Distributed cross-domain network maintenance positioning method based on mobile Agent

Abstract

The invention relates to a distributed cross-domain network maintenance positioning system and method based on a mobile Agent, and the system comprises a central network manager which is provided with a central side NMS, and is used for carrying out the configuration of a mobile test node according to a fault service link, and carrying out the positioning of a network problem; a plurality of sub-domain networks, wherein each sub-domain network is used for realizing a corresponding service; the sub-domain network comprises: a service node; the sub-domain side NMS is used for reporting a fault service link and pushing the configured mobile test node to a service node to perform connectivity mutual access of a simulation task; the firewall is used for carrying out session monitoring on the service flow reaching the sub-domain network; and the center side NMS carries out network problem positioning according to the session monitoring structure of the protection wall when the mobile test node carries out the connectivity mutual access of the simulation task. According to the invention, a distributed network management architecture is combined with a mobile agent mode, so that network connectivity testing, problem collection, solution strategy one-key issuing and problem verification whole-process problem closed loop can be conveniently and accurately realized.

Description

Technical Field

[0001] The present invention relates to the technical field of network operation and maintenance, and in particular to a distributed cross-domain network maintenance and positioning method based on mobile Agent. Background Art

[0002] With the rapid development of IPv4 / IPv6 dual-stack network technology, the network itself has become more complex, and its network equipment scale, system architecture, security management, and network heterogeneity have greatly increased compared to the past. As a result, problems in network connectivity, performance, resource allocation, and security will arise, especially in the basic issue of business connectivity verification, which requires an efficient and convenient way to quickly locate the problem.

[0003] Existing methods for locating network problems mostly use command lines, operation and maintenance scripts, network management systems (NMS), etc. Among them, the command line positioning method is complex to operate and has the highest technical requirements for operation and maintenance tasks; the operation and maintenance script positioning method is generally a specific script compiled for preset problems, which cannot support problem positioning in various complex scenarios; and traditional network management modes are generally divided into centralized network management mode and distributed network management mode. Both types of network management modes rely on the active reporting of underlying network devices for network faults and alarm collection, and lack the ability to flexibly and actively solve fault problems.

[0004] At the same time, the existing network operation and maintenance is not only insufficient in solving communication problems on the business side, but also lacks flexible and effective testing methods for locating network problems in advanced applications that already support IPv6 or even use IPv6+ related technologies.

[0005] Therefore, there is an urgent need for a convenient network testing method that supports custom IPv4 / IPv6 message headers to solve the above problems. Summary of the invention

[0006] In order to solve the technical problems existing in the above-mentioned prior art, the object of the present invention is to provide a distributed cross-domain network maintenance positioning method based on mobile Agent, which has the characteristics of high accuracy and high flexibility.

[0007] To achieve the above-mentioned object of the invention, the present invention provides a distributed cross-domain network maintenance and positioning system based on mobile agent, the system comprising:

[0008] A central network management system, wherein the central network management system sets a central-side NMS for configuring mobile test nodes according to a faulty service link and locating network problems;

[0009] A plurality of sub-domain networks, each of which is used to implement its corresponding business; the sub-domain networks include:

[0010] Business nodes,

[0011] The NMS on the domain side is used to report the faulty service link and push the configured mobile test node to the service node to perform inter-connectivity communication of the simulation task;

[0012] The firewall is used to perform session monitoring on the business traffic arriving at the sub-domain network; the central-side NMS locates network problems based on the session monitoring structure of the protective wall when the mobile test node performs interconnection visits for the simulated task.

[0013] According to one aspect of the present invention, the present invention provides a distributed cross-domain network maintenance positioning method based on mobile agent, comprising the following steps:

[0014] Step S1, the center-side NMS configures a mobile test node according to the faulty service link, and pushes the mobile test node to each sub-domain-side NMS;

[0015] Step S2: Each of the sub-domain-side NMSs pushes the received mobile test node to the simplified operating environment on its service node;

[0016] Step S3, the mobile test node performs connectivity mutual access according to the assigned simulation task;

[0017] Step S4, the center-side NMS obtains the reachable network segment of the simulated task service traffic in real time based on the session monitoring results of the firewalls on each sub-domain network, and completes the network problem location;

[0018] Step S5: adjusting the firewall security policy according to the positioning result of the network problem, and performing network connectivity testing and verification through the mobile test node;

[0019] Step S6: Based on the network connectivity test verification being passed, each of the sub-domain-side NMSs recovers the mobile test node nearby and reports it to the center-side NMS.

[0020] According to a technical solution of the present invention, the mobile test node is a mobile Agent node.

[0021] According to a technical solution of the present invention, the mobile test node configuration includes IP configuration, protocol configuration and port configuration of the service chain in the simulation task.

[0022] According to a technical solution of the present invention, the mobile test node configuration is performed by setting a message header of the mobile test node.

[0023] According to a technical solution of the present invention, in step S3, the simulation task involves connectivity mutual visits between the first domain network and the second domain network, and the service link sequentially includes a mobile test node of the first domain network to a firewall of the first domain network, a firewall of the first domain network to a firewall of the second domain network, and a firewall of the second domain network to a mobile test node of the second domain network.

[0024] According to a technical solution of the present invention, in step S4, it specifically includes:

[0025] The center-side MNS obtains session monitoring results of the firewall of the first sub-domain network and the firewall of the second sub-domain network in real time, and determines the network problem node according to the service link to locate the network problem.

[0026] According to a technical solution of the present invention, in step S5, it specifically includes:

[0027] Step S51: The center-side MNS sends a processing instruction to the sub-domain-side MNS corresponding to the network problem node according to the determined network problem node, and the sub-domain-side MNS corresponding to the network problem node checks the firewall security policy and delegates the release security policy. The sub-domain-side NMS feeds back a delegation completion instruction to the center-side MNS;

[0028] Step S52: The center-side MNS sends a verification test instruction to the domain-side NMS of the first domain network according to the received decentralization completion instruction, and the domain-side NMS of the first domain network controls its mobile test node to perform the test according to the verification test instruction;

[0029] Step S53: The center-side MNS confirms that the service link of the simulation task is unobstructed based on the firewall session monitoring result, and completes the network connectivity test and verification.

[0030] According to a technical solution of the present invention, in step S6, it specifically includes:

[0031] Step S61: The center-side MNS sends a test completion instruction to each of the sub-domain-side NMSs according to the smoothness of the service link;

[0032] Step S62: Each of the sub-domain-side NMSs recovers the mobile test node according to the received test completion instruction;

[0033] Step S63: Each of the sub-domain-side NMSs sends a recovery completion instruction to the center-side MNS according to the recovery of the mobile test node.

[0034] Compared with the prior art, the present invention has the following beneficial effects:

[0035] The present invention proposes a distributed cross-domain network maintenance and positioning system and method based on mobile agent, which adopts a distributed network management architecture combined with a mobile agent (Agent), has the technical characteristics of strong scalability, flexible deployment, parallel computing, etc., and can conveniently and accurately realize network connectivity testing, problem collection, one-click distribution of solution strategies and problem verification of the entire process closed loop.

[0036] The present invention has a simple structure and can verify the connectivity issues of relevant application service networks adapted to IPv6 by configuring the domain-specific NMS and customizing the message header and test file of the mobile agent node, thereby having high flexibility and versatility. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments are briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention, and for ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0038] Figure 1 A schematic diagram schematically shows a structure of a distributed cross-domain network management and maintenance system based on a mobile agent provided according to an embodiment of the present invention;

[0039] Figure 2 The flowchart schematically shows a distributed cross-domain network management and maintenance method based on mobile agent provided in one embodiment of the present invention. DETAILED DESCRIPTION

[0040] The description of the embodiments of this specification should be combined with the corresponding drawings, which should be considered as part of the complete specification. In the drawings, the shape or thickness of the embodiments may be enlarged and indicated for simplification or convenience. Furthermore, the parts of each structure in the drawings will be described separately. It is worth noting that the elements not shown in the drawings or not described in words are in a form known to ordinary technicians in the relevant technical field.

[0041] The description of the embodiments herein and any reference to directions and orientations are only for the convenience of description and are not to be construed as any limitation on the scope of protection of the present invention. The following description of the preferred embodiments may involve combinations of features, which may exist independently or in combination, and the present invention is not particularly limited to the preferred embodiments. The scope of the present invention is defined by the claims.

[0042] The present invention provides a distributed cross-domain network maintenance and positioning system based on mobile Agent, the system comprising:

[0043] Central network management: The central network management sets up the central-side NMS to configure mobile test nodes according to the faulty service link and locate network problems;

[0044] Several sub-domain networks, each of which is used to implement its corresponding business; the sub-domain networks include:

[0045] Business nodes,

[0046] The NMS on the domain side is used to report faulty service links and push configured mobile test nodes to service nodes to simulate task connectivity.

[0047] The firewall is used to monitor the session of the business traffic arriving at the sub-domain network. The central-side NMS locates the network problem based on the session monitoring structure of the firewall when the mobile test node performs the interconnection of the simulated task.

[0048] The present invention provides a distributed cross-domain network maintenance and positioning method based on mobile Agent, comprising the following steps:

[0049] Step S1: The center-side NMS configures a mobile test node according to the faulty service link, and pushes the mobile test node to each sub-domain-side NMS;

[0050] The mobile test node configuration includes the IP configuration, protocol configuration and port configuration of the service chain in the simulation task. The mobile test node configuration is performed by setting the message header. The mobile test node supports IPV6 and IPV4.

[0051] Step S2: Each sub-domain side NMS pushes the received mobile test node to the simple operating environment on its service node;

[0052] Step S3: The mobile test nodes perform connectivity visits according to the assigned simulation tasks;

[0053] In step S3, the simulation task involves the connectivity mutual visits between the first domain network and the second domain network, and the business links include the mobile test node of the first domain network to the firewall of the first domain network, the firewall of the first domain network to the firewall of the second domain network, and the firewall of the second domain network to the mobile test node of the second domain network.

[0054] Step S4: The NMS at the center side obtains the reachable network segment of the simulated task service traffic in real time based on the session monitoring results of the firewalls on each sub-domain network, and completes the network problem location;

[0055] The center-side MNS obtains the session monitoring results of the firewall of the first domain network and the firewall of the second domain network in real time, and determines the network problem node according to the service link to locate the network problem.

[0056] Step S51: The center-side MNS sends a processing instruction to the sub-domain-side MNS corresponding to the network problem node according to the determined network problem node. The sub-domain-side MNS corresponding to the network problem node checks the firewall security policy and delegates the release security policy. The sub-domain-side NMS feeds back the delegation completion instruction to the center-side MNS.

[0057] Step S52: The center-side MNS sends a verification test instruction to the domain-side NMS of the first domain network according to the received decentralization completion instruction, and the domain-side NMS of the first domain network controls its mobile test node to perform the test according to the verification test instruction;

[0058] Step S53: The MNS at the center side confirms that the service link of the simulation task is unobstructed based on the firewall session monitoring result, and completes the network connectivity test and verification.

[0059] Step S6: If the network connectivity test is verified to be successful, each sub-domain-side NMS recovers the nearest mobile test node and reports it to the center-side NMS.

[0060] In step S6, it specifically includes:

[0061] Step S61: The MNS at the center side sends a test completion instruction to each sub-domain side NMS according to the smooth service link;

[0062] Step S62: Each sub-domain side NMS recycles the mobile test node according to the received test completion instruction;

[0063] Step S63: Each sub-domain side NMS sends a recovery completion instruction to the center side MNS according to the recovered mobile test node.

[0064] like Figure 1 As shown, in one embodiment of the present invention, in a distributed cross-domain network maintenance and positioning system based on mobile Agent, there are n different sub-domain networks, and each autonomous system (AS) has a corresponding network management node NMS, denoted as NMS-1, NMS-m, and NMS-n. The NMS on each sub-domain side and the NMS on the center side form a distributed network management architecture. The locations of Agent-1, Agent-m, and Agent-n represent service 1, service m, and service n, respectively. The service supports Ipv4 and / or Ipv6 protocols.

[0065] The distributed cross-domain network maintenance positioning method based on mobile agent includes the following steps:

[0066] Step S1: The center-side NMS configures a mobile test node according to the faulty service link and pushes the mobile test node to the domain-side NMS;

[0067] When a network connectivity failure occurs between service 1 and service m, the central-side NMS configures the Agent configuration (IP, protocol, port, etc.) of the two failed service links. The central-side NMS pushes the mobile test node to the network management node NMS in AS domain 1, AS domain m, and AS domain n, and then the sub-domain NMS pushes it to the simple operating environment on the service node. The Agent node simulates the service system for connectivity mutual access according to the assigned tasks.

[0068] Step S2: The domain-side NMS pushes the received mobile test node to the simple operating environment on the service node;

[0069] Step S3: The mobile test nodes perform connectivity visits according to the assigned simulation tasks;

[0070] Step S4: The NMS on each sub-domain side obtains the reachable network segment of the simulated task service traffic in real time based on the session monitoring results of the firewall, and completes the network problem location;

[0071] As shown in the figure, combined with firewall session monitoring, it is possible to know in real time that the simulated service traffic can reach the network segment. For example, the service traffic reaches the firewall of link 1-1 and does not pass through the link 1-2 segment, so it is known that the firewall segment blocks the service traffic.

[0072] Step S5: According to the location result of the network problem location, the firewall security policy is adjusted, and the network connectivity test and verification are performed by moving the test node;

[0073] The NMS on the center side or the NMS of AS domain m can verify that it is a firewall security policy problem, issue the corresponding release security policy, release the service traffic from service 1 to service 2, and complete the network connectivity test and verification;

[0074] Step S6: If the network connectivity test is verified to be successful, the NMS on the sub-domain side recycles the mobile test node and reports it to the NMS on the center side.

[0075] After the test verification is completed, the NMSs in AS domain 1 and AS domain m will recycle the mobile agent nodes nearby and report them to the central NMS, completing the closed loop of the entire life cycle of the problem.

[0076] The present invention introduces a simulated service interface protocol into the mobile Agent node in the traditional distributed cross-domain NMS to perform a connectivity test function, which can conveniently and accurately implement a full-process closed loop of network connectivity testing, problem collection, one-click delivery of solution strategies, and problem verification.

[0077] IPv6 technology is introduced into the mobile Agent node in the traditional distributed cross-domain NMS. Through the customizable IPv6 message header and test details of NMS, the network connectivity issues of related application services that have been adapted to IPv6 can be flexibly verified.

[0078] It should be noted that the present invention may be provided as a method, an apparatus or a computer program product. Therefore, the embodiments of the present invention may take the form of a complete hardware embodiment, a complete software embodiment or an embodiment combining software and hardware. Moreover, the embodiments of the present invention may take the form of a computer program product implemented on one or more computer-usable storage media containing computer-usable program codes.

[0079] The embodiments of the present invention are described with reference to the flowcharts and / or block diagrams of the methods, terminal devices (systems), and computer program products according to the embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of the processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, an embedded processor, or other programmable data processing terminal device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing terminal device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0080] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing terminal device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce a manufactured product including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 These computer program instructions can also be loaded onto a computer or other programmable data processing terminal device, so that a series of operation steps are executed on the computer or other programmable terminal device to produce a computer-implemented process, so that the instructions executed on the computer or other programmable terminal device provide for implementing the process in the process. Figure 1 A process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0081] It should also be noted that, in this article, the terms "include", "comprises" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or terminal device including a series of elements includes not only those elements, but also includes other elements not explicitly listed, or also includes elements inherent to such process, method, article or terminal device. In the absence of further restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, article or terminal device including the elements.

[0082] Finally, it should be noted that the above is a preferred embodiment of the present invention. It should be pointed out that although the preferred embodiment of the present invention has been described, for those skilled in the art, once the basic creative concept of the present invention is known, several improvements and modifications can be made without departing from the principles of the present invention, and these improvements and modifications should also be regarded as the protection scope of the present invention. Therefore, the attached claims are intended to be interpreted as including the preferred embodiment and all changes and modifications that fall within the scope of the embodiments of the present invention.

Claims

1. A distributed cross-domain network maintenance and positioning system based on mobile agent, characterized in that: include: A central network management system, wherein the central network management system sets a central-side NMS for configuring mobile test nodes according to a faulty service link and locating network problems; A plurality of sub-domain networks, each of which is used to implement its corresponding business; the sub-domain networks include: Business nodes, The NMS on the domain side is used to report the faulty service link and push the configured mobile test node to the service node to perform inter-connectivity communication of the simulation task; The firewall is used to perform session monitoring on the business traffic arriving at the sub-domain network; the central-side NMS locates network problems based on the session monitoring structure of the protective wall when the mobile test node performs interconnection visits for the simulated task.

2. A distributed cross-domain network maintenance and positioning method based on mobile agent, characterized in that: The distributed cross-domain network maintenance and positioning system based on mobile agent according to claim 1 comprises the following steps: Step S1, the center-side NMS configures a mobile test node according to the faulty service link, and pushes the mobile test node to each sub-domain-side NMS; Step S2: Each of the sub-domain-side NMSs pushes the received mobile test node to the simplified operating environment on its service node; Step S3, the mobile test node performs connectivity mutual access according to the assigned simulation task; Step S4, the center-side NMS obtains the reachable network segment of the simulated task service traffic in real time based on the session monitoring results of the firewalls on each sub-domain network, and completes the network problem location; Step S5: adjusting the firewall security policy according to the positioning result of the network problem, and performing network connectivity testing and verification through the mobile test node; Step S6: Based on the network connectivity test verification being passed, each of the sub-domain-side NMSs recovers the mobile test node nearby and reports it to the center-side NMS.

3. The distributed cross-domain network maintenance and positioning method based on mobile agent according to claim 2 is characterized in that: The mobile test node is a mobile Agent node.

4. The distributed cross-domain network maintenance and positioning method based on mobile agent according to claim 2 is characterized in that: The mobile test node configuration includes IP configuration, protocol configuration and port configuration for the service chain in the simulation task.

5. The distributed cross-domain network maintenance and positioning method based on mobile agent according to claim 4 is characterized in that: The mobile test node configuration is performed by setting a message header of the mobile test node.

6. The distributed cross-domain network maintenance and positioning method based on mobile agent according to claim 2 is characterized in that: In step S3, the simulation task involves connectivity mutual visits between the first domain network and the second domain network, and the service link sequentially includes a mobile test node of the first domain network to a firewall of the first domain network, a firewall of the first domain network to a firewall of the second domain network, and a firewall of the second domain network to a mobile test node of the second domain network.

7. The distributed cross-domain network maintenance and positioning method based on mobile agent according to claim 6 is characterized in that: In the step S4, it specifically includes: The center-side MNS obtains session monitoring results of the firewall of the first sub-domain network and the firewall of the second sub-domain network in real time, and determines the network problem node according to the service link to locate the network problem.

8. The distributed cross-domain network maintenance and positioning method based on mobile agent according to claim 6 is characterized in that: In the step S5, it specifically includes: Step S51: The center-side MNS sends a processing instruction to the sub-domain-side MNS corresponding to the network problem node according to the determined network problem node, and the sub-domain-side MNS corresponding to the network problem node checks the firewall security policy and delegates the release security policy. The sub-domain-side NMS feeds back a delegation completion instruction to the center-side MNS; Step S52: The center-side MNS sends a verification test instruction to the domain-side NMS of the first domain network according to the received decentralization completion instruction, and the domain-side NMS of the first domain network controls its mobile test node to perform the test according to the verification test instruction; Step S53: The center-side MNS confirms that the service link of the simulation task is unobstructed based on the firewall session monitoring result, and completes the network connectivity test and verification.

9. The distributed cross-domain network maintenance and positioning method based on mobile agent according to claim 8 is characterized in that: In the step S6, it specifically includes: Step S61: The center-side MNS sends a test completion instruction to each of the sub-domain-side NMSs according to the smoothness of the service link; Step S62: Each of the sub-domain-side NMSs recovers the mobile test node according to the received test completion instruction; Step S63: Each of the sub-domain-side NMSs sends a recovery completion instruction to the center-side MNS according to the recovery of the mobile test node.

Images