Network fault simulation method and device, computer equipment, readable storage medium and program product

Abstract

The invention relates to a network fault simulation method and device, computer equipment, a readable storage medium and a program product. The method comprises the following steps: constructing a target network and a drilling strategy of a fault event; under the condition that the scale of the target network exceeds the upper limit of a virtualization simulation platform, performing decomposition processing on the network topology of the target network and the drilling strategy to obtain a plurality of decomposition networks and drilling strategies corresponding to the decomposition networks; according to the network configuration information of the target network in the real environment, establishing a simulation network environment of the plurality of decomposition networks in the virtualization simulation platform, and loading the real service configuration information of the target network; and according to a drilling strategy corresponding to each decomposition network, performing fault drilling simulation on each decomposition network loaded with the real service configuration information in the simulation network environment. By adopting the method, a larger-scale network topology can be processed on the premise of not sacrificing simulation precision.

Description

Technical Field

[0001] The present application relates to the field of network simulation technology, and in particular to a network fault simulation method, apparatus, computer equipment, computer-readable storage medium, and computer program product. Background Art

[0002] Fault drills are a key step in ensuring network stability and security. Fault drills refer to simulating network failures in a controlled environment to test and verify the network's fault tolerance, fault recovery mechanism, and emergency response process. Fault drills mainly rely on simulation platforms. Currently, commonly used network simulation technologies include mathematical abstract simulation, simulation analysis simulation, equipment simulation, and experimental equipment simulation.

[0003] However, in network fault drills and assessments, mathematical abstraction simulations have high computational efficiency but cannot simulate the dynamic behavior of actual protocols; simulation analysis simulations restore the functional characteristics of network systems, but the accuracy of device behavior is insufficient to fully reflect the dynamic behavior of actual devices; device simulations provide high-precision simulation results and can realistically reproduce device behavior and interaction, but have poor performance, high computing resource requirements, and weak scalability; experimental equipment simulations reproduce the most realistic network environment and provide the most realistic performance data, but they are costly, require large resources, and are not suitable for large-scale network simulations.

[0004] Therefore, it is difficult for existing fault drill simulation methods to balance the issues of simulation scale and simulation accuracy. Summary of the invention

[0005] Based on this, it is necessary to provide a network fault simulation method, apparatus, computer equipment, computer-readable storage medium and computer program product to address the technical problem that the above-mentioned fault drill simulation method is difficult to balance the simulation scale and simulation accuracy.

[0006] In a first aspect, the present application provides a network fault simulation method. The method comprises:

[0007] Build target networks and drill strategies for failure events;

[0008] When the scale of the target network exceeds the upper limit of the virtualization simulation platform, the network topology of the target network and the exercise strategy are decomposed to obtain a plurality of decomposed networks and exercise strategies corresponding to each of the decomposed networks;

[0009] According to the network configuration information of the target network in the real environment, building a simulated network environment of the multiple decomposed networks in the virtualized simulation platform and loading the real business configuration information of the target network;

[0010] According to the drill strategy corresponding to each of the decomposed networks, a fault drill simulation is performed on each of the decomposed networks loaded with the real service configuration information in the simulated network environment.

[0011] In one of the embodiments, after building the simulated network environment of the multiple decomposed networks in the virtualized simulation platform according to the network configuration information of the target network in the real environment, the method further includes:

[0012] Determining the parameters to be verified in the network configuration information;

[0013] Building an experimental environment for the target network and obtaining experimental parameter values ​​of the parameters to be verified;

[0014] According to the experimental parameter values, corresponding parameters in the simulated network environment are calibrated to obtain a calibrated simulated network environment;

[0015] The real service configuration information of the target network is loaded in the calibrated simulated network environment.

[0016] In one of the embodiments, after performing fault drill simulation on each decomposed network loaded with the real service configuration information in the simulated network environment according to the drill strategy corresponding to each decomposed network, the method further includes:

[0017] Collecting network status parameters of the target network after simulation;

[0018] The mathematical abstract model is called to evaluate the fault drill effect of the target network according to the network state parameters after the simulation and the initial network state parameters of the target network before the simulation.

[0019] In one of the embodiments, after collecting the network status parameters of the target network after simulation, the method further includes:

[0020] Perform simulation analysis and discrete event simulation on the simulated network state parameters through a simulation analysis model to obtain statistical analysis results;

[0021] According to the statistical analysis results, the fault drill effect of the target network is evaluated.

[0022] In one embodiment, after performing simulation analysis and discrete event simulation on the simulated network state parameters through the simulation analysis model and obtaining statistical analysis results, the method further includes:

[0023] According to the statistical analysis results, the mathematical abstract model is optimized to obtain an optimized mathematical abstract model;

[0024] The optimized mathematical abstract model is used to evaluate the effect of the next fault drill of the target network.

[0025] In one embodiment, the decomposing the network topology of the target network and the exercise strategy to obtain a plurality of decomposed networks and exercise strategies corresponding to each of the decomposed networks includes:

[0026] Dividing the target network into multiple areas;

[0027] The nodes with similar functions or redundant relationships in each region are merged respectively, and the external domain nodes in each decomposed network are simplified to obtain multiple decomposed networks;

[0028] The training strategy is distributed to each decomposed network to obtain the training strategy corresponding to each decomposed network.

[0029] In a second aspect, the present application also provides a network fault simulation device. The device comprises:

[0030] Building modules for building target networks and drill strategies for failure events;

[0031] A decomposition module, used for decomposing the network topology of the target network and the exercise strategy to obtain multiple decomposed networks and exercise strategies corresponding to each of the decomposed networks when the scale of the target network exceeds the upper limit of the virtualization simulation platform;

[0032] A loading module, used to build a simulated network environment of the multiple decomposed networks in the virtualized simulation platform and load the real business configuration information of the target network according to the network configuration information of the target network in the real environment;

[0033] The simulation module is used to perform fault drill simulation on each decomposed network loaded with the real business configuration information in the simulation network environment according to the drill strategy corresponding to each decomposed network.

[0034] In a third aspect, the present application further provides a computer device. The computer device includes a memory and a processor, the memory stores a computer program, and the processor implements the following steps when executing the computer program:

[0035] Build target networks and drill strategies for failure events;

[0036] When the scale of the target network exceeds the upper limit of the virtualization simulation platform, the network topology of the target network and the exercise strategy are decomposed to obtain a plurality of decomposed networks and exercise strategies corresponding to each of the decomposed networks;

[0037] According to the network configuration information of the target network in the real environment, building a simulated network environment of the multiple decomposed networks in the virtualized simulation platform and loading the real business configuration information of the target network;

[0038] According to the drill strategy corresponding to each of the decomposed networks, a fault drill simulation is performed on each of the decomposed networks loaded with the real service configuration information in the simulated network environment.

[0039] In a fourth aspect, the present application further provides a computer-readable storage medium. The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the following steps are implemented:

[0040] Build target networks and drill strategies for failure events;

[0041] When the scale of the target network exceeds the upper limit of the virtualization simulation platform, the network topology of the target network and the exercise strategy are decomposed to obtain a plurality of decomposed networks and exercise strategies corresponding to each of the decomposed networks;

[0042] According to the network configuration information of the target network in the real environment, building a simulated network environment of the multiple decomposed networks in the virtualized simulation platform and loading the real business configuration information of the target network;

[0043] According to the drill strategy corresponding to each of the decomposed networks, a fault drill simulation is performed on each of the decomposed networks loaded with the real service configuration information in the simulated network environment.

[0044] In a fifth aspect, the present application further provides a computer program product. The computer program product includes a computer program, and when the computer program is executed by a processor, the following steps are implemented:

[0045] Build target networks and drill strategies for failure events;

[0046] When the scale of the target network exceeds the upper limit of the virtualization simulation platform, the network topology of the target network and the exercise strategy are decomposed to obtain a plurality of decomposed networks and exercise strategies corresponding to each of the decomposed networks;

[0047] According to the network configuration information of the target network in the real environment, building a simulated network environment of the multiple decomposed networks in the virtualized simulation platform and loading the real business configuration information of the target network;

[0048] According to the drill strategy corresponding to each of the decomposed networks, a fault drill simulation is performed on each of the decomposed networks loaded with the real service configuration information in the simulated network environment.

[0049] The above-mentioned network fault simulation method, device, computer equipment, storage medium and computer program product construct a target network and drill strategy for a fault event; when the scale of the target network exceeds the upper limit of the virtualization simulation platform, the network topology and drill strategy of the target network are decomposed and processed to obtain multiple decomposed networks and drill strategies corresponding to each decomposed network; according to the network configuration information of the target network in the real environment, a simulated network environment of multiple decomposed networks is built in the virtualization simulation platform and the real business configuration information of the target network is loaded; according to the drill strategy corresponding to each decomposed network, a fault drill simulation is performed on each decomposed network loaded with the real business configuration information in the simulated network environment. The method designs the target network and drill technique strategy for the fault event, and when the scale of the target network exceeds the upper limit of the virtualization simulation platform, the target network topology and drill strategy are decomposed and simplified. By simplifying and decomposing the network topology, the performance bottleneck in large-scale network simulation is effectively alleviated, ensuring that fault drills can be effectively performed in large-scale network environments, and being able to handle larger-scale network topologies without sacrificing simulation accuracy. BRIEF DESCRIPTION OF THE DRAWINGS

[0050] FIG1 is a schematic diagram of a flow chart of a network fault simulation method in one embodiment;

[0051] FIG2 is a schematic diagram of a process of calibrating a simulated network environment in one embodiment;

[0052] FIG3 is a schematic diagram of the structure of an integrated fault drill and assessment simulation system in one embodiment;

[0053] FIG4 is a schematic diagram of a flow chart of a network fault simulation method in another embodiment;

[0054] FIG5 is a block diagram of a network fault simulation device according to an embodiment;

[0055] FIG. 6 is a diagram showing the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION

[0056] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0057] In one embodiment, as shown in FIG1 , a network fault simulation method is provided. This embodiment uses the method applied to a terminal as an example for illustration. It is understandable that the method can also be applied to a server, and can also be applied to a system including a terminal and a server, and is implemented through the interaction between the terminal and the server. Among them, the terminal can be, but is not limited to, various personal computers, laptops, smart phones, tablet computers, Internet of Things devices and portable wearable devices. The Internet of Things devices can be smart speakers, smart TVs, smart air conditioners, smart car-mounted devices, etc. Portable wearable devices can be smart watches, smart bracelets, head-mounted devices, etc. The server can be implemented as an independent server or a server cluster consisting of multiple servers. In this embodiment, the method includes the following steps:

[0058] Step S110, constructing a target network and exercise strategy for a fault event.

[0059] In the specific implementation, first, the target network structure of the fault event is clarified, and then according to the characteristics of the target network, the corresponding fault drill strategy is designed, including fault type, trigger conditions, recovery steps, etc.

[0060] Step S120, when the scale of the target network exceeds the upper limit of the virtualization simulation platform, the network topology and the exercise strategy of the target network are decomposed to obtain a plurality of decomposed networks and exercise strategies corresponding to each decomposed network.

[0061] In the specific implementation, if the size of the target network exceeds the upper limit of the virtualization simulation platform, that is, it is difficult to perform virtual simulation on the target network, the problem can be solved by decomposing and simplifying the target network. Specifically, to simplify the network topology, it is necessary to simplify the details on the basis of retaining the overall topological features and basic features, for example, merging duplex redundant nodes into one node, merging and simplifying the nodes in the external domain into a simple AS domain, etc. At the same time, the topological details of the simplified parts are restored.

[0062] By decomposing the target network into multiple simplified network topologies, corresponding fault drill strategies (such as physical strategies such as disconnecting ports and software strategies such as modifying configurations) are designed for the decomposed and simplified network topologies. The fault drill is decomposed into multiple fault drill tasks implemented on the virtualized simulation platform.

[0063] Step S130, according to the network configuration information of the target network in the real environment, build a plurality of simulated network environments of the decomposed networks in the virtualized simulation platform and load the real business configuration information of the target network.

[0064] The network configuration information may include network topology information (including detailed information such as distance length), network element equipment information parameters, network element configuration, routing protocol and other related information.

[0065] The service configuration information may include the network's virtual private network (VPN), service routing, background traffic, and service traffic.

[0066] In a specific implementation, network configuration information such as network topology information and network element device information can be obtained based on the real environment, that is, the existing network environment, and then a simulated network environment with multiple decomposed networks can be built in the simulation environment based on the network configuration information. Furthermore, the real business configuration information of the target network can be loaded in the simulated network environment to restore the business configuration of the real environment.

[0067] Step S140 , performing fault drill simulation on each decomposed network loaded with real service configuration information in the simulated network environment according to the drill strategy corresponding to each decomposed network.

[0068] In the specific implementation, after completing the service configuration of the simulated network environment, a fault drill can be performed, and the drill strategies corresponding to each decomposed network obtained in advance are applied in the simulated network environment to realize fault drill simulation. For example, the drill strategies such as implementing wrong configuration on the target node, closing the port, and implementing link disconnection on the target link are implemented.

[0069] In the above network fault simulation method, a target network and drill strategy for a fault event are constructed; when the scale of the target network exceeds the upper limit of the virtualization simulation platform, the network topology and drill strategy of the target network are decomposed and processed to obtain multiple decomposed networks and drill strategies corresponding to each decomposed network; according to the network configuration information of the target network in the real environment, a simulated network environment of multiple decomposed networks is built in the virtualization simulation platform and the real business configuration information of the target network is loaded; according to the drill strategy corresponding to each decomposed network, a fault drill simulation is performed on each decomposed network loaded with the real business configuration information in the simulated network environment. This method designs a target network and drill technique strategy for a fault event, and when the scale of the target network exceeds the upper limit of the virtualization simulation platform, the target network topology and drill strategy are decomposed and simplified. By simplifying and decomposing the network topology, the performance bottleneck in large-scale network simulation is effectively alleviated, ensuring that fault drills can be effectively performed in large-scale network environments, and being able to handle larger-scale network topologies without sacrificing simulation accuracy.

[0070] In an exemplary embodiment, as shown in FIG. 2 , after the above step S130 builds a plurality of simulated network environments of decomposed networks in the virtualized simulation platform according to the network configuration information of the target network in the real environment, it further includes:

[0071] Step S131, determining the parameters to be verified in the network configuration information;

[0072] Step S132, building an experimental environment for the target network and obtaining experimental parameter values ​​of the parameters to be verified;

[0073] Step S133, calibrating corresponding parameters in the simulated network environment according to the experimental parameter values ​​to obtain a calibrated simulated network environment;

[0074] Step S134, loading the real service configuration information of the target network in the calibrated simulated network environment.

[0075] It is understandable that since some network configuration information in a real environment is difficult to obtain directly or accurately, the accuracy of the constructed simulated network environment will be affected. Therefore, to solve this problem, the present application also proposes a method for calibrating parameters in a simulated network environment.

[0076] In the specific implementation, the parameters that are difficult to obtain directly or accurately in the network configuration information can be first determined as the parameters to be verified. Then, the experimental equipment type simulation method is used to implement the calibration of the parameters to be verified, and accurate model input parameters are obtained. Specifically, by building an experimental environment for the target network and simulating through actual network equipment, the experimental parameter values ​​of the parameters to be verified can be obtained, and the corresponding parameters in the simulated network environment can be calibrated using the experimental parameter values. For example, the corresponding parameters in the simulated network environment are replaced with the obtained experimental parameter values, thereby obtaining a calibrated simulated network environment. Verification and calibration are performed through the simulation environment of the experimental equipment type to verify whether the experimental parameters are accurate and whether the drill effect meets expectations, thereby ensuring the accuracy of the model and the validity of the experimental data. Compared with the prior art, this method further improves the reliability of the simulation results through the calibration of the experimental equipment. Furthermore, the real business configuration information of the target network is loaded in the calibrated simulated network environment to facilitate subsequent fault drills.

[0077] In this embodiment, the experimental equipment type simulation can reproduce the physical environment of the network and provide the most realistic performance data without the need for protocol adaptation. Therefore, the experimental equipment type simulation can be used to calibrate parameters that are difficult to obtain directly or accurately, and then calibrate the corresponding parameters of the simulated network environment. This can ensure the consistency of the simulated network environment with the real environment, ensure the accuracy and effectiveness of subsequent simulations, and improve the credibility of fault drill results.

[0078] In an exemplary embodiment, after performing fault drill simulation on each decomposed network loaded with real business configuration information in the simulated network environment according to the drill strategy corresponding to each decomposed network, the above step S140 also includes: collecting network status parameters of the target network after simulation; calling a mathematical abstract model to evaluate the fault drill effect of the target network based on the network status parameters after simulation and the initial network status parameters of the target network before simulation.

[0079] Among them, network status parameters may include node routing table, forwarding table, port throughput, delay, packet loss rate, etc.

[0080] In a specific implementation, the initial network state parameters before the fault drill is implemented can be recorded in advance. After the fault drill begins, the network state is monitored in real time, and data is collected to monitor the changes in the network element state of the target network and the operation state of the entire network, so as to evaluate the effect of the drill after the fault drill is completed. When evaluating the effect of the fault drill, a mathematical abstract model method can be used to input the initial network state parameters before the fault drill and the network state parameters after the fault drill into the mathematical abstract model for evaluation to obtain the evaluation results of the fault drill effect. For example, the evaluation effect may include the evaluation effects of multiple dimensions such as the time to failure, the scope of failure impact, the efficiency of failure impact, the economic loss of failure, and network availability.

[0081] In this embodiment, the fault drill data obtained through the virtualization platform is used as the parameter input of the mathematical abstract model to evaluate the complete topology of the target network and the effect of the drill event, which can more comprehensively evaluate the impact of the fault on the network and provide more detailed evaluation results.

[0082] In an exemplary embodiment, after collecting the network status parameters of the target network after simulation, it also includes: performing simulation analysis and discrete event simulation on the simulated network status parameters through a simulation analysis model to obtain statistical analysis results; and evaluating the fault drill effect of the target network based on the statistical analysis results.

[0083] In the specific implementation, the simulation analysis type simulation can reproduce the behavior of the network protocol more realistically and the functions of the simulation system through the working process of the software simulation protocol, such as realizing the routing and forwarding capabilities of the network through the software protocol stack, without realizing the internal details of the system. Therefore, after the fault drill of the target network, the network state parameters obtained by the simulation can also be used as the model parameter input of the simulation analysis simulation model to perform simulation analysis and discrete event simulation of the complete topology of the target network, and collect data in the simulation process to obtain statistical analysis results. The fault drill effect of the target network is further evaluated based on the statistical analysis results. Specifically, the key performance indicators of the evaluation can be determined first, such as the fault effective time, the fault impact range, the fault impact efficiency, the fault economic loss, the network availability, etc.; by comparing the index values ​​of each performance index in the statistical analysis results with the expected results or historical data, the effectiveness of the fault drill effect is analyzed. If the difference between the index values ​​of each performance index in the statistical analysis results and the expected results / historical data meets the requirements, it is determined that the fault drill effect is good, otherwise, it is determined that the fault drill effect is poor.

[0084] In this embodiment, the simulation analysis model is based on the simulation analysis of the network status parameters after the fault drill simulation, the behavior of the network protocol is reproduced, and the results of statistical analysis are obtained to evaluate the effectiveness of the fault drill, which can be compared with the evaluation results of the fault drill effect through the mathematical abstract model. This approach of using multiple evaluation methods can ensure the credibility of the evaluation results of the fault drill effect.

[0085] In an exemplary embodiment, after the above-mentioned simulation analysis model performs simulation analysis and discrete event simulation on the simulated network status parameters to obtain statistical analysis results, it also includes: optimizing the mathematical abstract model according to the statistical analysis results to obtain an optimized mathematical abstract model; and evaluating the effect of the next fault drill of the target network through the optimized mathematical abstract model.

[0086] In a specific implementation, the statistical analysis results can be compared with the fault drill effect evaluation results of the mathematical abstract model through optimization methods such as optimization and operations research. The mathematical abstract model can be adjusted according to the comparison results to optimize the evaluation capability of the mathematical abstract model. When the next fault drill effect of the target network is evaluated, the optimized mathematical abstract model can be used for evaluation to improve the accuracy of the evaluation results.

[0087] In this embodiment, the optimized mathematical abstract model can more accurately reflect the actual state and performance of the target network, making the evaluation of the fault drill effect more reliable.

[0088] In an exemplary embodiment, in the above step S120, the network topology and exercise strategy of the target network are decomposed to obtain multiple decomposed networks and exercise strategies corresponding to each decomposed network, including: dividing the target network into multiple areas; merging nodes with similar functions or redundant relationships in each area, and simplifying external domain nodes in each decomposed network to obtain multiple decomposed networks; allocating the exercise strategy to each decomposed network to obtain the exercise strategy corresponding to each decomposed network.

[0089] In the specific implementation, the target network can be divided into multiple areas according to the function, so that each area can be exercised independently to reduce complexity. For each area, nodes with similar functions or redundant relationships are merged. For example, a node with duplex redundancy can be regarded as one node, thereby reducing the complexity of processing. And, for nodes in the external domain, a simplified solution is adopted. For example, multiple external nodes are merged into a simple AS (autonomous system) domain, focusing on the overall interactive behavior rather than individual details. In addition, in the process of simplification and merging, the overall topological features and basic features are retained, and the topological details of the simplified parts are restored to ensure that the core structure and behavior of the network are not destroyed, thereby obtaining multiple decomposed networks.

[0090] For each decomposed network after decomposition and simplification, design a corresponding fault drill strategy (such as physical strategies such as disconnecting ports and software strategies such as modifying configurations). At this time, the drill strategy acts on the target network node, and it is also necessary to use the expected effect of the drill strategy in the decomposed network as the strategy input for adjacent or related decomposed networks based on the decomposition and simplification of the network. Decompose the fault drill into multiple fault drill tasks implemented on the virtualization simulation platform.

[0091] In this embodiment, by dividing the target network into multiple areas, the complex overall network is converted into multiple smaller units that are easy to manage and analyze, and a special exercise strategy is assigned according to the characteristics and requirements of each decomposed network, making the exercise more targeted and effective. This method can alleviate the performance bottleneck in large-scale network simulation.

[0092] In one embodiment, in order to facilitate those skilled in the art to understand the embodiments of the present application, specific examples will be described below with reference to the accompanying drawings.

[0093] Considering that the existing fault drill simulation methods have certain shortcomings and it is difficult to balance the simulation scale and simulation accuracy, the present application proposes an integrated fault drill and evaluation simulation system, the structure of which is shown in FIG3, including a virtualized simulation platform, as well as simulation analysis simulation, mathematical abstract model, experimental equipment simulation and other methods. Among them, the core capability modules of the virtualized simulation platform include a protocol simulation module, a topology simulation module, a network element simulation module, a deployment monitoring module, a fault simulation module and a simulation controller. Among them, the protocol simulation module provides an open source standardized network protocol software dynamic loading interface, and different protocol software can be selected as needed; the network element simulation module simulates network element devices such as routers, switches, computers (PCs), etc., and the virtual network element loads the network protocol software; the topology simulation module provides the ability of networking and topological connection; the simulation controller is used to manage and control the interaction and operation of the entire network simulation; the deployment monitoring module is used to monitor the operation status and performance indicators of the virtual network in real time; the fault simulation module is used to simulate various fault scenarios and event generation in the network. Each core capability module provides a corresponding functional open interface.

[0094] The fault drill system is based on a virtualized simulation platform. Through the functional open interface of the core capability module, it realizes cross-platform interaction, integrates experimental equipment simulation technology, simulation analysis simulation technology, and mathematical abstraction simulation technology and capabilities, and realizes an integrated simulation system for network fault drills. Key drill steps such as network environment construction for fault drills, fault drill events and status monitoring collection are all implemented on the virtualized simulation platform. Data processing and analysis steps such as data calibration, statistical analysis, and effect evaluation are enhanced by other technical capabilities. The integrated network fault drill system is implemented according to the following steps. See Figure 4 for the flow chart, including:

[0095] 1. Fault drill design. Design the target network and drill strategy for the fault event. If the target network scale exceeds the upper limit of the virtualization simulation platform, the target network topology and drill strategy can be decomposed and simplified. Simplify the network topology, retain the overall topological features and basic features, simplify the details (for example, merge duplex redundant nodes into one node, merge and simplify the nodes in the external domain into a simple AS domain, etc.), and restore the topological details of the simplified parts. Decompose the target network into multiple simplified network topologies, and design corresponding fault drill techniques for the decomposed and simplified network topologies (for example, physical strategies such as disconnecting ports and software strategies such as modifying configurations). Decompose the fault drill into multiple fault drill tasks implemented on the virtualization simulation platform.

[0096] 2. Build a simulated network environment. Obtain network topology information (including detailed information such as distance length), network element equipment information parameters, network element configuration, routing protocols and other related information based on the existing network environment. Build the target network environment for fault drills in the simulated environment.

[0097] 3. Calibration of parameters in the simulated network environment. For important parameters that are difficult to obtain directly or accurately in the existing network environment, parameter calibration can be performed through the experimental equipment environment to adjust and calibrate the parameters of the simulated network environment. For example, the parameter information of the device is used as the parameter input of the network element simulation module; the delay data generated by the physical distance is used as the parameter input of the topology simulation module.

[0098] 4. Business loading. In the virtualization simulation platform, load the network's VPN, business routing, background traffic, and business traffic to restore the business configuration of the existing network.

[0099] 5. Status monitoring and data collection. Record the initial status of the network before the fault drill technique is implemented, and enable real-time status monitoring and data collection functions to monitor the status of the target network element and the operation status of the entire network, and collect key parameter data, such as node routing table, forwarding table, port throughput, delay, packet loss rate, etc.

[0100] 6. Implementation of fault drill techniques. Implement fault drill techniques, such as implementing wrong configuration on the target node, closing ports, and cutting off the target link. Observe the status changes of the target network and collect key parameter data in real time.

[0101] 7. Fault drill statistical analysis. The experimental data, detailed parameters and fault events of the fault drill obtained through the virtualization platform are used as the model parameter input for simulation analysis. Simulation analysis and discrete event simulation of the complete topology of the target network are performed to obtain statistical analysis results, which can be used for effect evaluation, as well as design optimization and verification of the evaluation model.

[0102] 8. Fault drill effect evaluation. The experimental data, detailed parameters and fault events of the fault drill obtained through the virtualization platform are used as parameter inputs of the mathematical abstract model to evaluate the complete topology of the target network and the effect of the drill events, such as the time to failure, the scope of failure impact, the efficiency of failure impact, the economic loss of failure, network availability, etc.

[0103] 9. Data and experimental result calibration. In order to ensure the accuracy of the model and the validity of the experimental data, verification and calibration can be carried out through the simulation environment of experimental equipment to verify whether the experimental parameters are accurate and whether the exercise results meet expectations. The parameters and models can be adjusted and improved according to the calibration results.

[0104] The following two application examples are used to further illustrate this solution.

[0105] 1. Integrated bearer network simulation system

[0106] Environment: including setting up virtualized simulation environment (device simulation): network simulation platform, running on distributed GPU (Graphic Processing Unit) server, open functional interface. And setting up experimental equipment simulation environment, simulation analysis simulation environment and mathematical abstract model.

[0107] Fault drills: drills on various types of faults and combined faults on the bearer network, such as BGP (Border Gateway Protocol, inter-domain routing protocol), IGP (Interior Gateway Protocol) protocol configuration errors, link interruptions, equipment misconfiguration, and other faults, and evaluate the impact of each fault on the bearer network.

[0108] Steps of the exercise:

[0109] 1. Fault drill design. Fault drills are divided into multiple experiments and techniques and strategies. After each technique is implemented, the network topology is restored.

[0110] 2. According to the existing network topology, build a network simulation environment on the virtualized simulation environment and enter key parameters.

[0111] 3. Use the test data and experimental data obtained through the experimental equipment simulation environment to refine the parameter input of the simulation environment, including link delay, network element equipment parameters and configuration information.

[0112] 4. Load business background traffic and business configuration in the virtualized simulation environment.

[0113] 5. Start the process of network status monitoring and data collection, and collect key data such as network element logs, routing tables, forwarding tables, port information, etc.

[0114] 6. Implement fault techniques to inject faults into the current network environment.

[0115] 7. Monitor the target network element status and the entire network information, and collect key data.

[0116] 8. The detailed parameters and experimental data are simulated in the simulation analysis environment to obtain statistical analysis results.

[0117] 9. Use the collected experimental data as input to the mathematical abstract model to obtain the evaluation results of the fault drill.

[0118] 10. Design calibration experiments to calibrate the simulated experimental results with the experimental results of the experimental equipment simulation environment.

[0119] 2. Implementing Chaos Engineering Experiments on the Bearer Network on the Digital Twin System

[0120] Digital twin technology provides an efficient and secure platform for network fault drills by creating accurate virtual models of physical entities. In this embodiment, the digital twin system not only simulates the physical structure and behavior of the bearer network, but also integrates the simulation technology required for fault drills, so that chaos engineering fault drills can be carried out in a highly controlled and measurable environment.

[0121] Troubleshooting steps:

[0122] 1. Fault drill design: Based on the actual operation of the bearer network, design the strategy and objectives of chaos engineering fault drills, including fault type, fault injection time and frequency, etc.

[0123] 2. Digital twin network environment construction: Build a complete virtual model of the bearer network in the digital twin system, including network topology, device configuration, routing protocol, etc. Ensure that the simulation technologies in the digital twin system can work together to provide necessary support and data for fault drills.

[0124] 3. Parameter calibration: Use the simulation technology embedded in the digital twin system to calibrate key parameters of the network environment to ensure the accuracy and effectiveness of fault drills.

[0125] 4. Business loading and status monitoring: Load business traffic in the digital twin environment, set up status monitoring and data collection mechanisms, and prepare for fault drills.

[0126] 5. Chaos engineering fault injection: Through the digital twin system, inject faults according to the designed strategy, such as randomly shutting down network devices, simulating link failures, etc., to test the resilience of the network. Monitor the changes in network status after fault injection and collect key performance indicator data, such as routing table changes, network latency, packet loss rate, etc.

[0127] 6. Statistical analysis and effect evaluation: Utilize the simulation technology embedded in the digital twin system to conduct in-depth analysis of the collected data and evaluate the impact of the fault on the network.

[0128] 7. Fault drill optimization: Based on the analysis results, adjust the fault drill strategy and goals to optimize the network's fault response measures.

[0129] 8. Result verification and model adjustment: The results of the fault drill are verified through the digital twin system to ensure the accuracy of the model, and the digital twin model is adjusted as needed.

[0130] By implementing chaos engineering fault drills on digital twin systems, the performance of the network under various fault conditions can be tested safely and efficiently, providing strong support for improving the stability and reliability of the network.

[0131] This application proposes an integrated fault drill and evaluation simulation system, which implements basic network simulation and fault drills based on a device-based simulation platform, while integrating the advantages of other simulation technologies to improve the authenticity and effectiveness of fault drills. This includes the calibration of model parameters with the help of experimental equipment-based simulation to obtain accurate model input parameters; the design and tuning of models with the help of the statistical analysis capabilities of simulation analysis-based simulations; and the scalability and efficient network evaluation with the help of mathematical abstraction-based simulation capabilities. This overcomes the limitations of a single simulation technology in terms of performance, resources, and scale, achieves comprehensive support for large-scale network fault drills, and provides comprehensive and accurate simulation and evaluation results for bearer network fault drills.

[0132] Specifically, by combining experimental equipment simulation, simulation analysis simulation and mathematical abstraction simulation on a virtualized simulation platform, high-precision simulation results are provided to truly reproduce the behavior and interaction of equipment, thereby improving the authenticity and effectiveness of fault drills. Mathematical abstraction simulation is used to achieve scale expansion and efficient network evaluation, alleviate performance bottlenecks, obtain effective experimental data, and improve the scalability and computational efficiency of the simulation system. Experimental equipment simulation is used to calibrate model parameters to ensure the accuracy and effectiveness of the simulation; the statistical analysis capabilities of simulation analysis simulation are used to design and tune the model, thereby enhancing the comprehensiveness and accuracy of fault drills. An integrated approach is used to combine the advantages of various simulation technologies, reduce experimental costs, improve the performance and scalability of the simulation system, and optimize resource utilization.

[0133] It should be understood that, although the various steps in the flowcharts involved in the above-mentioned embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps does not have a strict order restriction, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above-mentioned embodiments can include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily to be carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0134] Based on the same inventive concept, the embodiment of the present application also provides a network fault simulation device for implementing the network fault simulation method involved above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations in one or more network fault simulation device embodiments provided below can refer to the limitations of the network fault simulation method above, and will not be repeated here.

[0135] In one embodiment, as shown in FIG. 5 , a network fault simulation device is provided, including: a construction module 510, a decomposition module 520, a loading module 530 and a simulation module 540, wherein:

[0136] Construction module 510, used to construct a target network and exercise strategy for a fault event;

[0137] A decomposition module 520 is used to decompose the network topology and exercise strategy of the target network when the scale of the target network exceeds the upper limit of the virtualization simulation platform, and obtain multiple decomposed networks and exercise strategies corresponding to each decomposed network;

[0138] The loading module 530 is used to build a simulated network environment of multiple decomposed networks in the virtualized simulation platform and load the real business configuration information of the target network according to the network configuration information of the target network in the real environment;

[0139] The simulation module 540 is used to perform fault drill simulation on each decomposed network loaded with real service configuration information in the simulated network environment according to the drill strategy corresponding to each decomposed network.

[0140] In one of the embodiments, the device also includes a calibration module, which is used to determine the parameters to be verified in the network configuration information; build an experimental environment of the target network to obtain experimental parameter values ​​of the parameters to be verified; calibrate the corresponding parameters in the simulated network environment according to the experimental parameter values ​​to obtain a calibrated simulated network environment; and load the real business configuration information of the target network in the calibrated simulated network environment.

[0141] In one of the embodiments, the device also includes an evaluation module for collecting network status parameters of the target network after simulation; calling a mathematical abstract model to evaluate the fault drill effect of the target network based on the network status parameters after simulation and the initial network status parameters of the target network before simulation.

[0142] In one of the embodiments, the evaluation module is also used to perform simulation analysis and discrete event simulation on the simulated network state parameters through a simulation analysis model to obtain statistical analysis results; based on the statistical analysis results, the fault drill effect of the target network is evaluated.

[0143] In one of the embodiments, the device further includes an optimization module for optimizing the mathematical abstract model according to the statistical analysis results to obtain an optimized mathematical abstract model; and evaluating the effect of the next fault drill of the target network through the optimized mathematical abstract model.

[0144] In one embodiment, the decomposition module 520 is also used to divide the target network into multiple areas; merge the nodes with similar functions or redundant relationships in each area, and simplify the external domain nodes in each decomposition network to obtain multiple decomposition networks; assign the exercise strategy to each decomposition network to obtain the exercise strategy corresponding to each decomposition network.

[0145] Each module in the above network fault simulation device can be implemented in whole or in part by software, hardware and their combination. Each module can be embedded in or independent of the processor in the computer device in the form of hardware, or can be stored in the memory in the computer device in the form of software, so that the processor can call and execute the operations corresponding to each module above.

[0146] In one embodiment, a computer device is provided, which may be a terminal, and its internal structure diagram may be shown in FIG6. The computer device includes a processor, a memory, a communication interface, a display screen, and an input device connected through a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The communication interface of the computer device is used to communicate with an external terminal in a wired or wireless manner, and the wireless manner can be implemented through WIFI, a mobile cellular network, NFC (near field communication) or other technologies. When the computer program is executed by the processor, a network fault simulation method is implemented. The display screen of the computer device may be a liquid crystal display screen or an electronic ink display screen, and the input device of the computer device may be a touch layer covered on the display screen, or a key, a trackball or a touch pad set on the housing of the computer device, or an external keyboard, touch pad or mouse, etc.

[0147] Those skilled in the art will understand that the structure shown in FIG. 6 is merely a block diagram of a partial structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than shown in the figure, or combine certain components, or have a different arrangement of components.

[0148] In one embodiment, a computer device is further provided, including a memory and a processor, wherein a computer program is stored in the memory, and the processor implements the steps in the above method embodiments when executing the computer program.

[0149] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps in the above-mentioned method embodiments are implemented.

[0150] In one embodiment, a computer program product is provided, including a computer program, which implements the steps in the above method embodiments when executed by a processor.

[0151] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant laws, regulations and standards of relevant countries and regions.

[0152] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., but are not limited to this.

[0153] The technical features of the above embodiments may be arbitrarily combined. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0154] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A network fault simulation method, characterized in that: The method comprises: Build target networks and drill strategies for failure events; When the scale of the target network exceeds the upper limit of the virtualization simulation platform, the network topology of the target network and the exercise strategy are decomposed to obtain a plurality of decomposed networks and exercise strategies corresponding to each of the decomposed networks; According to the network configuration information of the target network in the real environment, building a simulated network environment of the multiple decomposed networks in the virtualized simulation platform and loading the real business configuration information of the target network; According to the drill strategy corresponding to each of the decomposed networks, a fault drill simulation is performed on each of the decomposed networks loaded with the real service configuration information in the simulated network environment.

2. The method according to claim 1, characterized in that After building the simulated network environment of the multiple decomposed networks in the virtualized simulation platform according to the network configuration information of the target network in the real environment, the method further includes: Determining the parameters to be verified in the network configuration information; Building an experimental environment for the target network and obtaining experimental parameter values ​​of the parameters to be verified; According to the experimental parameter values, corresponding parameters in the simulated network environment are calibrated to obtain a calibrated simulated network environment; The real service configuration information of the target network is loaded in the calibrated simulated network environment.

3. The method according to claim 1, characterized in that After performing fault drill simulation on each decomposed network loaded with the real service configuration information in the simulated network environment according to the drill strategy corresponding to each decomposed network, the method further includes: Collecting network status parameters of the target network after simulation; The mathematical abstract model is called to evaluate the fault drill effect of the target network according to the network state parameters after the simulation and the initial network state parameters of the target network before the simulation.

4. The method according to claim 3, characterized in that After collecting the network status parameters of the target network after simulation, the method further includes: Perform simulation analysis and discrete event simulation on the simulated network state parameters through a simulation analysis model to obtain statistical analysis results; According to the statistical analysis results, the fault drill effect of the target network is evaluated.

5. The method according to claim 4, characterized in that After the simulation analysis model is used to perform simulation analysis and discrete event simulation on the simulated network state parameters to obtain statistical analysis results, the method further includes: According to the statistical analysis results, the mathematical abstract model is optimized to obtain an optimized mathematical abstract model; The optimized mathematical abstract model is used to evaluate the effect of the next fault drill of the target network.

6. The method according to claim 1, characterized in that The decomposing the network topology of the target network and the exercise strategy to obtain a plurality of decomposed networks and exercise strategies corresponding to each of the decomposed networks includes: Dividing the target network into multiple areas; The nodes with similar functions or redundant relationships in each region are merged respectively, and the external domain nodes in each decomposed network are simplified to obtain multiple decomposed networks; The training strategy is distributed to each decomposed network to obtain the training strategy corresponding to each decomposed network.

7. A network fault simulation device, characterized in that: The device comprises: Building modules for building target networks and drill strategies for failure events; A decomposition module, used for decomposing the network topology of the target network and the exercise strategy to obtain multiple decomposed networks and exercise strategies corresponding to each of the decomposed networks when the scale of the target network exceeds the upper limit of the virtualization simulation platform; A loading module, used to build a simulated network environment of the multiple decomposed networks in the virtualized simulation platform and load the real business configuration information of the target network according to the network configuration information of the target network in the real environment; The simulation module is used to perform fault drill simulation on each decomposed network loaded with the real business configuration information in the simulation network environment according to the drill strategy corresponding to each decomposed network.

8. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the network fault simulation method according to any one of claims 1 to 6 are implemented.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the network fault simulation method according to any one of claims 1 to 6 are implemented.

10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the network fault simulation method described in any one of claims 1 to 6 are implemented.

Images