Distributed control system, capacity expansion method and device thereof, electronic equipment and storage medium

Abstract

The invention discloses a distributed control system and a capacity expansion method and device thereof, electronic equipment and a storage medium, and the distributed control system is applied to a non-security-level application scene in a nuclear power plant. The distributed control system comprises a management network used for providing management services, a cluster communication network connected with the management network, a system network connected with the cluster communication network, a clock source and a server cluster. The clock source is respectively connected with the trunking communication network and the system network and is used for providing a unified clock signal for the trunking communication network and the system network; the server cluster comprises a plurality of server nodes, and the number of the server nodes can be configured according to requirements of users. According to the method and the device, the requirement of frequent rapid expansion of nuclear power can be met, when the service load is increased, system performance reduction and insufficient resource utilization can be avoided, and the requirement of further increasing of future businesses can be met.

Description

Technical Field

[0001] The present application relates to the field of automation control technology, and more specifically, to a distributed control system and a capacity expansion method, device, electronic device and storage medium thereof. Background Art

[0002] As a key control system in nuclear power plants, the stability and reliability of non-safety DCS (Distributed Control System) are crucial to the operation of the entire nuclear power plant. The current architecture of non-safety DCS in nuclear power plants is a distributed architecture based on master-slave redundancy, which includes 1 master server and 1 slave server. The master server is responsible for task processing, while the slave server is a backup. Under normal circumstances, only the master server processes tasks. When the master server fails, the slave server switches to the master server to take over the task processing work. The switching process is automatically realized without intervention.

[0003] Due to the limitations of the master-slave architecture, when business demand grows, it cannot meet the needs of rapid expansion, and the service load is too high, resulting in performance degradation and insufficient resource utilization. This not only limits the development space of the nuclear power plant and the ability to respond to emergencies, but also cannot adapt to the needs of further business growth in the future. Summary of the invention

[0004] In view of this, the present application provides a distributed control system and its expansion method, device, electronic device and storage medium, which are used to meet the needs of application scenarios for rapid system expansion.

[0005] In order to achieve the above objectives, the proposed solution is as follows:

[0006] A distributed control system is applied to non-safety-level application scenarios in nuclear power plants, the distributed control system comprising a management network for providing management services, a cluster communication network connected to the management network, a system network connected to the cluster communication network, a clock source and a server cluster, wherein:

[0007] The clock source is connected to the cluster communication network and the system network respectively, and is used to provide a unified clock signal to the cluster communication network and the system network;

[0008] The server cluster includes multiple server nodes, and the number of the server nodes can be configured according to user needs.

[0009] Optionally, the management network is used to provide remote access and control to various systems and equipment in the nuclear power plant, and is connected to an engineer station, an operator station and external equipment.

[0010] Optionally, the system network is responsible for implementing real-time monitoring and control functions of various non-safety-level systems to ensure the safe and stable operation of the nuclear power plant, and is connected to a control station.

[0011] Optionally, the server node includes a service container and a plurality of microservices encapsulated in the service container.

[0012] Optionally, the server cluster includes a container service module, the multiple server nodes and a virtual machine management platform.

[0013] The container service module is used to encapsulate the software tasks required for the nuclear power non-safety level services required by the nuclear power plant in the service container;

[0014] The virtual machine management platform is used to implement node registration and publishing, load balancing, node configuration and node monitoring for the multiple server nodes.

[0015] A capacity expansion method is applied to the distributed control system as described above, and the capacity expansion method comprises the steps of:

[0016] Reasonably configure multiple server nodes, and reasonably configure the traffic strategy of each server node to achieve load balancing;

[0017] In response to the user's request for capacity expansion, a container image is created, the operating environment parameters of the container image are configured, the software task of the service to be expanded is encapsulated in an independent container, and the containerized software task is started and deployed on the newly added server node.

[0018] Optionally, the capacity expansion method further includes the steps of:

[0019] When a server node fails, the failed server node is removed from the server cluster, and the tasks on the failed server are transferred to other server nodes that are operating normally.

[0020] A capacity expansion device is applied to the distributed control system as described above, and the capacity expansion device comprises:

[0021] A node configuration module is configured to reasonably configure multiple server nodes and reasonably configure the traffic strategy of each server node to achieve load balancing;

[0022] The capacity expansion execution module is configured to respond to the user's capacity expansion request, create a container image, configure the operating environment parameters of the container image, encapsulate the software task of the service to be expanded in an independent container, start the containerized software task and deploy it on the newly added server node.

[0023] Optionally, the capacity expansion device further includes:

[0024] The task transfer module is configured to remove a failed server node from the server cluster when a server node fails, and transfer the tasks on the failed server to other server nodes that are operating normally.

[0025] An electronic device, comprising at least one processor and a memory connected to the processor, wherein:

[0026] The memory is used to store computer programs or instructions;

[0027] The processor is used to execute the computer program or instruction so that the electronic device can implement the capacity expansion method as described above.

[0028] A computer-readable storage medium is applied to an electronic device, wherein the storage medium carries one or more computer programs, and the one or more computer programs can be executed by the electronic device, so that the electronic device implements the capacity expansion method as described above.

[0029] It can be seen from the above technical solutions that the present application discloses a distributed control system and its expansion method, device, electronic device and storage medium. The distributed control system is applied to non-safety-level application scenarios in nuclear power plants. The distributed control system includes a management network for providing management services, a cluster communication network connected to the management network, a system network connected to the cluster communication network, a clock source and a server cluster. The clock source is connected to the cluster communication network and the system network respectively, and is used to provide a unified clock signal to the cluster communication network and the system network; the server cluster includes multiple server nodes, and the number of server nodes can be configured according to user needs. The present application can meet the needs of rapid expansion of nuclear power. When the service load increases, it can avoid system performance degradation and insufficient resource utilization, and can adapt to the needs of further business growth in the future. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0031] Figure 1 A schematic diagram of a microservice architecture;

[0032] Figure 2 A schematic diagram of a distributed control system according to an embodiment of the present application;

[0033] Figure 3 A flow chart of a capacity expansion method according to an embodiment of the present application;

[0034] Figure 4 A flowchart of another capacity expansion method according to an embodiment of the present application;

[0035] Figure 5 A block diagram of a capacity expansion device according to an embodiment of the present application;

[0036] Figure 6 A block diagram of another capacity expansion device according to an embodiment of the present application;

[0037] Figure 7 A block diagram of an electronic device according to an embodiment of the present application. DETAILED DESCRIPTION

[0038] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0039] In the microservice architecture, each microservice runs in its own virtualized environment as an independent entity with its own database and business logic, such as Figure 1 As shown in the figure, it can be found that the microservice architecture is essentially a distributed system, and compared with the traditional distributed system, the service granularity is smaller and the data is more diversified. The communication between microservices is complex and functional interactions are often required across nodes, which makes the communication between microservices an important issue. Microservices need unified protocols and interfaces for synchronous and asynchronous communication. In addition, the deployment of each subtask in the distributed system requires unified management and scheduling services, and fault tolerance and elasticity must also be considered.

[0040] In the microservice architecture, each microservice runs in its own virtualized environment as an independent entity with its own database and business logic. It can be seen that the microservice architecture is essentially a distributed system, and compared with the traditional distributed system, the service granularity is smaller and the data is more diversified. The communication between microservices is complex and functional interactions are often required across nodes, which makes the communication between microservices an important issue. Microservices need unified protocols and interfaces for synchronous and asynchronous communication.

[0041] On this basis, this application provides a microservice-based nuclear power non-safety-level distributed control system, such as Figure 2As shown, the distributed control system of the present application includes a management network 10, a cluster communication network 20 connected to the management network, and a system network 30 connected to the cluster communication network. In addition, it also includes a clock source 40 and a server cluster 50, the clock source is connected to the cluster communication network and the system network respectively, and the server cluster is connected to the cluster communication network.

[0042] The management network is used to provide remote access and control of various systems and equipment in the nuclear power plant. It connects the engineer station, operator station and cluster communication network;

[0043] The cluster communication network is responsible for service communication and data flow, including RPC communication, load balancing, failover, etc. It is used to unify the protocol of business network communication in the server cluster, and supports a unified protocol that is multi-platform, scalable, and automatically generates protocol code in the form of IDL (Interface Definition Language), which is the basis for expansion.

[0044] The server cluster connected to the cluster communication network includes multiple server nodes to achieve scalability in the future, and the number of server nodes can be configured according to user needs.

[0045] The system network is responsible for realizing real-time monitoring and control functions of various non-safety-level systems, ensuring the safe and stable operation of nuclear power plants, and connecting multiple control stations.

[0046] The expansion of the control system must first consider the time synchronization and data consistency of the software tasks after the expansion. In terms of theoretical technology, NTP (Network Time Protocol) is a protocol for synchronizing computer clocks. One or more NTP time tasks can be set as time sources. NTP time tasks obtain time from an external reliable time source and distribute it to the entire network. The clock source in this application is used to provide a unified clock signal.

[0047] Each server node includes a server container and multiple microservices encapsulated in the server node. In server cluster technology, microservices is an architectural pattern that splits an application into multiple small services, including three parts: ① Communication services and data flows, responsible for RPC communication, load balancing, failover, etc., are the basis of high availability and real-time performance. ② Basic services, responsible for unified state perception, log collection, etc., to achieve software task operation and maintenance. ③ Service management, responsible for service registration discovery, scheduling management, etc. It is the basis for software task expansion.

[0048] Each server cluster includes a container service module and multiple server nodes and a virtual machine management platform as described above.

[0049] The container service module is used to encapsulate each software task of the non-safety-level DCS server of nuclear power in an independent container. Each container has the minimum library and executable file required for the software task, making each container a self-contained package. This encapsulation method provides service isolation, allowing each service to run independently without interfering with each other. In the server cluster, a software task can be updated and deployed separately without affecting other services, and horizontal expansion can be performed according to demand.

[0050] The virtual machine management module can quickly create and shut down virtual machines, which makes the deployment and expansion of each node container in the server cluster simple and fast. When you need to add a new server cluster node container or expand the processing power of a server software task, you only need to create a new virtual machine or adjust the resource allocation of the virtual machine on the virtual machine management platform. In addition, the virtual machine management platform can also be used to uniformly manage the server cluster, provide start, stop, release, monitoring and other functions, and receive the heartbeat reported by the cluster node to support elastic expansion.

[0051] It can be seen from the above technical solution that this embodiment provides a distributed control system, which is applied to non-safety-level application scenarios in nuclear power plants. The distributed control system includes a management network for providing management services, a cluster communication network connected to the management network, a system network connected to the cluster communication network, a clock source and a server cluster. The clock source is connected to the cluster communication network and the system network, respectively, and is used to provide a unified clock signal to the cluster communication network and the system network; the server cluster includes multiple server nodes, and the number of server nodes can be configured according to user needs. The present application can meet the needs of rapid expansion of nuclear power. When the service load increases, it can avoid system performance degradation and insufficient resource utilization, and can adapt to the needs of further business growth in the future.

[0052] Figure 3 The present invention is a flowchart of a capacity expansion method according to an embodiment of the present application.

[0053] like Figure 3 As shown, the capacity expansion method provided in this embodiment is applied to an electronic device, and is used to control the distributed control system provided in the above embodiment to implement capacity expansion operations, so as to meet the demand for control services when the load of the nuclear power plant increases. The electronic device can be understood as a computer, server or cloud platform with data calculation and information processing capabilities. The capacity expansion method specifically includes the following steps:

[0054] S1. Reasonably configure multiple server nodes.

[0055] Under the premise that the distributed control system has multiple server nodes, ensure that there are sufficient hardware resources to support the operation of the increased server tasks. Connect the server cluster through the cluster communication network, distribute the requests from the control station and the host computer (engineer station / operator station, etc.) to multiple servers for processing, and reasonably configure the traffic strategy to achieve load balancing.

[0056] S3. Create a container image and configure the operating environment parameters of the container image.

[0057] When users or systems need to expand capacity, we respond to users' expansion requests, create container images, and configure the operating environment parameters of container images, such as network settings and storage volumes. We encapsulate the software tasks of the services to be expanded in an independent container, start and deploy the containerized software tasks on the newly added server nodes, and their updates and deployments do not affect the operation of other services. Using a virtualization software management platform, we start and deploy these containerized software tasks on the newly added expansion nodes of the server, thereby achieving the full online process of server expansion of nuclear power non-safety-level distributed control systems.

[0058] It can be seen from the above technical scheme that this embodiment provides a capacity expansion method, which is applied to the distributed control system of the above embodiment. The capacity expansion method is to reasonably configure multiple server nodes and reasonably configure the traffic strategy of each server node to achieve load balancing; respond to the user's capacity expansion request, create a container image, configure the operating environment parameters of the container image, encapsulate the software task to be expanded in an independent container, and start and deploy the containerized software task on the newly added server node. Through the above operations, the server capacity expansion of the non-safety-level distributed control system of nuclear power can be achieved.

[0059] In addition, in a specific implementation of the present application, the following steps are also included: Figure 4 shown.

[0060] S2. Remove the failed server node.

[0061] The so-called faulty server node refers to a server node that has some kind of fault. When a server node fails, the cluster communication network can remove it from the server cluster and transfer the tasks on the server node to other normal server nodes. Through the virtual machine management platform, the registration, configuration and release of new server nodes are completed to obtain the newly added nodes for server expansion.

[0062] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present disclosure. In this regard, each square box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the module, the program segment or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some implementations as replacements, the functions marked in the square box can also occur in a sequence different from that marked in the accompanying drawings. For example, two square boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each square box in the block diagram and / or flow chart, and the combination of the square boxes in the block diagram and / or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0063] Although operations are depicted in a particular order, this should not be understood as requiring that the operations be performed in the particular order shown or in a sequential order.Multitasking and parallel processing may be advantageous under certain circumstances.

[0064] It should be understood that the various steps described in the method embodiments of the present disclosure may be performed in different orders and / or in parallel. In addition, the method embodiments may include additional steps and / or omit the steps shown. The scope of the present disclosure is not limited in this respect.

[0065] Computer program code for performing the operations of the present disclosure may be written in one or more programming languages ​​or a combination thereof, including, but not limited to, object-oriented programming languages, such as Java, Smalltalk, C++, and conventional procedural programming languages, such as C or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In cases involving a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer.

[0066] Figure 5 A block diagram of a capacity expansion device according to an embodiment of the present application.

[0067] like Figure 5As shown, the expansion device provided in this embodiment is applied to an electronic device, and is used to control the distributed control system provided in the above embodiment to implement the expansion operation, so as to meet the demand for control services when the load of the nuclear power plant increases. The electronic device can be understood as a computer, server or cloud platform with data calculation and information processing capabilities. The expansion device specifically includes a node configuration module 60 and an expansion execution module 80.

[0068] The node configuration module is used to reasonably configure multiple server nodes.

[0069] Under the premise that the distributed control system has multiple server nodes, ensure that there are sufficient hardware resources to support the operation of the increased server tasks. Connect the server cluster through the cluster communication network, distribute the requests from the control station and the host computer (engineer station / operator station, etc.) to multiple servers for processing, and reasonably configure the traffic strategy to achieve load balancing.

[0070] The expansion execution module is used to create a container image and configure the operating environment parameters of the container image.

[0071] When users or systems need to expand capacity, we respond to users' expansion requests, create container images, and configure the operating environment parameters of container images, such as network settings and storage volumes. We encapsulate the software tasks of the services to be expanded in an independent container, start and deploy the containerized software tasks on the newly added server nodes, and their updates and deployments do not affect the operation of other services. Using a virtualization software management platform, we start and deploy these containerized software tasks on the newly added expansion nodes of the server, thereby achieving the full online process of server expansion of nuclear power non-safety-level distributed control systems.

[0072] It can be seen from the above technical scheme that this embodiment provides a capacity expansion device, which is applied to the distributed control system of the above embodiment. The capacity expansion method is to reasonably configure multiple server nodes and reasonably configure the traffic strategy of each server node to achieve load balancing; respond to the user's capacity expansion request, create a container image, configure the operating environment parameters of the container image, encapsulate the software task to be expanded in an independent container, and start and deploy the containerized software task on the newly added server node. Through the above operations, the server capacity expansion of the non-safety-level distributed control system of nuclear power can be achieved.

[0073] In addition, in a specific implementation of the present application, the capacity expansion device further includes a task transfer module 70, such as Figure 6 shown.

[0074] The task transfer module is used to remove the failed server node and transfer the current task.

[0075] The so-called faulty server node refers to a server node that has some kind of fault. When a server node fails, the cluster communication network can remove it from the server cluster and transfer the tasks on the server node to other normal server nodes. Through the virtual machine management platform, the registration, configuration and release of new server nodes are completed to obtain the newly added nodes for server expansion.

[0076] The units involved in the embodiments described in the present disclosure may be implemented by software or hardware. The name of a unit does not limit the unit itself in some cases. For example, the first acquisition unit may also be described as a "unit for acquiring at least two Internet Protocol addresses".

[0077] The functions described above herein may be performed at least in part by one or more hardware logic components. For example, without limitation, exemplary types of hardware logic components that may be used include: field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), complex programmable logic devices (CPLDs), and the like.

[0078] Figure 7 A block diagram of an electronic device according to an embodiment of the present application.

[0079] Reference below Figure 7 , which shows a schematic diagram of the structure of an electronic device suitable for implementing the embodiments of the present disclosure. The terminal device in the embodiments of the present disclosure may include, but is not limited to, mobile terminals such as mobile phones, laptop computers, digital broadcast receivers, PDAs (personal digital assistants), PADs (tablet computers), PMPs (portable multimedia players), vehicle-mounted terminals (such as vehicle-mounted navigation terminals), etc., and fixed terminals such as digital TVs, desktop computers, etc. The electronic device is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present disclosure.

[0080] The electronic device may include a processing device (e.g., a central processing unit, a graphics processing unit, etc.) 601, which can perform various appropriate actions and processes according to a program stored in a read-only memory ROM 602 or a program loaded from an input device 606 into a random access memory RAM 603. In the RAM, various programs and data required for the operation of the electronic device are also stored. The processing device, ROM, and RAM are connected to each other via a bus 604. An input / output (I / O) interface 605 is also connected to the bus 604.

[0081] Typically, the following devices may be connected to the I / O interface: input devices including, for example, a touch screen, a touchpad, a keyboard, a mouse, a camera, a microphone, an accelerometer, a gyroscope, etc.; output devices 607 including, for example, a liquid crystal display (LCD), a speaker, a vibrator, etc.; storage devices 608 including, for example, a magnetic tape, a hard disk, etc.; and communication devices 609. The communication device 609 may allow the electronic device to communicate with other devices wirelessly or by wire to exchange data. Although the figure shows an electronic device with various devices, it should be understood that it is not required to implement or have all the devices shown. More or fewer devices may be implemented or have alternatively.

[0082] This embodiment also provides an embodiment of a computer-readable storage medium.

[0083] The computer-readable storage medium is applied to an electronic device and carries one or more computer programs. When the one or more computer programs are executed by the electronic device, the electronic device can reasonably configure multiple server nodes and reasonably configure the traffic strategy of each server node to achieve load balancing; respond to the user's expansion request, create a container image, configure the operating environment parameters of the container image, encapsulate the software tasks of the service to be expanded in an independent container, start the containerized software tasks and deploy them on the newly added server nodes. Through the above operations, the server expansion of the non-safety-level distributed control system of nuclear power can be achieved.

[0084] It should be noted that the computer-readable medium disclosed above may be a computer-readable signal medium or a computer-readable storage medium or any combination of the above two. The computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above.

[0085] In the present disclosure, a computer-readable storage medium may be any tangible medium containing or storing a program that may be used by or in combination with an instruction execution system, apparatus, or device. In the present disclosure, a computer-readable signal medium may include a data signal propagated in a baseband or as part of a carrier wave, which carries a computer-readable program code. Such propagated data signals may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. A computer-readable signal medium may also be any computer-readable medium other than a computer-readable storage medium, which may send, propagate, or transmit a program for use by or in combination with an instruction execution system, apparatus, or device. The program code contained on the computer-readable medium may be transmitted using any suitable medium, including but not limited to: wires, optical cables, RF (radio frequency), etc., or any suitable combination of the above.

[0086] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.

[0087] Although the preferred embodiments of the present invention have been described, those skilled in the art may make additional changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the embodiments of the present invention.

[0088] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or terminal device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or terminal device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or terminal device including the elements.

[0089] The technical solution provided by the present invention is introduced in detail above. Specific examples are used in this article to illustrate the principle and implementation mode of the present invention. The description of the above embodiments is only used to help understand the method of the present invention and its core idea. At the same time, for those skilled in the art, according to the idea of ​​the present invention, there will be changes in the specific implementation mode and application scope. In summary, the content of this specification should not be understood as limiting the present invention.

Claims

1. A distributed control system, applied to non-safety-level application scenarios in nuclear power plants, characterized in that: The distributed control system includes a management network for providing management services, a cluster communication network connected to the management network, a system network connected to the cluster communication network, a clock source and a server cluster, wherein: The clock source is connected to the cluster communication network and the system network respectively, and is used to provide a unified clock signal to the cluster communication network and the system network; The server cluster includes multiple server nodes, and the number of the server nodes can be configured according to user needs.

2. The distributed control system according to claim 1, characterized in that: The management network is used to provide remote access and control to various systems and equipment in the nuclear power plant, and is connected to an engineer station, an operator station and external equipment.

3. The distributed control system according to claim 1, characterized in that: The system network is responsible for implementing real-time monitoring and control functions of various non-safety-level systems to ensure the safe and stable operation of the nuclear power plant, and is connected to a control station.

4. The distributed control system according to claim 1, characterized in that: The server node includes a service container and a plurality of microservices encapsulated in the service container.

5. The distributed control system according to claim 4, characterized in that: The server cluster includes a container service module, the plurality of server nodes and a virtual machine management platform, wherein: The container service module is used to encapsulate the software tasks required for the nuclear power non-safety level services required by the nuclear power plant in the service container; The virtual machine management platform is used to implement node registration and publishing, load balancing, node configuration and node monitoring for the multiple server nodes.

6. A capacity expansion method, applied to the distributed control system according to any one of claims 1 to 5, characterized in that: The capacity expansion method comprises the steps of: Reasonably configure multiple server nodes, and reasonably configure the traffic strategy of each server node to achieve load balancing; In response to the user's request for capacity expansion, a container image is created, the operating environment parameters of the container image are configured, the software task of the service to be expanded is encapsulated in an independent container, and the containerized software task is started and deployed on the newly added server node.

7. The capacity expansion method according to claim 6, characterized in that: The capacity expansion method further comprises the steps of: When a server node fails, the failed server node is removed from the server cluster, and the tasks on the failed server are transferred to other server nodes that are operating normally.

8. A capacity expansion device, applied to the distributed control system according to any one of claims 1 to 5, characterized in that: The capacity expansion device comprises: A node configuration module is configured to reasonably configure multiple server nodes and reasonably configure the traffic strategy of each server node to achieve load balancing; The capacity expansion execution module is configured to respond to the user's capacity expansion request, create a container image, configure the operating environment parameters of the container image, encapsulate the software task of the service to be expanded in an independent container, start the containerized software task and deploy it on the newly added server node.

9. The capacity expansion device according to claim 6, characterized in that: The capacity expansion device also includes: The task transfer module is configured to remove a failed server node from the server cluster when a server node fails, and transfer the tasks on the failed server to other server nodes that are operating normally.

10. An electronic device, characterized in that: The electronic device comprises at least one processor and a memory connected to the processor, wherein: The memory is used to store computer programs or instructions; The processor is used to execute the computer program or instruction so that the electronic device implements the capacity expansion method as claimed in claim 6 or 7.

11. A computer-readable storage medium, applied to an electronic device, characterized in that: The storage medium carries one or more computer programs, and the one or more computer programs can be executed by the electronic device, so that the electronic device implements the capacity expansion method as claimed in claim 6 or 7.

Images