Simulation processing method and device of network target range, electronic equipment and storage medium

Abstract

The invention provides a simulation processing method and device for a network target range, electronic equipment and a storage medium. The method comprises the following steps: acquiring a preset constructed primary virtual machine; creating a plurality of simulation base control nodes based on a virtual memory and a virtual processor corresponding to the first-level virtual machine; scheduling corresponding virtual resources based on the first-level virtual machine, and creating a plurality of simulation base computing nodes; and sending a simulation instruction to a simulation application system established based on the primary virtual machine, so that the simulation application system calls different numbers of simulation base control nodes and simulation base calculation nodes based on the simulation instruction to construct targets corresponding to the simulation instruction in number, and realizing a simulation operation corresponding to the simulation instruction based on the targets. The method does not depend on physical resources directly, and a virtual simulation base, namely a first-level virtual machine, can be created based on virtual resources in an original cloud environment; and a second-level virtual machine is differentiated from the first-level virtual machine to serve as a simulation target, so that the operation cost of simulation processing is reduced.

Description

Technical Field

[0001] The present invention relates to the field of simulation technology, and in particular to a simulation processing method, device, electronic equipment and storage medium for a network target range. Background Art

[0002] A cyber range is a technology or product based on virtualization technology that simulates and reproduces the operating status and operating environment of network architecture, system equipment, and business processes in real cyberspace, so as to more effectively realize learning, research, testing, competition, exercises and other behaviors related to network security, thereby improving the network security confrontation level of personnel and institutions.

[0003] Among them, cyberspace is a complex system that deeply integrates physical entities and information technology, running various physical devices and software programs. The cyber range was born to study how to build a safe, trusted, and easy-to-control cyberspace.

[0004] The network target range is often realized through the target range system. The most important part of the target range system is the simulation system, which simulates various targets and scenarios in the real environment based on virtualization technology. Various topologies, routing forwarding, link management and control, virtual terminals and virtual network elements are running in it.

[0005] When performing simulation processing in a network target range, it is necessary to prepare multiple physical servers separately, install the control node of the simulation base and the computing node of the simulation base in the physical servers respectively, and then use the simulation application system installed in the physical server to call the control node and the computing node of the simulation base corresponding to the simulation requirements to build corresponding targets, so as to realize the communication between the internal virtual network and the external physical equipment; when performing simulation processing in the above manner, it is necessary to rely on physical resources, such as multiple physical servers, which leads to higher operating costs of the simulation processing. Summary of the invention

[0006] In view of this, an embodiment of the present invention provides a simulation processing method, device, electronic device and storage medium for a network target range to solve the problem in the prior art that physical resources are needed, resulting in high operating costs for simulation processing.

[0007] To achieve the above objectives, the embodiments of the present invention provide the following technical solutions:

[0008] A first aspect of an embodiment of the present invention shows a simulation processing method of a network range, the method comprising:

[0009] Get the first-level virtual machine built by default;

[0010] Creating multiple simulation base control nodes based on the virtual memory and virtual processor corresponding to the first-level virtual machine;

[0011] Based on the virtual resources corresponding to the first-level virtual machine scheduling, create multiple simulation base computing nodes;

[0012] Send simulation instructions to the simulation application system built based on the first-level virtual machine, so that the simulation application system calls different numbers of the simulation base control nodes and simulation base computing nodes based on the simulation instructions to build a number of targets corresponding to the simulation instructions, so as to implement the simulation operations corresponding to the simulation instructions based on the targets.

[0013] Optionally, the default build process for the first-level virtual machine includes:

[0014] Select the initial simulation base computing node from the cloud platform;

[0015] Acquire a first physical resource in the initial simulation base computing node;

[0016] Simulating a virtual machine IO device based on the first physical resource to generate a corresponding virtual physical component;

[0017] Create an empty first-level virtual machine;

[0018] The first physical resource and the virtual physical component are transparently transmitted to the first-level virtual machine to obtain a completed first-level virtual machine.

[0019] Optionally, obtaining a first physical resource in the initial simulation base computing node includes:

[0020] In the transparent transmission mode, configuring a first program for the initial simulation base computing node, wherein the first program is a program for scheduling and managing physical resources;

[0021] The first program is executed to obtain a first physical resource in the initial simulation base computing node.

[0022] Optionally, creating multiple simulation base control nodes based on the virtual memory and virtual processor corresponding to the first-level virtual machine includes:

[0023] For each simulation base control node to be constructed, create an empty first virtual machine;

[0024] Running the second program and the first program in the primary virtual machine to simulate various IO devices of the virtual machine and obtain virtual memory and virtual processor corresponding to the simulation base control node;

[0025] The virtual memory and the virtual processor corresponding to the simulation base control node are loaded in the first virtual machine to obtain the simulation base control node.

[0026] Optionally, based on the virtual resources corresponding to the first-level virtual machine scheduling, multiple simulation base computing nodes are created, including:

[0027] For each simulation base computing node to be constructed, create an empty second virtual machine;

[0028] Running a second program in the first-level virtual machine to schedule the running of the first program and manage virtual resources corresponding to the basic information, and obtaining virtual resources corresponding to each simulation base computing node to be constructed;

[0029] The virtual resources corresponding to the simulation base computing node are loaded in the second virtual machine to obtain the simulation base computing node.

[0030] Optionally, also include:

[0031] Verifying the number of targets corresponding to the simulation instructions;

[0032] If the verification is successful, it is determined that the number of targets corresponding to the simulation instruction is in normal use.

[0033] A second aspect of an embodiment of the present invention shows a simulation processing device for a network range, the device comprising:

[0034] An acquisition unit, used for acquiring a preset first-level virtual machine;

[0035] A simulation base creation unit, used to create a plurality of simulation base control nodes based on the virtual memory and virtual processor corresponding to the first-level virtual machine; and to create a plurality of simulation base computing nodes based on the virtual resources corresponding to the scheduling of the first-level virtual machine;

[0036] The simulation processing unit is used to send simulation instructions to the simulation application system built based on the first-level virtual machine, so that the simulation application system calls different numbers of the simulation base control nodes and simulation base computing nodes based on the simulation instructions to construct a number of targets corresponding to the simulation instructions, so as to implement the simulation operations corresponding to the simulation instructions based on the targets.

[0037] Optionally, the acquisition unit is specifically used to:

[0038] Select the initial simulation base computing node from the cloud platform;

[0039] Acquire a first physical resource in the initial simulation base computing node;

[0040] Simulating a virtual machine IO device based on the first physical resource to generate a corresponding virtual physical component;

[0041] Create an empty first-level virtual machine;

[0042] The first physical resource and the virtual physical component are transparently transmitted to the first-level virtual machine to obtain a completed first-level virtual machine.

[0043] The third aspect of an embodiment of the present invention shows an electronic device, including: a processor and a memory, wherein the processor and the memory are connected via a communication bus; wherein the processor is used to call and execute a program stored in the memory; and the memory is used to store a program, wherein the program is used to implement the simulation processing method of the network target range as shown in the first aspect of the embodiment of the present invention.

[0044] The fourth aspect of the embodiment of the present invention shows a storage medium, including the electronic device shown in the third aspect of the embodiment of the present invention, and the electronic device is used to execute the simulation processing method of the network target range shown in the first aspect of the embodiment of the present invention.

[0045] Based on the above-mentioned embodiment of the present invention, a simulation processing party, device, electronic device and storage medium of a network target range are provided, and the method includes: obtaining a preset first-level virtual machine; creating multiple simulation base control nodes based on the virtual memory and virtual processor corresponding to the first-level virtual machine; creating multiple simulation base computing nodes based on the virtual resources corresponding to the scheduling of the first-level virtual machine; sending simulation instructions to the simulation application system built based on the first-level virtual machine, so that the simulation application system calls different numbers of the simulation base control nodes and simulation base computing nodes based on the simulation instructions to build a number of targets corresponding to the simulation instructions, so as to implement the simulation operation corresponding to the simulation instruction based on the target. In the embodiment of the present invention, it does not directly rely on physical resources, and can create a virtual simulation base based on the virtual resources in the original cloud environment, that is, the first-level virtual machine, the simulation base control node, the computing node of the simulation application system, and the simulation application system are differentiated in the first-level virtual machine; so that the simulation application system calls different numbers of simulation base control nodes and simulation base computing nodes based on the simulation instructions to build a corresponding number of targets, so as to implement the simulation operation corresponding to the simulation instruction based on the target. Thereby reducing the running cost of simulation processing. BRIEF DESCRIPTION OF THE DRAWINGS

[0046] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying creative work.

[0047] Figure 1 A schematic flow chart of a simulation processing method for a network range shown in an embodiment of the present invention;

[0048] Figure 2 A schematic diagram of a process flow of generating a first-level virtual machine shown in an embodiment of the present invention;

[0049] Figure 3 This is an example diagram of simulation processing of a network range shown in an embodiment of the present invention;

[0050] Figure 4 A schematic diagram of the architecture of a simulation processing device for a network target range shown in an embodiment of the present invention. DETAILED DESCRIPTION

[0051] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0052] The terms "first", "second", "third", "fourth", etc. (if any) in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments described herein can be implemented in an order other than that illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0053] It should be noted that the descriptions of "first", "second", etc. in the present invention are only used for descriptive purposes and cannot be understood as indicating or implying their relative importance or implicitly indicating the number of the indicated technical features. Therefore, the features defined as "first" and "second" may explicitly or implicitly include at least one of the features. In addition, the technical solutions between the various embodiments can be combined with each other, but they must be based on the ability of ordinary technicians in the field to implement them. When the combination of technical solutions is contradictory or cannot be implemented, it should be deemed that such a combination of technical solutions does not exist and is not within the scope of protection required by the present invention.

[0054] In this application, the terms "comprises", "comprising" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device comprising a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, an element defined by the sentence "comprising a ..." does not exclude the presence of other identical elements in the process, method, article or device comprising the element.

[0055] In the embodiment of the present invention, instead of directly relying on physical resources, a virtual simulation base can be created based on the virtual resources in the original cloud environment, namely the first-level virtual machine. That is to say, a simulation base control node, a simulation application system computing node, and a simulation application system are differentiated in the first-level virtual machine; so that the simulation application system calls different numbers of simulation base control nodes and simulation base computing nodes based on simulation instructions to construct a corresponding number of targets, and runs both the target range application system and the simulation base in the virtual machine, thereby reducing the simulation processing operating cost, thereby improving the flexibility and maintainability of the system.

[0056] In the embodiment of the present invention, the network target range runs in a cloud environment, so the simulation base is based on the cloud environment, that is, the virtual machine in the cloud platform runs as a host machine, that is, the simulation base is essentially deployed based on the cloud environment.

[0057] See also Figure 1 , is a flow chart of a simulation processing method of a network range shown in an embodiment of the present invention, the method comprising:

[0058] Step S101: Obtain a preset first-level virtual machine;

[0059] The simulation base computing node refers to the basic unit used for computing and data processing in the network target range. In the network target range, the computing node is responsible for generating targets and virtual machines to perform various simulation tasks, including the allocation and management of resources such as virtual machines and containers. The computing node is usually composed of high-performance computing devices and can provide strong computing power support to meet simulation needs.

[0060] The simulation base control node is used to control, monitor and schedule computing nodes to create and manage virtual targets such as virtual machines or switching devices to form a virtual network topology, thereby providing virtual resources to the entire cluster in order to provide virtual targets and the ability to build virtual targets to the simulation application system.

[0061] A cluster is a combination of control nodes and computing nodes.

[0062] The control node receives instructions sent by the simulation application system to control and schedule the corresponding computing nodes to provide corresponding virtual resources.

[0063] Wherein, the first-level virtual machine is created based on the physical resources in the original cloud environment;

[0064] It should be noted that the construction process of the first-level virtual machine includes: Figure 2 As shown, the following steps are included:

[0065] Step S201: Selecting an initial simulation base computing node from a preset cloud environment;

[0066] It should be noted that the preset cloud environment, that is, the original cloud environment stores historical simulation base computing nodes for various simulation requirements that have been deployed.

[0067] In the specific implementation of step S201, a historical simulation base computing node is selected from the preset cloud environment and used as an initial simulation base computing node;

[0068] It should be noted that the initial simulation base computing node is a physical node of the deployed physical server, which is generally selected according to the simulation requirements of the simulation processing required.

[0069] Step S202: Acquire a first physical resource in the initial simulation base computing node;

[0070] It should be noted that the specific implementation of step S202 includes the following steps:

[0071] Step S11: In the transparent transmission mode, a first program is configured for the initial simulation base computing node.

[0072] The first program is a program for scheduling and managing physical resources;

[0073] Among them, the transparent transmission mode refers to a method in which no data processing and analysis is performed during the data transmission process.

[0074] In the specific implementation of step S11, in the transparent transmission mode, a first program is configured for the initial simulation base computing node to monitor the physical resources of the initial simulation base computing node.

[0075] Step S12: Execute the first program to obtain a first physical resource in the initial simulation base computing node.

[0076] In the specific implementation of step S12, the physical resources of the initial simulation base computing node, ie, the first physical resources, are scheduled and managed in the initial simulation base computing node by a first program.

[0077] It should be noted that the first physical resources include a physical CPU, a physical memory, a physical disk, a physical network and a network card etc. required by the virtual machine.

[0078] It should be noted that the first program operates in the operating system kernel state.

[0079] Step S203: simulating a virtual machine IO device based on the first physical resource to generate a corresponding virtual physical component;

[0080] In the specific implementation of step S203, the pre-configured second program is used to simulate the virtual machine IO device and schedule the first program to run and manage physical resources to obtain corresponding virtual physical components.

[0081] It should be noted that virtual physical components include virtual sound cards, virtual graphics cards, virtual disks, virtual IOs, virtual group boards, virtual network cards and other physical components.

[0082] The second program is the code for simulating other IO devices and running the virtual machine operating system, and works in the operating system user state.

[0083] Specifically, the second program schedules the first program interface to simulate the virtual machine CPU running on each physical CPU, ie, the first physical resource, so as to generate a virtual physical component.

[0084] Two parts of code are run in the second program. One part is the virtualization manager code, which is mainly used to schedule and manage the execution of virtual resources on physical resources, and the other part is the code for running the virtual machine operating system.

[0085] Step S204: Create an empty first-level virtual machine.

[0086] In the specific process of implementing step S204, an empty virtual machine is constructed and used as a first-level virtual machine.

[0087] Step S205: transparently transmit the first physical resource and the virtual physical component to the first-level virtual machine to obtain a completed first-level virtual machine.

[0088] In the process of specifically implementing step S205, the initial simulation base computing node uses the second program to call the first program to start the virtual machine, so as to transparently transmit the first physical resources and virtual physical components to the first-level virtual machine, so that the first-level virtual machine has the ability to schedule the first program and the ability to run the second program. That is to say, the initial simulation base computing node transparently transmits the physical resources and the management and control capabilities of the physical resources to the first-level virtual machine L1 VM through the transparent transmission mode.

[0089] It should be noted that transparent transmission means that during the communication process, no matter what the business content is, only the physical resources are transparently transmitted to the virtual machine without making any changes to the business data content.

[0090] In an embodiment of the present invention, physical resource capabilities are transparently transmitted through an initial simulation base computing node deployed on a physical server, so that the initial simulation base computing node transmits the physical resources and the management and control capabilities of the physical resources to the first-level virtual machine through a transparent transmission mode; so that a virtual simulation base control node and a simulation base computing node can be subsequently generated based on the first-level virtual machine.

[0091] Step S102: creating multiple simulation base control nodes based on the virtual memory and virtual processor corresponding to the first-level virtual machine.

[0092] The specific implementation of step S102 includes the following steps:

[0093] Step S21: creating an empty first virtual machine for each simulation base control node to be constructed;

[0094] In the specific implementation of step S21, for each simulation base control node to be constructed, an empty first virtual machine is created in the first-level virtual machine, that is, the first virtual machine is deployed in the first-level virtual machine.

[0095] Step S22: running the second program and the first program in the primary virtual machine to simulate various IO devices of the virtual machine, and obtaining virtual memory and virtual processor corresponding to the simulation base control node.

[0096] In the process of specifically implementing step S22, an empty first virtual machine is created, and for each first virtual machine, a second program is run in the first-level virtual machine L1 VM to simulate various IO devices of the virtual machine and start the first virtual machine. At the same time, the first program is scheduled to initialize the first virtual machine through the nested virtual machine memory management unit init_nested_mmu and the nested virtual machine central processor init_nested_CPU in the first-level virtual machine L1 VM, that is, to initialize the virtual processor VCPU and the virtual memory VMMU.

[0097] Step S23: loading the virtual memory and virtual processor corresponding to the simulation base control node in the first virtual machine to obtain the simulation base control node.

[0098] In the specific implementation process of step S23, a virtual storage VM data structure of the first virtual machine is created to generate a virtual machine control structure for VM management. The virtual machine control structure for managing the VM is initialized, and the initialized VCPU and VMMU are loaded in the first virtual machine where the virtual machine control structure is deployed to obtain the simulation base control node, so as to call the launch instruction to enter the virtual machine operating system to execute the operating system code, so that the simulation base control node can run normally. Repeat the specific implementation process of step S21 to step S22 to complete the construction of multiple simulation base control nodes.

[0099] Optionally, when the simulation base control node is running, the second program can be directly started in the first-level virtual machine and the first program can be scheduled to run the simulation base control node.

[0100] Step S103: creating multiple simulation base computing nodes based on the virtual resources corresponding to the first-level virtual machine scheduling.

[0101] The specific implementation of step S103 includes the following steps:

[0102] Step S31: creating an empty second virtual machine for each simulation base computing node to be constructed;

[0103] It should be noted that the specific implementation process of step S31 is the same as the specific implementation process of step S21, and they can refer to each other.

[0104] Step S32: running a second program in the first-level virtual machine to schedule the running of the first program and manage virtual resources corresponding to the basic information, and obtaining virtual resources corresponding to each simulation base computing node to be constructed;

[0105] In the specific implementation of step S32, an empty second virtual machine is created, and for each second virtual machine, a second program is run in the first-level virtual machine L1 VM to schedule the first program interface to manage the corresponding virtual resources, and obtain the virtual resources corresponding to the simulation base computing node.

[0106] Specifically, the first program interface is called to manage the scheduling of the virtual physical CPU. At this time, the first program schedules the virtual physical CPU to run the virtualization manager code, mainly processing resource initialization. After the initialization is completed, the launch instruction is called to schedule the CPU to enter the virtual machine to execute the operating system code. When an IO interruption occurs during the execution of the virtual machine operating system (other interruptions are similar), the CPU is scheduled to exit the execution of the operating system code, enter the execution of the virtualization manager code, and schedule the IO device simulated by the second program to perform IO operations. After completion, the virtual machine will enter the operating system code again.

[0107] That is to say, each simulation base computing node needs to consider the node's virtual CPU, virtual memory, virtual storage space and virtual bandwidth, as well as the allocation of resources such as virtual network cards, virtual graphics cards, virtual sound cards and virtual IO. Therefore, based on the resource allocation strategy, the management and scheduling of various virtual resources of each second virtual machine are determined from the first-level virtual machine.

[0108] Step S33: loading virtual resources corresponding to the simulation base computing node in the second virtual machine to obtain the simulation base computing node.

[0109] In the process of implementing step S33, for each second virtual machine, the virtual resources that need to be managed and scheduled are determined based on the resource allocation strategy, and loaded into the empty second virtual machine to complete the construction of the simulation base computing node, and then repeat the specific implementation process of steps S32 to S34 to complete the construction of multiple simulation base computing nodes.

[0110] Optionally, when the simulation base computing node is running, the second program can be directly started in the first-level virtual machine and the first program can be scheduled to run the simulation base computing node.

[0111] In an embodiment of the present invention, virtualization is performed in a first-level virtual machine, and a simulation base control node and a simulation base computing node are constructed directly in the first-level virtual machine, so that the second program can be started directly in the first-level virtual machine and the first program can be scheduled to run the simulation base control node and the simulation base computing node.

[0112] It should be noted that the number of first-level virtual machines is at least 2, a control node is set on one first-level virtual machine, and a computing node is set on another first-level virtual machine.

[0113] Step S104: Send simulation instructions to the simulation application system built based on the first-level virtual machine, so that the simulation application system calls different numbers of the simulation base control nodes and simulation base computing nodes based on the simulation instructions to construct a number of targets corresponding to the simulation instructions, so as to implement the simulation operations corresponding to the simulation instructions based on the targets.

[0114] In the process of specifically implementing step S104, a third virtual machine is constructed in the first-level virtual machine to create a simulation application system using the third virtual machine, so that when the simulation application system receives a simulation instruction, the first virtual machine and the second virtual machine of different numbers of the first-level virtual machines are called based on the simulation instruction to construct a number of targets corresponding to the simulation instruction, i.e., second-level virtual machines, so that the simulation application system performs simulation operations based on the targets.

[0115] It should be noted that the simulation application system at this time can be a primary virtual machine or a secondary virtual machine.

[0116] The first virtual machine and the second virtual machine both have simulation capabilities.

[0117] It should be noted that the existing simulation processing architecture is simulated in the third virtual machine to create a simulation application system.

[0118] In an embodiment of the present invention, since the entire shooting range runs in a cloud environment, the simulation base is based on a virtual machine in the cloud environment, that is, a first-level virtual machine runs as a host machine, that is, the simulation base is essentially deployed based on a cloud environment.

[0119] In order to better understand the simulation application system generation method shown above, Figure 3 Give examples to illustrate;

[0120] Assume that a first-level virtual machine, i.e., an L1 virtual machine, which is preset and built on a physical computing node is obtained, and multiple simulation base control nodes, i.e., an L1 virtual machine 1, are created based on the virtual memory and virtual processor corresponding to the L1 virtual machine; and multiple simulation base computing nodes, i.e., an L1 virtual machine 2, are created based on the virtual resources corresponding to the scheduling of the first-level virtual machine;

[0121] The L1 virtual machine 1 also includes a corresponding operating system Guest OS.

[0122] A simulation instruction a is sent to a simulation application system built based on a first-level virtual machine, so that the simulation application system calls a simulation base computing node and a simulation base control node based on the simulation instruction to construct virtual target 1 and virtual target 2 corresponding to the simulation instruction a, and the virtual target 1 and virtual target 2 are constructed in the simulation base computing node.

[0123] The simulation operation corresponding to the simulation instruction is implemented based on the target.

[0124] Among them, the successfully constructed virtual target 1 and virtual target 2 are secondary virtual machines. At this time, virtual target 1, that is, L2 virtual machine 1, also includes the corresponding operating system Guest OS; virtual target 2, that is, L2 virtual machine 2, also includes the corresponding operating system Guest OS.

[0125] Optionally, the physical server further includes a virtual machine monitor Hyper visor and physical hardware Host Machine on which the first program is deployed, and the second program is deployed in the primary virtual machine and the secondary virtual machine.

[0126] like Figure 3 As shown in the figure, the bottom layer is abstracted upward into virtual resources based on physical resources and runs the second-level virtual machine, and the simulation base runs based on the first-level virtual machine. The simulation bottom-level L1 virtual machine runs a set of L2 cloud environment, and the internal control nodes and computing nodes form a cluster for management and control according to cloud computing technology, and the internal communication is carried out through the virtual network.

[0127] The present invention flexibly increases and decreases the used resources based on the management and control capabilities of the original cloud environment.

[0128] Since this application is deployed in virtual resources, incremental or full backup can be performed through snapshots, so that in case of emergencies, the operation can be quickly restored directly through snapshots or templates.

[0129] Since the simulation base runs in a first-level virtual machine, the original cloud environment can be used to uniformly monitor the virtual machines of the simulation base.

[0130] In the embodiment of the present invention, it does not directly rely on physical resources, so the resource utilization rate is better and the use cost is reduced; a virtual simulation base can be created based on the virtual resources in the original cloud environment, that is, the first-level virtual machine, that is, the simulation base control node, the simulation application system computing node, and the simulation application system are differentiated in the first-level virtual machine; so that the simulation application system calls different numbers of simulation base control nodes and simulation base computing nodes based on the simulation instruction to build a corresponding number of targets, and the target range application system and the simulation base are run in the virtual machine, which improves the scalability of the system; the simulation operation corresponding to the simulation instruction is implemented based on the target. Thereby reducing the operating cost of the simulation processing.

[0131] Optionally, after executing step S105, the method further includes:

[0132] The number of targets corresponding to the simulation instructions is verified. If the verification passes, it is determined that the number of targets corresponding to the simulation instructions are in normal use. If not, the targets are rebuilt.

[0133] In the specific implementation, for each target range function, various network attacks are simulated on the target range function to determine whether the attack effect of the target range function is greater than a preset threshold. If the attack effect corresponding to each target range function is greater than the preset threshold, it is determined that the number of targets corresponding to the simulation instructions are in normal use. If not, the target is reconstructed.

[0134] The attack effect refers to the ratio of the computing nodes related to the target range function remaining after the attack to the computing nodes related to the target range function before the attack as the attack effect.

[0135] Optionally, the method further includes monitoring the usage of virtual target resources in the application system to be simulated, and outputting a warning if the usage exceeds an alarm threshold.

[0136] In an embodiment of the present invention, after the application to be simulated is constructed, its target range function needs to be verified to determine that the number of targets corresponding to the simulation instructions are in normal use.

[0137] Based on the above embodiment of the present invention, a simulation processing method for a network range is provided. Accordingly, the embodiment of the present invention shows a simulation processing device for a network range, such as Figure 4 As shown, the device comprises:

[0138] An acquisition unit 401 is used to acquire a preset first-level virtual machine;

[0139] The simulation base creation unit 402 is used to create multiple simulation base control nodes based on the virtual memory and virtual processor corresponding to the first-level virtual machine; and to create multiple simulation base computing nodes based on the virtual resources corresponding to the scheduling of the first-level virtual machine;

[0140] The simulation processing unit 403 is used to send simulation instructions to the simulation application system built based on the first-level virtual machine, so that the simulation application system calls different numbers of the simulation base control nodes and simulation base computing nodes based on the simulation instructions to construct a number of targets corresponding to the simulation instructions, so as to implement the simulation operations corresponding to the simulation instructions based on the targets.

[0141] The specific principles and execution processes of each unit in the simulation processing generation device of the network target range disclosed in the above embodiment of the present invention are the same as the corresponding contents in the simulation processing method of the network target range provided in the above embodiment of the present invention. Please refer to the corresponding parts of the simulation processing method of the network target range disclosed in the above embodiment of the present invention, and will not be repeated here.

[0142] In the embodiment of the present invention, it does not directly rely on physical resources, so the resource utilization rate is better and the use cost is reduced; a virtual simulation base can be created based on the virtual resources in the original cloud environment, that is, the first-level virtual machine, that is, the simulation base control node, the simulation application system computing node, and the simulation application system are differentiated in the first-level virtual machine; so that the simulation application system calls different numbers of simulation base control nodes and simulation base computing nodes based on the simulation instruction to build a corresponding number of targets, and the target range application system and the simulation base are run in the virtual machine, which improves the scalability of the system; the simulation operation corresponding to the simulation instruction is implemented based on the target. Thereby reducing the operating cost of the simulation processing.

[0143] Optionally, based on the simulation processing device of the network range shown in the above embodiment of the present invention, the acquisition unit 401 is specifically used for:

[0144] Select the initial simulation base computing node from the cloud platform;

[0145] Acquire a first physical resource in the initial simulation base computing node;

[0146] Simulating a virtual machine IO device based on the first physical resource to generate a corresponding virtual physical component;

[0147] Create an empty first-level virtual machine;

[0148] The first physical resource and the virtual physical component are transparently transmitted to the first-level virtual machine to obtain a completed first-level virtual machine.

[0149] Wherein, obtaining the first physical resource in the initial simulation base computing node includes:

[0150] In the transparent transmission mode, configuring a first program for the initial simulation base computing node, wherein the first program is a program for scheduling and managing physical resources;

[0151] The first program is executed to obtain a first physical resource in the initial simulation base computing node.

[0152] Optionally, based on the simulation processing device of the network target range shown in the above embodiment of the present invention, a simulation base creation unit 402 is used to create multiple simulation base control nodes based on the virtual memory and virtual processor corresponding to the first-level virtual machine, specifically for:

[0153] For each simulation base control node to be constructed, create an empty first virtual machine;

[0154] Running the second program and the first program in the primary virtual machine to simulate various IO devices of the virtual machine and obtain virtual memory and virtual processor corresponding to the simulation base control node;

[0155] The virtual memory and the virtual processor corresponding to the simulation base control node are loaded in the first virtual machine to obtain the simulation base control node.

[0156] Optionally, based on the simulation processing device of the network target range shown in the above embodiment of the present invention, a simulation base creation unit 402 for creating multiple simulation base computing nodes based on the virtual resources corresponding to the first-level virtual machine scheduling is specifically used to:

[0157] For each simulation base computing node to be constructed, create an empty second virtual machine;

[0158] Running a second program in the first-level virtual machine to schedule the running of the first program and manage virtual resources corresponding to the basic information, and obtaining virtual resources corresponding to each simulation base computing node to be constructed;

[0159] The virtual resources corresponding to the simulation base computing node are loaded in the second virtual machine to obtain the simulation base computing node.

[0160] Optionally, based on the simulation processing device of the network range shown in the above embodiment of the present invention, the simulation processing unit 403 is further used for:

[0161] Verifying the number of targets corresponding to the simulation instructions;

[0162] If the verification is successful, it is determined that the number of targets corresponding to the simulation instruction is in normal use.

[0163] An embodiment of the present application provides an electronic device, which includes a processor and a memory, wherein the memory is used to store program codes and data generated by simulation processing of a network target range, and the processor is used to call program instructions in the memory to execute the steps shown in the simulation processing method of the network target range in the above embodiment.

[0164] An embodiment of the present invention provides a storage medium, including the electronic device provided by the above-mentioned embodiment of the present application, and the electronic device is used to execute the simulation processing method of the network target range disclosed in the embodiment of the present application.

[0165] Each embodiment in this specification is described in a progressive manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the system or system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment. The system and system embodiments described above are merely schematic, wherein the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this embodiment. Ordinary technicians in this field can understand and implement it without paying creative labor.

[0166] Professionals may further appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition and steps of each example have been generally described in the above description according to function. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professionals and technicians may use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0167] The above description of the disclosed embodiments enables one skilled in the art to implement or use the present invention. Various modifications to these embodiments will be apparent to one skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present invention. Therefore, the present invention will not be limited to the embodiments shown herein, but rather to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A simulation processing method for a network range, characterized in that: The method comprises: Get the first-level virtual machine built by default; Creating multiple simulation base control nodes based on the virtual memory and virtual processor corresponding to the first-level virtual machine; Based on the virtual resources corresponding to the first-level virtual machine scheduling, create multiple simulation base computing nodes; Send simulation instructions to the simulation application system built based on the first-level virtual machine, so that the simulation application system calls different numbers of the simulation base control nodes and simulation base computing nodes based on the simulation instructions to build a number of targets corresponding to the simulation instructions, so as to implement the simulation operations corresponding to the simulation instructions based on the targets.

2. The method according to claim 1, characterized in that The default build process for a first-level virtual machine includes: Select the initial simulation base computing node from the cloud platform; Acquire a first physical resource in the initial simulation base computing node; Simulating a virtual machine IO device based on the first physical resource to generate a corresponding virtual physical component; Create an empty first-level virtual machine; The first physical resource and the virtual physical component are transparently transmitted to the first-level virtual machine to obtain a completed first-level virtual machine.

3. The method according to claim 2, characterized in that Acquiring a first physical resource in the initial simulation base computing node includes: In the transparent transmission mode, configuring a first program for the initial simulation base computing node, wherein the first program is a program for scheduling and managing physical resources; The first program is executed to obtain a first physical resource in the initial simulation base computing node.

4. The method according to claim 1, characterized in that: Creating multiple simulation base control nodes based on the virtual memory and virtual processor corresponding to the first-level virtual machine includes: For each simulation base control node to be constructed, create an empty first virtual machine; Running the second program and the first program in the primary virtual machine to simulate various IO devices of the virtual machine and obtain virtual memory and virtual processor corresponding to the simulation base control node; The virtual memory and the virtual processor corresponding to the simulation base control node are loaded in the first virtual machine to obtain the simulation base control node.

5. The method according to claim 1, characterized in that Based on the virtual resources corresponding to the first-level virtual machine scheduling, multiple simulation base computing nodes are created, including: For each simulation base computing node to be constructed, create an empty second virtual machine; Running a second program in the first-level virtual machine to schedule the running of the first program and manage virtual resources corresponding to the basic information, and obtaining virtual resources corresponding to each simulation base computing node to be constructed; The virtual resources corresponding to the simulation base computing node are loaded in the second virtual machine to obtain the simulation base computing node.

6. The method according to claim 1, characterized in that Also includes: Verifying the number of targets corresponding to the simulation instructions; If the verification is successful, it is determined that the number of targets corresponding to the simulation instruction is in normal use.

7. A simulation processing device for a network range, characterized in that: The device comprises: An acquisition unit, used for acquiring a preset first-level virtual machine; A simulation base creation unit, used to create a plurality of simulation base control nodes based on the virtual memory and virtual processor corresponding to the first-level virtual machine; and to create a plurality of simulation base computing nodes based on the virtual resources corresponding to the scheduling of the first-level virtual machine; The simulation processing unit is used to send simulation instructions to the simulation application system built based on the first-level virtual machine, so that the simulation application system calls different numbers of the simulation base control nodes and simulation base computing nodes based on the simulation instructions to construct a number of targets corresponding to the simulation instructions, so as to implement the simulation operations corresponding to the simulation instructions based on the targets.

8. The device according to claim 7, characterized in that The acquisition unit is specifically used for: Select the initial simulation base computing node from the cloud platform; Acquire a first physical resource in the initial simulation base computing node; Simulating a virtual machine IO device based on the first physical resource to generate a corresponding virtual physical component; Create an empty first-level virtual machine; The first physical resource and the virtual physical component are transparently transmitted to the first-level virtual machine to obtain a completed first-level virtual machine.

9. An electronic device, characterized in that: include: A processor and a memory, wherein the processor and the memory are connected via a communication bus; wherein the processor is used to call and execute a program stored in the memory; The memory is used to store a program, and the program is used to implement the simulation processing method of the network target range as described in any one of claims 1-6.

10. A storage medium, characterized in that: It includes the electronic device described in claim 9, and the electronic device is used to execute the simulation processing method of the network target range described in any one of claims 1-6.

Images