Network configuration management method and device, program product and medium

Abstract

The invention discloses a network configuration management method and device, a program product and a medium, and relates to the technical field of computers. The method is applied to a data center operation and maintenance management platform, and comprises the following steps: when it is monitored that network configuration needs to be performed on a data center in a current service scene, obtaining physical link interconnection information between network devices in the data center through a preset hardware management protocol; before the service is issued, grouping servers in the network equipment, and issuing configuration to a target port of a switch accessed into the network equipment based on the physical link interconnection information to obtain a configured port; and dividing the servers into different virtual local area networks according to the groups to which the servers belong and based on the configured ports so as to construct a logic network isolation domain, and performing corresponding service operation on each group based on the logic network isolation domain after the service is issued. Through the technical scheme of the invention, the network configuration change can be realized, and the impact on the network flow of the data center is avoided.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and in particular to a network configuration management method, device, program product and medium. Background Art

[0002] In the operation and maintenance management of data centers, the general operation and maintenance platform in the data center and the network equipment management software (Network Management System) in the data center are usually two independent systems. Because network equipment is the hub of the data center, it is complex to manage, and usually uses dedicated network management software to manage it. Moreover, these network management software are usually provided by mainstream network equipment manufacturers in combination with their own equipment, and have some advanced SDN (Software Defined Network) features. The data center operation and maintenance management platform for general operation and maintenance scenarios has relatively weaker functions in network configuration management, and is usually not used by data center operation and maintenance personnel to manage the network. However, for conventional data center operation and maintenance management platforms, some management functions often need to have a certain impact on the network configuration of the data center in order to achieve better results. Usually, the configuration of the entire data center network needs to be modified, but the current data center management platform software does not have the ability to change (isolate) and restore the network, which will bring inconvenience to users.

[0003] Therefore, how to provide a solution to the above technical problems is a problem that those skilled in the art need to solve at present. Summary of the invention

[0004] In view of this, the purpose of the present invention is to provide a network configuration management method, device, program product and medium, which can realize automatic network isolation configuration and recovery when there is a functional demand for network configuration management in a data center. The specific scheme is as follows:

[0005] In a first aspect, the present application discloses a network configuration management method, which is applied to a data center operation and maintenance management platform, comprising:

[0006] When it is detected that the data center needs to be configured for network in the current business scenario, the physical link interconnection information between the network devices in the data center is obtained through a preset hardware management protocol;

[0007] Before the service is issued, the servers in the network device are grouped, and configuration is issued to the target port of the switch connected to the network device based on the physical link interconnection information to obtain a configured port;

[0008] According to the group to which the server belongs and based on the configured ports, the server is divided into different virtual local area networks to construct a logical network isolation domain, and after the service is issued, corresponding service operations are performed on each of the groups based on the logical network isolation domain.

[0009] Optionally, the obtaining, by using a preset hardware management protocol, physical link interconnection information between network devices in the data center includes:

[0010] The servers in the data center are managed through an intelligent platform management interface protocol, and the switches in the data center are managed through a network configuration protocol to obtain physical link interconnection information between the servers and the switches.

[0011] Optionally, managing the server in the data center through an intelligent platform management interface protocol and managing the switch in the data center through a network configuration protocol to obtain physical link interconnection information between the server and the switch includes:

[0012] The servers in the data center are managed through an intelligent platform management interface protocol, so as to obtain the first physical address corresponding to each network card of the plurality of servers in the data center through a corresponding intelligent platform management interface instruction;

[0013] Managing the switch in the data center through a network configuration protocol to obtain a second physical address corresponding to each port of the switch in the data center;

[0014] Physical link interconnection information between the server and the switch is determined based on the first physical address and the second physical address.

[0015] Optionally, determining the physical link interconnection information between the server and the switch based on the first physical address and the second physical address includes:

[0016] After the server is powered on and generates a service request corresponding to the current service scenario, the switch obtains physical link interconnection information between the server and the switch according to an association between the first physical address and the second physical address.

[0017] Optionally, the process of sending a configuration to a target port of a switch connected to the network device based on the physical link interconnection information further includes:

[0018] Based on the physical link interconnection information, locking the switch in the network device through the network configuration protocol;

[0019] The step of sending the configuration to the target port of the switch connected to the network device is triggered, and when the sending of the configuration fails, the configuration of the switch is rolled back.

[0020] Optionally, grouping the servers in the network device includes:

[0021] Acquire a grouping strategy pre-set for the server, and group the servers in the network device according to the grouping strategy; wherein the grouping strategy includes an average grouping strategy and a specified grouping strategy.

[0022] Optionally, grouping the servers in the network device according to the grouping strategy includes:

[0023] When the grouping strategy is the average grouping strategy, the number of groups of the servers is determined according to the total number of the servers in the data center, and the servers are evenly grouped according to the number of groups;

[0024] When the grouping strategy is the specified grouping strategy, the servers connected to the switches in the data center are determined according to the physical link interconnection information, so as to classify the servers connected to the same switch into the same group.

[0025] Optionally, after the service is issued, after performing corresponding service operations on each of the groups based on the logical network isolation domain, the method further includes:

[0026] After the service operation is completed, the configuration of the configured port is deleted to perform a configuration recovery operation on the switch.

[0027] Optionally, if the current business scenario is to pre-start the execution environment installation of the server, the process of grouping the servers in the network device and sending the configuration to the target port of the switch connected to the network device based on the physical link interconnection information also includes:

[0028] Determine the current target virtual local area network, and provide a corresponding pre-start execution environment service for the target virtual local area network;

[0029] The pre-start execution environment service is horizontally expanded based on a virtualized deployment mode or a containerized deployment mode to provide a corresponding pre-start execution environment service for each virtual local area network.

[0030] Optionally, sending a configuration to a target port of a switch connected to the network device based on the physical link interconnection information includes:

[0031] Based on the physical link interconnection information, a first target port connecting the server to the switch is set to an access mode, and a second target port connecting the pre-boot execution environment service to the switch is set to an aggregation mode.

[0032] Optionally, after setting the second target port connecting the pre-boot execution environment service to the switch to an aggregation mode, the method further includes:

[0033] The virtual local area network identification tag corresponding to each group is determined according to the group to which the server belongs, and the pre-start execution environment service is associated with the virtual local area network identification tag by using a virtual switch.

[0034] Optionally, after the service is issued, a corresponding service operation is performed on each of the groups based on the logical network isolation domain, including:

[0035] After the service is issued, based on the logical network isolation domain, a dynamic host configuration protocol request broadcast operation, a file issuance operation and a system deployment operation are sequentially performed on each of the groups.

[0036] In a second aspect, the present application discloses an electronic device, comprising:

[0037] Memory for storing computer programs;

[0038] The processor is used to load and execute the computer program to implement the aforementioned network configuration management method.

[0039] In a third aspect, the present application discloses a computer program product, including a computer program / instruction, which implements the steps of the aforementioned network configuration management method when executed by a processor.

[0040] In a fourth aspect, the present application discloses a computer-readable storage medium for storing a computer program; wherein the computer program implements the aforementioned network configuration management method when executed by a processor.

[0041] The present application provides a network configuration management method, which is applied to a data center operation and maintenance management platform, including: when it is monitored that the data center needs to be configured for network in the current business scenario, obtaining physical link interconnection information between network devices in the data center through a preset hardware management protocol; before the business is issued, the servers in the network devices are grouped, and based on the physical link interconnection information, the configuration is issued to the target port of the switch connected to the network device to obtain a configured port; according to the group to which the server belongs and based on the configured port, the server is divided into different virtual local area networks to construct a logical network isolation domain, and after the business is issued, corresponding business operations are performed on each of the groups based on the logical network isolation domain.

[0042] The beneficial technical effect of the present application is: if there is a need to perform network configuration on the data center to avoid the impact on the network traffic of the data center, considering that the data center operation and maintenance management platform also has the ability to configure network settings, therefore, through the data center operation and maintenance management platform, the preset hardware management protocol is used to manage each network device in the data center to obtain the hardware interconnection information of the network device. Furthermore, before the service is issued, an additional logical network configuration is created based on the physical link interconnection information to build a logical network isolation domain, and the servers are divided into different virtual LANs by grouping to achieve network isolation, and after the service is issued, the corresponding business operations are performed on each group based on the constructed logical network isolation domain. In this way, the impact of the business operations in the current business scenario on the network traffic of the data center can be avoided or reduced. The whole process is fully automated, and the network configuration changes before the service is issued are realized, which is simple and convenient, avoiding the cumbersome and error-prone problems caused by manual operations.

[0043] In addition, the present application provides a network configuration management device, a program product, and a medium, which correspond to the above-mentioned network configuration management method and have the same effect as above. BRIEF DESCRIPTION OF THE DRAWINGS

[0044] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying creative work.

[0045] Figure 1 A flow chart of a network configuration management method disclosed in this application;

[0046] Figure 2 A diagram of the network isolation and recovery architecture of a data center management platform disclosed in this application;

[0047] Figure 3 A schematic diagram of sending batch configuration codes based on the NETCONF protocol disclosed in this application;

[0048] Figure 4 A schematic diagram of the structure of a network configuration management device disclosed in this application;

[0049] Figure 5 This is a structural diagram of an electronic device disclosed in this application. DETAILED DESCRIPTION

[0050] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0051] In the operation and maintenance management of data centers, data center operation and maintenance management platform software for general operation and maintenance scenarios is usually used to monitor various servers, storage, and network devices in the data center, while providing operational functions such as system deployment and firmware configuration. Currently, the network configuration management functions of the data center operation and maintenance management platform are usually not used by data center operation and maintenance personnel to manage the network. Therefore, network configuration management is required when facing scenarios that have an impact on the network in the data center with a large amount of data.

[0052] To this end, the present application provides a network configuration management solution that can achieve automated network isolation configuration and recovery when there is a functional demand for network configuration management in a data center.

[0053] The embodiment of the present invention discloses a network configuration management method, which is applied to a data center operation and maintenance management platform. The data center operation and maintenance management platform is a software system that centrally manages and monitors the equipment, resources and operation status of the data center. It integrates various hardware facilities in the data center, provides various functions and processes, and realizes comprehensive monitoring and fine management of the operation of the data center. Figure 1 As shown, the method includes:

[0054] Step S11: when it is detected that the data center needs to be network configured in the current business scenario, the physical link interconnection information between the network devices in the data center is obtained through a preset hardware management protocol.

[0055] In an embodiment of the present application, if the business operations existing in the current business scenario will have an impact on the network in the data center, it is considered that the network configuration of the data center is required in the current business scenario. Taking the deployment of the operating system on the server as an example, PXE (Preboot Execution Environment) technology is usually used, but it is not ruled out that the actual business scenario can be extended to a variety of similar scenarios. PXE is a network boot technology that allows a computer to connect to a remote server through a network, obtain an image file of the operating system from the server, and load the image file at startup to install or start the operating system. In the face of large-scale installation scenarios, since the PXE process involves operations such as DHCP (Dynamic Host Configuration Protocol) and file distribution, it will inevitably have an impact on the network in the data center with a large amount of data.

[0056] The current solution for this scenario is usually to isolate the network by manual wiring or by dividing VLANs (Virtual Local Area Networks), which involves the linkage between the data center operation and maintenance management platform and the network management system, resulting in low efficiency and easy travel. The process of dividing VLANs often requires manual configuration or the use of special network management software, but the data center management platform software that provides PXE installation services often cannot provide this capability. It can be seen that the current network management is usually implemented by more complex network management software or manual operation, which leads to insufficient automation and easy errors, and ignores the ability of the management platform to configure network settings.

[0057] Therefore, in the embodiment of the present application, considering that the data center operation and maintenance management platform also has the ability to configure network settings, the conventional protocols used by various management platforms to manage devices are used to achieve network configuration changes before the service is issued and network configuration recovery after the service is issued. First, the network devices in the data center are managed through the preset hardware management protocol to obtain the physical link interconnection information between the network devices. Among them, the network devices include servers and switches in the data center.

[0058] Specifically, the server in the data center is managed through the Intelligent Platform Management Interface (IPMI) protocol, and the switch in the data center is managed through the Network Configuration Protocol (NETCONF) protocol to obtain the physical link interconnection information between the server and the switch.

[0059] It is understandable that NETCONF is widely used in the configuration and management of various network devices, such as routers, switches, etc. It is designed to replace the traditional SNMP (Simple Network Management Protocol) and CLI (Command Line Interface). NETCONF supports SSH (Secure Shell) as a transmission protocol to ensure the security and integrity of communications. In this embodiment, the type of hardware management protocol used to manage each network device is not limited. For example, the switch can also be managed through the SNMP protocol. In the following embodiments, the management of the server through the IPMI protocol and the management of the switch through the NETCONF protocol are used as examples for explanation, and no further description will be given later.

[0060] Step S12: before the service is issued, the servers in the network device are grouped, and configuration is issued to the target port connected to the switch in the network device based on the physical link interconnection information to obtain a configured port.

[0061] Assume that the data center operation and maintenance management platform needs to perform PXE installation operations on a large number of servers (1,000 servers). The management platform will use a grouping method to divide the servers into different VLANs. For example, the servers will be divided into 10 different VLANs for network isolation.

[0062] Specifically, when grouping servers in a network device, a grouping strategy is pre-set for the servers, and the grouping strategy includes an average grouping strategy and a specified grouping strategy. The servers are grouped according to the grouping strategy. Furthermore, when the grouping strategy is the average grouping strategy, the number of groups of the servers is determined according to the total number of servers in the data center, and the servers are grouped evenly according to the number of groups; when the grouping strategy is the specified grouping strategy, the servers corresponding to the switches in the data center are determined according to the physical link interconnection information, so that the servers connected to the same switch are divided into the same group.

[0063] It can be understood that the average grouping strategy is to group the servers in an even manner. The specified grouping strategy is to group the servers connected to the same switch into one group according to the actual scenario.

[0064] Furthermore, after the servers are grouped, additional logical network configurations are created based on the physical link interconnection information between network devices. Through the analysis of this physical link interconnection information, additional VLAN configurations are set for the switches in the network devices, that is, the configuration is sent to the target port of the access switch, and the configured port is obtained to achieve fully automatic configuration delivery. In this way, the configuration is dynamically delivered based on the acquired physical link interconnection information and switch configuration information. The entire process does not require human intervention, and an additional independent configuration is used for the switch, which is transparent to all other services in the network and has no impact.

[0065] Step S13: Divide the server into different virtual local area networks according to the group to which the server belongs and based on the configured ports to construct a logical network isolation domain, and perform corresponding service operations on each of the groups based on the logical network isolation domain after the service is issued.

[0066] In the embodiment of the present application, after the servers are grouped, VLANs are allocated to each group, and the switch is configured according to the configured ports, and the servers are divided into different virtual LANs for network isolation, thereby realizing the construction of a logical network isolation domain.

[0067] It should be noted that when VLAN is divided for each group, the VLAN value can be configured in the management platform. In a specific implementation, the VLAN defaults to 10 digits from 4094, i.e., 4085-4094 and a private IP segment, which is assumed to be a 192.168.1 / 24 network segment. A more accurate variable-length mask can also be set according to the number of devices in the network segment for network isolation.

[0068] In addition, taking PXE installation as an example, the data center management platform software usually needs to provide a PXE service, that is, provide a PXE source for each VLAN so that the devices in the VLAN can be started through the network and installed or updated.

[0069] Specifically, if the current business scenario is to install a pre-boot execution environment for the server, the grouping of the servers in the network device and the sending of the configuration to the target port of the switch connected to the network device based on the physical link interconnection information also include: determining the current target virtual LAN and providing a corresponding pre-boot execution environment service for the target virtual LAN; horizontally expanding the pre-boot execution environment service based on a virtualization deployment method or a containerized deployment method to provide a corresponding pre-boot execution environment service for each virtual LAN.

[0070] It should be pointed out that the management platform is deployed in a virtualized or containerized manner to achieve horizontal expansion of PXE source services and more refined network isolation requirements, which is suitable for grouping of server isolation domains in large-scale PXE scenarios. Among them, the choice of virtualization or containerization technology mainly depends on the specific application scenario, resource requirements and management capabilities. Since a virtual machine or containerized deployment method is adopted, according to the grouping obtained in the previous steps, the PXE service of the target virtual LAN can be horizontally expanded from 1 to 10 by virtual machine cloning, template deployment or containerized batch deployment. At the same time, the corresponding VLAN is set for the ports connected to these 10 PXE services on the virtual switch VSWITCH. In this way, the problem of horizontal expansion difficulties caused by physical deployment can be avoided, such as the need for additional switch port wiring and configuration.

[0071] At this time, different server groups and corresponding PXE sources are divided into different VLANs. Therefore, after the service is issued, the corresponding service operations are performed on each group based on the logical network isolation domain. Specifically, it includes completing the DHCP request broadcast operation, file issuance operation and system deployment operation of the current group in the isolated VLANs.

[0072] In addition, the PXE installation scenario given as an example in the preceding steps is a scenario where network configuration is required in the same data center, and can also be extended to more complex network scenarios. For example, the PXE service and the server are located in different data centers. In this case, the isolation domain can be divided by VXLAN (Virtual Extensible Local Area Network) technology. Specifically, it includes the configuration of the PXE service and the switch port related to VXLAN. The core is to build a logical isolation domain based on the interconnection of physical links, but it requires the additional introduction of a centralized gateway or distributed network management VETP (Virtual Tunnel Endpoints) configuration to build a VXLAN tunnel, and it can be implemented in configuration delivery and rollback.

[0073] The present application provides a network configuration management method, which is applied to a data center operation and maintenance management platform, including: when it is monitored that the data center needs to be configured for network in the current business scenario, obtaining physical link interconnection information between network devices in the data center through a preset hardware management protocol; before the business is issued, the servers in the network devices are grouped, and based on the physical link interconnection information, the configuration is issued to the target port of the switch connected to the network device to obtain a configured port; according to the group to which the server belongs and based on the configured port, the server is divided into different virtual local area networks to construct a logical network isolation domain, and after the business is issued, corresponding business operations are performed on each of the groups based on the logical network isolation domain.

[0074] The beneficial technical effect of the present application is: if there is a need to perform network configuration on the data center to avoid the impact on the network traffic of the data center, considering that the data center operation and maintenance management platform also has the ability to configure network settings, therefore, through the data center operation and maintenance management platform, the preset hardware management protocol is used to manage each network device in the data center to obtain the hardware interconnection information of the network device. Furthermore, before the service is issued, an additional logical network configuration is created based on the physical link interconnection information to build a logical network isolation domain, and the servers are divided into different virtual LANs by grouping to achieve network isolation, and after the service is issued, the corresponding business operations are performed on each group based on the constructed logical network isolation domain. In this way, the impact of the business operations in the current business scenario on the network traffic of the data center can be avoided or reduced. The whole process is fully automated, and the network configuration changes before the service is issued are realized, which is simple and convenient, avoiding the cumbersome and error-prone problems caused by manual operations.

[0075] Based on the above embodiment, this embodiment will specifically explain S11 in the above embodiment. The process of managing the server in the data center through the intelligent platform management interface protocol and managing the switch in the data center through the network configuration protocol to obtain the physical link interconnection information between the server and the switch may include the following steps:

[0076] The servers in the data center are managed through an intelligent platform management interface protocol, so as to obtain the first physical address corresponding to each network card of the plurality of servers in the data center through a corresponding intelligent platform management interface instruction;

[0077] Managing the switch in the data center through a network configuration protocol to obtain a second physical address corresponding to each port of the switch in the data center;

[0078] Physical link interconnection information between the server and the switch is determined based on the first physical address and the second physical address.

[0079] In an embodiment of the present application, the data center operation and maintenance management platform manages the servers and switches of the data center through a variety of conventional hardware management protocols. In a preferred embodiment, the server is managed through the IPMI protocol. Specifically, the MAC address (physical address) information of each network card of the server is obtained based on the IPMI protocol using the corresponding IPMI instructions. It can be understood that in an embodiment of the present application, a simple management protocol is used to manage network devices. However, the MAC address information of each network card of the server can also be obtained by other means, for example, it can also be obtained through the RESTFUL interface. The use of the IPMI protocol is more suitable for the fully automatic scenario of network configuration management in this application and is feasible.

[0080] In another preferred embodiment, the data center operation and maintenance management platform can also manage the switch through protocols such as NETCONF, and specifically, obtain the MAC address of the switch port through the NETCONF protocol. It is understandable that after obtaining the MAC address of the switch port, the MAC address of the opposite end of the switch port can also be obtained according to the MAC address table in the switch.

[0081] Furthermore, since the data center operation and maintenance management platform has already managed the switches and servers in the data center, it can obtain the MAC addresses of each server port through protocols such as IPMI, and can also obtain the MAC information of each switch port through protocols such as NETCONF, so that the platform can obtain the link interconnection relationship of the entire network through analysis. When the server is powered on and the PXE request is initiated, the switch obtains the MAC address of the server port. At this time, the platform can obtain the interconnection diagram topology relationship between the server and the switch through the switch, thereby determining the physical link interconnection information.

[0082] Specifically, after the server is powered on and generates a service request corresponding to the current service scenario, the switch obtains physical link interconnection information between the server and the switch according to an association between the first physical address and the second physical address.

[0083] It can be seen that this application is applicable to data center management software, which can realize partial changes (isolation) and recovery of data center networks based on a variety of simple management protocols. Conventional data center management software can realize the modification and restoration of data center network configuration based on the business life cycle through limited management protocols, while being completely transparent to other business networks, with no impact and simple operation.

[0084] Based on the above embodiments, in a feasible implementation, the NETCONF protocol is used to obtain the relevant information required to build a logical network isolation domain and to send the configuration. Since the NETCONF protocol can support batch configuration sending, transactions and rollback, it is more suitable for overall configuration sending based on the business. At the same time, NETCONF supports locking operations, and the switch device can be locked before the configuration is sent to avoid confusion caused by concurrent modifications to the configuration during the operation. Therefore, the process of sending the configuration to the target port of the switch connected to the network device based on the physical link interconnection information can also include the following steps:

[0085] Based on the physical link interconnection information, locking the switch in the network device through the network configuration protocol;

[0086] The step of sending the configuration to the target port of the switch connected to the network device is triggered, and when the sending of the configuration fails, the configuration of the switch is rolled back.

[0087] In an embodiment of the present application, when the switch is configured using the NETCONF protocol, first, the switch is locked using the NETCONF protocol. Ensure that the switch configuration will not be accidentally modified or deleted during the configuration process, so that complex configurations can be sent down at one time. Secondly, after completing the locking operation, you can continue to configure the switch port mode (such as Access, Trunk, etc.) and apply it to the corresponding port of the switch. If the operation fails during this process, a rollback operation is supported, that is, the configuration of all switches is rolled back. In this way, the complexity of operations when the configuration is sent down and restored can be reduced.

[0088] It is understandable that the management of network devices is achieved by using a simple management protocol in the embodiments of the present application. However, the final configuration delivery and recovery can also be achieved by other means. For example, batch execution of CLI scripts through SSH can also achieve similar effects, depending on the rollback strategy when the CLI batch command fails. However, the use of the NETCONF protocol is more suitable for the fully automatic scenario of network configuration management in this application and is feasible.

[0089] Based on the above embodiment, this embodiment will specifically explain S12 in the above embodiment. In the embodiment of the present application, it is assumed that the network architecture of the data center is a two-level switch architecture, that is, the first-level access switch (leaf switch) is responsible for the access of servers and other devices, and the second-level core switch (backbone switch, spine switch) has the network layer 3 forwarding capability. Figure 2The overall solution information of the present invention is shown. The process of sending the configuration to the target port of the switch connected to the network device based on the physical link interconnection information may include the following steps:

[0090] Based on the physical link interconnection information, a first target port connecting the server to the switch is set to an access mode, and a second target port connecting the pre-boot execution environment service to the switch is set to an aggregation mode.

[0091] In the embodiment of the present application, PXE installation is also taken as an example. The data center management platform software usually needs to provide a PXE service. After the device is started, it will request the PXE service through DHCP. In this process, the ARP (Address Resolution Protocol) broadcast of the second-layer network and the OSPF (Open Shortest Path First) routing exchange in the third-layer network, as well as large-scale data transmission, will be involved. In the large-scale PXE installation scenario, a series of problems including broadcast storms will arise, which will have an impact on the network traffic of the data center.

[0092] In the embodiment of the present application, before the service is issued, the management platform groups the servers and obtains the associated switch port information according to the MAC address of the service network port of the server. Based on the physical link interconnection information between network devices, an additional logical network configuration is created to avoid or mitigate such impacts by isolating the network. Through the analysis of this physical link interconnection information, an additional VLAN configuration is set for the switch in the network device, and the VLAN configuration is performed on the PXE source service at the same time, so that the PXE source service and the server are in an independent isolated network. That is, by issuing the configuration to the target port of the access switch, the configured port is obtained, and the fully automatic configuration issuance is realized.

[0093] For PXE source services, VLAN and VXLAN can be configured through virtual switches; for switches, NETCONF protocol can be used to implement VLAN and VXLAN configuration. Specifically, start configuring the access switch port to which the server network card is connected. Since the management platform can already know the information of the connected switch port based on the MAC information of the server network card, it is necessary to set the corresponding port of the switch to access type (access mode). Since the management platform knows the interconnection topology of all switches, it is necessary to configure the ports connecting the PXE service to the switch as trunk (aggregation mode). At this time, all ports on the link path between the server and the PXE service are configured as trunk, and then the VLAN ID tag to which the PXE service association group belongs is added.

[0094] Specifically, the virtual local area network identification tag corresponding to each group is determined according to the group to which the server belongs, and the pre-boot execution environment service is associated with the virtual local area network identification tag by using a virtual switch.

[0095] exist Figure 2 In the management platform, the PXE service supports horizontal expansion, uses the virtual switch VSWITCH for VLAN isolation configuration, and the platform uses IPMI and NETCONF protocols to manage servers and switches. The overall configuration delivery and recovery also includes group management, VLAN and VXLAN and port configuration, VLANIF (Virtual Local Area NetworkInterface) and ACL (Access Control List) configuration. Figure 3 As shown in the figure, an example is described of using NETCONF to deliver batch configurations to switch ports, including creating two VLANs and VLANIF configurations on the switch. The operations of port VLAN configuration and ACL configuration are similar and will not be given here.

[0096] It can be seen that the configuration is dynamically delivered based on the acquired physical link interconnection information and switch configuration information. The entire process does not require human intervention, and an additional independent configuration is used for the switch, which is transparent to all other services in the network and has no impact.

[0097] It should be pointed out that after the network configuration change before the service is issued, different server groups and corresponding PXE services are divided into different VLANs. After the service is issued, the DHCP request broadcast operation, file issuance operation and system deployment operation of the current group are completed in the isolated VLANs. After the service operation is completed, the management platform again restores the switch VLAN configuration involved in the above steps. At this time, the network device configuration is restored to achieve the same network configuration before and after the service. The whole process is completely transparent to other external services. Specifically, after the service operation is completed, the configuration of the configured port is deleted to perform a configuration recovery operation on the switch.

[0098] In addition, for some complex network scenarios, for example, if the IP range of the data center is constrained, resulting in the PXE service and the server being unable to be assigned to the same IP segment, the two can also be assigned to different VLANs. You can configure VXLAN on the switch to open up the Layer 2 network; at the same time, if the switch has additional ACL access policies, resulting in limited network interconnection, you can also use the NETCONF protocol to modify and restore the corresponding switch configuration to achieve the effect of creating an independent VLAN domain. The principle is that after the platform obtains the physical interconnection topology of the entire network, it only needs to create VLAN isolation logically, and whether the Layer 3 network IP is interconnected and whether the port has an ACL access policy can be directly obtained through conventional protocols such as NETCONF. NETCONF can also make these configuration changes take effect in batches, support transactions, and support locking operations, so only some additional configurations are made.

[0099] Correspondingly, the present application embodiment also discloses a network configuration management device, see Figure 4 As shown, the device comprises:

[0100] The interconnection information acquisition module 11 is used to acquire the physical link interconnection information between the network devices in the data center through a preset hardware management protocol when it is detected that the data center needs to be configured for network in the current business scenario;

[0101] The configuration issuing module 12 is used to group the servers in the network device before issuing the service, and issue the configuration to the target port of the switch connected to the network device based on the physical link interconnection information to obtain the configured port;

[0102] The isolation domain construction module 13 is used to divide the server into different virtual local area networks according to the group to which the server belongs and based on the configured port to construct a logical network isolation domain, and perform corresponding service operations on each group based on the logical network isolation domain after the service is issued.

[0103] Among them, for more specific working processes of the above-mentioned modules, please refer to the corresponding contents disclosed in the aforementioned embodiments, which will not be repeated here.

[0104] It can be seen that the above scheme of this embodiment is applied to the data center operation and maintenance management platform, including: when it is monitored that the data center needs to be configured for network in the current business scenario, the physical link interconnection information between the network devices in the data center is obtained through a preset hardware management protocol; before the service is issued, the servers in the network device are grouped, and based on the physical link interconnection information, the configuration is issued to the target port of the switch connected to the network device to obtain the configured port; according to the group to which the server belongs and based on the configured port, the server is divided into different virtual LANs to construct a logical network isolation domain, and after the service is issued, corresponding business operations are performed on each of the groups based on the logical network isolation domain.

[0105] The beneficial technical effect of the present application is: if there is a need to perform network configuration on the data center to avoid the impact on the network traffic of the data center, considering that the data center operation and maintenance management platform also has the ability to configure network settings, therefore, through the data center operation and maintenance management platform, the preset hardware management protocol is used to manage each network device in the data center to obtain the hardware interconnection information of the network device. Furthermore, before the service is issued, an additional logical network configuration is created based on the physical link interconnection information to build a logical network isolation domain, and the servers are divided into different virtual LANs by grouping to achieve network isolation, and after the service is issued, the corresponding business operations are performed on each group based on the constructed logical network isolation domain. In this way, the impact of the business operations in the current business scenario on the network traffic of the data center can be avoided or reduced. The whole process is fully automated, and the network configuration changes before the service is issued are realized, which is simple and convenient, avoiding the cumbersome and error-prone problems caused by manual operations.

[0106] In a specific implementation, the interconnection information acquisition module 11 is specifically used to:

[0107] The servers in the data center are managed through an intelligent platform management interface protocol, and the switches in the data center are managed through a network configuration protocol to obtain physical link interconnection information between the servers and the switches.

[0108] In a specific implementation, the interconnection information acquisition module 11 includes:

[0109] A first physical address acquisition unit, used to manage the servers in the data center through an intelligent platform management interface protocol, so as to acquire the first physical address corresponding to each network card of the plurality of servers in the data center through a corresponding intelligent platform management interface instruction;

[0110] A second physical address acquisition unit, configured to manage the switch in the data center through a network configuration protocol to acquire a second physical address corresponding to each port of the switch in the data center;

[0111] An interconnection information acquisition unit is used to determine the physical link interconnection information between the server and the switch based on the first physical address and the second physical address.

[0112] In a specific implementation, the interconnection information acquisition unit is specifically used to:

[0113] After the server is powered on and generates a service request corresponding to the current service scenario, the switch obtains physical link interconnection information between the server and the switch according to an association between the first physical address and the second physical address.

[0114] In a specific implementation, the configuration sending module 12 further includes:

[0115] A device locking module, used to lock the switch in the network device through the network configuration protocol based on the physical link interconnection information;

[0116] The configuration rollback module is used to trigger the step of sending the configuration to the target port of the switch connected to the network device, and to roll back the configuration of the switch when the sending of the configuration fails.

[0117] In a specific implementation, the configuration delivery module 12 includes:

[0118] The policy grouping module is used to obtain the grouping policy pre-set for the server and group the servers in the network device according to the grouping policy; wherein the grouping policy includes an average grouping policy and a specified grouping policy.

[0119] In a specific implementation, the policy grouping module is specifically used to:

[0120] When the grouping strategy is the average grouping strategy, the number of groups of the servers is determined according to the total number of the servers in the data center, and the servers are evenly grouped according to the number of groups;

[0121] When the grouping strategy is the specified grouping strategy, the servers connected to the switches in the data center are determined according to the physical link interconnection information, so as to classify the servers connected to the same switch into the same group.

[0122] In a specific implementation, the network configuration management device further includes:

[0123] The configuration recovery module is used to delete the configuration of the configured port after the service operation is completed, so as to perform a configuration recovery operation on the switch.

[0124] In a specific implementation, if the current business scenario is to pre-start the execution environment installation of the server, the configuration delivery module 12 further includes:

[0125] A PXE service providing module, used to determine the current target virtual local area network and provide a corresponding pre-boot execution environment service for the target virtual local area network;

[0126] The horizontal expansion module is used to horizontally expand the pre-start execution environment service based on a virtualized deployment method or a containerized deployment method to provide a corresponding pre-start execution environment service for each virtual local area network.

[0127] In a specific implementation, the configuration sending module 12 is specifically used for:

[0128] Based on the physical link interconnection information, a first target port connecting the server to the switch is set to an access mode, and a second target port connecting the pre-boot execution environment service to the switch is set to an aggregation mode.

[0129] The tag association module is used to determine the virtual local area network identification tag corresponding to each group according to the group to which the server belongs, and associate the pre-start execution environment service with the virtual local area network identification tag by using a virtual switch.

[0130] In a specific implementation, the isolation domain construction module 13 includes:

[0131] The service operation module is used to perform dynamic host configuration protocol request broadcast operation, file distribution operation and system deployment operation on each of the groups in sequence based on the logical network isolation domain after the service is issued.

[0132] Furthermore, the present application also discloses an electronic device. Figure 5 This is a structural diagram of an electronic device 20 according to an exemplary embodiment, and the content in the diagram cannot be considered as any limitation on the scope of use of the present application.

[0133] Figure 5A schematic diagram of the structure of an electronic device 20 provided in an embodiment of the present application. The electronic device 20 may specifically include: at least one processor 21, at least one memory 22, a power supply 23, a communication interface 24, an input / output interface 25, and a communication bus 26. The memory 22 is used to store a computer program, which is loaded and executed by the processor 21 to implement the relevant steps in the network configuration management method disclosed in any of the aforementioned embodiments. In addition, the electronic device 20 in this embodiment may specifically be a server.

[0134] In this embodiment, the power supply 23 is used to provide working voltage for each hardware device on the electronic device 20; the communication interface 24 can create a data transmission channel between the electronic device 20 and the external device, and the communication protocol it follows is any communication protocol that can be applied to the technical solution of the present application, and is not specifically limited here; the input and output interface 25 is used to obtain external input data or output data to the outside world, and its specific interface type can be selected according to specific application needs and is not specifically limited here.

[0135] In addition, the memory 22 as a carrier for resource storage may be a read-only memory, a random access memory, a disk or an optical disk, etc. The resources stored thereon may include an operating system 221, a computer program 222 and data 223, etc. The data 223 may include various data. The storage method may be temporary storage or permanent storage.

[0136] The operating system 221 is used to manage and control the hardware devices on the electronic device 20 and the computer program 222, which can be Windows Server, Netware, Unix, Linux, etc. In addition to including a computer program that can be used to complete the network configuration management method performed by the electronic device 20 disclosed in any of the aforementioned embodiments, the computer program 222 can further include a computer program that can be used to complete other specific tasks.

[0137] Furthermore, the embodiment of the present application also discloses a computer-readable storage medium, wherein the computer-readable storage medium mentioned here includes a random access memory (Random Access Memory, RAM), a memory, a read-only memory (Read-Only Memory, ROM), an electrically programmable ROM, an electrically erasable programmable ROM, a register, a hard disk, a magnetic disk or an optical disk, or any other form of storage medium known in the technical field. Wherein, when the computer program is executed by the processor, the aforementioned network configuration management method is implemented. For the specific steps of the method, reference can be made to the corresponding contents disclosed in the aforementioned embodiment, which will not be repeated here.

[0138] Furthermore, an embodiment of the present application also provides a computer program product, including a computer program / instruction, which implements any one of the above-mentioned network configuration management methods when executed by a processor.

[0139] In this specification, each embodiment is described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the embodiments can be referred to each other. For the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and the relevant parts can be referred to the method part.

[0140] The steps of the network configuration management method or algorithm described in conjunction with the embodiments disclosed herein may be implemented directly using hardware, a software module executed by a processor, or a combination of the two. The software module may be placed in a random access memory (RAM), a memory, a read-only memory (ROM), an electrically programmable ROM, an electrically erasable programmable ROM, a register, a hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art.

[0141] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the presence of other identical elements in the process, method, article or device including the elements.

[0142] The network configuration management method, device, program product and medium provided by the present invention are introduced in detail above. Specific examples are used in this article to illustrate the principles and implementation methods of the present invention. The description of the above embodiments is only used to help understand the method of the present invention and its core idea. At the same time, for those skilled in the art, according to the idea of ​​the present invention, there will be changes in the specific implementation method and application scope. In summary, the content of this specification should not be understood as a limitation on the present invention.

Claims

1. A network configuration management method, characterized in that: Applied to data center operation and maintenance management platform, including: When it is detected that the data center needs to be configured for network in the current business scenario, the physical link interconnection information between the network devices in the data center is obtained through a preset hardware management protocol; Before the service is issued, the servers in the network device are grouped, and configuration is issued to the target port of the switch connected to the network device based on the physical link interconnection information to obtain a configured port; According to the group to which the server belongs and based on the configured ports, the server is divided into different virtual local area networks to construct a logical network isolation domain, and after the service is issued, corresponding service operations are performed on each of the groups based on the logical network isolation domain.

2. The network configuration management method according to claim 1, characterized in that: The obtaining of physical link interconnection information between network devices in the data center through a preset hardware management protocol includes: The servers in the data center are managed through an intelligent platform management interface protocol, and the switches in the data center are managed through a network configuration protocol to obtain physical link interconnection information between the servers and the switches.

3. The network configuration management method according to claim 2, characterized in that: The managing the server in the data center through the intelligent platform management interface protocol and the managing the switch in the data center through the network configuration protocol to obtain the physical link interconnection information between the server and the switch includes: The servers in the data center are managed through an intelligent platform management interface protocol, so as to obtain the first physical address corresponding to each network card of the plurality of servers in the data center through a corresponding intelligent platform management interface instruction; Managing the switch in the data center through a network configuration protocol to obtain a second physical address corresponding to each port of the switch in the data center; Physical link interconnection information between the server and the switch is determined based on the first physical address and the second physical address.

4. The network configuration management method according to claim 3, characterized in that: The determining the physical link interconnection information between the server and the switch based on the first physical address and the second physical address includes: After the server is powered on and generates a service request corresponding to the current service scenario, the switch obtains physical link interconnection information between the server and the switch according to an association between the first physical address and the second physical address.

5. The network configuration management method according to claim 2, characterized in that: The process of sending configuration to the target port of the switch connected to the network device based on the physical link interconnection information also includes: Based on the physical link interconnection information, locking the switch in the network device through the network configuration protocol; The step of sending the configuration to the target port of the switch connected to the network device is triggered, and when the sending of the configuration fails, the configuration of the switch is rolled back.

6. The network configuration management method according to claim 1, characterized in that: The grouping of the servers in the network device comprises: Acquire a grouping strategy pre-set for the server, and group the servers in the network device according to the grouping strategy; wherein the grouping strategy includes an average grouping strategy and a specified grouping strategy.

7. The network configuration management method according to claim 6, characterized in that: The grouping of the servers in the network device according to the grouping strategy includes: When the grouping strategy is the average grouping strategy, the number of groups of the servers is determined according to the total number of the servers in the data center, and the servers are evenly grouped according to the number of groups; When the grouping strategy is the specified grouping strategy, the servers connected to the switches in the data center are determined according to the physical link interconnection information, so as to classify the servers connected to the same switch into the same group.

8. The network configuration management method according to claim 1, characterized in that: After the service is issued, after performing corresponding service operations on each of the groups based on the logical network isolation domain, the method further includes: After the service operation is completed, the configuration of the configured port is deleted to perform a configuration recovery operation on the switch.

9. The network configuration management method according to any one of claims 1 to 8, characterized in that: If the current business scenario is to pre-start the execution environment installation of the server, the process of grouping the servers in the network device and sending the configuration to the target port of the switch connected to the network device based on the physical link interconnection information also includes: Determine the current target virtual local area network, and provide a corresponding pre-start execution environment service for the target virtual local area network; The pre-start execution environment service is horizontally expanded based on a virtualized deployment mode or a containerized deployment mode to provide a corresponding pre-start execution environment service for each virtual local area network.

10. The network configuration management method according to claim 9, characterized in that: Sending a configuration to a target port of a switch connected to the network device based on the physical link interconnection information includes: Based on the physical link interconnection information, a first target port connecting the server to the switch is set to an access mode, and a second target port connecting the pre-boot execution environment service to the switch is set to an aggregation mode.

11. The network configuration management method according to claim 10, characterized in that: After the second target port connecting the pre-boot execution environment service to the switch is set to aggregation mode, the method further includes: The virtual local area network identification tag corresponding to each group is determined according to the group to which the server belongs, and the pre-start execution environment service is associated with the virtual local area network identification tag by using a virtual switch.

12. The network configuration management method according to claim 9, characterized in that: After the service is issued, corresponding service operations are performed on each of the groups based on the logical network isolation domain, including: After the service is issued, based on the logical network isolation domain, a dynamic host configuration protocol request broadcast operation, a file issuance operation and a system deployment operation are sequentially performed on each of the groups.

13. An electronic device, characterized in that: include: Memory for storing computer programs; A processor, configured to load and execute the computer program to implement the network configuration management method according to any one of claims 1 to 12.

14. A computer program product comprising a computer program / instructions, characterized in that When the computer program / instructions are executed by a processor, the steps of the network configuration management method according to any one of claims 1 to 12 are implemented.

15. A computer-readable storage medium, characterized in that: Used to store computer programs; wherein the computer program, when executed by a processor, implements the network configuration management method according to any one of claims 1 to 12.

Images