configuration information to a forwarding device to obtain association information specifically includes: Determine a physical device that is interconnected with the virtual device according to the network topology diagram, send a virtual local area network identifier of the virtual device to the physical device, parse the virtual local area network identifier, perform virtual local area network configuration on the physical device based on the first configuration information and the first device information, and generate second configuration information of the physical device; The first configuration information and the second configuration information are sent to the forwarding device according to the network topology diagram to obtain the association information of the forwarding device.

5. The method for constructing a network range based on the combination of virtual and real as claimed in claim 1, characterized in that: The determining of the device type of each of the device nodes, configuring the device port according to the network topology diagram and the device type, generating the device configuration information of the device node and the associated information of the forwarding device as the intermediate device, further specifically includes: In the case where the device type is determined to be the physical device, determining the device type of the device node interconnected with the physical device according to the network topology diagram; In the case where it is determined that the device type of the interconnected device node is the virtual device, obtaining first device information and first configuration information obtained by the virtual device based on the host machine, performing port configuration of the physical device according to the first device information and the first configuration information, generating the second configuration information of the physical device, and sending the first configuration information and the second configuration information to the forwarding device according to the network topology diagram; When it is determined that the interconnected device type is a physical device, port configuration of the two interconnected physical devices is performed, second configuration information of the physical device is generated, and the second configuration information is sent to the forwarding device according to the network topology diagram.

6. The method for constructing a network range based on the combination of virtual and real as claimed in claim 1, characterized in that: The obtaining of the docking status of the two interconnected device nodes, performing configuration verification of the docking status according to the device configuration information and the associated information of the forwarding device on the device interconnection path, and updating the context relationship in the network topology diagram when it is determined that the configuration verification passes, specifically includes: Obtain the connection status of two interconnected device nodes, as well as the device configuration information and node information of the device nodes; Perform configuration verification on the device configuration information of the two interconnected device nodes according to the association information of the forwarding device on the device interconnection path and the node information of the device node; When the device configuration information is consistent with the associated information, the context relationship of the corresponding device node in the network topology diagram is updated.

7. The method for constructing a network range based on the combination of virtual and real as claimed in claim 1, characterized in that: Before determining the device type of each device node, configuring the device port according to the network topology diagram and the device type, and generating device configuration information of the device node and association information of the forwarding device as an intermediate device, the method further includes: Verify the legitimacy of the data interface connection of each device node.

8. A network range construction device based on the combination of virtual and real, characterized in that: The device is applied to the service side, and the device includes: A request acquisition module is used to obtain a user's construction request; the construction request includes a network topology map of the network range, and the network topology map includes device nodes and contextual relationships of the device nodes; A port configuration module, used to determine the device type of each device node, and configure the device port according to the network topology diagram and the device type, and generate device configuration information of the device node and association information of the forwarding device as an intermediate device; the device configuration information includes first configuration information of the virtual device and second configuration information of the physical device, and the association information is obtained by associating the device configuration information of the device nodes on the device interconnection path; The configuration verification module is used to obtain the docking status of the two interconnected device nodes, perform configuration verification of the docking status according to the device configuration information and the associated information of the forwarding device on the device interconnection path, and update the context relationship in the network topology diagram when it is determined that the configuration verification passes.

9. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the program, the steps of the method for constructing a network target range based on the combination of virtual and real as described in any one of claims 1 to 8 are implemented.

10. A non-transitory computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method for constructing a network target range based on the combination of virtual and real as described in any one of claims 1 to 8 are implemented.

Images