Remote operation and maintenance method and related device, equipment, system and storage medium

Abstract

The application discloses a remote operation and maintenance method and related devices, equipment, systems and storage media, wherein the remote operation and maintenance method comprises: creating an operation and maintenance project for a delivery project on an operation and maintenance platform, and creating a mapping relationship between different operation and maintenance projects and different proxy gateways in a network where the operation and maintenance platform is located; receiving identification marks respectively sent by probe programs in each host; in response to detecting that an operation and maintenance instruction is triggered for any identification mark, selecting the identification mark of the triggered operation and maintenance instruction as a target mark, and calling a super terminal based on the target mark and the mapping relationship to connect to a client cluster where a target proxy is located, so as to remotely operate and maintain a host to which the target mark belongs through remote communication; wherein the target proxy is a proxy gateway, and a mapping relationship exists between the operation and maintenance project created for the delivery project to which the host to which the target mark belongs belongs and the target proxy. The above scheme can improve the security and success rate of remote operation and maintenance.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of remote operation and maintenance, in particular to a remote operation and maintenance method and related device, equipment, system and storage medium. BACKGROUND

[0002] With the delivery of a project, operation and maintenance problems also come along. In order to avoid the operation and maintenance personnel to rush to the project site for operation and maintenance in each operation and maintenance demand, currently, remote operation and maintenance is usually achieved by using technologies such as bastion host.

[0003] Taking the use of bastion host to achieve remote operation and maintenance as an example, the bastion host logically isolates the operation and maintenance personnel from the target host, and establishes a management mode from "operation and maintenance personnel -> bastion host user account -> authorization -> target device account -> target device". However, the use of bastion host and other existing technologies to achieve remote operation and maintenance inevitably requires the username and password of the target host, and therefore there is a security risk. In addition, when the IP of the target host changes dynamically, it will also affect remote access, resulting in failure of remote operation and maintenance. Therefore, how to improve the security and success rate of remote operation and maintenance has become a problem to be solved. SUMMARY

[0004] The technical problem solved by the present application is to provide a remote operation and maintenance method and related device, equipment, system and storage medium, which can improve the security and success rate of remote operation and maintenance.

[0005] In order to solve the above technical problem, the first aspect of the present application provides a remote operation and maintenance method, comprising: creating an operation and maintenance project for a delivered project on an operation and maintenance platform, and creating a mapping relationship between different operation and maintenance projects and different proxy gateways in a network where the operation and maintenance platform is located; wherein the different proxy gateways are respectively configured in different client clusters, the different client clusters remotely communicate with different delivered projects, each host in the delivered project is installed and runs a probe program, and the probe program generates an identification of the host; receiving the identification sent by the probe program in each host; in response to detecting that an operation and maintenance instruction is triggered for any identification, selecting the identification of the triggered operation and maintenance instruction as a target identification, and calling a super terminal based on the target identification and the mapping relationship to connect to a client cluster where a target proxy is located, so as to remotely operate and maintain the host to which the target identification belongs through remote communication; wherein the target proxy is a proxy gateway, and there is a mapping relationship between the operation and maintenance project created for the delivered project to which the target identification belongs and the target proxy.

[0006] To solve the above technical problems, the second aspect of the present application provides a remote operation and maintenance device, comprising: a creating module, a receiving module and a connecting module, the creating module is configured to create an operation and maintenance project for a delivery project on an operation and maintenance platform, and create a mapping relationship between different operation and maintenance projects and different proxy gateways in a network where the operation and maintenance platform is located; wherein the different proxy gateways are respectively configured in different client clusters, the different client clusters remotely communicate with different delivery projects, each host in the delivery project is installed and runs a probe program, and the probe program generates an identification of the host; the receiving module is configured to receive the identification sent by the probe program in each host; the connecting module is configured to respond to detection of triggering of an operation and maintenance instruction for any identification, select the identification of the triggered operation and maintenance instruction as a target identification, and call a super terminal based on the target identification and the mapping relationship, and connect to a client cluster where a target proxy is located, so as to remotely operate and maintain the host to which the target identification belongs through remote communication; wherein the target proxy is a proxy gateway, and there is a mapping relationship between the operation and maintenance project created for the host to which the target identification belongs and the target proxy.

[0007] To solve the above technical problems, the third aspect of the present application provides an electronic device, at least comprising a storage and a processor coupled with each other, the storage at least stores program instructions, and the processor is configured to execute the program instructions to realize the remote operation and maintenance method in the first aspect.

[0008] To solve the above technical problems, the fourth aspect of the present application provides a remote operation and maintenance system, comprising an operation and maintenance terminal and a relay terminal connected in communication with each other, the operation and maintenance terminal is configured to log in an operation and maintenance platform where an operation and maintenance project is created, the relay terminal is configured with a client cluster, the client cluster is at least configured with a proxy gateway and a VPN client, the VPN client is configured to maintain a VPN connection with a VPN server in a delivery project, the proxy gateway is configured to deliver the delivery project through a heartbeat based on the VPN connection, so as to maintain the flow fluctuation between the delivery project and the operation and maintenance terminal, and the operation and maintenance terminal is the electronic device in the third aspect.

[0009] To solve the above technical problems, the fifth aspect of the present application provides a computer readable storage medium, which stores program instructions capable of being executed by a processor, and the program instructions are configured to realize the remote operation and maintenance method in the first aspect.

[0010] The above scheme creates an operation and maintenance project for a delivery project on the operation and maintenance platform, and creates a mapping relationship between different operation and maintenance projects and different proxy gateways in the network where the operation and maintenance platform is located, and the different proxy gateways are respectively configured in different client clusters, the different client clusters and the different delivery projects remotely communicate, each host in the delivery project is installed with a probe program, the probe program generates an identification of the host, and then receives the identification sent by the probe program in each host, so as to respond to detection of triggering of an operation and maintenance instruction for any identification, select the identification of the triggered operation and maintenance instruction as a target identification, and call a hyper terminal based on the target identification and the mapping relationship, and connect to the client cluster where the target proxy is located, so as to remotely operate and maintain the host to which the target identification belongs through remote communication. The target proxy is a proxy gateway, and there is a mapping relationship between the operation and maintenance project created for the host to which the target identification belongs and the target proxy. Therefore, on the one hand, the identification generated by the probe program is used instead of the username and password in the remote operation and maintenance, and the client cluster is used instead of the bastion host, so that the username and password can be avoided in the remote operation and maintenance, and the security of the remote operation and maintenance is improved. On the other hand, since the different client clusters and the different delivery projects remotely communicate, and the mapping relationship is created between the different operation and maintenance projects and the different proxies in the network where the operation and maintenance platform is located, and the identification generated by the probe program for the host is used instead of the network address of the host when the remote operation and maintenance is initiated, the negative influence of the dynamic change of the network address of the target host on the remote access can be reduced as much as possible, and the success rate of the remote operation and maintenance is improved. Therefore, the security and the success rate of the remote operation and maintenance are improved. BRIEF DESCRIPTION OF DRAWINGS

[0011] Figure 1 is a flowchart of an embodiment of the remote operation and maintenance method of the present application;

[0012] Figure 2a is a process diagram of an embodiment of the remote operation and maintenance method of the present application;

[0013] Figure 2b is a schematic diagram of an embodiment of a browser interface;

[0014] Figure 2c is a schematic diagram of an embodiment of heartbeat traffic maintaining connection;

[0015] Figure 2d is a process diagram of an embodiment of the remote operation and maintenance method of the present application;

[0016] Figure 2e is a process diagram of another embodiment of the remote operation and maintenance method of the present application;

[0017] Figure 3 is a framework diagram of an embodiment of the remote operation and maintenance device of the present application;

[0018] Figure 4 is a schematic diagram of a framework of an embodiment of the electronic device of the present application;

[0019] Figure 5 is a schematic diagram of a framework of an embodiment of the remote operation and maintenance system of the present application;

[0020] Figure 6 is a schematic diagram of a framework of an embodiment of the computer readable storage medium of the present application. DETAILED DESCRIPTION

[0021] The scheme of the embodiments of the present application will be described in detail below with reference to the accompanying drawings.

[0022] In the following description, specific details are set forth in order to provide a thorough understanding of the present application. The present application may, however, be practiced without these details. In other instances, well-known methods have not been described in detail in order not to unnecessarily obscure the present application.

[0023] The terms "system" and "network" are often used interchangeably herein. The term "and / or" herein is merely used to represent an associated relationship between associated objects, and means that there can be three cases, for example, A and / or B can mean that A exists alone, A and B exist together, and B exists alone. In addition, the segment " / " herein generally represents an "or" relationship between the associated objects. In addition, "multiple" herein means two or more than two.

[0024] Please refer to Figure 1 , Figure 1 is a schematic diagram of a flow of an embodiment of the remote operation and maintenance method of the present application. Specifically, it can include the following steps:

[0025] Step S11: The operation and maintenance platform creates an operation and maintenance project for a delivery project, and creates a mapping relationship between different operation and maintenance projects and different proxy gateways in the network where the operation and maintenance platform is located.

[0026] In an implementation scenario, the operation and maintenance platform can include, but is not limited to, iOPS, etc., and the operation and maintenance platform is not limited herein. In addition, the operation and maintenance terminal can be communicatively connected to the operation and maintenance platform to support relevant creation or other operations on the operation and maintenance platform. It should be noted that the operation and maintenance terminal is set locally to the operation and maintenance platform, that is, the operation and maintenance terminal can be directly connected to the operation and maintenance platform through a network cable or other connection methods. Alternatively, the operation and maintenance terminal can also be located remotely from the operation and maintenance platform, that is, the operation and maintenance terminal and the operation and maintenance platform can be located in the same internal network (for example, a group network). The specific connection method of the operation and maintenance terminal is not limited herein. As a possible example, the operation and maintenance terminal can establish a connection with the operation and maintenance platform through a browser, for example, the network address of the operation and maintenance platform can be input in the address bar of the browser, and the operation and maintenance personnel can also be configured with configuration information such as a username and password for logging into the operation and maintenance platform, so as to log into the operation and maintenance platform through the above configuration information. The above example is only one possible example of logging into the operation and maintenance platform by the operation and maintenance terminal, and does not limit other possible ways of logging into the operation and maintenance platform, and examples are not repeated herein.

[0027] In an implementation scenario, the delivery project represents a related project delivered to a customer, and at least one host can be deployed in the delivery project. For example, host A1 and host A2 are deployed in delivery project A, and host B1 and host B2 are deployed in delivery project B, and examples are not repeated herein. In addition, different delivery projects can belong to the same customer, or can belong to different customers, or part of the delivery projects belong to the same customer and part of the delivery projects belong to different customers, and the specific attribution of the delivery project is not limited herein.

[0028] In an implementation scenario, an operation and maintenance project can be created for each delivery project on the operation and maintenance platform. For example, delivery project A and delivery project B are taken as examples, operation and maintenance project A is created for delivery project A on the operation and maintenance platform, and operation and maintenance project B is created for delivery project B on the operation and maintenance platform. Other cases can be similarly extended, and examples are not repeated herein.

[0029] In one implementation scenario, in order to facilitate the terminal to implement remote operation and maintenance, a relay terminal can also be deployed in the network (e.g., the aforementioned group network) where the operation and maintenance platform is located. The relay terminal can be configured with a client cluster, and different delivery projects can be respectively configured with different client clusters. Each client cluster can be configured with a proxy gateway, which is used to maintain traffic fluctuations by similar heartbeat delivery projects. Still taking the example of different delivery projects including delivery project A and delivery project B, as described above, operation and maintenance project A and operation and maintenance project B can be created in the operation and maintenance platform. Accordingly, client cluster A and client cluster B can be configured in the relay terminal, and a mapping relationship between the proxy gateway in client cluster A and operation and maintenance project A can be created, and a mapping relationship between the proxy gateway in client cluster B and operation and maintenance project B can be created. Of course, the above example is only one possible example of the mapping relationship when different delivery projects include delivery project A and delivery project B, and other possible cases will not be exemplified here.

[0030] In the embodiments of the present disclosure, as described above, different proxy gateways are respectively configured in different client clusters. In addition, remote communication is maintained between different client clusters and different delivery projects. As one possible example, each client cluster can also be respectively configured with a VPN client, and a VPN connection is maintained between the VPN client in different client clusters and the VPN server in different delivery projects, and a communication connection is maintained between the VPN server in the delivery project and each host. For ease of description, still taking the example of different delivery projects including delivery project A and delivery project B, remote communication is maintained between client cluster A and delivery project A, and remote communication is maintained between client cluster B and delivery project B. Among them, client cluster A can be configured with a VPN client, a VPN connection is maintained between the VPN client and the VPN server in delivery project A, and a communication connection is maintained between the VPN server in delivery project A and each host in delivery project A; similarly, client cluster B can be configured with a VPN client, a VPN connection is maintained between the VPN client and the VPN server in delivery project B, and a communication connection is maintained between the VPN server in delivery project B and each host in delivery project B. Of course, the above example is only one possible example of remote communication between the client cluster and the delivery project, and other possible ways of implementing remote communication are not limited here, and will not be exemplified here.

[0031] In the embodiments of the present disclosure, each host in the delivery project can be installed and run with a probe program, and the probe program generates an identification of the host. As one possible example, the probe program can collect the configuration information of the host, and generate the identification (i.e., ID) of the host according to the collected configuration information, so as to distinguish between different delivery projects. It should be noted that the configuration information can include but is not limited to MAC address, serial number, delivery project, etc., and the specific content of the configuration information is not limited here.

[0032] In one implementation scenario, as a possible implementation, the installation instruction for deploying the probe program in the delivery project for the operation and maintenance project can be acquired, and after the installation quality of each host in the delivery project is run, the probe program is downloaded, installed and run to generate the identification mark. For example, the control platform can be provided in the operation and maintenance platform, and after the operation and maintenance project is created, the installation instruction for deploying the probe program in the delivery project for the operation and maintenance project can be acquired from the control platform, and the installation instruction is remotely sent to each host in the delivery project, so that each host runs the installation instruction, that is, the probe program is downloaded from the source address specified in the control platform or the installation instruction, and after the downloading is completed, the probe program is installed and run. The above-mentioned manner, the installation instruction for deploying the probe program in the delivery project for the operation and maintenance project is acquired, and after the installation instruction of each host in the delivery project is run, the probe program is downloaded, installed and run to generate the identification mark, which can improve the convenience of installing the probe program for each host in the delivery project.

[0033] In another implementation scenario, different from the foregoing implementation, as another possible implementation, the operation and maintenance personnel or other related personnel can also directly input the installation instruction in each host of the delivery project after the installation instruction is acquired, so that each host runs the installation instruction, that is, the probe program is downloaded from the source address specified in the control platform or the installation instruction, and after the downloading is completed, the probe program is installed and run. Of course, in the case of supporting the operation and maintenance personnel or other related personnel to directly input the installation instruction in each host of the delivery project, the operation and maintenance personnel or other related personnel can also acquire the installation package of the probe program offline, and the operation and maintenance personnel or other related personnel directly import the installation package of the probe program in each host of the delivery project, so that each host directly installs and runs the probe program.

[0034] Step S12: receiving the identification marks respectively sent by the probe programs in each host.

[0035] In one implementation scenario, please refer to Figure 2a , Figure 2a is a process schematic diagram of an embodiment of the remote operation and maintenance method of the present application. As Figure 2aAs shown, after the configuration management database creates the operation and maintenance project for the delivery project, the installation instructions can be obtained from the control platform, and the installation instructions are run on the host of the delivery project to install and run the probe program in the host of the delivery project. After that, the probe program in the host can generate the identification of the host and feed back the identification of the host to the operation and maintenance platform. As a possible example, still taking the different delivery projects including delivery project A and delivery project B as an example, after the host A1 of the delivery project A installs and runs the probe program, the identification (such as A1) of the host A1 can be returned. Similarly, after the host A2 of the delivery project A installs and runs the probe program, the identification (such as A2) of the host A2 can be returned. The host B1, the host B2, etc. in the delivery project B can be similarly extended to return the corresponding identification. Other cases can be similarly extended, and examples are not repeated here. Of course, the above specific examples of the identification are only one possible example in the actual application process, and other strings can also be used. For example, based on the delivery project where the host is located, the MAC address of the host, and other configuration information, a specific function (such as a hash function or other existing functions, or other custom functions) can be used for processing to obtain the identification of the host. In addition, after receiving the identification, the identification can be classified into the corresponding operation and maintenance project according to the network segment where the host sending the identification is located. Of course, the host can also send the related identification of the delivery project where the host is located together with the identification, so that the operation and maintenance platform can classify the identification into the corresponding operation and maintenance project. It should be noted that the above examples are only a few possible examples of classifying the identification into the operation and maintenance project, and do not limit other possible ways, and examples are not repeated here.

[0036] In one implementation scenario, in addition to returning the identification, the probe program can also collect the monitoring data of the host. That is, the monitoring data sent by the probe program in each host can also be received, and the monitoring data includes at least one of the resource configuration parameters and the resource occupancy rate of the host. It should be noted that the operation and maintenance platform can collect the above monitoring data. As a possible example, the operation and maintenance platform can automatically formulate an operation and maintenance plan for the host based on the above monitoring data. Of course, the above example is only one possible application of collecting monitoring data, and other possible application methods are not limited, and examples are not repeated here.

[0037] Step S13: In response to detecting that the operation and maintenance instruction is triggered for any identification, selecting the identification of the triggered operation and maintenance instruction as a target identification, and calling a super terminal based on the target identification and the mapping relationship to connect to the client cluster where the target agent is located to perform remote operation and maintenance on the host to which the target identification belongs through remote communication.

[0038] In one implementation scenario, as mentioned above, the operation and maintenance personnel or other relevant personnel can perform remote operation and maintenance through the operation and maintenance terminal. For example, the operation and maintenance terminal can be logged in to the operation and maintenance platform through the browser of the operation and maintenance terminal, at which time the browser can display the operation and maintenance project. Please refer to Figure 2b , Figure 2b is a schematic diagram of an embodiment of a browser interface. As shown in Figure 2b , the network address "XXX.XXX.XXX.XXX" of the operation and maintenance platform can be input in the address bar of the browser, and the corresponding operation and maintenance project can be selected, and the identification of the host that needs to initiate remote operation and maintenance can be selected in the operation and maintenance project to initiate the operation and maintenance instruction, and the identification of the triggered operation and maintenance instruction can be selected as the target identification.

[0039] In one implementation scenario, the operation and maintenance project can also be configured with a super terminal. In this case, in response to the browser initiating a long connection request containing at least the operation and maintenance instruction, the super terminal in the operation and maintenance project to which the host belongs to the target identification can be selected as the target terminal, and the long connection between the browser and the target terminal can be established. At this time, the browser in the operation and maintenance terminal can establish a long connection with the super terminal in the operation and maintenance project. Thereafter, the operation and maintenance personnel or other relevant personnel can issue various operation and maintenance instructions or other instructions on the browser, which can be transmitted by the super terminal in the operation and maintenance project. It should be noted that the long connection is a connection mode different from the short connection, and its specific meaning can be referred to the technical details of the long connection, which will not be described here. In the above-mentioned manner, the operation and maintenance project is configured with a super terminal, and the operation and maintenance project is displayed on the browser, in response to the browser initiating a long connection request containing at least the operation and maintenance instruction, the super terminal in the operation and maintenance project to which the host belongs to the target identification is selected as the target terminal, and the long connection between the browser and the target terminal is established, which can make the operation and maintenance of different delivery projects and different hosts be orderly transmitted by different operation and maintenance projects and different super terminals, and for the operation and maintenance personnel or other relevant personnel, only the browser operation is needed, without the need to care about the background, which helps to improve the orderliness and convenience of remote operation and maintenance.

[0040] In one implementation scenario, please refer to Figure 2c , Figure 2c is a schematic diagram of an embodiment of heartbeat traffic maintaining connection. As mentioned above, each client cluster is also configured with a VPN client, and the VPN client in different client clusters maintains VPN connection with the VPN server in different delivery projects, and the VPN server in the delivery project communicates with each host. As shown in Figure 2c , the VPN client A in the client cluster A maintains VPN connection with the VPN server A in the delivery project A, and the VPN client B in the client cluster B maintains VPN connection with the VPN server B in the delivery project B. As shown in Figure 2cAs shown, after the administrator applies to the machine, the administrator can first install the VPN client in the client cluster, log in to the VPN client in the client cluster based on the configuration information of the VPN server in the corresponding delivery project of the client cluster, maintain the VPN connection between the VPN client in the client cluster and the VPN server in the corresponding delivery project, and log in to the delivery project network (i.e. Figure 2c As shown, the external network), the proxy gateway in the client cluster maintains the traffic fluctuation between the corresponding delivery project based on the VPN connection through the heartbeat of the corresponding delivery project. Then the proxy gateway can be installed in the client cluster, and the project can be created in the super terminal and the mapping relationship between the project and the proxy gateway can be configured as described above. On this basis, the administrator or other related personnel can initiate the login. The above-mentioned method, in the client cluster, according to the proxy gateway and the VPN client, based on the configuration information of the VPN server in the corresponding delivery project of the client cluster, logs in to the VPN client in the client cluster, maintains the VPN connection between the VPN client in the client cluster and the VPN server in the corresponding delivery project, and the proxy gateway in the client cluster maintains the traffic fluctuation between the corresponding delivery project based on the VPN connection through the heartbeat of the corresponding delivery project, so as to realize the remote operation and maintenance through the establishment of the communication link of "proxy gateway-VPN client-VPN server-host".

[0041] In the embodiment of the present disclosure, the target proxy is the proxy gateway, and there is a mapping relationship between the operation and maintenance project created for the delivery project to which the target identifier belongs and the target proxy. Still taking the example that the different delivery projects include delivery project A and delivery project B, the operation and maintenance project A is created for the delivery project A, and the operation and maintenance project B is created for the delivery project B. For the target identifier A1, the host (i.e. host A1) thereof is located in the delivery project A, and there is a mapping relationship between the operation and maintenance project A created for the delivery project A and the proxy gateway A. Therefore, for the target identifier A1, the target proxy is determined as the proxy gateway A. Of course, the above-mentioned example is only one possible situation for determining the target proxy when the different delivery projects include the delivery project A and the delivery project B, and other possible situations are not limited herein, and the examples are not repeated herein.

[0042] In one implementation scenario, please refer to Figure 2d , Figure 2d is a process schematic diagram of an embodiment of the remote operation and maintenance method of the present application. As shown in Figure 2d As described above, after the administrator applies to the machine, the administrator can first install the VPN client in the client cluster, log in to the VPN client in the client cluster based on the configuration information of the VPN server in the corresponding delivery project of the client cluster, maintain the VPN connection between the VPN client in the client cluster and the VPN server in the corresponding delivery project, and log in to the delivery project network (i.e.

[0043] In one implementation scenario, please refer toFigure 2e , Figure 2e is a process schematic diagram of another embodiment of the remote operation method of the present application. As shown in Figure 2e , the specific super terminal can be invoked to connect to the VPN client in the client cluster where the target agent is located through the target agent, to connect to the VPN server through the VPN client, and to connect to the host to which the target identification belongs in the delivery project through the VPN server.

[0044] In one implementation scenario, after remotely connecting to the host to which the target identification belongs (i.e., the target host), the super terminal can be invoked to log in to the target host in the delivery project using the target identification to remotely operate the target host. Illustratively, the target host can parse the identification transmitted together with the operation instruction to determine whether to allow remote operation. As one possible example, the probe program in the target host can parse the target identification, such as using the relevant algorithm for generating the target identification to obtain the configuration information when the target identification is generated, and compare it with the configuration information of the host where it is located. If the comparison is consistent, it can be determined that remote operation is allowed, i.e., the operation instruction can be allowed to be executed locally. Otherwise, it can be determined that remote operation is refused, i.e., the operation instruction can be refused to be run locally, thereby further improving the security of remote operation.

[0045] The above scheme creates an operation and maintenance project for a delivery project on an operation and maintenance platform, and creates mapping relationships between different operation and maintenance projects and different proxy gateways in a network where the operation and maintenance platform is located, and the different proxy gateways are respectively configured in different client clusters, the different client clusters remotely communicate with different delivery projects, each host in the delivery project is installed with a probe program, the probe program generates an identification of the host, and then receives the identification sent by the probe program in each host, so as to respond to detection of triggering of an operation and maintenance instruction for any identification, select the identification of the triggered operation and maintenance instruction as a target identification, and call a hyper terminal based on the target identification and the mapping relationship to connect to a client cluster where a target proxy is located to remotely operate and maintain a host to which the target identification belongs through remote communication, the target proxy is a proxy gateway, and there is a mapping relationship between an operation and maintenance project created for the host to which the target identification belongs and the target proxy. Therefore, on the one hand, the identification generated by the probe program is used instead of a username and a password in remote operation and maintenance, and a client cluster is used instead of a bastion host, so that the username and the password are not used in remote operation and maintenance, and the security of remote operation and maintenance is improved. On the other hand, since the different client clusters remotely communicate with the different delivery projects, and the mapping relationship is created between the different operation and maintenance projects and the different proxies in the network where the operation and maintenance platform is located, and the identification generated by the probe program for the host is used instead of a network address of the host when remote operation and maintenance is initiated, the negative influence of dynamic change of the network address of the target host on remote access is reduced as much as possible, and the success rate of remote operation and maintenance is improved. Therefore, the security and the success rate of remote operation and maintenance are improved.

[0046] Please refer to Figure 3 , Figure 3 is a framework schematic diagram of an embodiment of a remote operation and maintenance device of the present application. The remote operation and maintenance device 30 comprises a creating module 31, a receiving module 32, and a connecting module 33. The creating module 31 is configured to create an operation and maintenance project for a delivery project on an operation and maintenance platform, and create mapping relationships between different operation and maintenance projects and different proxy gateways in a network where the operation and maintenance platform is located. The different proxy gateways are respectively configured in different client clusters, the different client clusters remotely communicate with different delivery projects, each host in the delivery project is installed and runs a probe program, and the probe program generates an identification of the host. The receiving module 32 is configured to receive the identification sent by the probe program in each host. The connecting module 33 is configured to respond to detection of triggering of an operation and maintenance instruction for any identification, select the identification of the triggered operation and maintenance instruction as a target identification, and call a hyper terminal based on the target identification and the mapping relationship to connect to a client cluster where a target proxy is located to remotely operate and maintain a host to which the target identification belongs through remote communication. The target proxy is a proxy gateway, and there is a mapping relationship between an operation and maintenance project created for the host to which the target identification belongs and the target proxy.

[0047] The above scheme, the remote operation and maintenance device 30 creates an operation and maintenance project for a delivery project on an operation and maintenance platform, and creates a mapping relationship between different operation and maintenance projects and different proxy gateways in a network where the operation and maintenance platform is located, and the different proxy gateways are respectively configured in different client clusters, the different client clusters remotely communicate with different delivery projects, each host in the delivery project is installed with a probe program, the probe program generates an identification of the host, and then receives the identification sent by the probe program in each host, so as to respond to detection of triggering of an operation and maintenance instruction for any identification, select the identification of the triggered operation and maintenance instruction as a target identification, and call a super terminal based on the target identification and the mapping relationship, and connect to a client cluster where a target proxy is located, so as to remotely operate and maintain the host to which the target identification belongs through remote communication, the target proxy is a proxy gateway, and there is a mapping relationship between the operation and maintenance project created for the host to which the target identification belongs and the target proxy in the interaction project, so that on the one hand, the identification generated by the probe program is used instead of a username and a password in the remote operation and maintenance, and a client cluster is used instead of a bastion host, so that the username and the password are not used in the remote operation and maintenance, which helps to improve the security of the remote operation and maintenance, and on the other hand, since the different client clusters remotely communicate with different delivery projects, and the mapping relationship is created between the different operation and maintenance projects and the different proxies in the network where the operation and maintenance platform is located, and the identification generated by the probe program for the host is used instead of a network address of the host when the remote operation and maintenance is initiated, the negative influence of dynamic change of the network address of the target host on remote access can be reduced as much as possible, which helps to improve the success rate of the remote operation and maintenance. Therefore, the security and the success rate of the remote operation and maintenance can be improved.

[0048] In some disclosed embodiments, the remote operation and maintenance device 30 includes an acquisition module configured to acquire an installation command for deploying the probe program in the delivery project for the operation and maintenance project; wherein after each host in the delivery project runs the installation command, the probe program is downloaded, installed and run to generate the identification.

[0049] In some disclosed embodiments, the connection module 33 is specifically configured to call the super terminal to log in to the target host in the delivery project by using the target identification, so as to remotely operate and maintain the target host; wherein the target host is the host to which the target identification belongs.

[0050] In some disclosed embodiments, the remote operation and maintenance device 30 includes a monitoring module configured to receive monitoring data sent by the probe program in each host; wherein the monitoring data includes at least one of a resource configuration parameter and a resource occupancy rate of the host.

[0051] In some disclosed embodiments, a super terminal is configured in the operation and maintenance project, and the operation and maintenance project is displayed on the browser. The remote operation and maintenance device 30 comprises an establishing module configured to, in response to the browser initiating a long connection request containing at least operation and maintenance instructions, select a super terminal in the operation and maintenance project to which the target identifier belongs as a target terminal, and establish a long connection between the browser and the target terminal.

[0052] In some disclosed embodiments, each client cluster is further configured with a VPN client. The VPN clients in different client clusters maintain VPN connections with the VPN servers in different delivery projects. The VPN servers in the delivery projects are in communication connection with the hosts.

[0053] In some disclosed embodiments, the remote operation and maintenance device 30 comprises an installing module configured to install the proxy gateway and the VPN client in the client cluster. The remote operation and maintenance device 30 comprises a logging module configured to log in the VPN client in the client cluster based on the configuration information of the VPN server in the delivery project corresponding to the client cluster, so as to maintain the VPN connection between the VPN client and the VPN server in the corresponding delivery project. The proxy gateway in the client cluster maintains the traffic fluctuation between the corresponding delivery project based on the VPN connection through the heartbeat.

[0054] In some disclosed embodiments, the remote operation and maintenance device 30 comprises a calling module configured to call the super terminal to connect to the VPN client in the client cluster where the target proxy is located through the target proxy, so as to connect to the VPN server through the VPN connection, and connect to the host to which the target identifier belongs in the delivery project through the VPN server.

[0055] Please refer to Figure 4 , Figure 4 is a schematic diagram of the framework of an embodiment of the electronic device. The electronic device 40 at least comprises a memory 41 and a processor 42 coupled with each other. The memory 41 at least stores program instructions. The processor 42 is configured to execute the program instructions to implement the steps in any of the above remote operation and maintenance method embodiments. For details, please refer to the foregoing disclosed embodiments, which will not be repeated here. As a possible example, the electronic device 40 can include but is not limited to a server, etc. The specific type of the electronic device 40 is not limited here.

[0056] Specifically, the processor 42 is configured to control itself and the memory 41 to implement the steps in any of the above remote operation method embodiments. The processor 42 can also be referred to as a CPU (Central Processing Unit). The processor 42 can be an integrated circuit chip with processing capability. The processor 42 can also be a general purpose processor, a Digital Signal Processor (DSP), an Application Specific Integrated Circuit (ASIC), a Field-Programmable Gate Array (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components. The general purpose processor can be a microprocessor or the processor can also be any conventional processor. In addition, the processor 42 can be implemented by an integrated circuit chip.

[0057] In the above scheme, the electronic device 40 creates an operation project for a delivery project on the operation platform, and creates a mapping relationship between different operation projects and different proxy gateways in the network where the operation platform is located, and the different proxy gateways are respectively configured in different client clusters, the different client clusters and the different delivery projects remotely communicate, each host in the delivery project is installed with a probe program, the probe program generates an identification of the host, and then receives the identification sent by the probe program in each host, so as to respond to detection of triggering of an operation instruction for any identification, select the identification of the triggered operation instruction as a target identification, and call a super terminal based on the target identification and the mapping relationship, and connect to the client cluster where the target proxy is located, so as to remotely operate the host to which the target identification belongs through remote communication. The target proxy is a proxy gateway, and there is a mapping relationship between the operation project created for the host to which the target identification belongs in the interaction project and the target proxy. Therefore, on the one hand, the identification generated by the probe program is used instead of the username and password in the remote operation, and the client cluster is used instead of the bastion host, so that the username and password can be avoided in the remote operation process, which helps to improve the security of the remote operation. On the other hand, since the different client clusters and the different delivery projects remotely communicate, and the mapping relationship is created between the different operation projects and the different proxies in the network where the operation platform is located, and the identification generated by the probe program for the host is used instead of the network address of the host when initiating the remote operation, the negative impact of the dynamic change of the network address of the target host on the remote access can be reduced as much as possible, which helps to improve the success rate of the remote operation. Therefore, the security and success rate of the remote operation can be improved.

[0058] Please refer to Figure 5 , Figure 5is a framework schematic diagram of an embodiment of the remote operation and maintenance system of the present application. The remote operation and maintenance system 50 comprises an operation and maintenance terminal 51 and a relay terminal 52 in communication connection with each other, the operation and maintenance terminal 51 is used for logging in an operation and maintenance platform 53 in which an operation and maintenance project is created, the relay terminal 52 is configured with a client cluster (not shown in the figure), the client cluster is configured with at least a proxy gateway and a VPN client, the VPN client is used for maintaining a VPN connection with a VPN server in a delivery project (not shown in the figure), the proxy gateway is used for delivering the project based on the VPN connection through a heartbeat to maintain a traffic fluctuation between the proxy gateway and the delivery project, and the operation and maintenance terminal 51 is the electronic device in the above-mentioned electronic device embodiment, and specific reference can be made to the foregoing related description, which will not be described here again.

[0059] The above-mentioned scheme, on the one hand, uses the identification generated by the probe program to replace the username and password in the remote operation and maintenance, and uses the client cluster to replace the bastion host, which can avoid using the username and password in the remote operation and maintenance process, and helps to improve the security of the remote operation and maintenance. On the other hand, since the remote communication is created between different client clusters and different delivery projects, and a mapping relationship is created between different operation and maintenance projects and different proxies in the network where the operation and maintenance platform is located, and the identification generated by the probe program for the host instead of the network address of the host is relied on when initiating the remote operation and maintenance, the negative impact of the dynamic change of the network address of the target host on the remote access can be reduced as much as possible, and the success rate of the remote operation and maintenance can be improved. Therefore, the security and success rate of the remote operation and maintenance can be improved.

[0060] Please refer to Figure 6 , Figure 6 is a framework schematic diagram of an embodiment of the computer readable storage medium of the present application. The computer readable storage medium 60 stores program instructions 61 capable of being run by a processor, and the program instructions 61 are used for implementing the steps in any of the above-mentioned remote operation and maintenance method embodiments.

[0061] The above-mentioned scheme, on the one hand, uses the identification generated by the probe program to replace the username and password in the remote operation and maintenance, and uses the client cluster to replace the bastion host, which can avoid using the username and password in the remote operation and maintenance process, and helps to improve the security of the remote operation and maintenance. On the other hand, since the remote communication is created between different client clusters and different delivery projects, and a mapping relationship is created between different operation and maintenance projects and different proxies in the network where the operation and maintenance platform is located, and the identification generated by the probe program for the host instead of the network address of the host is relied on when initiating the remote operation and maintenance, the negative impact of the dynamic change of the network address of the target host on the remote access can be reduced as much as possible, and the success rate of the remote operation and maintenance can be improved. Therefore, the security and success rate of the remote operation and maintenance can be improved.

[0062] In some embodiments, the apparatus provided by the embodiments of the present disclosure has functions or includes modules that can be used to perform the methods described in the above method embodiments, and the specific implementation can refer to the description of the above method embodiments. For brevity, it will not be repeated here.

[0063] The above description of various embodiments tends to emphasize the differences between various embodiments, and the same or similar parts can be referred to each other. For brevity, it will not be repeated here.

[0064] In several embodiments provided in the present application, it should be understood that the disclosed methods and apparatuses can be implemented in other ways. For example, the above-described apparatus implementation is only schematic, for example, the division of modules or units is only a logical function division, and actual implementation can have another division manner, for example, a plurality of units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the coupling or direct coupling or communication connection between the shown or discussed each other can be indirect coupling or communication connection through some interface, apparatus or unit, which can be electrical, mechanical or other form.

[0065] The unit described as a separate component can or can not be physically separated, and the component shown as a unit can or can not be a physical unit, that is, it can be located in one place, or it can be distributed to a plurality of network units. According to actual needs, part or all of the units can be selected to achieve the purpose of the present embodiment scheme.

[0066] In addition, each functional unit in each embodiment of the present application can be integrated in one processing unit, or each unit can be physically present separately, or two or more units can be integrated in one unit. The above integrated unit can be realized in the form of hardware or in the form of a software functional unit.

[0067] The integrated unit, if implemented in the form of a software function unit and sold or used as an independent product, can be stored in a computer readable storage medium. Based on such understanding, the technical solutions of the present application, essentially or in part, or all or part of the technical solutions can be embodied in the form of a software product. The computer software product is stored in a storage medium, and includes a number of instructions for causing a computer device (which can be a personal computer, a server, or a network device, etc.) or a processor (processor) to perform all or part of the steps of the methods in the various embodiments of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), magnetic disk or optical disk, and various other media that can store program codes.

[0068] If the technical solutions of the present application involve personal information, the product applying the technical solutions of the present application has been informed of the personal information processing rules before processing the personal information, and has obtained the personal independent consent. If the technical solutions of the present application involve sensitive personal information, the product applying the technical solutions of the present application has obtained the personal independent consent before processing the sensitive personal information, and at the same time meets the requirement of "explicit consent". For example, at the personal information collection device such as camera, a clear and prominent mark is set to inform that the personal information collection range has been entered, and the personal information will be collected. If the individual voluntarily enters the collection range, it is regarded as agreeing to collect the personal information. Or, on the device for processing personal information, the personal information processing rules are informed by using obvious marks / information, and the personal authorization is obtained by means of pop-up information or asking the individual to upload the personal information. The personal information processing rules can include personal information processor, personal information processing purpose, processing method, and personal information type, etc.

Claims

1. A remote operation method, characterized by, The method comprises: An operation and maintenance platform creates an operation and maintenance project for a delivery project, and creates a mapping relationship between different operation and maintenance projects and different proxy gateways in a network where the operation and maintenance platform is located; wherein different proxy gateways are respectively configured in different client clusters, different client clusters remotely communicate with different delivery projects, each host in the delivery project is installed and runs a probe program, and the probe program generates an identification mark of the host; An installation command for deploying the probe program in the delivery project for the operation and maintenance project is obtained; wherein after the installation command is run by each host in the delivery project, the probe program is downloaded, installed and run to generate the identification mark; Receiving identification marks respectively sent by the probe program in each host; In response to detecting that any of the identification marks triggers an operation and maintenance instruction, selecting the identification mark of the triggered operation and maintenance instruction as a target identification, and based on the target identification and the mapping relationship, calling a hyper terminal to connect to a client cluster where a target proxy is located to call the hyper terminal to log in to a target host in the delivery project using the target identification, and to remotely operate and maintain the target host; wherein the target host is the host to which the target identification belongs, the target proxy is the proxy gateway, and there is a mapping relationship between the operation and maintenance project created for the delivery project where the host belongs and the target proxy.

2. The method of claim 1, wherein, The method further comprises: Receiving monitoring data respectively sent by the probe program in each host; wherein the monitoring data includes at least one of resource configuration parameters and resource occupancy rate of the host.

3. The method of claim 1, wherein, The operation and maintenance project is configured with the hyper terminal, and the operation and maintenance project is displayed in a browser, and the method further comprises: In response to the browser initiating a long connection request containing at least the operation and maintenance instruction, selecting the hyper terminal in the operation and maintenance project where the host to which the target identification belongs as a target terminal, and establishing a long connection between the browser and the target terminal.

4. The method according to any one of claims 1 to 3, characterized in that, Each of the client clusters is also respectively configured with a VPN client, and the VPN clients in different client clusters maintain VPN connections with VPN servers in different delivery projects, and the VPN servers in the delivery projects are in communication connection with each host.

5. The method of claim 4, wherein, The method further comprises: Installing the proxy gateway and the VPN client in the client cluster; Logging in to the VPN client in the client cluster based on the configuration information of the VPN server in the delivery project corresponding to the client cluster to maintain a VPN connection between the VPN client and the VPN server corresponding to the delivery project; Wherein, the proxy gateway in the client cluster maintains a traffic fluctuation with the corresponding delivery project based on the VPN connection through a heartbeat corresponding to the delivery project.

6. The method of claim 4, wherein, The method further comprises: The super terminal is invoked to connect to the VPN client in the client cluster where the target agent is located through the target agent, to connect to the VPN server through the VPN, and to connect to the host in the delivery project to which the target identity belongs through the VPN server.

7. A remote operation device characterized by comprising: Comprise: A creating module is configured to create an operation and maintenance project for a delivery project on an operation and maintenance platform, and to create a mapping relationship between different operation and maintenance projects and different agent gateways in a network where the operation and maintenance platform is located; different agent gateways are respectively configured in different client clusters, different client clusters remotely communicate with different delivery projects, each host in the delivery project is installed and runs a probe program, and the probe program generates an identification mark of the host; A obtaining module is configured to obtain an installation command for deploying the probe program in the delivery project for the operation and maintenance project; after the installation command is run by each host in the delivery project, the probe program is downloaded, installed and run to generate the identification mark; A receiving module is configured to receive identification marks respectively sent by the probe program in each host; A connecting module is configured to select an identification mark triggered by an operation and maintenance instruction as a target identification in response to detecting that the operation and maintenance instruction is triggered for any identification mark, and to invoke a super terminal based on the target identification and the mapping relationship to connect to a client cluster where a target agent is located, so that the super terminal logs in a target host in the delivery project using the target identification to remotely operate and maintain the target host; the target host is the host to which the target identification belongs, the target agent is the agent gateway, and the mapping relationship exists between the operation and maintenance project created for the delivery project to which the target host belongs and the target agent.

8. An electronic device, comprising: At least comprising a memory and a processor coupled to each other, the memory at least stores program instructions, and the processor is configured to execute the program instructions to implement the remote operation and maintenance method of any one of claims 1 to 6.

9. A remote operations system, comprising: The operation and maintenance terminal is configured to log in an operation and maintenance platform where an operation and maintenance project is created, and the relay terminal is configured with a client cluster, at least an agent gateway and a VPN client are configured in the client cluster, the VPN client is configured to maintain a VPN connection with a VPN server in a delivery project, the agent gateway is configured to ping the delivery project based on the VPN connection to maintain traffic fluctuation between the delivery project and the operation and maintenance terminal, and the operation and maintenance terminal is the electronic device of claim 8.

10. A computer-readable storage medium, characterized in that, The memory stores program instructions executable by the processor, and the program instructions are used to implement the remote operation and maintenance method of any one of claims 1 to 6.

Images