Load balancing equipment automatic configuration method and device

Abstract

The present invention discloses a method and device for automatic configuration of a load balancing device, which belongs to the field of network technology. The method includes the following steps: obtaining load balancing planning information; extracting data center network area, load balancing device and IPv4 / IPv6 planning information and parsing their corresponding relationship, and forming a network matrix in combination with the current status of financial services; setting a load balancing demand template, receiving and sorting out load balancing configuration requirements; remotely connecting to a load balancing device and reading device configuration, parsing existing device configurations and sorting them out by categories; matching the load balancing configuration requirements with the network matrix, incrementally and automatically generating configuration command lines or API interface change templates, and obtaining the final load balancing configuration; remotely connecting to each load balancing device in the data center and issuing the final load balancing configuration. The present invention can concisely and efficiently complete the load balancing configuration work, improve the efficiency and accuracy of load configuration, and ensure the security of the financial cloud data center.

Description

Technical Field

[0001] The invention relates to a method and a device for automatic configuration of load balancing equipment, belonging to the field of network technology. Background Art

[0002] With the construction and development of cloud data centers in the financial industry and the promotion and application of national IPv6 networks, more and more load balancing devices are appearing in the two-site three-center architecture. A single data center often deploys hundreds of load balancing devices, serving hundreds of business systems, and assuming the functions of server load balancing, link load balancing, and global load balancing. It provides secure IPv4 / IPv6 access for the bank's Internet electronic banking individual customers, corporate customers, and various financial institutions with which it has business dealings, greatly improving the scalability and high reliability of the data center. Even if a single or even multiple devices or links fail, external access will not be interrupted, improving the overall reliability of the system.

[0003] Server load balancing: Multiple servers are required to provide services to the outside world at the same time. Server load balancing technology can reasonably distribute user traffic among multiple servers, thereby improving server resource utilization and enhancing user access experience.

[0004] Link load balancing: When there are multiple operator links, this technology can realize dynamic link selection, thereby making full use of multiple links.

[0005] Global load balancing technology is mainly used in multi-data center scenarios. By applying global load balancing technology, Internet users can access the nearest data center, improving user experience; remote disaster recovery can also be performed between multiple data centers. When a data center fails, global load balancing technology can divert traffic to other data centers for processing, thereby improving service reliability.

[0006] Load balancing configuration is becoming more and more complicated, involving not only hundreds of business systems in multiple data centers located in different locations, but also IPv4 / IPv6 dual-stack access environments. There are problems such as complex change logic, long change preparation cycle, short change window, long configuration time and prone to errors, and difficult problem troubleshooting. These have always been the difficulties of network changes, and there is a lack of an effective change support system. Therefore, the present invention proposes a method and device for automatic configuration of load balancing equipment. Summary of the invention

[0007] In order to solve the existing problems of complex change logic, long change preparation cycle, short change window, long configuration time and easy errors, and difficult problem troubleshooting, the present invention proposes an automatic configuration method and device for load balancing equipment.

[0008] The technical solution adopted by the present invention to solve the technical problem is:

[0009] In a first aspect, an embodiment of the present invention provides a method for automatically configuring a load balancing device, comprising the following steps:

[0010] Step S1, obtaining load balancing planning information, wherein the load balancing planning information includes data center load balancing equipment information and data center load balancing planning information;

[0011] Step S2, extracting data center network area, load balancing equipment and IPv4 / IPv6 planning information from the load balancing planning information;

[0012] Step S3, analyzing the correspondence between the data center network area, load balancing equipment and IPv4 / IPv6 planning information, and combining the current status of financial services to form a network matrix required for load balancing automation configuration from four directions: intranet, Internet, extranet and wide area network;

[0013] Step S4, setting a load balancing requirement template, and receiving and arranging load balancing configuration requirements based on the template;

[0014] Step S5, remotely connect to the load balancing device and read the device configuration, parse the existing device configuration and sort it out;

[0015] Step S6, matching the load balancing configuration requirements with the network matrix, incrementally and automatically generating configuration command lines or API interface change templates based on the existing device configurations, and creating corresponding commands and API interface changes to roll back after a change fails, to obtain the final load balancing configuration;

[0016] Step S7: remotely connect to each load balancing device in the data center and issue the final load balancing configuration.

[0017] As a possible implementation method of this embodiment, the data center load balancing device information includes network area, device management information, configuration command template, and API interface document; the network area refers to the business bearing area of ​​the data center, including the external access area, Internet access area, wide area network area and core area; the device management information refers to the brand, model, software version, management IP address, user name and password of the device, which is used for remote access; the configuration command refers to the device configuration command of different load balancing manufacturers, which is used for the system to automatically generate device configuration scripts that meet the business, and query and modify the device operation configuration; the API interface document is an API interface open to the outside world by different load balancing manufacturers, and the device operation configuration is queried and modified through the API interface.

[0018] As a possible implementation method of this embodiment, the data center load balancing planning information includes an Internet public domain name, an Internet IPv4 / IPv6 address planning, and an intranet IPv4 / IPv6 address planning. The Internet public domain name refers to a domain name that is directly accessed on the Internet. The domain name corresponds to the corporate online banking business. Internet users can directly enter the domain name in the browser and access it; the Internet IPv4 / IPv6 address planning refers to a section of public network addresses applied for from an operator. These addresses open 80 or 443 port services to the Internet. These addresses can be directly accessed by Internet users. When an Internet client accesses the financial cloud data center, its source address will be converted into a corresponding internal address using NAT44 and NAT66 technologies; the intranet IPv4 / IPv6 address planning refers to private addresses used internally. These private addresses cannot be directly accessed on the Internet and need to be accessed after network equipment performs address conversion NAT based on NAT66 technology and NAT44 technology.

[0019] As a possible implementation manner of this embodiment, the network matrix includes a matrix name, Internet domain name information, public network address information, load balancing device management information and IPv4 / IPv6 address information of the load balancing device.

[0020] As a possible implementation method of this embodiment, setting the load balancing requirement template is to edit and generate an information collection template based on the network matrix information required for the formed load balancing automatic configuration, and use the template to collect load balancing configuration requirements; the load balancing configuration requirements include the original requirements of the business personnel and the requirements supplemented by the load management personnel.

[0021] As a possible implementation of this embodiment, the parsing and categorizing the existing device configurations is to parse the existing configurations and categorize them according to the VIP address information, POOL address information, and SNAT address information.

[0022] As a possible implementation of this embodiment, step S6 matches the load balancing configuration requirements with the network matrix, incrementally and automatically generates configuration command lines or API interface change templates based on existing device configurations, and creates corresponding commands and API interface changes for rollback after a change fails, to obtain the final load balancing configuration, including:

[0023] Based on the longest mask matching principle in network technology, through the network matrix, it is determined that the Internet domain name is located on the global load balancing device at the Internet exit, the public network IP address is located on the link load balancing device, and the intranet IP address information is located on the server load balancing device in the intranet DMZ area;

[0024] Read the configuration information of the relevant load devices to confirm that the domain name, public IP address, intranet IP address and port information are not configured on the relevant devices. Then proceed to the next step to generate new configurations and configurations to be rolled back if changes fail. If the configuration already exists, no new configuration will be generated and the original configuration will be used directly.

[0025] In a second aspect, an embodiment of the present invention provides an automatic configuration device for a load balancing device, comprising:

[0026] A data acquisition module is used to obtain load balancing planning information, wherein the load balancing planning information includes data center load balancing equipment information and data center load balancing planning information;

[0027] A data extraction module is used to extract data center network area, load balancing device and IPv4 / IPv6 planning information from the load balancing planning information;

[0028] The data analysis module is used to analyze the correspondence between the data center network area, load balancing equipment and IPv4 / IPv6 planning information, and to form the network matrix required for automatic configuration of load balancing from four directions: intranet, Internet, extranet and wide area network, in combination with the current status of financial services;

[0029] The template setting module is used to set the load balancing requirement template and receive and organize the load balancing configuration requirements based on the template;

[0030] Configuration parsing module, used to remotely connect to load balancing devices and read device configurations, parse existing device configurations and organize them by categories;

[0031] The configuration acquisition module is used to match the load balancing configuration requirements with the network matrix, automatically and incrementally generate configuration command lines or API interface change templates based on the existing device configuration, and create corresponding commands and API interface changes to roll back after the change fails to obtain the final load balancing configuration;

[0032] The configuration delivery module is used to remotely connect to the load balancing devices in the data center and deliver the final load balancing configuration.

[0033] In a third aspect, an embodiment of the present invention provides an electronic device, comprising a processor, a memory and a bus, wherein the memory stores machine-readable instructions executable by the processor. When the electronic device is running, the processor communicates with the memory through the bus, and the processor executes the machine-readable instructions to perform the steps of any of the above-mentioned methods for automatic configuration of load balancing devices.

[0034] In a fourth aspect, an embodiment of the present invention provides a storage medium, on which a computer program is stored. When the computer program is executed by a processor, the steps of any of the above-mentioned methods for automatically configuring a load balancing device are executed.

[0035] The beneficial effects of the technical solution of the embodiment of the present invention are as follows:

[0036] The technical solution of an embodiment of the present invention is a method for automatically configuring a load balancing device. For a load balancing device, the corresponding configuration commands can be automatically generated, and then the configuration commands can be spliced ​​to obtain a complete configuration. The load balancing configuration work can be completed concisely and efficiently without the need for manual operation by load management personnel. This not only improves the load configuration efficiency and reduces the possibility of human operation errors, but also improves the accuracy of load configuration, reduces manpower and time costs, and ensures the security of the financial cloud data center.

[0037] An automatic configuration device for a load balancing device according to the technical solution of an embodiment of the present invention has the same beneficial effects as an automatic configuration method for a load balancing device according to the technical solution of an embodiment of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] Figure 1 is a flow chart of a method for automatic configuration of a load balancing device according to an exemplary embodiment;

[0039] Figure 2 The present invention is a schematic diagram of a structure of an automatic configuration device for a load balancing device according to an exemplary embodiment. DETAILED DESCRIPTION

[0040] In order to more clearly illustrate the technical features of the solution of the present invention, the present invention is described in detail below through specific implementation methods and in conjunction with the accompanying drawings.

[0041] In order to facilitate load management personnel to accurately and quickly complete the automated configuration of load balancing equipment and solve the existing problems of complex change logic, long change preparation cycle, short change window, long configuration time and easy errors, and difficult problem troubleshooting, the present invention designs an automated configuration method for load balancing based on IPv4 / IPv6 address network matrix, which automatically generates configuration scripts for load balancing devices used in financial cloud data centers and performs automated configuration, so that load management personnel can complete the load balancing configuration work concisely and efficiently.

[0042] like Figure 1 As shown, an embodiment of the present invention provides a method for automatically configuring a load balancing device, comprising the following steps:

[0043] Step S1, obtaining load balancing planning information, wherein the load balancing planning information includes data center load balancing equipment information and data center load balancing planning information;

[0044] Step S2, extracting data center network area, load balancing equipment and IPv4 / IPv6 planning information from the load balancing planning information;

[0045] Step S3, analyzing the correspondence between the data center network area, load balancing equipment and IPv4 / IPv6 planning information, and combining the current status of financial services to form a network matrix required for load balancing automation configuration from four directions: intranet, Internet, extranet and wide area network;

[0046] Step S4, setting a load balancing requirement template, and receiving and arranging load balancing configuration requirements based on the template;

[0047] Step S5, remotely connect to the load balancing device and read the device configuration, parse the existing device configuration and sort it out;

[0048] Step S6, matching the load balancing configuration requirements with the network matrix, incrementally and automatically generating configuration command lines or API interface change templates based on the existing device configurations, and creating corresponding commands and API interface changes to roll back after a change fails, to obtain the final load balancing configuration;

[0049] Step S7: remotely connect to each load balancing device in the data center and issue the final load balancing configuration.

[0050] As a possible implementation method of this embodiment, the data center load balancing device information includes network area, device management information, configuration command template, and API interface document; the network area refers to the business bearing area of ​​the data center, including the external access area, Internet access area, wide area network area and core area; the device management information refers to the brand, model, software version, management IP address, user name and password of the device, which is used for remote access; the configuration command refers to the device configuration command of different load balancing manufacturers, which is used for the system to automatically generate device configuration scripts that meet the business, and query and modify the device operation configuration; the API interface document is an API interface open to the outside world by different load balancing manufacturers, and the device operation configuration is queried and modified through the API interface.

[0051] As a possible implementation method of this embodiment, the data center load balancing planning information includes an Internet public domain name, an Internet IPv4 / IPv6 address planning, and an intranet IPv4 / IPv6 address planning. The Internet public domain name refers to a domain name that is directly accessed on the Internet. The domain name corresponds to the corporate online banking business. Internet users can directly enter the domain name in the browser and access it; the Internet IPv4 / IPv6 address planning refers to a section of public network addresses applied for from an operator. These addresses open 80 or 443 port services to the Internet. These addresses can be directly accessed by Internet users. When an Internet client accesses the financial cloud data center, its source address will be converted into a corresponding internal address using NAT44 and NAT66 technologies; the intranet IPv4 / IPv6 address planning refers to private addresses used internally. These private addresses cannot be directly accessed on the Internet and need to be accessed after network equipment performs address conversion NAT based on NAT66 technology and NAT44 technology.

[0052] As a possible implementation manner of this embodiment, the network matrix includes a matrix name, Internet domain name information, public network address information, load balancing device management information and IPv4 / IPv6 address information of the load balancing device.

[0053] As a possible implementation method of this embodiment, setting the load balancing requirement template is to edit and generate an information collection template based on the network matrix information required for the formed load balancing automatic configuration, and use the template to collect load balancing configuration requirements; the load balancing configuration requirements include the original requirements of the business personnel and the requirements supplemented by the load management personnel.

[0054] As a possible implementation of this embodiment, the parsing and categorizing the existing device configurations is to parse the existing configurations and categorize them according to the VIP address information, POOL address information, and SNAT address information.

[0055] As a possible implementation of this embodiment, step S6 matches the load balancing configuration requirements with the network matrix, incrementally and automatically generates configuration command lines or API interface change templates based on existing device configurations, and creates corresponding commands and API interface changes for rollback after a change fails, to obtain the final load balancing configuration, including:

[0056] Based on the longest mask matching principle in network technology, through the network matrix, it is determined that the Internet domain name is located on the global load balancing device at the Internet exit, the public network IP address is located on the link load balancing device, and the intranet IP address information is located on the server load balancing device in the intranet DMZ area;

[0057] Read the configuration information of the relevant load devices to confirm that the domain name, public IP address, intranet IP address and port information are not configured on the relevant devices. Then proceed to the next step to generate new configurations and configurations to be rolled back if changes fail. If the configuration already exists, no new configuration will be generated and the original configuration will be used directly.

[0058] like Figure 2 As shown, an embodiment of the present invention provides an automatic configuration device for a load balancing device, comprising:

[0059] A data acquisition module is used to obtain load balancing planning information, wherein the load balancing planning information includes data center load balancing equipment information and data center load balancing planning information;

[0060] A data extraction module is used to extract data center network area, load balancing device and IPv4 / IPv6 planning information from the load balancing planning information;

[0061] The data analysis module is used to analyze the correspondence between the data center network area, load balancing equipment and IPv4 / IPv6 planning information, and to form the network matrix required for automatic configuration of load balancing from four directions: intranet, Internet, extranet and wide area network, in combination with the current status of financial services;

[0062] The template setting module is used to set the load balancing requirement template and receive and organize the load balancing configuration requirements based on the template;

[0063] Configuration parsing module, used to remotely connect to load balancing devices and read device configurations, parse existing device configurations and organize them by categories;

[0064] The configuration acquisition module is used to match the load balancing configuration requirements with the network matrix, automatically and incrementally generate configuration command lines or API interface change templates based on the existing device configuration, and create corresponding commands and API interface changes to roll back after the change fails to obtain the final load balancing configuration;

[0065] The configuration delivery module is used to remotely connect to the load balancing devices in the data center and deliver the final load balancing configuration.

[0066] The present invention automatically generates configuration scripts for load balancing devices used in data centers and performs automatic configuration, so as to solve the existing problems of complex change logic, long change preparation cycle, short change window, long configuration time and prone to errors, and difficult troubleshooting.

[0067] The load balancing automatic configuration process of the present invention based on the IPv4 / IPv6 address network matrix is ​​as follows.

[0068] S1, import the data center load balancing device information, specifically including network area / device management information / configuration command template / API interface document, etc., where the network area refers to the business bearing area of ​​the data center, including the external access area, Internet access area, WAN area and core area, etc. Device management information refers to the brand, model, software version, management IP address, user name and password of the device, which is used for remote access. Configuration commands refer to device configuration commands that are not from different load balancing manufacturers. They are used by the system to automatically generate device configuration scripts that meet the business, and query and modify the device operation configuration. The API interface document is an API interface open to the outside world by different load balancing manufacturers. The API interface is used to query and modify the device operation configuration.

[0069] S2, import the data center load balancing planning information (Internet public domain name, Internet IPv4 / IPv6 address planning, intranet IPv4 / IPv6 address planning), where the Internet public domain name refers to the domain name purchased from domain name providers such as Xinwang and can be directly accessed on the Internet, such as qiyebank.banktest.com.cn. This domain name corresponds to the corporate online banking business. Internet users can directly enter the domain name in the browser and access it. Internet IPv4 / IPv6 address planning refers to a section of public network addresses applied for from operators such as China Mobile and China Telecom. These addresses open port 80 or 443 services to the Internet and can also be directly accessed by Internet users. For example: China Unicom's IPv4 planning is 70.218.141.0 / 24, and the corresponding IPv6 address planning is 2408:3200:e200:0711:: / 64; China Telecom's IPv4 address planning is 212.75.15 / 24, and the corresponding IPv6 address planning is 240e:830:199:304:: / 64; China Mobile's IPv4 address planning is 203.37.11.0 / 24, and the corresponding IPv6 address planning is 2409:abd2:838:67:: / 64. When an Internet client accesses the internal financial cloud data center, its source address will be converted into the corresponding internal address using NAT44 and NAT66 technologies. In this implementation example, the IPv4 addresses of the three operators will be converted into the address 10.16.194.0 / 24, and the IPv6 address will be converted into the address fd12:0008:0006:0004:10:16:194:: / 112. Intranet IPv4 / IPv6 address planning refers to private addresses used internally. These addresses cannot be directly accessed on the Internet and must be directly accessed after the network device performs address conversion NAT based on NAT66 and NAT44 technologies. This implementation example takes the DMZ server access area of ​​the cloud data center as an example. The IPv4 address segment used in this area is 10.10.64.0 / 24, the corresponding IPv6 address segment is fd12:0005:0002:0000:10:10:64:: / 112, the corresponding load balancing VIP IPv4 address is 10.8.208.0 / 24, and the corresponding IPv6 address is fd12:0004:0006:0017:10:8:208::0 / 112.

[0070] S3, analyze the correspondence between the data center network area, load balancing device and planned address segment information, and form the network matrix required for load balancing automatic configuration. After the information related to S1 and S2 is collected, combined with the current status of financial services, a network matrix is ​​formed from the four directions of intranet, Internet, extranet and wide area network, which specifically includes the matrix name, Internet domain name information, public network address information, load balancing device A management information, load balancing device A IPv4 / IPv6 address information (VIP address, POOL address and SNAT address corresponding to VIP, etc.), load balancing device B management information, load balancing device B IPv4 / IPv6 address information (VIP address, POOL address and SNAT address corresponding to VIP, etc.), the number of load balancing devices passed by a matrix can be 1 or more. Taking the Internet banking business of this implementation example as an example, the number of load balancing devices that this business needs to pass through is the largest, and it needs to pass through the global load balancing device, link load balancing device and server load balancing device. Each device has corresponding IPv4 / IPv6 VIP address, POOL address and SNAT address and other address segment information. Based on the above information, the matrix information that can be formed is as follows:

[0071] The matrix name is Internet-Online Banking, the Internet domain name is qiyebank.banktest.com.cn, and the domain name information is on the global load balancing device 192.168.254.90; the domain name corresponds to the Unicom address 70.218.141.0 / 24, 2408:3200:e200:0711:: / 64, the Telecom address is 212.75.15 / 24, 240e:830:199:304:: / 64, and the Mobile address is 203.37.11.0 / 24, 2409:abd2:838:67:: / 64. Access these operators' IPv4 / IPv The source IPv4 address of address 6 will be converted to 10.16.194.0 / 24, and the source IPv6 address will be converted to fd12:0008:0006:0004:10:16:194:: / 112. The certificate server address is 10.16.196.0 / 24, and the corresponding IPv6 address is fd12:0008:0006:0004:10:16:196:: / 112. The address is on the link load balancing device, the device management address is 192.168.254.86; the server address of the intranet DMZ area is 10.10.64.0 / 24, the corresponding IPv6 address is fd12:0005:0002:0000:10:10:64:: / 112, the corresponding load balancing VIP IPv4 address is 10.8.208.0 / 24, and the IPv6 address is fd12: 0004:0006:0017:10:8:208::0 / 112, the source IPv4 address of the server address in the DMZ zone will be converted to 10.8.209.0 / 24, and the source IPv6 address will be converted to fd12:0004:0006:0017:10:8:209::0 / 112. The above address is on the DMZ server load balancing device 192.168.254.4.

[0072] S4, customize the load balancing requirement template, and receive and organize the load balancing configuration requirements based on the template. Based on the formed matrix information, use Excel to edit and generate an information collection template, and use this template to collect requirements. A complete load requirement consists of two parts: one is the original demand of the business personnel, who proposes load requirements to the load balancing management personnel based on the responsible business access channels and requirements (third-party units, member banks, the Internet, and internal visits within the alliance). The Internet online banking business requirements of this implementation example include domain names, public network addresses, business addresses, and ports. The second is to implement load configuration, and the requirements are supplemented and improved by the load management personnel, mainly to determine how many layers of load devices are passed through, and to assign corresponding VIP addresses, POOL addresses, and SNAT addresses to each layer of load balancing equipment. The information submitted by the business personnel in this implementation example includes the Internet domain name qiyebank.banktest.com.cn, and the corresponding operator addresses are 70.218.141.83 (China Unicom), 212.75.15.41 (China Telecom), 203.37.11.185 (China Mobile), 2408:3200:e200:0711::149 (China Unicom), 240e:830:199:304::9 (China Telecom), 2409:abd2:838:67::9 (China Mobile), the certificate server address is 10.16.196.2, the port is TCP12867, the intranet business server addresses are 10.10.64.3 and 10.10.64.50, and the service port is TCP8080. The network personnel assign the corresponding VIP address and SNAT address information, where the server load balancing address is 10.8.208.14, the port is TCP8080, and the SNAT address is 10.8.209.14. The link service balancing address is 10.16.192.2, and the port is TCP16867.

[0073] S5, remotely connect to the load balancing device, read the device configuration, parse the existing configuration, and classify the devices according to VIP address information, POOL address information, SNAT address information, etc. for subsequent query. For devices of different brands and models, the remote connection method can be SSH, Netconf, SNMP, API interface reading, etc.

[0074] S6, matching the load balancing configuration requirements with the network matrix, incrementally automatically generating configuration command lines or API interface change templates based on the existing device configuration, and creating corresponding commands and API interface changes for rollback after the change fails. Further, taking the online banking business requirements in S4 as an example, the requirements proposed by the business personnel include Internet domain name information, Internet public network IPv4 / IPv6 address information, intranet IPv4 / IPv6 address and port information, and the load balancing management personnel supplement the load balancing VIP IPv4 / IPv6 address, SNAT IPv4 / IPv6 address and other information. Based on the longest mask matching principle in network technology, the network matrix can be used to determine that the Internet domain name is located on the global load balancing device at the Internet exit, the public network IP address is located on the link load balancing device, and the intranet IP address information is located on the server load balancing device in the intranet DMZ area. Further, read the configuration information of the relevant load devices, determine that the domain name, public network IP address, intranet IP address and port information are not configured on the relevant devices, and proceed to the next step to generate the newly added configuration and the configuration for rollback after the change fails. If the configuration already exists, no new configuration will be generated, and the original configuration will be used directly.

[0075] S7, remotely connect to each load balancing device to complete the configuration delivery. Specifically: after the configuration is generated in step S6, perform a final manual check on the configuration to ensure that the configuration is complete and accurate, and that it will not affect the running configuration after delivery. After the configuration check is completed, log in to the relevant load device via SSH or Netconf to complete the configuration delivery.

[0076] In the specific implementation process, when applying the automatic configuration method of the load balancing device based on the IPv4 / IPv6 address matrix, the following operations are also required:

[0077] Device management: Manage the server load balancing, link load balancing and global load balancing devices in the data center, and obtain basic device information, including device name, management address, network area, master and slave center, user / password, master / slave status / device group, virtualization and other information.

[0078] Address management: Manage the data center's intranet IPv4 / IPv6 addresses, Internet egress IPv4 / IPv6 public addresses, and Internet domain names, obtain basic IPv4 / IPv6 address and Internet domain name information, and specifically determine whether the address is a VIP address, the Pool address corresponding to the VIP address, the SNAT address, or a public address. The Internet domain name must correspond to the Internet public address, etc.

[0079] Network Matrix: Manage the network matrix of the financial cloud data center from four dimensions: extranet, Internet, wide area network and intranet, assist in demand analysis and automatic configuration generation. Through this module, the network matrix can be queried, modified and deleted.

[0080] Demand management: Collect the load balancing requirements of the business from four dimensions: extranet, Internet, WAN and intranet, and obtain the basic change requirements. The complete load requirements are composed of two parts: one is the original load requirements proposed by the load balancing business personnel. The other is the requirements supplemented and improved by the load management personnel in order to realize load configuration. System users can manage the requirements through this module and modify and improve the requirements as needed.

[0081] Configuration management: Remotely connect to servers, links, and global load balancing devices to read operation files on demand or periodically. You can also remotely connect to devices through SSH or API interfaces to issue configuration scripts item by item or write configurations to devices through API interfaces.

[0082] Task management: Generate server load balancing, link load balancing and global load balancing device delivery tasks, call the network matrix module and configuration management module to complete configuration generation and delivery task creation. At this time, the delivery task is in the pending approval state. After review and approval by the load management personnel, the delivery task is changed to the delivery state, and then the configuration management module is remotely connected to the load balancing device to deliver the configuration. During this period, the progress of the delivery can be seen, and it can be confirmed whether the delivery is successful. After the configuration is successfully delivered, the task status changes to the success status.

[0083] The present invention can automatically generate corresponding configuration commands based on the IPv4 / IPv6 address network matrix for various types of load balancing devices, and then splice the configuration commands to obtain a complete network configuration, thereby realizing automatic configuration of each load balancing device; it is convenient for load management personnel to accurately and quickly complete the automatic configuration of load balancing equipment, and the load balancing configuration work can be completed concisely and efficiently without manual operation by load management personnel, which not only improves the configuration efficiency and reduces the possibility of human operation errors, but also improves the accuracy of configuration, reduces the manpower and time costs of configuration, and ensures the safety of the environment. Through actual use, the present invention has greatly improved the efficiency of network operation and maintenance work. According to preliminary calculations, the time consumption of a single change is shortened by about 30%, and the change error rate is reduced by about 50%. A lot of manpower is saved.

[0084] An embodiment of the present invention provides an electronic device, including a processor, a memory and a bus, wherein the memory stores machine-readable instructions executable by the processor. When the electronic device is running, the processor communicates with the memory through the bus, and the processor executes the machine-readable instructions to perform the steps of any of the above-mentioned methods for automatic configuration of load balancing devices.

[0085] Specifically, the above-mentioned memory and processor can be general-purpose memory and processor, which are not specifically limited here. When the processor runs the computer program stored in the memory, the above-mentioned load balancing device automatic configuration method can be executed.

[0086] Those skilled in the art will appreciate that the structure of the computer device does not constitute a limitation on the computer device, and may include more or fewer components than shown in the figure, or combine certain components, or split certain components, or arrange the components differently.

[0087] In some embodiments, the computer device may also include a touch screen that can be used to display a graphical user interface (e.g., a startup interface of an application) and receive user operations on the graphical user interface (e.g., startup operations on an application). The specific touch screen may include a display panel and a touch panel. The display panel may be configured in the form of LCD (Liquid Crystal Display), OLED (Organic Light-Emitting Diode), etc. The touch panel may collect the user's contact or non-contact operations on or near it, and generate pre-set operation instructions, for example, the user uses any suitable object such as a finger, a stylus, or an accessory on or near the touch panel. In addition, the touch panel may include two parts: a touch detection device and a touch controller. The touch detection device detects the user's touch position and posture, detects the signal brought by the touch operation, and transmits the signal to the touch controller; the touch controller receives the touch information from the touch detection device, converts it into information that the processor can process, and then sends it to the processor, and can receive and execute commands from the processor. In addition, the touch panel can be implemented by various types such as resistive, capacitive, infrared and surface acoustic wave, and any technology developed in the future can also be used to implement the touch panel. Further, the touch panel can cover the display panel, and the user can operate on or near the touch panel covered on the display panel according to the graphical user interface displayed on the display panel. After the touch panel detects the operation on or near it, it is transmitted to the processor to determine the user input, and then the processor provides corresponding visual output on the display panel in response to the user input. In addition, the touch panel and the display panel can be implemented as two independent components or integrated.

[0088] Corresponding to the above-mentioned application startup method, an embodiment of the present invention further provides a storage medium, on which a computer program is stored. When the computer program is executed by a processor, the steps of any of the above-mentioned load balancing device automatic configuration methods are executed.

[0089] The application startup device provided in the embodiment of the present application can be specific hardware on the device or software or firmware installed on the device. The device provided in the embodiment of the present application, its implementation principle and the technical effect produced are the same as those in the aforementioned method embodiment. For the sake of brief description, the parts not mentioned in the device embodiment can refer to the corresponding contents in the aforementioned method embodiment. Those skilled in the art can clearly understand that for the convenience and simplicity of description, the specific working processes of the systems, devices and units described above can all refer to the corresponding processes in the aforementioned method embodiment, and will not be repeated here.

[0090] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present application may adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes.

[0091] In the embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. The device embodiments described above are merely schematic. For example, the division of modules is only a logical function division. There may be other division methods in actual implementation. For example, multiple modules or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed can be through some communication interfaces, indirect coupling or communication connection of devices or modules, which can be electrical, mechanical or other forms.

[0092] The modules described as separate components may or may not be physically separated, and the components shown as modules may or may not be physical modules, that is, they may be located in one place or distributed on multiple network modules. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0093] In addition, each functional module in the embodiments provided in the present application may be integrated into one processing module, or each module may exist physically separately, or two or more modules may be integrated into one module.

[0094] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0095] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0096] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0097] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the above embodiments, ordinary technicians in the relevant field should understand that the specific implementation methods of the present invention can still be modified or replaced by equivalents. Any modification or equivalent replacement that does not depart from the spirit and scope of the present invention should be covered within the scope of protection of the claims of the present invention.

Claims

1. A method for automatic configuration of a load balancing device, characterized in that: The steps include: Step S1, obtaining load balancing planning information, wherein the load balancing planning information includes data center load balancing equipment information and data center load balancing planning information; Step S2, extracting data center network area, load balancing equipment and IPv4 / IPv6 planning information from the load balancing planning information; Step S3, analyzing the correspondence between the data center network area, load balancing equipment and IPv4 / IPv6 planning information, and combining the current status of financial services to form a network matrix required for load balancing automation configuration from four directions: intranet, Internet, extranet and wide area network; Step S4, setting a load balancing requirement template, and receiving and arranging load balancing configuration requirements based on the template; Step S5, remotely connect to the load balancing device and read the device configuration, parse the existing device configuration and sort it out; Step S6, matching the load balancing configuration requirements with the network matrix, incrementally and automatically generating configuration command lines or API interface change templates based on the existing device configurations, and creating corresponding commands and API interface changes to roll back after a change fails, to obtain the final load balancing configuration; Step S7: remotely connect to each load balancing device in the data center and issue the final load balancing configuration.

2. The method for automatic configuration of a load balancing device according to claim 1, characterized in that: The data center load balancing device information includes network area, device management information, configuration command template, and API interface document; the network area refers to the business bearing area of ​​the data center, including the external access area, Internet access area, wide area network area and core area; the device management information refers to the brand, model, software version, management IP address, user name and password of the device, which is used for remote access; the configuration command refers to the device configuration command of different load balancing manufacturers, which is used for the system to automatically generate device configuration scripts that meet the business, and query and modify the device operation configuration; the API interface document is an API interface open to the outside world by different load balancing manufacturers, and the device operation configuration is queried and modified through the API interface.

3. The method for automatic configuration of a load balancing device according to claim 1, characterized in that: The data center load balancing planning information includes the Internet public domain name, Internet IPv4 / IPv6 address planning, and intranet IPv4 / IPv6 address planning. The Internet public domain name refers to the domain name directly accessed on the Internet. The domain name corresponds to the corporate online banking business. Internet users can directly enter the domain name in the browser and access it; the Internet IPv4 / IPv6 address planning refers to a section of public network addresses applied for from the operator. These addresses open 80 or 443 port services to the Internet. These addresses can be directly accessed by Internet users. When the Internet client accesses the financial cloud data center, its source address will be converted into the corresponding internal address using NAT44 and NAT66 technologies; the intranet IPv4 / IPv6 address planning refers to private addresses used internally. These private addresses cannot be directly accessed on the Internet and need to be accessed after the network device performs address conversion NAT based on NAT66 technology and NAT44 technology.

4. The method for automatic configuration of a load balancing device according to claim 1, characterized in that: The network matrix includes a matrix name, Internet domain name information, public network address information, load balancing device management information and IPv4 / IPv6 address information of the load balancing device.

5. The method for automatic configuration of a load balancing device according to claim 1, characterized in that: The setting of the load balancing requirement template is to edit and generate an information collection template based on the network matrix information required for the formed load balancing automatic configuration, and use the template to collect load balancing configuration requirements; The load balancing configuration requirements include the original requirements of business personnel and the requirements supplemented by load management personnel.

6. The method for automatic configuration of a load balancing device according to claim 1, characterized in that: The parsing and classification of the existing device configurations is to parse the existing configurations and classify and organize them according to the VIP address information, POOL address information, and SNAT address information.

7. The method for automatic configuration of a load balancing device according to any one of claims 1 to 6, characterized in that: The step S6 matches the load balancing configuration requirements with the network matrix, automatically generates configuration command lines or API interface change templates based on the existing device configuration, creates corresponding commands and API interface changes to roll back after the change fails, and obtains the final load balancing configuration, including: Based on the longest mask matching principle in network technology, through the network matrix, it is determined that the Internet domain name is located on the global load balancing device at the Internet exit, the public network IP address is located on the link load balancing device, and the intranet IP address information is located on the server load balancing device in the intranet DMZ area; Read the configuration information of the relevant load devices to confirm that the domain name, public IP address, intranet IP address and port information are not configured on the relevant devices. Then proceed to the next step to generate new configurations and configurations to be rolled back if changes fail. If the configuration already exists, no new configuration will be generated and the original configuration will be used directly.

8. A load balancing device automatic configuration device, characterized in that: include: A data acquisition module is used to obtain load balancing planning information, wherein the load balancing planning information includes data center load balancing equipment information and data center load balancing planning information; A data extraction module is used to extract data center network area, load balancing device and IPv4 / IPv6 planning information from the load balancing planning information; The data analysis module is used to analyze the correspondence between the data center network area, load balancing equipment and IPv4 / IPv6 planning information, and to form the network matrix required for automatic configuration of load balancing from four directions: intranet, Internet, extranet and wide area network, in combination with the current status of financial services; The template setting module is used to set the load balancing requirement template and receive and organize the load balancing configuration requirements based on the template; Configuration parsing module, used to remotely connect to load balancing devices and read device configurations, parse existing device configurations and organize them by categories; The configuration acquisition module is used to match the load balancing configuration requirements with the network matrix, automatically and incrementally generate configuration command lines or API interface change templates based on the existing device configuration, and create corresponding commands and API interface changes to roll back after the change fails to obtain the final load balancing configuration; The configuration delivery module is used to remotely connect to the load balancing devices in the data center and deliver the final load balancing configuration.

9. An electronic device, characterized in that: It includes a processor, a memory and a bus, the memory stores machine-readable instructions executable by the processor, when the electronic device is running, the processor and the memory communicate through the bus, and the processor executes the machine-readable instructions to perform the steps of the load balancing device automatic configuration method as described in any one of claims 1-7.

10. A storage medium, characterized in that: The storage medium stores a computer program, which, when executed by a processor, executes the steps of the method for automatic configuration of a load balancing device as claimed in any one of claims 1 to 7.

Images