Method and device for checking configuration consistency between network elements
Through the configuration consistency check method and device between network elements, the problem of inconsistency between network elements in virtual networks on cloud is detected and solved, and the accuracy and security of traffic processing is ensured, and the lines caused by inconsistency in the existing technology are solved. Accident problem.
Patent Information
- Application Number
- CN202411244895.3
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-09-05
- Publication Date
- 2025-01-07
AI Technical Summary
In a virtual network on the cloud, inconsistent configuration information between network elements will lead to traffic processing errors and cause online accidents. It is difficult for the existing technology to effectively detect and solve such problems.
Provide a method and device for checking configuration consistency between network elements. By obtaining predetermined parameters of each network element in sequence, performing configuration consistency checks, and summarizing the results to generate target inspection results, alerting monitoring users based on the consistency check report , ensure consistency of configuration information.
It improves processing efficiency and accuracy, can promptly detect problematic network elements with inconsistent configurations, improves the reliability and security of traffic processing, and reduces the occurrence of online accidents.
Smart Images

Figure CN119276715A_ABST
Abstract
Description
Technical Field
[0001] The present disclosure relates to the field of artificial intelligence technology, and in particular to a method and device for checking configuration consistency between network elements in the fields of cloud networks, cloud computing, and distributed storage. Background Art
[0002] In the virtual network on the cloud, as the traffic volume increases and the scenarios become more complex, the amount of configuration information in each network element (or traffic processing network element, instance, etc.) in the cluster is huge. If the configuration information in a network element is missing or redundant, that is, the configuration is inconsistent with other network elements, it will cause traffic processing errors and trigger online accidents. Summary of the invention
[0003] The present disclosure provides a method and device for checking configuration consistency between network elements.
[0004] A method for checking configuration consistency between network elements, comprising:
[0005] For the cluster to be processed, the following predetermined processing is performed M times in sequence: obtaining predetermined parameters of each network element in the cluster to be processed, the predetermined parameters being parameters related to configuration information in the corresponding network element, performing configuration consistency check on each network element according to the predetermined parameters, obtaining the check result of each network element, and adding the check result as an intermediate result to the first set, where M is a positive integer;
[0006] In response to determining that the M predetermined processes are all executed, a required target inspection result is generated according to each intermediate result in the first set.
[0007] A method for checking configuration consistency between network elements, comprising:
[0008] Obtain a consistency check report reported by the inter-network element reconciliation system, wherein the consistency check report is generated by the inter-network element reconciliation system according to a target check result, wherein the target check result is generated by the inter-network element reconciliation system according to each intermediate result in the first set after determining that M scheduled processes have been executed, M is a positive integer, and the first set includes: an intermediate result obtained after each execution of the scheduled process, wherein each intermediate result obtained includes: an inspection result of each network element obtained after performing a configuration consistency check on each network element in the processing cluster according to the acquired predetermined parameters, wherein the predetermined parameters are the acquired predetermined parameters of each network element, and the predetermined parameters are parameters related to the configuration information in the corresponding network element;
[0009] In response to determining that there is a problematic network element with inconsistent configuration according to the consistency check report, an alarm is issued to a monitoring user.
[0010] A device for checking the configuration consistency between network elements, comprising: a checking module and a generating module;
[0011] The checking module is used to sequentially perform the following predetermined processing M times for the cluster to be processed: obtaining predetermined parameters of each network element in the cluster to be processed, where the predetermined parameters are parameters related to the configuration information in the corresponding network element, performing configuration consistency check on each network element according to the predetermined parameters, obtaining the check result of each network element, and adding the check result as an intermediate result to the first set, where M is a positive integer;
[0012] The generating module is used to generate the required target inspection result according to each intermediate result in the first set in response to determining that the M times of the predetermined processing are all executed.
[0013] A device for checking the configuration consistency between network elements, comprising: an acquisition module and a processing module;
[0014] The acquisition module is used to acquire a consistency check report reported by the inter-network element reconciliation system, the consistency check report is generated by the inter-network element reconciliation system according to a target check result, the target check result is generated by the inter-network element reconciliation system according to each intermediate result in the first set after determining that M scheduled processes are all executed, M is a positive integer, the first set includes: an intermediate result obtained after each execution of the scheduled process, each intermediate result obtained includes: an inspection result of each network element obtained after performing a configuration consistency check on each network element in the processing cluster according to the acquired predetermined parameters, the predetermined parameters are the acquired predetermined parameters of each network element, and the predetermined parameters are parameters related to the configuration information in the corresponding network element;
[0015] The processing module is used for providing an alarm prompt to a monitoring user in response to determining that there is a problematic network element with inconsistent configuration according to the consistency check report.
[0016] An electronic device, comprising:
[0017] at least one processor; and
[0018] a memory communicatively connected to the at least one processor; wherein,
[0019] The memory stores instructions that can be executed by the at least one processor. The instructions are executed by the at least one processor to enable the at least one processor to perform the method described above.
[0020] A non-transitory computer-readable storage medium storing computer instructions, wherein the computer instructions are used to cause a computer to execute the method as described above.
[0021] A computer program product comprises a computer program / instruction, wherein the computer program / instruction implements the method described above when executed by a processor.
[0022] It should be understood that the content described in this section is not intended to identify the key or important features of the embodiments of the present disclosure, nor is it intended to limit the scope of the present disclosure. Other features of the present disclosure will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS
[0023] The accompanying drawings are used to better understand the present solution and do not constitute a limitation of the present disclosure.
[0024] Figure 1 This is a flow chart of a first embodiment of a method for checking configuration consistency between network elements according to the present disclosure;
[0025] Figure 2 A schematic diagram of the relationship between the network elements in the cluster to be processed described in the present disclosure, the inter-network element reconciliation system, and the monitoring center;
[0026] Figure 3 This is a flow chart of a second embodiment of the method for checking the consistency of configurations between network elements described in the present disclosure;
[0027] Figure 4 A schematic diagram of the composition structure of the first embodiment 400 of the apparatus for checking the consistency of configurations between network elements in the present disclosure;
[0028] Figure 5 A schematic diagram of the structure of the second embodiment 500 of the apparatus for checking the consistency of configurations between network elements in the present disclosure;
[0029] Figure 6 A schematic block diagram of an electronic device 600 that can be used to implement an embodiment of the present disclosure is shown. DETAILED DESCRIPTION
[0030] The following is a description of exemplary embodiments of the present disclosure in conjunction with the accompanying drawings, including various details of the embodiments of the present disclosure to facilitate understanding, which should be considered as merely exemplary. Therefore, it should be recognized by those of ordinary skill in the art that various changes and modifications may be made to the embodiments described herein without departing from the scope and spirit of the present disclosure. Similarly, for the sake of clarity and conciseness, descriptions of well-known functions and structures are omitted in the following description.
[0031] In addition, it should be understood that the term "and / or" in this article is only a description of the association relationship of the associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship.
[0032] Figure 1 This is a flow chart of the first embodiment of the method for checking the consistency of configuration between network elements described in the present disclosure. Figure 1 As shown, the following specific implementation methods are included.
[0033] In step 101, for the cluster to be processed, the following predetermined processing is performed M times in sequence: obtaining predetermined parameters of each network element in the cluster to be processed, the predetermined parameters are parameters related to the configuration information in the corresponding network element, performing a configuration consistency check on each network element according to the predetermined parameters, obtaining the inspection results of each network element, and adding them to the first set as intermediate results, where M is a positive integer.
[0034] In step 102, in response to determining that the M predetermined processes are all executed, a required target inspection result is generated according to each intermediate result in the first set.
[0035] By adopting the scheme described in the above method embodiment, a configuration consistency check can be performed on each network element based on predetermined parameters related to the configuration information in the network element, and then the final required target inspection result can be determined based on the inspection results of M times. The implementation is very simple and convenient, thereby improving the processing efficiency. Moreover, the value of M is usually greater than 1. Accordingly, the target inspection result can be determined by combining the inspection results of multiple inspections, thereby improving the accuracy of the obtained target inspection result, etc.
[0036] In practical applications, Figure 1 The execution subject of the illustrated embodiment may be an inter-network element reconciliation system. The inter-network element reconciliation system may be deployed on any network element in the cluster to be processed, or may be deployed on a central control machine, etc., and the specific location is not limited. In addition, the inter-network element reconciliation system may exchange information with each network element in the cluster to be processed through network communication.
[0037] For the cluster to be processed, the predetermined processing may be performed M times in sequence, where M is a positive integer, and the specific value may be determined according to actual needs, and is usually greater than 1, such as 3 or 5. In addition, the interval between two adjacent predetermined processings may also be determined according to actual needs.
[0038] Each time the predetermined processing is performed, predetermined parameters of each network element in the cluster to be processed may be first obtained, and the predetermined parameters are parameters related to the configuration information in the corresponding network element. In some embodiments of the present disclosure, the predetermined parameters may include: the number of configuration information belonging to N different categories in the corresponding network element, N is a positive integer greater than 1, and each network element includes configuration information belonging to the N different categories.
[0039] The specific value of N can also be determined according to actual needs, such as 3. Accordingly, the three different categories can be: routing, address resolution protocol (ARP, Address Resolution Protocol) and access control list (ACL, Access Control List).
[0040] For each network element, the number of configuration information belonging to the routing category, the number of configuration information belonging to the ARP category, and the number of configuration information belonging to the ACL category in the network element can be obtained respectively. In theory, the configuration information of each network element needs to be consistent.
[0041] It can be seen that the predetermined parameters in the solution described in the present disclosure are only the number of configuration information of different categories, and the acquisition method is simple, thereby improving the processing efficiency.
[0042] Afterwards, a configuration consistency check may be performed on each network element according to the acquired predetermined parameters, thereby obtaining a check result of each network element, and the check result of each network element may be added to the first set as an intermediate result.
[0043] In some embodiments of the present disclosure, the following processing can be performed for each category: the category is taken as the category to be processed, the mean of the number of configuration information belonging to the category to be processed in each network element is obtained, and the variance of the number of configuration information belonging to the category to be processed in each network element is obtained (indicating the degree of discreteness of a data set), and a configuration consistency check is performed on each network element according to the obtained mean and variance to obtain the inspection result of each network element corresponding to the category to be processed.
[0044] Taking the category to be processed as ARP as an example, assuming that there are 100 network elements, namely network element 1, network element 2, ..., network element 99 and network element 100, the following sum can be obtained: the number of configuration information belonging to ARP in network element 1 + the number of configuration information belonging to ARP in network element 2 + ... + the number of configuration information belonging to ARP in network element 99 + the number of configuration information belonging to ARP in network element 100, and the sum can be divided by 100 to obtain the mean value. In addition, the number of configuration information belonging to ARP in network element 1, the number of configuration information belonging to ARP in network element 2, ..., the number of configuration information belonging to ARP in network element 99 and the variance of the number of configuration information belonging to ARP in network element 100 can also be obtained, and then the configuration consistency check can be performed on each network element according to the mean value and the variance, so as to obtain the check result corresponding to ARP of each network element. Taking the category to be processed as ARP as an example, the two categories of routing and ACL can be processed in the same way.
[0045] In this way, for each network element, N different categories of inspection results corresponding to the network element can be obtained respectively. That is to say, for each network element, its configuration consistency can be checked from N different category dimensions respectively, thereby further improving the comprehensiveness and accuracy of the inspection results.
[0046] In some embodiments of the present disclosure, a first boundary value and a second boundary value can be determined based on the mean and the variance, the second boundary value is greater than the first boundary value, and both the first boundary value and the second boundary value are greater than 0, and then the following processing can be performed for any network element: in response to determining that the number of configuration information belonging to the category to be processed in the network element meets the following conditions: greater than or equal to the first boundary value, and less than or equal to the second boundary value, it is determined that the inspection result of the network element corresponding to the category to be processed is consistent in configuration; otherwise, it is determined that the inspection result of the network element corresponding to the category to be processed is inconsistent in configuration.
[0047] In addition, in some embodiments of the present disclosure, the method of determining the first boundary value and the second boundary value based on the mean and the variance may include: determining a tolerance coefficient corresponding to the category to be processed, the value of the tolerance coefficient is 0 or a positive integer, obtaining the product of the variance and the tolerance coefficient, and obtaining the difference between the mean and the product, using the difference as the first boundary value, and obtaining the sum of the mean and the product, using the sum as the second boundary value.
[0048] That is:
[0049] The first boundary value = μ-L*σ; (1)
[0050] The second boundary value = μ + L*σ; (2)
[0051] Wherein, μ represents the mean, σ represents the variance, and L represents the tolerance coefficient.
[0052] In this way, for each network element, if it is determined that the number of configuration information belonging to the category to be processed in the network element is greater than or equal to the first boundary value and less than or equal to the second boundary value, that is, it is within the value range of [μ-L*σ, μ+L*σ], then it can be determined that the inspection result of the network element corresponding to the category to be processed is consistent in configuration; otherwise, it can be determined that the inspection result of the network element corresponding to the category to be processed is inconsistent in configuration.
[0053] Taking the ARP category as an example, since the cloud network is constantly creating and closing connections, the cloud network environment is in dynamic change, so the changes in the configuration information of this category (i.e., configuration changes) are large, frequent, and rapid. Since there are a large number of network elements on the cloud, it is difficult to ensure that the configuration changes of this category between network elements must be of the same frequency. Therefore, a certain configuration comparison may only observe the intermediate state of the configuration change, which is an inaccurate configuration comparison. If this result is directly used, it may cause misjudgment. In order to solve this problem, the solution described in the present disclosure will perform a normal distribution calculation on the number of configuration information belonging to the category to be processed of each network element obtained, and determine the value range. Accordingly, if it is determined that the number of configuration information belonging to the category to be processed in any network element is within the value range, it can be considered that the inspection result of the network element corresponding to the category to be processed is consistent with the configuration.
[0054] In some embodiments of the present disclosure, a method for determining a tolerance coefficient corresponding to a category to be processed may include: in response to determining that the category to be processed is a predetermined critical category, setting the value of the tolerance coefficient corresponding to the category to be processed to 0; in response to determining that the category to be processed is a non-critical category, setting the value of the tolerance coefficient corresponding to the category to be processed to a positive integer according to the principle that the higher the frequency of change of configuration information corresponding to the category to be processed, the larger the value of the tolerance coefficient.
[0055] Which category or categories are regarded as key categories can be determined according to actual needs. For key categories, the corresponding tolerance coefficient value can be set to 0 to increase the sensitivity to the configuration inconsistency of key categories. For non-key categories, the corresponding tolerance coefficient value can be set to a positive integer. For example, for non-key categories that do not change frequently, the corresponding tolerance coefficient value can be set to 3, and for non-key categories that change very frequently, the corresponding tolerance coefficient value can be set to 5, etc., to accommodate different change situations and do a good job of robustness.
[0056] According to the above method, after executing the predetermined processing M times in sequence, the first set will include: M inspection results corresponding to each network element, and each inspection result includes inspection results corresponding to different categories. Accordingly, the final required target inspection result can be generated by combining the inspection results in the first set.
[0057] In some embodiments of the present disclosure, the following processing can be performed for any network element: for any category, in response to determining that the inspection results corresponding to the category of the network element in M inspections are all configuration inconsistencies, the network element is determined as a problem network element, and the category is determined as the problem category corresponding to the problem network element; each problem network element and all the problem categories corresponding to each problem network element are used to form a target inspection result.
[0058] For example, assuming that the value of M is 3, for a certain network element a, after the predetermined processing is executed for the first time, it is determined that the inspection result of the routing category of network element a is inconsistent configuration, the inspection result of the ARP category is consistent configuration, and the inspection result of the ACL category is inconsistent configuration. After the predetermined processing is executed for the second time, it is determined that the inspection result of the routing category of network element a is consistent configuration, the inspection result of the ARP category is inconsistent configuration, and the inspection result of the ACL category is inconsistent configuration. After the predetermined processing is executed for the third time, it is determined that the inspection result of the routing category of network element a is consistent configuration, the inspection result of the ARP category is consistent configuration, and the inspection result of the ACL category is inconsistent configuration. Since the inspection results of the ACL category of network element a in the three inspections are all inconsistent configuration, network element a can be determined as a problem network element, and the ACL category can be determined as the problem category corresponding to network element a.
[0059] That is, multiple comparisons can be made and the intersection of inconsistent configurations can be taken to determine the problematic network elements and problem categories, thereby improving the accuracy of the determination results.
[0060] For any network element, according to the processing method described in the present disclosure, it may be determined as a problem network element or a non-problem network element. In addition, for a problem network element, the number of corresponding problem categories may be 1 or more than 1. All problem network elements and all problem categories corresponding to each problem network element may be used to form a target inspection result.
[0061] In some embodiments of the present disclosure, a consistency check report may be generated according to the target check result, and the consistency check report may be reported to a monitoring center.
[0062] The specific form of the consistency check report is not limited. For example, in addition to including the problematic network element and the problem category corresponding to the problematic network element, it may further include information such as the time of each execution of the predetermined processing and the generation time of the report.
[0063] By submitting the consistency check report, the monitoring center can promptly learn which network elements have configuration inconsistencies and the specific types of problems so that appropriate countermeasures can be taken.
[0064] Combined with the above introduction, Figure 2 Schematic diagram of the relationship between the network elements in the cluster to be processed, the inter-network element reconciliation system and the monitoring center described in this disclosure. Figure 2 As shown, the network element reconciliation system can collect the predetermined parameters from each network element, and can generate a target inspection result according to the predetermined parameters. In addition, it can also generate a consistency inspection report according to the target inspection result and report it to the monitoring center.
[0065] The above mainly describes the solution of the present disclosure from the perspective of the inter-network element reconciliation system. The following further describes the solution of the present disclosure from the perspective of the monitoring center.
[0066] Figure 3 This is a flow chart of the second embodiment of the method for checking the consistency of configuration between network elements described in the present disclosure. Figure 3 As shown, the following specific implementation methods are included.
[0067] In step 301, a consistency check report reported by the inter-network element reconciliation system is obtained. The consistency check report is generated by the inter-network element reconciliation system according to the target check result. The target check result is generated by the inter-network element reconciliation system according to the intermediate results in the first set after determining that M scheduled processings are completed. M is a positive integer. The first set includes: the intermediate results obtained after each execution of the scheduled processing. The intermediate results obtained each time include: the inspection results of each network element obtained after performing a configuration consistency check on each network element in the processing cluster according to the obtained predetermined parameters. The predetermined parameters are the obtained predetermined parameters of each network element. The predetermined parameters are parameters related to the configuration information in the corresponding network element.
[0068] In step 302, in response to determining that there is a problematic network element with inconsistent configuration according to the consistency check report, an alarm is issued to a monitoring user.
[0069] In practical applications, Figure 3 The execution entity of the illustrated method embodiment may be a monitoring center.
[0070] By adopting the scheme described in the above method embodiment, after performing a configuration consistency check on each network element in the processing cluster and obtaining the target check result, a consistency check report can be generated based on the target check result, and the consistency check report can be reported to the monitoring center. Accordingly, after the monitoring center determines that there are problem network elements with inconsistent configurations based on the consistency check report, an alarm can be issued to the monitoring user, so that the monitoring user can be informed of the problem network elements with inconsistent configurations in a timely manner, so as to adopt corresponding countermeasures, etc.
[0071] The consistency check report may include information such as the problematic network element and the problem category corresponding to the problematic network element. The monitoring center may display this information to the monitoring user so that the monitoring user can view it.
[0072] In addition, in some embodiments of the present disclosure, the monitoring center may also determine a repair strategy corresponding to the problematic network element, and may provide the repair strategy to the monitoring user, or may repair the problematic network element according to the repair strategy.
[0073] There is no restriction on how to determine the repair strategy corresponding to the problematic network element. For example, the monitoring center may be pre-configured with repair strategies corresponding to different problem categories. Accordingly, the repair strategy corresponding to the problematic network element may be determined, and the repair strategy may be displayed to the monitoring user so that the monitoring user can repair the problematic network element according to the repair strategy. Alternatively, the problematic network element may be directly repaired according to the repair strategy.
[0074] Through the above processing, the repair efficiency and repair effect of the problematic network element can be improved.
[0075] It should be noted that, for the aforementioned method embodiments, for the sake of simplicity of description, they are all expressed as a series of action combinations, but those skilled in the art should be aware that the present disclosure is not limited by the described order of actions, because according to the present disclosure, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all preferred embodiments, and the actions and modules involved are not necessarily required by the present disclosure. In addition, for parts that are not described in detail in a certain embodiment, please refer to the relevant descriptions in other embodiments.
[0076] The above is an introduction to the method embodiment. The following is a further explanation of the scheme disclosed in the present invention through an apparatus embodiment.
[0077] Figure 4 FIG. 4 is a schematic diagram of the composition structure of the first embodiment 400 of the apparatus for checking the consistency of configuration between network elements described in the present disclosure. Figure 4 As shown, it includes: a checking module 401 and a generating module 402.
[0078] The inspection module 401 is used to execute the following predetermined processing M times in sequence for the cluster to be processed: obtain predetermined parameters of each network element in the cluster to be processed, where the predetermined parameters are parameters related to the configuration information in the corresponding network element, perform a configuration consistency check on each network element according to the predetermined parameters, obtain the inspection results of each network element, and add them to the first set as intermediate results, where M is a positive integer.
[0079] The generating module 402 is configured to generate a required target inspection result according to each intermediate result in the first set in response to determining that the M predetermined processes are all executed.
[0080] By adopting the scheme described in the above-mentioned device embodiment, a configuration consistency check can be performed on each network element based on predetermined parameters related to the configuration information in the network element, and then the final required target inspection result can be determined based on the inspection results of M times. The implementation is very simple and convenient, thereby improving the processing efficiency. Moreover, the value of M is usually greater than 1. Accordingly, the target inspection result can be determined by combining the inspection results of multiple inspections, thereby improving the accuracy of the obtained target inspection result, etc.
[0081] Each time the checking module 401 performs the predetermined processing, it may first obtain predetermined parameters of each network element in the cluster to be processed, and the predetermined parameters are parameters related to the configuration information in the corresponding network element. In some embodiments of the present disclosure, the predetermined parameters may include: the number of configuration information belonging to N different categories in the corresponding network element, N is a positive integer greater than 1, and each network element includes configuration information belonging to the N different categories.
[0082] Afterwards, the checking module 401 may perform a configuration consistency check on each network element according to the acquired predetermined parameters, thereby obtaining a check result of each network element, and may add the check result of each network element as an intermediate result to the first set.
[0083] In some embodiments of the present disclosure, the inspection module 401 may perform the following processing for each category: taking the category as the category to be processed, obtaining the mean of the number of configuration information belonging to the category to be processed in each network element, and obtaining the variance of the number of configuration information belonging to the category to be processed in each network element, and performing configuration consistency check on each network element according to the obtained mean and variance, to obtain the inspection result of each network element corresponding to the category to be processed. In this way, for each network element, the inspection results corresponding to N different categories of the network element can be obtained respectively.
[0084] In some embodiments of the present disclosure, the inspection module 401 can determine a first boundary value and a second boundary value based on the mean and the variance, the second boundary value is greater than the first boundary value, and the first boundary value and the second boundary value are both greater than 0, and then the following processing can be performed for any network element: in response to determining that the number of configuration information belonging to the category to be processed in the network element meets the following conditions: greater than or equal to the first boundary value, and less than or equal to the second boundary value, determine that the inspection result of the network element corresponding to the category to be processed is consistent in configuration; otherwise, determine that the inspection result of the network element corresponding to the category to be processed is inconsistent in configuration.
[0085] In addition, in some embodiments of the present disclosure, the inspection module 401 determines the first boundary value and the second boundary value based on the mean and the variance, which may include: determining a tolerance coefficient corresponding to the category to be processed, the value of the tolerance coefficient is 0 or a positive integer, obtaining the product of the variance and the tolerance coefficient, and obtaining the difference between the mean and the product, using the difference as the first boundary value, and obtaining the sum of the mean and the product, using the sum as the second boundary value.
[0086] In some embodiments of the present disclosure, the way in which the inspection module 401 determines the tolerance coefficient corresponding to the category to be processed may include: in response to determining that the category to be processed is a predetermined critical category, setting the value of the tolerance coefficient corresponding to the category to be processed to 0; in response to determining that the category to be processed is a non-critical category, setting the value of the tolerance coefficient corresponding to the category to be processed to a positive integer according to the principle that the higher the frequency of change of the configuration information corresponding to the category to be processed, the larger the value of the tolerance coefficient.
[0087] In response to determining that the M times of the predetermined processing are all executed, the generating module 402 may generate the required target inspection result according to each intermediate result in the first set.
[0088] In some embodiments of the present disclosure, for any network element, the generation module 402 may perform the following processing respectively: for any category, in response to determining that the inspection results corresponding to the category of the network element in M inspections are all configuration inconsistencies, the network element is determined as a problem network element, and the category is determined as the problem category corresponding to the problem network element; and the target inspection result is formed by using each problem network element and all the problem categories corresponding to each problem network element.
[0089] In addition, in some embodiments of the present disclosure, the generation module 402 may also generate a consistency check report according to the target check result, and may report the consistency check report to the monitoring center.
[0090] Figure 5 FIG. 5 is a schematic diagram of the structure of the second embodiment 500 of the apparatus for checking the consistency of configuration between network elements in the present disclosure. Figure 5 As shown, it includes: an acquisition module 501 and a processing module 502.
[0091] The acquisition module 501 is used to obtain the consistency check report reported by the inter-network element reconciliation system, the consistency check report is generated by the inter-network element reconciliation system according to the target check result, the target check result is generated by the inter-network element reconciliation system according to the intermediate results in the first set after determining that M scheduled processings are completed, M is a positive integer, and the first set includes: the intermediate results obtained after each execution of the scheduled processing, each intermediate result obtained includes: the inspection results of each network element after performing a configuration consistency check on each network element in the processing cluster according to the acquired predetermined parameters, the predetermined parameters are the acquired predetermined parameters of each network element, and the predetermined parameters are parameters related to the configuration information in the corresponding network element.
[0092] The processing module 502 is used to issue an alarm to a monitoring user in response to determining that there is a problematic network element with inconsistent configuration according to the consistency check report.
[0093] By adopting the scheme described in the above device embodiment, after performing a configuration consistency check on each network element in the processing cluster and obtaining a target check result, a consistency check report can be generated based on the target check result, and the consistency check report can be reported to the monitoring center ( Figure 5 Accordingly, after the monitoring center determines that there are problematic network elements with inconsistent configurations based on the consistency check report, it can issue an alarm to the monitoring user, so that the monitoring user can promptly learn about the problematic network elements with inconsistent configurations so as to adopt corresponding countermeasures.
[0094] The consistency check report may include information such as the problematic network element and the problem category corresponding to the problematic network element. The processing module 502 may display this information to the monitoring user so that the monitoring user can view it.
[0095] In addition, in some embodiments of the present disclosure, the processing module 502 may also determine a repair strategy corresponding to the problematic network element, and may provide the repair strategy to the monitoring user, or may repair the problematic network element according to the repair strategy.
[0096] Figure 4 and Figure 5 The specific working process of the device embodiment shown can refer to the relevant description in the aforementioned method embodiment, which will not be repeated here.
[0097] In summary, the solution disclosed in the present invention can be quickly deployed and put into use, thereby improving processing efficiency and the accuracy of the target inspection results obtained. It also has the ability to deploy and monitor the entire cluster and has strong scalability.
[0098] The solution disclosed in this disclosure can be applied to the field of artificial intelligence, especially to the fields of cloud network, cloud computing and distributed storage. Artificial intelligence is a discipline that studies how to use computers to simulate certain human thought processes and intelligent behaviors (such as learning, reasoning, thinking, planning, etc.). It has both hardware-level and software-level technologies. Artificial intelligence hardware technologies generally include technologies such as sensors, dedicated artificial intelligence chips, cloud computing, distributed storage, and big data processing. Artificial intelligence software technologies mainly include computer vision technology, speech recognition technology, natural language processing technology, machine learning / deep learning, big data processing technology, knowledge graph technology, and other major directions.
[0099] The predetermined parameters and configuration information in the embodiments described in this disclosure are not for a specific user and do not reflect the personal information of a specific user. In the technical solution of this disclosure, the collection, storage, use, processing, transmission, provision and disclosure of user personal information involved are in compliance with the provisions of relevant laws and regulations and do not violate public order and good customs.
[0100] According to an embodiment of the present disclosure, the present disclosure also provides an electronic device, a readable storage medium and a computer program product.
[0101] Figure 6 A schematic block diagram of an electronic device 600 that can be used to implement an embodiment of the present disclosure is shown. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital assistants, cellular phones, smart phones, wearable devices, and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present disclosure described and / or required herein.
[0102] like Figure 6 As shown, the device 600 includes a computing unit 601, which can perform various appropriate actions and processes according to a computer program stored in a read-only memory (ROM) 602 or a computer program loaded from a storage unit 608 to a random access memory (RAM) 603. In the RAM 603, various programs and data required for the operation of the device 600 can also be stored. The computing unit 601, the ROM 602, and the RAM 603 are connected to each other via a bus 604. An input / output (I / O) interface 605 is also connected to the bus 604.
[0103] A number of components in the device 600 are connected to the I / O interface 605, including: an input unit 606, such as a keyboard, a mouse, etc.; an output unit 607, such as various types of displays, speakers, etc.; a storage unit 608, such as a disk, an optical disk, etc.; and a communication unit 609, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 609 allows the device 600 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.
[0104] The computing unit 601 may be a variety of general and / or special processing components with processing and computing capabilities. Some examples of the computing unit 601 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various dedicated artificial intelligence (AI, Artificial Intelligence) computing chips, various computing units running machine learning model algorithms, digital signal processors (DSP, Digital Signal Processing), and any appropriate processors, controllers, microcontrollers, etc. The computing unit 601 performs the various methods and processes described above, such as the methods described in the present disclosure. For example, in some embodiments, the methods described in the present disclosure may be implemented as a computer software program, which is tangibly contained in a machine-readable medium, such as a storage unit 608. In some embodiments, part or all of the computer program may be loaded and / or installed on the device 600 via the ROM 602 and / or the communication unit 609. When the computer program is loaded into the RAM 603 and executed by the computing unit 601, one or more steps of the methods described in the present disclosure may be performed. Alternatively, in other embodiments, the computing unit 601 may be configured to execute the method described in the present disclosure in any other appropriate manner (for example, by means of firmware).
[0105] Various embodiments of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard parts (ASSPs), system on chip systems (SOCs), complex programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various embodiments can include: being implemented in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which can be a special purpose or general purpose programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.
[0106] The program code for implementing the method of the present disclosure may be written in any combination of one or more programming languages. These program codes may be provided to a processor or controller of a general-purpose computer, a special-purpose computer, or other programmable data processing device, so that the program code, when executed by the processor or controller, enables the functions / operations specified in the flow chart and / or block diagram to be implemented. The program code may be executed entirely on the machine, partially on the machine, partially on the machine and partially on a remote machine as a stand-alone software package, or entirely on a remote machine or server.
[0107] In the context of the present disclosure, a machine-readable medium may be a tangible medium that may contain or store a program for use by or in conjunction with an instruction execution system, device, or equipment. A machine-readable medium may be a machine-readable signal medium or a machine-readable storage medium. A machine-readable medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices, or equipment, or any suitable combination of the foregoing. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory, a read-only memory, an erasable programmable read-only memory (EPROM, Electronically Programmable Read-Only Memory), a flash memory, an optical fiber, a portable compact disk read-only memory (CD-ROM, Compact Disc Read-Only Memory), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.
[0108] To provide interaction with a user, the systems and techniques described herein can be implemented on a computer having: a display device (e.g., a cathode ray tube (CRT) or a liquid crystal display (LCD) monitor) for displaying information to the user; and a keyboard and a pointing device (e.g., a mouse or a trackball) through which the user can provide input to the computer. Other types of devices can also be used to provide interaction with the user; for example, the feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form (including acoustic input, voice input, or tactile input).
[0109] The systems and techniques described herein can be implemented in a computing system that includes backend components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes frontend components (e.g., a user computer with a graphical user interface or a web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such backend components, middleware components, or frontend components. The components of the system can be interconnected by digital data communication (e.g., a communication network) in any form or medium. Examples of communication networks include: a local area network (LAN), a wide area network (WAN), and the Internet.
[0110] A computer system may include a client and a server. The client and the server are generally remote from each other and usually interact through a communication network. The relationship of client and server is generated by computer programs running on respective computers and having a client-server relationship with each other. The server may be a cloud server, a server of a distributed system, or a server combined with a blockchain.
[0111] It should be understood that the various forms of processes shown above can be used to reorder, add or delete steps. For example, the steps recorded in this disclosure can be executed in parallel, sequentially or in different orders, as long as the desired results of the technical solutions disclosed in this disclosure can be achieved, and this document does not limit this.
[0112] The above specific implementations do not constitute a limitation on the protection scope of the present disclosure. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions can be made according to design requirements and other factors. Any modification, equivalent substitution and improvement made within the spirit and principle of the present disclosure.
Claims
1. A method for checking configuration consistency between network elements, comprising: For the cluster to be processed, the following predetermined processing is performed M times in sequence: obtaining predetermined parameters of each network element in the cluster to be processed, the predetermined parameters being parameters related to configuration information in the corresponding network element, performing configuration consistency check on each network element according to the predetermined parameters, obtaining the check result of each network element, and adding the check result as an intermediate result to the first set, where M is a positive integer; In response to determining that the M predetermined processes are all executed, a required target inspection result is generated according to each intermediate result in the first set.
2. The method according to claim 1, wherein: The predetermined parameters include: the number of configuration information belonging to N different categories in the corresponding network element, N is a positive integer greater than 1, and each network element includes configuration information belonging to the N different categories.
3. The method according to claim 2, wherein: The performing configuration consistency check on each network element according to the predetermined parameters to obtain the check result of each network element includes: For each category, the following processing is performed: Taking the category as a category to be processed, obtaining an average value of the number of configuration information belonging to the category to be processed in each network element; Obtaining the variance of the amount of configuration information belonging to the category to be processed in each network element; A configuration consistency check is performed on each network element according to the mean and the variance to obtain a check result of each network element corresponding to the category to be processed.
4. The method according to claim 3, wherein: The performing configuration consistency check on each network element according to the mean and the variance to obtain the check result of each network element corresponding to the category to be processed includes: Determine a first boundary value and a second boundary value according to the mean and the variance, wherein the second boundary value is greater than the first boundary value, and both the first boundary value and the second boundary value are greater than 0; For any network element, the following processing is performed respectively: in response to determining that the number of configuration information belonging to the category to be processed in the network element meets the following conditions: greater than or equal to the first boundary value, and less than or equal to the second boundary value, it is determined that the inspection result of the network element corresponding to the category to be processed is consistent in configuration; otherwise, it is determined that the inspection result of the network element corresponding to the category to be processed is inconsistent in configuration.
5. The method according to claim 4, wherein: Determining the first boundary value and the second boundary value according to the mean and the variance includes: Determine a tolerance coefficient corresponding to the category to be processed, where the value of the tolerance coefficient is 0 or a positive integer; Obtaining the product of the variance and the tolerance coefficient; Obtaining a difference between the mean and the product, and taking the difference as the first boundary value; Obtain a sum of the mean and the product, and use the sum as the second boundary value.
6. The method according to claim 5, wherein: Determining the tolerance coefficient corresponding to the category to be processed includes: In response to determining that the category to be processed is a predetermined key category, setting the value of the tolerance coefficient corresponding to the category to be processed to 0; In response to determining that the category to be processed is a non-critical category, the value of the tolerance coefficient corresponding to the category to be processed is set to a positive integer according to the principle that the higher the change frequency of the configuration information corresponding to the category to be processed, the larger the value of the tolerance coefficient.
7. The method according to claim 4, 5 or 6, wherein: Generating the required target inspection result according to each intermediate result in the first set includes: For any network element, the following processing is performed respectively: for any category, in response to determining that the inspection results of the network element corresponding to the category in the M inspections are all configuration inconsistencies, the network element is determined as a problem network element, and the category is determined as the problem category corresponding to the problem network element; The target inspection result is composed of each problematic network element and all the problem categories corresponding to each problematic network element.
8. The method according to claim 7, further comprising: A consistency check report is generated according to the target check result, and the consistency check report is reported to the monitoring center.
9. A method for checking configuration consistency between network elements, comprising: Obtain a consistency check report reported by the inter-network element reconciliation system, wherein the consistency check report is generated by the inter-network element reconciliation system according to a target check result, wherein the target check result is generated by the inter-network element reconciliation system according to each intermediate result in the first set after determining that M scheduled processes have been executed, M is a positive integer, and the first set includes: an intermediate result obtained after each execution of the scheduled process, wherein each intermediate result obtained includes: an inspection result of each network element obtained after performing a configuration consistency check on each network element in the processing cluster according to the acquired predetermined parameters, wherein the predetermined parameters are the acquired predetermined parameters of each network element, and the predetermined parameters are parameters related to the configuration information in the corresponding network element; In response to determining that there is a problematic network element with inconsistent configuration according to the consistency check report, an alarm is issued to a monitoring user.
10. The method according to claim 9, further comprising: A repair strategy corresponding to the problematic network element is determined, and the repair strategy is provided to the monitoring user, or the problematic network element is repaired according to the repair strategy.
11. A device for checking configuration consistency between network elements, comprising: Check modules and generate modules; The checking module is used to sequentially perform the following predetermined processing M times for the cluster to be processed: obtaining predetermined parameters of each network element in the cluster to be processed, where the predetermined parameters are parameters related to the configuration information in the corresponding network element, performing configuration consistency check on each network element according to the predetermined parameters, obtaining the check result of each network element, and adding the check result as an intermediate result to the first set, where M is a positive integer; The generating module is used to generate the required target inspection result according to each intermediate result in the first set in response to determining that the M times of the predetermined processing are all executed.
12. The device according to claim 11, wherein The predetermined parameters include: the number of configuration information belonging to N different categories in the corresponding network element, N is a positive integer greater than 1, and each network element includes configuration information belonging to the N different categories.
13. The device according to claim 12, wherein: Each time the inspection module executes the predetermined processing, the following processing is performed for each category: the category is taken as the category to be processed, the mean value of the number of configuration information belonging to the category to be processed in each network element is obtained, the variance of the number of configuration information belonging to the category to be processed in each network element is obtained, and a configuration consistency check is performed on each network element according to the mean value and the variance to obtain the inspection result of each network element corresponding to the category to be processed.
14. The device according to claim 13, wherein: The inspection module determines a first boundary value and a second boundary value based on the mean and the variance, the second boundary value is greater than the first boundary value, and the first boundary value and the second boundary value are both greater than 0, and performs the following processing for any network element: in response to determining that the number of configuration information belonging to the category to be processed in the network element meets the following conditions: greater than or equal to the first boundary value, and less than or equal to the second boundary value, determine that the inspection result of the network element corresponding to the category to be processed is configuration consistent; otherwise, determine that the inspection result of the network element corresponding to the category to be processed is configuration inconsistent.
15. The device according to claim 14, wherein: The inspection module determines the tolerance coefficient corresponding to the category to be processed, the value of the tolerance coefficient is 0 or a positive integer, obtains the product of the variance and the tolerance coefficient, and obtains the difference between the mean and the product, and uses the difference as the first boundary value, obtains the sum of the mean and the product, and uses the sum as the second boundary value.
16. The device according to claim 15, wherein: In response to determining that the category to be processed is a predetermined critical category, the inspection module sets the value of the tolerance coefficient corresponding to the category to be processed to 0. In response to determining that the category to be processed is a non-critical category, the inspection module sets the value of the tolerance coefficient corresponding to the category to be processed to a positive integer according to the principle that the higher the change frequency of the configuration information corresponding to the category to be processed, the larger the value of the tolerance coefficient.
17. The device according to claim 14, 15 or 16, wherein: The generation module performs the following processing for any network element: for any category, in response to determining that the inspection results of the network element corresponding to the category in M inspections are all configuration inconsistencies, the network element is determined to be a problem network element, and the category is determined to be the problem category corresponding to the problem network element; the target inspection result is composed of each problem network element and all the problem categories corresponding to each problem network element.
18. The device according to claim 17, wherein: The generating module is further used to generate a consistency check report according to the target check result, and report the consistency check report to the monitoring center.
19. A device for checking configuration consistency between network elements, comprising: Acquisition module and processing module; The acquisition module is used to acquire a consistency check report reported by the inter-network element reconciliation system, the consistency check report is generated by the inter-network element reconciliation system according to a target check result, the target check result is generated by the inter-network element reconciliation system according to each intermediate result in the first set after determining that M scheduled processes are all executed, M is a positive integer, the first set includes: an intermediate result obtained after each execution of the scheduled process, each intermediate result obtained includes: an inspection result of each network element obtained after performing a configuration consistency check on each network element in the processing cluster according to the acquired predetermined parameters, the predetermined parameters are the acquired predetermined parameters of each network element, and the predetermined parameters are parameters related to the configuration information in the corresponding network element; The processing module is used for providing an alarm prompt to a monitoring user in response to determining that there is a problematic network element with inconsistent configuration according to the consistency check report.
20. The device according to claim 19, wherein The processing module is further used to determine a repair strategy corresponding to the problematic network element and provide the repair strategy to the monitoring user, or to repair the problematic network element according to the repair strategy.
21. An electronic device comprising: at least one processor; as well as a memory communicatively connected to the at least one processor; wherein, The memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to perform the method according to any one of claims 1 to 10.
22. A non-transitory computer-readable storage medium storing computer instructions, wherein: The computer instructions are used to make a computer execute the method according to any one of claims 1 to 10.
23. A computer program product, comprising a computer program / instruction, wherein when the computer program / instruction is executed by a processor, the method according to any one of claims 1 to 10 is implemented.