Equipment management method and device, electronic equipment and storage medium

Abstract

The invention relates to an equipment nanotube method and device, electronic equipment and a storage medium, and relates to the field of equipment nanotube. The method comprises the following steps: in response to a received equipment access request, analyzing the equipment access request, and determining an identifier of target equipment and equipment access information; according to the identifier of the target device, determining the target device and determining a target domain to which the target device belongs; according to pre-stored gateway access information, connecting a gateway of the target network domain; accessing the target device through the gateway of the target domain and the device access information; and outputting the access page of the target equipment. According to the method and the device, the bastion host is utilized to carry out management on each device in the network domain, so that the management condition of the bastion host is simplified, and the operation and maintenance capability is improved.

Description

Technical Field

[0001] The present application relates to the field of computer technology, and in particular to a device management method, apparatus, electronic device and storage medium. Background Art

[0002] A bastion host is a server that uses various technical means to monitor the operation of servers, network devices, security devices, databases and other devices in a specific network environment in order to protect the network and data from intrusion and destruction, so as to facilitate centralized alarm, timely processing and auditing. As the syntax of the scene becomes more complex, the bastion host becomes more and more complex when managing cloud devices. Summary of the invention

[0003] Embodiments of the present disclosure provide a device management method, apparatus, electronic device, and storage medium.

[0004] In a first aspect, an embodiment of the present disclosure provides a device management method, comprising: in response to receiving a device access request, parsing the device access request to determine an identification of a target device and device access information; determining a target network domain to which the target device belongs based on the identification of the target device; connecting to a gateway of the target network domain based on pre-stored gateway access information; accessing the target device through the gateway of the target network domain and the device access information; and outputting an access page for the target device.

[0005] In a second aspect, an embodiment of the present disclosure provides a device management apparatus, comprising: a request parsing unit, configured to parse a device access request in response to receiving a device access request, and determine an identification of a target device and device access information; a network domain determination unit, configured to determine a target network domain to which the target device belongs based on the identification of the target device; a gateway connection unit, configured to connect to a gateway of the target network domain based on pre-stored gateway access information; a device access unit, configured to access the target device through the gateway of the target network domain and the device access information; and a page output unit, configured to output an access page of the target device.

[0006] In a third aspect, an embodiment of the present disclosure provides an electronic device, comprising a memory, a processor, a bus, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the computer program, the device management method described in the first aspect is implemented.

[0007] In a fourth aspect, an embodiment of the present disclosure provides a non-transitory computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the device management method as described in the first aspect.

[0008] By applying the technical solution disclosed in the present invention, the bastion host can be used to manage various devices in the network domain, thereby simplifying the management of the bastion host and improving the operation and maintenance capabilities.

[0009] It should be understood that the content described in this section is not intended to identify the key or important features of the embodiments of the present disclosure, nor is it intended to limit the scope of the present disclosure. Other features of the present disclosure will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0010] The accompanying drawings are used to better understand the present solution and do not constitute a limitation of the present disclosure.

[0011] Figure 1 An exemplary system architecture diagram to which an embodiment of the device management method disclosed herein can be applied;

[0012] Figure 2 A schematic diagram of a process flow of an embodiment of the device management method disclosed in the present invention;

[0013] Figure 3 A flowchart of another embodiment of the device management method disclosed in the present invention;

[0014] Figure 4 It is a structural schematic diagram of an embodiment of the device management apparatus disclosed in the present invention;

[0015] Figure 5 A schematic diagram of the structure of an embodiment of an electronic device disclosed herein. DETAILED DESCRIPTION

[0016] It should be noted that the following detailed descriptions are exemplary and are intended to provide further explanation of the present disclosure. Unless otherwise specified, all technical and scientific terms used herein have the same meanings as those commonly understood by those skilled in the art to which the present disclosure belongs.

[0017] It should be noted that the terms used herein are only for describing specific embodiments and are not intended to limit the exemplary embodiments according to the present disclosure. As used herein, unless the context clearly indicates otherwise, the singular form is also intended to include the plural form. In addition, it should be understood that when the terms "comprising" and / or "including" are used in this specification, it indicates the presence of features, steps, operations, devices, components and / or combinations thereof.

[0018] In the absence of conflict, the embodiments in the present disclosure and the features in the embodiments may be combined with each other.

[0019] In order to make the technical solutions and advantages of the present disclosure more clearly understood, the present disclosure is further described in detail below in conjunction with the accompanying drawings and specific embodiments.

[0020] Figure 1 An exemplary system architecture 100 is shown to which an embodiment of the device management method or device management apparatus disclosed in the present invention can be applied.

[0021] like Figure 1 As shown, system architecture 100 may include bastion host 101, access device 102, and cloud device 103. Bastion host 101, access device 102, and cloud device 103 may communicate with each other via a network, and the network may include various connection types, such as wired, wireless communication links, or optical fiber cables.

[0022] The bastion host 101 receives the request from the access device 102, and accesses the cloud device 103 according to the request. The access device 102 may be a terminal device, and various communication client applications, such as browser applications, may be installed on the terminal device.

[0023] The cloud device 103 includes but is not limited to a computer, a network host, a single network server, a plurality of network server sets or a cloud server composed of a plurality of servers. The cloud server is composed of a large number of computers or network servers based on cloud computing.

[0024] It should be noted that the device management method provided in the embodiment of the present disclosure is generally executed by the bastion server 101. Accordingly, the device management device is generally set in the bastion server 101.

[0025] It should be understood that Figure 1 The number of access devices, bastion hosts, and cloud devices in the example is only for reference. Any number of access devices, bastion hosts, and cloud devices may be used as required.

[0026] Figure 2 FIG. 2 shows a process 200 of an embodiment of the device management method disclosed in the present invention. Figure 2 As shown, the device management method of this embodiment may include the following steps:

[0027] Step 201: In response to receiving a device access request, the device access request is parsed to determine an identifier of a target device and device access information.

[0028] In this embodiment, the execution subject of the device management method (for example Figure 1 The bastion host 101 shown in the figure can be accessed from other devices (e.g. Figure 1 The access device 102 shown receives a device access request. The device access request may include the target device identifier and device access information. The target device identifier may be an IP address or a physical address of the target device. The device access information may include a user name and a corresponding login password.

[0029] Step 202: Determine the target network domain to which the target device belongs according to the target device identifier.

[0030] After parsing the device access information to obtain the target device identifier, query the target device identifier to determine whether the target device is located in the network domain. Specifically, the bastion host can determine whether the target device is located in the network domain based on the pre-stored network topology or the identifier list included in each network domain. The execution subject can also determine the target network domain to which the target device belongs.

[0031] Step 203: Connect to the gateway of the target network domain according to the pre-stored gateway access information.

[0032] In this embodiment, the execution subject can connect to the gateway of the target network domain according to the pre-stored gateway access information. Specifically, the gateway access information includes the user name and login password of the gateway of each network domain. The bastion host uses the user name and login password to log in to the gateway of the target network domain in the background.

[0033] Step 204: Access the target device through the gateway of the target network domain and the device access information.

[0034] After connecting to the gateway of the target network domain, the target device can be accessed using the device access information. Specifically, the target device can be accessed by inputting the user name and password in the device access information in the background through the gateway of the target network domain.

[0035] Step 205: output the access page of the target device.

[0036] After connecting to the target device, the access page of the target device can be fed back to the bastion host, thereby achieving access to the target device.

[0037] The device management method provided by the above-mentioned embodiments of the present disclosure can use the bastion host to manage various devices in the network domain, thereby simplifying the management of the bastion host and improving the operation and maintenance capabilities.

[0038] Continue to see Figure 3 , which shows a process 300 of another embodiment of the device management method according to the present disclosure. Figure 3 As shown, the method of this embodiment may include the following steps:

[0039] Step 301: In response to receiving a device access request, the device access request is parsed to determine an identifier of a target device and device access information.

[0040] Step 302: Determine the target network domain to which the target device belongs based on the identifier of the target device.

[0041] In this embodiment, in order to better manage and operate each cloud, a single cloud can be set as a single network domain, so that each cloud can share a bastion host, thereby improving the resource utilization of the bastion host.

[0042] Step 303: Connect to the gateway of the target network domain according to the pre-stored gateway access information.

[0043] In some optional implementations of this embodiment, the bastion host may obtain the username and password of the gateway of each network domain in advance, and then store the username and password of each gateway in correspondence with the identifier of each gateway, thereby obtaining gateway access information.

[0044] In this implementation, the user does not need to enter the username and password of each gateway in the terminal, which not only improves the security of the gateway, but also

[0045] Step 304, log in to the target device through the gateway of the target network domain using the device access information through the built-in command.

[0046] In this embodiment, the target device can be logged in to by using the device access information through the gateway of the target network domain through a built-in command. Specifically, the built-in command can be a command for inputting a user name and a corresponding password of the target device. By running the built-in command, the device access information can be input to the target device, so that the target device can be logged in.

[0047] Step 305 : in response to determining that the target device is not located in the network domain or the network domain to which it belongs does not include a gateway, access the target device according to the device access information.

[0048] In this embodiment, if the target device is not located in the network domain, the target device can be directly accessed according to the device access information, which can improve the access efficiency of the device.

[0049] Step 306: output the access page of the target device.

[0050] In some optional implementations of this embodiment, a processing log for a device access request may also be recorded; and the log may be stored in the managed device.

[0051] In this implementation, a processing log for device access requests can be recorded, which is called an audit log. The audit log can then be stored in the managed device, that is, the audit log can also be managed by the bastion host.

[0052] The device management method provided by the above-mentioned embodiments of the present disclosure operates and maintains devices in a multi-cloud environment based on network domains. Each cloud is managed in the corresponding network domain, and the devices can be quickly classified by searching the network domain information of the devices, thereby facilitating operation and maintenance. For hybrid cloud scenarios and multi-cloud scenarios, the method of accessing internal devices is optimized to improve operation and maintenance capabilities. Gateway devices are directly managed so that users cannot directly operate gateway devices, thereby improving device security.

[0053] Further references Figure 4 As an implementation of the methods shown in the above figures, the present disclosure provides an embodiment of a device management apparatus, and the device embodiment is Figure 2 Corresponding to the method embodiment shown, the device can be specifically applied to various electronic devices.

[0054] like Figure 4 As shown, the device management apparatus 400 of this embodiment includes: a request parsing unit 401, a network domain determining unit 402, a gateway connecting unit 403, a device accessing unit 404 and a page outputting unit 405.

[0055] The request parsing unit 401 is configured to parse the device access request in response to receiving the device access request, and determine the identification of the target device and the device access information.

[0056] The network domain determining unit 402 is configured to determine the target network domain to which the target device belongs according to the identifier of the target device.

[0057] The gateway connection unit 403 is configured to connect to the gateway of the target network domain according to the pre-stored gateway access information.

[0058] The device access unit 404 is configured to access the target device through the gateway of the target network domain and the device access information.

[0059] The page output unit 405 is configured to output the access page of the target device.

[0060] In addition, in the technical solution of the present application, an electronic device is also proposed.

[0061] Figure 5 A schematic structural diagram of an electronic device provided by an embodiment of the present disclosure is shown.

[0062] like Figure 5As shown, the electronic device may include a processor 501, a memory 502, a bus 503, and a computer program stored in the memory 502 and executable on the processor 501, wherein the processor 501 and the memory 502 communicate with each other through the bus 503. When the processor 501 executes the computer program, the steps of the above method are implemented, for example, including: in response to receiving a device access request, parsing the device access request, determining the identification of the target device and the device access information; determining the target network domain to which the target device belongs according to the identification of the target device; connecting to the gateway of the target network domain according to the pre-stored gateway access information; accessing the target device through the gateway of the target network domain and the device access information; and outputting the access page of the target device.

[0063] In addition, in one embodiment of the present disclosure, a non-transitory computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps of the above method are implemented, for example, including: in response to receiving a device access request, parsing the device access request, determining the identification of the target device and the device access information; determining the target network domain to which the target device belongs based on the identification of the target device; connecting to the gateway of the target network domain based on pre-stored gateway access information; accessing the target device through the gateway of the target network domain and the device access information; and outputting an access page for the target device.

[0064] To sum up, in the technical solution of the present invention, the bastion host can be used to manage various devices within the network domain, thereby simplifying the management of the bastion host and improving the operation and maintenance capabilities.

[0065] The above description is only a preferred embodiment of the present disclosure and is not intended to limit the present disclosure. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present disclosure shall be included in the scope of protection of the present disclosure.

Claims

1. A device management method, comprising: In response to receiving the device access request, parsing the device access request to determine an identification of a target device and device access information; Determine, according to the identifier of the target device, the target device and determine the target network domain to which the target device belongs; Connecting to the gateway of the target network domain according to pre-stored gateway access information; Accessing the target device through the gateway of the target network domain and the device access information; Output the access page of the target device.

2. The method according to claim 1, wherein: The method further comprises: In response to determining that the target device is not located in the network domain, the target device is accessed according to the device access information.

3. The method according to claim 1, wherein: The step of accessing the target device through the gateway of the target network domain and the device access information includes: The target device is logged in to by using the device access information through a built-in command via a gateway of the target network domain.

4. The method according to claim 1, wherein: The method further comprises: Get the username and password of the gateway of each domain; Determine gateway access information based on the user name and password of each gateway.

5. The method according to claim 1, wherein: The method further comprises: Recording a processing log of the access request to the device; The log is stored in the managed device.

6. The method according to claim 1, wherein: The method further comprises: Join devices and gateways in a single cloud to a single domain.

7. A device for managing equipment, comprising: a request parsing unit, configured to, in response to receiving a device access request, parse the device access request to determine an identification of a target device and device access information; A network domain determining unit, configured to determine the target network domain to which the target device belongs according to the identifier of the target device; A gateway connection unit, configured to connect to the gateway of the target network domain according to pre-stored gateway access information; A device access unit, configured to access the target device through a gateway of the target network domain and the device access information; The page output unit is configured to output the access page of the target device.

8. An electronic device comprising a memory, a processor, a bus, and a computer program stored in the memory and executable on the processor, wherein: When the processor executes the computer program, the device management method as described in any one of claims 1 to 6 is implemented.

9. A non-transitory computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the device management method as described in any one of claims 1 to 6 is implemented.

Images