Remote operation and maintenance method, related device, equipment, system and storage medium

Abstract

The invention discloses a remote operation and maintenance method, a related device, equipment, a system and a storage medium, and the method comprises the steps: creating an operation and maintenance project for a delivery project at an operation and maintenance platform, and creating a mapping relation between different operation and maintenance projects and different proxy gateways in a network where the operation and maintenance platform is located; receiving identification marks sent by the probe programs in the hosts; and in response to detection of triggering an operation and maintenance instruction for any identification identifier, selecting the identification identifier of the triggered operation and maintenance instruction as a target identifier, calling the hyperterminal based on the target identifier and the mapping relationship, and connecting the hyperterminal to a client cluster where the target agent is located so as to perform remote operation and maintenance on a host to which the target identifier belongs through remote communication, wherein the target agent is an agent gateway, and a mapping relation exists between the operation and maintenance item created for the delivery item where the host to which the target identifier belongs and the target agent. According to the scheme, the safety and success rate of remote operation and maintenance can be improved.

Description

Technical Field

[0001] The present application relates to the field of remote operation and maintenance technology, and in particular to a remote operation and maintenance method and related devices, equipment, systems and storage media. Background Art

[0002] As projects are delivered, operation and maintenance issues also arise. In order to avoid the need for operation and maintenance personnel to rush to the project site for operation and maintenance every time an operation and maintenance requirement is required, technologies such as bastion hosts are currently commonly used to achieve remote operation and maintenance.

[0003] Taking the use of bastion hosts to achieve remote operation and maintenance as an example, the bastion host logically separates the operation and maintenance personnel from the target host, and establishes a management mode from "operation and maintenance personnel->bastion host user account->authorization->target device account->target device". However, the use of existing technologies such as bastion hosts to achieve remote operation and maintenance inevitably requires the username and password of the target host, so there are security risks. In addition, when the IP address of the target host changes dynamically, it will also affect remote access, resulting in remote operation and maintenance failure. In view of this, how to improve the security and success rate of remote operation and maintenance has become an urgent problem to be solved. Summary of the invention

[0004] The main technical problem solved by the present application is to provide a remote operation and maintenance method and related devices, equipment, systems and storage media, which can improve the security and success rate of remote operation and maintenance.

[0005] In order to solve the above-mentioned technical problems, the first aspect of the present application provides a remote operation and maintenance method, including: creating an operation and maintenance project for a delivery project on an operation and maintenance platform, and creating a mapping relationship between different operation and maintenance projects and different proxy gateways in the network where the operation and maintenance platform is located; wherein different proxy gateways are respectively configured in different client clusters, and different client clusters communicate remotely with different delivery projects, and each host in the delivery project is installed and runs a probe program, and the probe program generates an identification identifier of the host; receiving identification identifiers sent by the probe program in each host respectively; in response to detecting that an operation and maintenance instruction is triggered for any identification identifier, selecting the identification identifier of the triggered operation and maintenance instruction as the target identifier, and calling the super terminal based on the target identifier and the mapping relationship, connecting to the client cluster where the target agent is located, so as to perform remote operation and maintenance on the host to which the target identifier belongs through remote communication; wherein the target agent is a proxy gateway, and there is a mapping relationship between the operation and maintenance project created for the delivery project where the host to which the target identifier belongs is located and the target agent.

[0006] In order to solve the above technical problems, the second aspect of the present application provides a remote operation and maintenance device, including: a creation module, a receiving module and a connection module, the creation module is used to create an operation and maintenance project for a delivery project on an operation and maintenance platform, and create a mapping relationship between different operation and maintenance projects and different proxy gateways in the network where the operation and maintenance platform is located; wherein different proxy gateways are respectively configured in different client clusters, and different client clusters communicate remotely with different delivery projects. Each host in the delivery project is installed and runs a probe program, and the probe program generates an identification identifier of the host; the receiving module is used to receive the identification identifier sent by the probe program in each host respectively; the connection module is used to respond to the detection of an operation and maintenance instruction being triggered for any identification identifier, select the identification identifier of the triggered operation and maintenance instruction as the target identifier, and call the super terminal based on the target identifier and the mapping relationship, and connect to the client cluster where the target agent is located, so as to perform remote operation and maintenance on the host to which the target identifier belongs through remote communication; wherein the target agent is a proxy gateway, and there is a mapping relationship between the operation and maintenance project created for the delivery project to which the host to which the target identifier belongs and the target agent.

[0007] In order to solve the above technical problems, the third aspect of the present application provides an electronic device, which at least includes a memory and a processor coupled to each other, the memory at least stores program instructions, and the processor is used to execute the program instructions to implement the remote operation and maintenance method in the above first aspect.

[0008] In order to solve the above-mentioned technical problems, the fourth aspect of the present application provides a remote operation and maintenance system, including an operation and maintenance terminal and a transit terminal that are communicatively connected to each other, the operation and maintenance terminal is used to log in to an operation and maintenance platform that has created an operation and maintenance project, the transit terminal is configured with a client cluster, and the client cluster is configured with at least a proxy gateway and a VPN client, the VPN client is used to maintain a VPN connection with the VPN server in the delivery project, the proxy gateway is used to deliver the project through a heartbeat based on the VPN connection to maintain traffic fluctuations between the delivery project, and the operation and maintenance terminal is the electronic device in the above-mentioned third aspect.

[0009] In order to solve the above technical problems, the fifth aspect of the present application provides a computer-readable storage medium, which stores program instructions that can be executed by a processor, and the program instructions are used to implement the remote operation and maintenance method of the first aspect above.

[0010] The above scheme creates an operation and maintenance project for the delivery project on the operation and maintenance platform, and creates a mapping relationship between different operation and maintenance projects and different proxy gateways in the network where the operation and maintenance platform is located. Different proxy gateways are respectively configured in different client clusters. Different client clusters communicate remotely with different delivery projects. Each host in the delivery project is installed with a probe program. The probe program generates an identification identifier of the host, and then receives identification identifiers sent by the probe program in each host. In response to detecting that an operation and maintenance instruction is triggered for any identification identifier, the identification identifier of the triggered operation and maintenance instruction is selected as the target identifier, and the super terminal is called based on the target identifier and the mapping relationship, and connected to the client cluster where the target agent is located, so as to perform remote operation and maintenance on the host to which the target identifier belongs through remote communication. The target agent is the proxy gateway , there is a mapping relationship between the operation and maintenance project created for the interactive project where the host to which the target identifier belongs is located and the target agent. Therefore, on the one hand, in remote operation and maintenance, the identification identifier generated by the probe program is used instead of the user name and password, and the client cluster is used instead of the bastion host, which can avoid using the user name and password in the remote operation and maintenance process, and help improve the security of remote operation and maintenance. On the other hand, due to the remote communication between different client clusters and different delivery projects, a mapping relationship is created between different operation and maintenance projects and different agents in the network where the operation and maintenance platform is located, and when initiating remote operation and maintenance, it relies on the identification identifier generated by the probe program for the host rather than the network address of the host, so it can minimize the negative impact of dynamic changes in the network address of the target host on remote access, which helps to improve the success rate of remote operation and maintenance. Therefore, it can improve the security and success rate of remote operation and maintenance. BRIEF DESCRIPTION OF THE DRAWINGS

[0011] Figure 1 This is a flowchart of an embodiment of the remote operation and maintenance method of the present application; Figure 2a This is a process diagram of an embodiment of the remote operation and maintenance method of the present application; Figure 2b is a schematic diagram of an embodiment of a browser interface; Figure 2c is a schematic diagram of an embodiment of a heartbeat flow maintenance connection; Figure 2d This is a process diagram of an embodiment of the remote operation and maintenance method of the present application; Figure 2e It is a process diagram of another embodiment of the remote operation and maintenance method of the present application; Figure 3 It is a schematic diagram of the framework of an embodiment of the remote operation and maintenance device of the present application; Figure 4 It is a schematic diagram of the framework of an embodiment of the electronic device of the present application; Figure 5 It is a schematic diagram of the framework of an embodiment of the remote operation and maintenance system of the present application; Figure 6 It is a schematic diagram of a framework of an embodiment of a computer-readable storage medium of the present application. DETAILED DESCRIPTION

[0012] The scheme of the embodiment of the present application is described in detail below in conjunction with the drawings of the specification.

[0013] In the following description, for the purpose of explanation rather than limitation, specific details such as specific system structures, interfaces, and technologies are provided to facilitate a thorough understanding of the present application.

[0014] The terms "system" and "network" are often used interchangeably in this article. The term "and / or" in this article is only a description of the association relationship of associated objects, indicating that there can be three relationships. For example, A and / or B can mean: A exists alone, A and B exist at the same time, and B exists alone. In addition, the fragment " / " in this article generally indicates that the associated objects before and after are in an "or" relationship. In addition, "many" in this article means two or more than two.

[0015] See also Figure 1 , Figure 1 This is a flowchart of an embodiment of the remote operation and maintenance method of the present application. Specifically, it may include the following steps: Step S11: creating an operation and maintenance project for the delivery project on the operation and maintenance platform, and creating a mapping relationship between different operation and maintenance projects and different proxy gateways in the network where the operation and maintenance platform is located.

[0016] In one implementation scenario, the operation and maintenance platform may include but is not limited to iOPS, etc., and the operation and maintenance platform is not limited here. In addition, the operation and maintenance terminal can be connected to the operation and maintenance platform in communication to support related creation or other operations on the operation and maintenance platform. It should be noted that the operation and maintenance terminal is set locally on the operation and maintenance platform, that is, the operation and maintenance terminal can be directly connected to the operation and maintenance platform through a network cable or other connection method; or, the operation and maintenance terminal can also be set up in a different place from the operation and maintenance platform, that is, the operation and maintenance terminal can be set up in the same internal network as the operation and maintenance platform (such as in the group network). The specific connection method of the operation and maintenance terminal is not limited here. As a possible example, the operation and maintenance terminal can establish a connection with the operation and maintenance platform through a browser, such as entering the network address of the operation and maintenance platform in the address bar of the browser, and can also configure the user name, password and other configuration information for logging in to the operation and maintenance platform for the operation and maintenance personnel, so as to log in to the operation and maintenance platform through the above configuration information at the operation and maintenance terminal. The above example is only a possible example of the operation and maintenance terminal logging in to the operation and maintenance platform, and does not limit other possible ways to log in to the operation and maintenance platform, and will not be given examples one by one here.

[0017] In an implementation scenario, a delivery project refers to a related project delivered by a customer, and at least one host may be deployed in the delivery project. For example, host A1 and host A2 are deployed in delivery project A, and host B1 and host B2 are deployed in delivery project B. Examples are not given one by one here. In addition, different delivery projects may belong to the same customer, or may belong to different customers, or some delivery projects may belong to the same customer and some may belong to different customers. The specific ownership of the delivery projects is not limited here.

[0018] In one implementation scenario, an operation and maintenance project may be created on the operation and maintenance platform for each delivery project. For example, taking the example that different delivery projects include delivery project A and delivery project B, operation and maintenance project A may be created on the operation and maintenance platform for delivery project A, and operation and maintenance project B may be created on the operation and maintenance platform for delivery project B. Other scenarios may be deduced in the same way, and examples are not given one by one here.

[0019] In one implementation scenario, in order to facilitate remote operation and maintenance of the operation and maintenance terminal, a transit terminal can also be deployed in the network where the operation and maintenance platform is located (such as the aforementioned group network). A client cluster can be configured on the transit terminal, and different client clusters can be configured for different delivery projects. A proxy gateway can be configured in each client cluster to maintain traffic fluctuations through similar heartbeat delivery projects. Still taking the example that different delivery projects include delivery project A and delivery project B, as mentioned above, operation and maintenance project A and operation and maintenance project B can be created on the operation and maintenance platform. Accordingly, client cluster A and client cluster B can be configured in the transit terminal, and a mapping relationship between the proxy gateway in client cluster A and operation and maintenance project A can be created, and a mapping relationship between the proxy gateway in client cluster B and operation and maintenance project B can be created. Of course, the above example is only a possible example of the mapping relationship when different delivery projects include delivery project A and delivery project B, and other possible situations will not be given one by one here.

[0020] In the disclosed embodiment, as described above, different proxy gateways are respectively configured in different client clusters. In addition, different client clusters communicate remotely with different delivery projects. As a possible example, each client cluster can also be configured with a VPN client, and VPN clients in different client clusters maintain VPN connections with VPN servers in different delivery projects, and VPN servers in the delivery projects communicate with each host. For ease of description, taking the example of different delivery projects including delivery project A and delivery project B, client cluster A communicates remotely with delivery project A, and client cluster B communicates remotely with delivery project B. Among them, client cluster A can be configured with a VPN client, maintain a VPN connection with the VPN server in delivery project A, and communicate with each host in delivery project A; similarly, client cluster B can be configured with a VPN client, maintain a VPN connection with the VPN server in interactive project B, and the VPN server in delivery project B communicates with each host in delivery project B. Of course, the above constraint example is only a possible example of remote communication between client clusters and delivery projects, and other possible ways to achieve remote communication are not limited here, and examples are not given one by one here.

[0021] In the disclosed embodiments, each host in the delivery project can be installed and run with a probe program, and the probe program generates an identification mark of the host. As a possible example, the probe program can collect the configuration information of the host, and generate an identification mark (i.e., ID) of the host based on the collected configuration information to distinguish between the hosts in different delivery projects. It should be noted that the configuration information may include, but is not limited to: MAC address, serial number, delivery project, etc., and the specific content of the configuration information is not limited here.

[0022] In one implementation scenario, as a possible implementation method, an installation instruction for deploying a probe program in a delivery project for an operation and maintenance project may be obtained, and after each host in the delivery project runs the installation command, the probe program is downloaded, installed, and run to generate an identification mark. Exemplarily, a procurement and control platform may be provided in the operation and maintenance platform. After the operation and maintenance project is created, the installation instruction for deploying a probe program in a delivery project for the operation and maintenance project may be obtained from the procurement and control platform, and the installation instruction may be remotely sent to each host in the delivery project, so that each host runs the installation instruction, and the probe program can be downloaded from the procurement and control platform or the source address specified in the installation instruction, and the probe program is installed and run after the download is complete. In the above method, the installation command for deploying a probe program in a delivery project for an operation and maintenance project is obtained, and after each host in the delivery project runs the installation command, the probe program is downloaded, installed, and run to generate an identification mark, which can improve the convenience of installing the probe program for each host in the delivery project.

[0023] In another implementation scenario, different from the aforementioned implementation, as another possible implementation, the operation and maintenance personnel or other relevant personnel can also directly input the installation instructions on each host of the delivery project after obtaining the installation instructions, so that each host can run the installation instructions, and download the probe program from the acquisition and control platform or the source address specified in the installation instructions, and install and run the probe program after the download is complete. Of course, in the case where the operation and maintenance personnel or other relevant personnel are supported to directly input the installation instructions on each host of the delivery project, the operation and maintenance personnel or other relevant personnel can also obtain the installation package of the probe program offline, and the operation and maintenance personnel or other relevant personnel can directly import the installation package of the probe program on each host of the delivery project, so that each host can directly install and run the probe program.

[0024] Step S12: receiving identification marks sent by the probe programs in each host.

[0025] In an implementation scenario, please refer to Figure 2a , Figure 2a This is a process diagram of an embodiment of the remote operation and maintenance method of the present application. Figure 2a As shown, after the configuration management database creates an operation and maintenance project for the delivery project, the installation instructions can be obtained from the acquisition and control platform, and the installation instructions can be run on the host of the delivery project to install and run the probe program in the host of the delivery project. After this, the probe program in the host can generate the host's identification mark and feed back the host's identification mark to the operation and maintenance platform. As a possible example, still taking different delivery projects including delivery project A and delivery project B as an example, after the host A1 of delivery project A installs and runs the probe program, it can return the identification mark of host A1 (such as A1). Similarly, after the host A2 of delivery project A installs and runs the probe program, it can return the identification mark of host A2 (such as A2). The host B1, host B2, etc. in delivery project B can be deduced by analogy and return the corresponding identification mark. Other situations can be deduced by analogy, and examples are not given one by one here. Of course, the above specific example of the identification mark is only a possible example in the actual application process, and other strings can also be used. For example, a specific function (such as existing functions such as hash functions, or other custom functions, etc.) can be used to process the host based on the delivery project where the host is located, the host's MAC address and other configuration information to obtain the host's identification identifier. In addition, after receiving the identification identifier, the identification identifier can also be classified into the corresponding operation and maintenance project according to the network segment where the host sending the identification identifier is located. Of course, the host can also send a related identifier used to identify the delivery project to which it is located together with the identification identifier, so that the operation and maintenance platform can classify the identification identifier into the corresponding operation and maintenance project. It should be noted that the above examples are only a few possible examples of classifying identification identifiers into operation and maintenance projects, and other possible methods are not limited to this, and no examples will be given one by one here.

[0026] In one implementation scenario, in addition to returning an identification mark, the probe program can also collect monitoring data of the host where it is located. In other words, it is also possible to receive monitoring data sent by the probe program in each host, and the monitoring data includes at least one of the resource configuration parameters and resource occupancy rate of the host. It should be noted that the operation and maintenance platform can collect the above monitoring data. As a possible example, the operation and maintenance platform can automatically formulate an operation and maintenance plan for the host based on the above monitoring data. Of course, the above example is only one possible application method for collecting monitoring data, and other possible application methods are not limited here, and no examples are given one by one here.

[0027] Step S13: In response to detecting that an operation and maintenance instruction is triggered for any identification identifier, the identification identifier of the triggered operation and maintenance instruction is selected as the target identifier, and the hyperterminal is called based on the target identifier and the mapping relationship, and connected to the client cluster where the target agent is located, so as to perform remote operation and maintenance on the host to which the target identifier belongs through remote communication.

[0028] In one implementation scenario, as mentioned above, the operation and maintenance personnel or other relevant personnel can perform remote operation and maintenance through the operation and maintenance terminal. For example, the operation and maintenance platform can be logged in through the browser of the operation and maintenance terminal, and the browser can display the operation and maintenance projects. Figure 2b , Figure 2b Schematic diagram of an embodiment of a browser interface. Figure 2b As shown, you can enter the network address "XXX.XXX.XXX.XXX" of the operation and maintenance platform in the address bar of the browser, select the corresponding operation and maintenance project, and select the identification identifier of the host for which remote operation and maintenance needs to be initiated in the operation and maintenance project to initiate the operation and maintenance instruction, and select the identification identifier of the triggered operation and maintenance instruction as the target identifier.

[0029] In one implementation scenario, a super terminal may also be configured in the operation and maintenance project. In this case, in response to a browser initiating a long connection request that at least includes an operation and maintenance instruction, the super terminal in the operation and maintenance project where the host to which the target identifier belongs is located may be selected as the target terminal, and a long connection may be established with the target terminal through the browser, that is, at this time, the browser in the operation and maintenance terminal may establish a long connection with the super terminal in the operation and maintenance project. From then on, the operation and maintenance personnel or other relevant personnel may issue various operation and maintenance instructions or other instructions on the browser, which may all be transmitted on their behalf by the super terminal in the operation and maintenance project. It should be noted that a long connection is a connection method different from a short connection. For its specific meaning, please refer to the technical details of the long connection, which will not be repeated here. In the above method, a super terminal is configured in the operation and maintenance project, and the operation and maintenance project is displayed in the browser. In response to the browser's long connection request that at least contains operation and maintenance instructions, the super terminal in the operation and maintenance project where the host to which the target identifier belongs is located is selected as the target terminal, and then a long connection is established between the browser and the target terminal. This enables the operation and maintenance of different hosts in different delivery projects to be orderly handed over to different super terminals in different operation and maintenance projects for transmission. Operation and maintenance personnel or other relevant personnel only need to face browser operations without having to worry about the background, which helps to improve the orderliness and convenience of remote operation and maintenance.

[0030] In an implementation scenario, please refer to Figure 2c , Figure 2c Schematic diagram of an embodiment of maintaining connection by heartbeat traffic. As mentioned above, each client cluster is also configured with a VPN client, VPN clients in different client clusters maintain VPN connections with VPN servers in different delivery projects, and VPN servers in the delivery projects communicate with each host. Figure 2c As shown, VPN client A in client cluster A maintains a VPN connection with VPN server A in delivery project A, and VPN client B in client cluster B maintains a VPN connection with VPN server B in delivery project B. Figure 2c As shown in the figure, after applying for the machine, the administrator can first install the VPN client in the client cluster, and based on the configuration information of the VPN server in the delivery project corresponding to the client cluster, log in to the VPN client in the client cluster to maintain a VPN connection with the VPN server in the corresponding delivery project, so as to log in to the delivery project network (i.e. Figure 2cAs shown in the external network), the proxy gateway in the client cluster corresponds to the delivery project through the heartbeat based on the VPN connection, and maintains the traffic fluctuation between the corresponding delivery project. Then the proxy gateway can be installed in the client cluster, and as mentioned above, a project can be created in the super terminal and the mapping relationship between the project and the proxy gateway can be configured. On this basis, it can support operation and maintenance personnel or other relevant personnel to initiate login. In the above method, according to the proxy gateway and VPN client in the client cluster, based on the configuration information of the VPN server in the delivery project corresponding to the client cluster, log in to the VPN client in the client cluster to maintain the VPN connection with the VPN server in the corresponding delivery project, and the proxy gateway in the client cluster corresponds to the delivery project through the heartbeat based on the VPN connection, and maintains the traffic fluctuation between the corresponding delivery project, so it can achieve remote operation and maintenance by establishing a communication link of "proxy gateway-VPN client-VPN server-host".

[0031] In the disclosed embodiment, the target proxy is a proxy gateway, and there is a mapping relationship between the operation and maintenance project created for the delivery project where the host to which the target identifier belongs is located and the target proxy. Still taking the example of different delivery projects including delivery project A and delivery project B, an operation and maintenance project A is created for delivery project A, and an operation and maintenance project B is created for delivery project B. For target identifier A1, its host (i.e., host A1) is located in delivery project A1, and there is a mapping relationship between the operation and maintenance project A created for delivery project A1 and the proxy gateway A. Therefore, for target identifier A, the target proxy can be determined to be proxy gateway A. Of course, the above example is only one possible scenario for determining the target proxy when different delivery projects include delivery project A and delivery project B. Other possible scenarios are not limited here, and examples are not given one by one here.

[0032] In an implementation scenario, please refer to Figure 2d , Figure 2d This is a process diagram of an embodiment of the remote operation and maintenance method of the present application. Figure 2d As shown, as mentioned above, after the operation and maintenance personnel or other relevant personnel log in to the operation and maintenance platform through the browser at the operation and maintenance terminal, they can initiate a long connection request containing at least the operation and maintenance instructions, and through the pre-configured proxy relationship, the browser and the super terminal establish a long connection, and then through the network relationship to which the host belongs, forward it to the designated gateway service to implement the protocol forwarding to the target host.

[0033] In an implementation scenario, please refer to Figure 2e , Figure 2e This is a process diagram of another embodiment of the remote operation and maintenance method of the present application. Figure 2eAs shown, the hyperterminal can be called to connect to the VPN client in the client cluster where the target proxy is located through the target proxy, to connect to the VPN server through the VPN client, and to connect to the host to which the target identifier in the delivery project belongs through the VPN server.

[0034] In one implementation scenario, after remotely connecting to the host to which the target identification belongs (i.e., the target host), the hyperterminal can be called to log in to the target host in the delivery project using the target identification to perform remote operation and maintenance on the target host. Exemplarily, the target host can parse the identification identifier transmitted together with the operation and maintenance instructions to determine whether remote operation and maintenance is allowed. As a possible example, the probe program in the target host can parse the target identification, such as using the relevant algorithm for generating the target identification to parse the target identification to obtain the configuration information when the target identification is generated, and compare it with the configuration information of the host where it is located. If the comparison is consistent, it can be determined that remote operation and maintenance is allowed, that is, the operation and maintenance instructions can be allowed to be executed locally. Otherwise, it can be determined that remote operation and maintenance is rejected, that is, the operation and maintenance instructions can be rejected to run locally, thereby further improving the security of remote operation and maintenance.

[0035] The above scheme creates an operation and maintenance project for the delivery project on the operation and maintenance platform, and creates a mapping relationship between different operation and maintenance projects and different proxy gateways in the network where the operation and maintenance platform is located. Different proxy gateways are respectively configured in different client clusters. Different client clusters communicate remotely with different delivery projects. Each host in the delivery project is installed with a probe program. The probe program generates an identification identifier of the host, and then receives identification identifiers sent by the probe program in each host. In response to detecting that an operation and maintenance instruction is triggered for any identification identifier, the identification identifier of the triggered operation and maintenance instruction is selected as the target identifier, and the super terminal is called based on the target identifier and the mapping relationship, and connected to the client cluster where the target agent is located, so as to perform remote operation and maintenance on the host to which the target identifier belongs through remote communication. The target agent is the proxy gateway , there is a mapping relationship between the operation and maintenance project created for the interactive project where the host to which the target identifier belongs is located and the target agent. Therefore, on the one hand, in remote operation and maintenance, the identification identifier generated by the probe program is used instead of the user name and password, and the client cluster is used instead of the bastion host, which can avoid using the user name and password in the remote operation and maintenance process, and help improve the security of remote operation and maintenance. On the other hand, due to the remote communication between different client clusters and different delivery projects, a mapping relationship is created between different operation and maintenance projects and different agents in the network where the operation and maintenance platform is located, and when initiating remote operation and maintenance, it relies on the identification identifier generated by the probe program for the host rather than the network address of the host, so it can minimize the negative impact of dynamic changes in the network address of the target host on remote access, which helps to improve the success rate of remote operation and maintenance. Therefore, it can improve the security and success rate of remote operation and maintenance.

[0036] See also Figure 3 , Figure 3 It is a schematic diagram of a framework of an embodiment of a remote operation and maintenance device of the present application. The remote operation and maintenance device 30 includes: a creation module 31, a receiving module 32 and a connection module 33, wherein the creation module 31 is used to create an operation and maintenance project for a delivery project on an operation and maintenance platform, and to create a mapping relationship between different operation and maintenance projects and different proxy gateways in the network where the operation and maintenance platform is located; wherein different proxy gateways are respectively configured in different client clusters, and different client clusters communicate remotely with different delivery projects, and each host in the delivery project is installed and runs a probe program, and the probe program generates an identification identifier of the host; the receiving module 32 is used to receive the identification identifiers sent by the probe programs in each host; the connection module 33 is used to respond to the detection of triggering an operation and maintenance instruction for any identification identifier, select the identification identifier of the triggered operation and maintenance instruction as the target identifier, and call the hyperterminal based on the target identifier and the mapping relationship, and connect to the client cluster where the target agent is located, so as to remotely operate and maintain the host to which the target identifier belongs through remote communication; wherein the target agent is a proxy gateway, and there is a mapping relationship between the operation and maintenance project created for the delivery project to which the host to which the target identifier belongs and the target agent.

[0037] In the above scheme, the remote operation and maintenance device 30 creates an operation and maintenance project for the delivery project on the operation and maintenance platform, and creates a mapping relationship between different operation and maintenance projects and different proxy gateways in the network where the operation and maintenance platform is located, and different proxy gateways are respectively configured in different client clusters. Different client clusters communicate remotely with different delivery projects. Each host in the delivery project is installed with a probe program. The probe program generates an identification identifier of the host, and then receives the identification identifiers sent by the probe programs in each host respectively, so as to respond to the detection of the triggering of an operation and maintenance instruction for any identification identifier, select the identification identifier of the triggered operation and maintenance instruction as the target identifier, and call the super terminal based on the target identifier and the mapping relationship, and connect to the client cluster where the target agent is located, so as to perform remote operation and maintenance on the host to which the target identifier belongs through remote communication. The target agent is The proxy gateway has a mapping relationship between the operation and maintenance project created by the interactive project where the host to which the target identifier belongs is located and the target proxy. Therefore, on the one hand, in remote operation and maintenance, the identification identifier generated by the probe program is used instead of the user name and password, and the client cluster is used instead of the bastion host, which can avoid using the user name and password in the remote operation and maintenance process, and help improve the security of remote operation and maintenance. On the other hand, due to the remote communication between different client clusters and different delivery projects, a mapping relationship is created between different operation and maintenance projects and different agents in the network where the operation and maintenance platform is located, and when initiating remote operation and maintenance, it relies on the identification identifier generated by the probe program for the host rather than the network address of the host, so it can minimize the negative impact of dynamic changes in the network address of the target host on remote access, which helps to improve the success rate of remote operation and maintenance. Therefore, the security and success rate of remote operation and maintenance can be improved.

[0038] In some disclosed embodiments, the remote operation and maintenance device 30 includes an acquisition module for acquiring an installation command for deploying a probe program in a delivery project for an operation and maintenance project; wherein, after each host in the delivery project runs the installation command, it downloads, installs and runs the probe program to generate an identification mark.

[0039] In some disclosed embodiments, the connection module 33 is specifically used to call the hyperterminal to log in to the target host in the delivery project using the target identifier to perform remote operation and maintenance on the target host; wherein the target host is the host to which the target identifier belongs.

[0040] In some disclosed embodiments, the remote operation and maintenance device 30 includes a monitoring module for receiving monitoring data sent by probe programs in each host respectively; wherein the monitoring data includes at least one of resource configuration parameters and resource occupancy rate of the host.

[0041] In some public embodiments, a super terminal is configured in the operation and maintenance project, and the operation and maintenance project is displayed in a browser. The remote operation and maintenance device 30 includes an establishment module for responding to a long connection request initiated by the browser that at least includes an operation and maintenance instruction, selecting the super terminal in the operation and maintenance project where the host to which the target identifier belongs is located as the target terminal, and establishing a long connection with the target terminal through the browser.

[0042] In some disclosed embodiments, each client cluster is also configured with a VPN client, and VPN clients in different client clusters maintain VPN connections with VPN servers in different delivery projects, and the VPN server in the delivery project maintains a communication connection with each host.

[0043] In some disclosed embodiments, the remote operation and maintenance device 30 includes an installation module for installing a proxy gateway and a VPN client in a client cluster; the remote operation and maintenance device 30 includes a login module for logging into the VPN client in the client cluster based on the configuration information of the VPN server in the delivery project corresponding to the client cluster, so as to maintain a VPN connection with the VPN server in the corresponding delivery project; wherein the proxy gateway in the client cluster maintains traffic fluctuations with the corresponding delivery project through a heartbeat based on the VPN connection.

[0044] In some disclosed embodiments, the remote operation and maintenance device 30 includes a calling module for calling a super terminal through a target agent to connect to a VPN client in a client cluster where the target agent is located, so as to connect to a VPN server through VPN, and connect to a host to which a target identifier in a delivery project belongs through the VPN server.

[0045] See also Figure 4 , Figure 4It is a schematic diagram of the framework of an embodiment of an electronic device of the present application. The electronic device 40 includes at least a memory 41 and a processor 42 coupled to each other, the memory 41 stores at least program instructions, and the processor 42 is used to execute the program instructions to implement the steps in any of the above-mentioned remote operation and maintenance method embodiments. For details, please refer to the aforementioned disclosed embodiments, which will not be repeated here. As a possible example, the electronic device 40 may include but is not limited to a server, etc., and the specific type of the electronic device 40 is not limited here.

[0046] Specifically, the processor 42 is used to control itself and the memory 41 to implement the steps in any of the above-mentioned remote operation and maintenance method embodiments. The processor 42 can also be called a CPU (Central Processing Unit). The processor 42 may be an integrated circuit chip with signal processing capabilities. The processor 42 can also be a general-purpose processor, a digital signal processor (Digital Signal Processor, DSP), an application-specific integrated circuit (Application Specific Integrated Circuit, ASIC), a field-programmable gate array (Field-Programmable Gate Array, FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components. The general-purpose processor can be a microprocessor or the processor can also be any conventional processor, etc. In addition, the processor 42 can be implemented by an integrated circuit chip.

[0047] In the above scheme, the electronic device 40 creates an operation and maintenance project for the delivery project on the operation and maintenance platform, and creates a mapping relationship between different operation and maintenance projects and different proxy gateways in the network where the operation and maintenance platform is located, and different proxy gateways are respectively configured in different client clusters. Different client clusters communicate remotely with different delivery projects. Each host in the delivery project is installed with a probe program. The probe program generates an identification identifier of the host, and then receives the identification identifiers sent by the probe programs in each host respectively, so as to respond to the detection of the triggering of an operation and maintenance instruction for any identification identifier, select the identification identifier of the triggered operation and maintenance instruction as the target identifier, and call the super terminal based on the target identifier and the mapping relationship, and connect to the client cluster where the target agent is located, so as to perform remote operation and maintenance on the host to which the target identifier belongs through remote communication. The target agent is the agent. There is a mapping relationship between the operation and maintenance project created by the interactive project where the host to which the target identifier belongs and the target agent. Therefore, on the one hand, in remote operation and maintenance, the identification identifier generated by the probe program is used instead of the user name and password, and the client cluster is used instead of the bastion host, which can avoid using the user name and password in the remote operation and maintenance process, and help improve the security of remote operation and maintenance. On the other hand, due to the remote communication between different client clusters and different delivery projects, a mapping relationship is created between different operation and maintenance projects and different agents in the network where the operation and maintenance platform is located, and when initiating remote operation and maintenance, it relies on the identification identifier generated by the probe program for the host rather than the network address of the host, so it can minimize the negative impact of dynamic changes in the network address of the target host on remote access, which helps to improve the success rate of remote operation and maintenance. Therefore, the security and success rate of remote operation and maintenance can be improved.

[0048] See also Figure 5 , Figure 5 It is a schematic diagram of the framework of an embodiment of the remote operation and maintenance system of the present application. The remote operation and maintenance system 50 includes: an operation and maintenance terminal 51 and a transfer terminal 52 that are connected to each other in communication, the operation and maintenance terminal 51 is used to log in to the operation and maintenance platform 53 that has created the operation and maintenance project, the transfer terminal 52 is configured with a client cluster (not shown), and the client cluster is configured with at least a proxy gateway and a VPN client, the VPN client is used to maintain a VPN connection with the VPN server in the delivery project (not shown), and the proxy gateway is used to deliver the project through the heartbeat based on the VPN connection to maintain the traffic fluctuation between the delivery project, and the operation and maintenance terminal is the electronic device in the above-mentioned electronic device embodiment 51, and the details can be referred to the above-mentioned related description, which will not be repeated here.

[0049] The above scheme, on the one hand, replaces the user name and password with the identification identifier generated by the probe program in remote operation and maintenance, and replaces the bastion host with the client cluster, which can avoid the use of user names and passwords in the remote operation and maintenance process, and help improve the security of remote operation and maintenance. On the other hand, due to the remote communication between different client clusters and different delivery projects, a mapping relationship is created between different operation and maintenance projects and different agents in the network where the operation and maintenance platform is located, and when initiating remote operation and maintenance, it relies on the identification identifier generated by the probe program for the host rather than the network address of the host, so it can minimize the negative impact of dynamic changes in the network address of the target host on remote access, which helps to improve the success rate of remote operation and maintenance. Therefore, the security and success rate of remote operation and maintenance can be improved.

[0050] See also Figure 6 , Figure 6 The computer-readable storage medium 60 stores program instructions 61 that can be executed by a processor, and the program instructions 61 are used to implement the steps in any of the above-mentioned remote operation and maintenance method embodiments.

[0051] In the above scheme, the computer-readable storage medium 60 replaces the user name and password with the identification identifier generated by the probe program in remote operation and maintenance, and replaces the bastion host with the client cluster, which can avoid the use of the user name and password in the remote operation and maintenance process, and helps to improve the security of remote operation and maintenance. On the other hand, due to the remote communication between different client clusters and different delivery projects, a mapping relationship is created between different operation and maintenance projects and different agents in the network where the operation and maintenance platform is located, and when initiating remote operation and maintenance, it relies on the identification identifier generated by the probe program for the host rather than the network address of the host, so it can minimize the negative impact of the dynamic change of the network address of the target host on remote access, which helps to improve the success rate of remote operation and maintenance. Therefore, the security and success rate of remote operation and maintenance can be improved.

[0052] In some embodiments, the functions or modules included in the device provided by the embodiments of the present disclosure can be used to execute the method described in the above method embodiments. The specific implementation can refer to the description of the above method embodiments, and for the sake of brevity, it will not be repeated here.

[0053] The above description of various embodiments tends to emphasize the differences between the various embodiments. The same or similar aspects can be referenced to each other, and for the sake of brevity, they will not be repeated herein.

[0054] In the several embodiments provided in the present application, it should be understood that the disclosed methods and devices can be implemented in other ways. For example, the device implementation described above is only schematic. For example, the division of modules or units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, and the indirect coupling or communication connection of devices or units can be electrical, mechanical or other forms.

[0055] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0056] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0057] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions to enable a computer device (which can be a personal computer, server, or network device, etc.) or a processor to execute all or part of the steps of each implementation method of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk and other media that can store program code.

[0058] If the technical solution of this application involves personal information, the product using the technical solution of this application has clearly informed the personal information processing rules and obtained the individual's voluntary consent before processing the personal information. If the technical solution of this application involves sensitive personal information, the product using the technical solution of this application has obtained the individual's separate consent before processing the sensitive personal information, and at the same time meets the "explicit consent" requirement. For example, on personal information collection devices such as cameras, clear and prominent signs are set to inform that the personal information collection scope has been entered and personal information will be collected. If the individual voluntarily enters the collection scope, it is deemed that he or she agrees to the collection of his or her personal information; or on the device that processes personal information, the personal information processing rules are notified by obvious signs / information, and the individual's authorization is obtained through pop-up information or by asking the individual to upload his or her personal information; among them, the personal information processing rules may include information such as the personal information processor, the purpose of personal information processing, the processing method, and the type of personal information processed.

Claims

1. A remote operation and maintenance method, characterized in that: include: An operation and maintenance project is created for the delivery project on the operation and maintenance platform, and a mapping relationship is created between different operation and maintenance projects and different proxy gateways in the network where the operation and maintenance platform is located; wherein different proxy gateways are respectively configured in different client clusters, and different client clusters communicate remotely with different delivery projects, and each host in the delivery project is installed and runs a probe program, and the probe program generates an identification mark of the host; Receiving identification identifiers sent by the probe programs in the respective hosts; In response to detecting that an operation and maintenance instruction is triggered for any of the identification identifiers, the identification identifier that triggers the operation and maintenance instruction is selected as the target identifier, and the super terminal is called based on the target identifier and the mapping relationship to connect to the client cluster where the target agent is located, so as to perform remote operation and maintenance on the host to which the target identifier belongs through the remote communication; wherein the target agent is the agent gateway, and there is the mapping relationship between the operation and maintenance project created for the delivery project where the host to which the target identifier belongs is located and the target agent.

2. The method according to claim 1, characterized in that Before receiving the identification identifiers sent by the probe programs in the respective hosts, the method further includes: Obtain an installation command for deploying the probe program in the delivery project for the operation and maintenance project; wherein, after each host in the delivery project runs the installation command, it downloads, installs and runs the probe program to generate the identification mark.

3. The method according to claim 1, characterized in that: The remote operation and maintenance of the host corresponding to the target identifier through the remote communication includes: The hyperterminal is called to log in to the target host in the delivery project using the target identifier, so as to perform remote operation and maintenance on the target host; wherein the target host is the host to which the target identifier belongs.

4. The method according to claim 1, characterized in that: The method further comprises: Receive monitoring data sent by the probe program in each of the hosts; wherein the monitoring data includes at least one of resource configuration parameters and resource occupancy rate of the host.

5. The method according to claim 1, characterized in that The super terminal is configured in the operation and maintenance project, and the operation and maintenance project is displayed on a browser, and the method further includes: In response to the browser initiating a persistent connection request at least including the operation and maintenance instruction, the hyper terminal in the operation and maintenance project where the host to which the target identifier belongs is located is selected as the target terminal, and a persistent connection is established with the target terminal through the browser.

6. The method according to any one of claims 1 to 5, characterized in that: Each of the client clusters is also respectively configured with a VPN client, the VPN clients in different client clusters maintain VPN connections with VPN servers in different delivery projects, and the VPN servers in the delivery projects are communicated with each host.

7. The method according to claim 6, characterized in that The method further comprises: Installing the proxy gateway and the VPN client in the client cluster; Based on the configuration information of the VPN server in the delivery project corresponding to the client cluster, log in to the VPN client in the client cluster to maintain a VPN connection with the VPN server in the delivery project; Wherein, the proxy gateway in the client cluster corresponds to the delivery item through a heartbeat based on the VPN connection, and maintains traffic fluctuations corresponding to the delivery item.

8. The method according to claim 6, characterized in that The method further comprises: The hyperterminal is called to connect to the VPN client in the client cluster where the target proxy is located through the target proxy, so as to connect to the VPN server through the VPN, and to connect to the host to which the target identifier in the delivery project belongs through the VPN server.

9. A remote operation and maintenance device, characterized in that: include: A creation module is used to create an operation and maintenance project for a delivery project on an operation and maintenance platform, and to create a mapping relationship between different operation and maintenance projects and different proxy gateways in the network where the operation and maintenance platform is located; wherein different proxy gateways are respectively configured in different client clusters, and different client clusters communicate remotely with different delivery projects, and each host in the delivery project is installed and runs a probe program, and the probe program generates an identification mark of the host; A receiving module, used for receiving identification marks sent by the probe programs in the respective hosts; A connection module is used to select the identification identifier that triggers the operation and maintenance instruction as the target identifier in response to detecting that an operation and maintenance instruction is triggered for any of the identification identifiers, and to call the super terminal based on the target identifier and the mapping relationship to connect to the client cluster where the target agent is located, so as to perform remote operation and maintenance on the host to which the target identifier belongs through the remote communication; wherein the target agent is the agent gateway, and there is the mapping relationship between the operation and maintenance project created for the delivery project where the host to which the target identifier belongs is located and the target agent.

10. An electronic device, characterized in that: The system at least comprises a memory and a processor coupled to each other, wherein the memory at least stores program instructions, and the processor is used to execute the program instructions to implement the remote operation and maintenance method according to any one of claims 1 to 8.

11. A remote operation and maintenance system, characterized in that: It includes an operation and maintenance terminal and a transfer terminal which are communicatively connected to each other, the operation and maintenance terminal is used to log in to an operation and maintenance platform on which an operation and maintenance project is created, the transfer terminal is configured with a client cluster, the client cluster is configured with at least a proxy gateway and a VPN client, the VPN client is used to maintain a VPN connection with a VPN server in a delivery project, the proxy gateway is used to deliver the project through heartbeat based on the VPN connection to maintain traffic fluctuations with the delivery project, and the operation and maintenance terminal is the electronic device as described in claim 10.

12. A computer-readable storage medium, characterized in that: Program instructions that can be executed by a processor are stored, and the program instructions are used to implement the remote operation and maintenance method described in any one of claims 1 to 8.

Images