Virtual machine protection system and method

Abstract

The invention discloses a virtual machine protection system and method. The system comprises a virtual protection server, a to-be-protected cloud platform and a backup cloud platform corresponding to the to-be-protected cloud platform, a first agent virtual machine and a plurality of source virtual machines to be protected are arranged in the cloud platform to be protected, and a second agent virtual machine is arranged in the backup cloud platform. According to the embodiment of the invention, based on the virtual protection server, the second proxy virtual machine and the second proxy virtual machine, data backup and data recovery can be efficiently carried out on the virtual machines related to the computing resources, the storage resources and the network resources in the cloud platform; therefore, the virtual machine related to the computing resource, the storage resource and the network resource in the cloud platform is efficiently protected, the data security of the virtual machine is ensured, and stable operation of the cloud platform and the virtual machine is not influenced.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and in particular to a virtual machine protection system and method. Background Art

[0002] Enterprises usually have cloud platforms that provide computing resources, storage resources, and network resources. The cloud platform is equipped with multiple virtual machines related to computing resources, storage resources, and network resources. Virtual machines are the most basic and important resources of the cloud platform. Each virtual machine can realize almost all the functions of a physical computer. Therefore, during the operation of the cloud platform, it is necessary to protect the virtual machines related to computing resources, storage resources, and network resources in the cloud platform to ensure the data security of the virtual machines.

[0003] In the related art, the commonly used virtual machine protection schemes are: installing services or plug-ins inside the cloud platform to protect the virtual machines in the cloud platform; or installing applications on the virtual machine system of the cloud platform to protect the virtual machines in the cloud platform; or protecting the virtual machines in the cloud platform by transmitting virtual machine data using third-party tools. The act of installing services or plug-ins inside the cloud platform is destructive to a certain extent and will affect the stability of the entire cloud platform. Installing applications on the virtual machine system of the cloud platform requires login information such as the username and password of the virtual machine. It is impossible to operate the virtual machines of some sensitive departments, and it is easy to destroy the state of the virtual machine. If the number of virtual machines to be migrated is large, it will cause a huge amount of manual work. Transmitting virtual machine data by using third-party tools requires encryption, compression, bandwidth control, congestion control, performance tuning and other operations, which is difficult. The virtual machine protection scheme in the related art cannot effectively protect the virtual machines related to computing resources, storage resources and network resources in the cloud platform on the basis of ensuring the stable operation of the cloud platform and virtual machines, and ensure the data security of the virtual machines. Summary of the invention

[0004] The present invention provides a virtual machine protection system and method to solve the problem that the virtual machine protection scheme in the related art cannot effectively protect the virtual machines related to computing resources, storage resources and network resources in the cloud platform and ensure the data security of the virtual machines on the basis of ensuring the stable operation of the cloud platform and the virtual machines.

[0005] According to one aspect of the present invention, there is provided a virtual machine protection system, comprising: a virtual protection server, a cloud platform to be protected, and a backup cloud platform corresponding to the cloud platform to be protected;

[0006] The cloud platform to be protected is provided with a first proxy virtual machine and a plurality of source virtual machines to be protected, and the backup cloud platform is provided with a second proxy virtual machine;

[0007] When receiving a backup request corresponding to any source virtual machine, the virtual protection server creates a snapshot of the source virtual machine, obtains the snapshot disk information of the source virtual machine, generates a snapshot copy disk of the source virtual machine according to the snapshot disk information, and mounts the snapshot copy disk to the first proxy virtual machine; the first proxy virtual machine sequentially reads the data in the snapshot copy disk according to a preset data volume to obtain a plurality of data blocks, and stores each of the data blocks and the data block information of each of the data blocks in the backup file corresponding to the source virtual machine in the virtual protection server; after determining that the storage process of each of the data blocks and the data block information of each of the data blocks is completed, the virtual protection server unmounts the snapshot copy disk mounted to the first proxy virtual machine, and deletes the snapshot copy disk;

[0008] When the virtual protection server receives a recovery request corresponding to the source virtual machine, it creates a target virtual machine corresponding to the source virtual machine on the backup cloud platform according to the backup file, mounts the disk of the target virtual machine to the second proxy virtual machine, and sends each data block in the backup file and the data information of each data block to the second proxy virtual machine; the second proxy virtual machine writes each data block in the backup file to the disk of the target virtual machine according to the data information of each data block in the backup file; and after determining that the writing process of each data block is completed, the virtual protection server remounts the disk of the target virtual machine to the target virtual machine.

[0009] According to another aspect of the present invention, a virtual machine protection method is provided, which is applied to the virtual machine protection system according to the embodiment of the present invention, and includes:

[0010] When receiving a backup request corresponding to any source virtual machine, the virtual protection server creates a snapshot of the source virtual machine, obtains snapshot disk information of the source virtual machine, generates a snapshot copy disk of the source virtual machine according to the snapshot disk information, and mounts the snapshot copy disk to the first proxy virtual machine;

[0011] The first proxy virtual machine sequentially reads the data in the snapshot copy disk according to a preset data volume to obtain a plurality of data blocks, and stores each of the data blocks and the data block information of each of the data blocks in a backup file corresponding to the source virtual machine in the virtual protection server;

[0012] After determining that the storage process of each data block and the data block information of each data block is completed, the virtual protection server unmounts the snapshot copy disk mounted to the first proxy virtual machine and deletes the snapshot copy disk;

[0013] When receiving a recovery request corresponding to the source virtual machine, the virtual protection server creates a target virtual machine corresponding to the source virtual machine on the backup cloud platform according to the backup file, mounts the disk of the target virtual machine to the second proxy virtual machine, and sends each data block and data information of each data block in the backup file to the second proxy virtual machine;

[0014] The second proxy virtual machine writes each data block in the backup file to the disk of the target virtual machine according to the data information of each data block in the backup file;

[0015] After determining that the writing process of each data block is completed, the virtual protection server remounts the disk of the target virtual machine to the target virtual machine.

[0016] In the technical scheme of the embodiment of the present invention, when the virtual protection server receives a backup request corresponding to any source virtual machine, it creates a snapshot of the source virtual machine, obtains the snapshot disk information of the source virtual machine, generates a snapshot copy disk of the source virtual machine according to the snapshot disk information, and mounts the snapshot copy disk to the first proxy virtual machine; the first proxy virtual machine reads the data in the snapshot copy disk in sequence according to the preset data volume to obtain multiple data blocks, and stores each data block and the data block information of each data block in the backup file corresponding to the source virtual machine in the virtual protection server; after the virtual protection server determines that the storage process of each data block and the data block information of each data block is completed, it unmounts the snapshot copy disk mounted to the first proxy virtual machine and deletes the snapshot copy disk; then, when the virtual protection server receives a recovery request corresponding to the source virtual machine, it creates a target virtual machine corresponding to the source virtual machine on the backup cloud platform according to the backup file, mounts the disk of the target virtual machine to the second proxy virtual machine, and mounts each data block in the backup file and the data information of each data block is sent to the second proxy virtual machine; the second proxy virtual machine writes each data block in the backup file to the disk of the target virtual machine according to the data information of each data block in the backup file; the virtual protection server remounts the disk of the target virtual machine to the target virtual machine after determining that the writing process of each data block is completed, thereby solving the problem that the virtual machine protection scheme in the related technology cannot effectively protect the virtual machines related to the computing resources, storage resources and network resources in the cloud platform on the basis of ensuring the stable operation of the cloud platform and the virtual machines, and ensure the data security of the virtual machines. Based on the virtual protection server, the second proxy virtual machine and the second proxy virtual machine, the data backup and data recovery of the virtual machines related to the computing resources, storage resources and network resources in the cloud platform can be efficiently performed, thereby effectively protecting the virtual machines related to the computing resources, storage resources and network resources in the cloud platform, ensuring the data security of the virtual machines, and will not affect the stable operation of the cloud platform and the virtual machines.

[0017] It should be understood that the contents described in this section are not intended to identify the key or important features of the embodiments of the present invention, nor are they intended to limit the scope of the present invention. Other features of the present invention will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0019] Figure 1 A structural diagram of a virtual machine protection system provided in Embodiment 1 of the present invention.

[0020] Figure 2 A flowchart of a virtual machine protection method provided in Embodiment 2 of the present invention. DETAILED DESCRIPTION

[0021] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0022] It should be noted that the terms "target", "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "comprise", "include" and "have" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0023] Embodiment 1

[0024] Figure 1This is a schematic diagram of the structure of a virtual machine protection system provided in the first embodiment of the present invention. This embodiment is applicable to protecting virtual machines related to computing resources, storage resources and network resources in a cloud platform to ensure the data security of the virtual machines. Figure 1 As shown, the virtual machine protection system may specifically include: a virtual protection server 101, a cloud platform to be protected 102, and a backup cloud platform 103 corresponding to the cloud platform to be protected 102, and its structure and function are described below.

[0025] The cloud platform to be protected 102 is provided with a first proxy virtual machine 1021 and a plurality of source virtual machines 1022 to be protected, and the backup cloud platform 103 is provided with a second proxy virtual machine 1031 .

[0026] When the virtual protection server 101 receives a backup request corresponding to any source virtual machine 1022, it creates a snapshot of the source virtual machine 1022, obtains the snapshot disk information of the source virtual machine 1022, generates a snapshot copy disk of the source virtual machine 1022 according to the snapshot disk information, and mounts the snapshot copy disk to the first proxy virtual machine 1021; the first proxy virtual machine 1021 reads the data in the snapshot copy disk in sequence according to the preset data volume to obtain multiple data blocks, and stores each of the data blocks and the data block information of each of the data blocks in the backup file corresponding to the source virtual machine 1022 in the virtual protection server 101; after determining that the storage process of each of the data blocks and the data block information of each of the data blocks is completed, the virtual protection server 101 unmounts the snapshot copy disk mounted to the first proxy virtual machine 1021, and deletes the snapshot copy disk. Then, when the virtual protection server 101 receives a recovery request corresponding to the source virtual machine 1022, it creates a target virtual machine 1032 corresponding to the source virtual machine 1022 on the backup cloud platform 103 according to the backup file, mounts the disk of the target virtual machine 1032 to the second proxy virtual machine 1031, and sends each data block in the backup file and the data information of each data block to the second proxy virtual machine 1031; the second proxy virtual machine 1031 writes each data block in the backup file to the disk of the target virtual machine 1032 according to the data information of each data block in the backup file; after determining that the writing process of each data block is completed, the virtual protection server 101 remounts the disk of the target virtual machine 1032 to the target virtual machine 1032.

[0027] Optionally, the cloud platform to be protected 102 may be a cloud platform set up in an enterprise to provide computing resources, storage resources, and network resources for the enterprise. A plurality of virtual machines related to computing resources, storage resources, and network resources are set up in the cloud platform to be protected 102. During the operation of the cloud platform to be protected 102, it is necessary to protect the virtual machines related to computing resources, storage resources, and network resources in the cloud platform to be protected 102 to ensure the data security of the virtual machines. Each virtual machine related to computing resources, storage resources, and network resources set up in the cloud platform to be protected 102 is a source virtual machine 1022 to be protected.

[0028] Optionally, the first proxy virtual machine 1021 is a virtual machine set in the cloud platform to be protected 102 and specifically used to cooperate with the virtual protection server 101 to perform data backup on the source virtual machine 1022 .

[0029] Optionally, the backup cloud platform 103 corresponding to the cloud platform to be protected 102 is a cloud platform used to cooperate with the virtual protection server 101 to perform data recovery on the source virtual machine 1022 based on the backup data of the source virtual machine 1022 in the cloud platform to be protected 102 .

[0030] Optionally, the second proxy virtual machine 1031 is a virtual machine set in the backup cloud platform 103 and specifically used to cooperate with the virtual protection server 101 to perform data recovery on the source virtual machine 1022 .

[0031] Optionally, the virtual protection server 101 can be a server set up in an enterprise to perform data backup and data recovery on the source virtual machine 1022 in the protected cloud platform 102, thereby protecting the virtual machines related to computing resources, storage resources and network resources in the protected cloud platform 102 and ensuring the data security of the virtual machines.

[0032] Optionally, the virtual protection server 101 can manage the cloud platform to be protected 102 and the backup cloud platform 103 through a Representational State Transfer (Restful) interface on the cloud platform to be protected 102 and the backup cloud platform 103 .

[0033] Optionally, the backup request corresponding to the source virtual machine 1022 may be a request for requesting data backup of the source virtual machine 1022. The backup request corresponding to the source virtual machine 1022 may be sent by a target user through a terminal device. The target user may be a technician who manages the cloud platform 102 to be protected.

[0034] Optionally, backing up the source virtual machine 1022 may refer to copying the data in the disk of the source virtual machine 1022 to a backup file corresponding to the source virtual machine 1022 in the virtual protection server 101. The backup file corresponding to the source virtual machine 1022 may be a file set in the virtual protection server 101 for storing the data in the disk of the source virtual machine 1022.

[0035] Optionally, when the virtual protection server 101 receives a backup request corresponding to any source virtual machine 1022, it creates a snapshot of the source virtual machine 1022, obtains the snapshot disk information of the source virtual machine 1022, and then generates a snapshot copy disk of the source virtual machine 1022 based on the snapshot disk information, and mounts the snapshot copy disk to the first proxy virtual machine 1021.

[0036] Optionally, creating a snapshot of the source virtual machine 1022 may refer to saving the state and data of the source virtual machine 1022 at the current moment. The state of the source virtual machine 1022 may include the power state of the source virtual machine 1022. The power state of the source virtual machine 1022 may be powered on or powered off and suspended. The data of the source virtual machine 1022 may include the data in the disk, memory, and other devices of the source virtual machine 1022. The snapshot disk information of the source virtual machine 1022 may refer to the data in the disk of the saved source virtual machine 1022. The snapshot disk information of the source virtual machine 1022 includes the virtual machine configuration information and disk information of the source virtual machine 1022. The virtual machine configuration information may be information related to the specifications of the source virtual machine 1022. The disk information may be the capacity and name of the disk in the source virtual machine 1022. The virtual protection server 101 may create a snapshot of the source virtual machine 1022 upon receiving a backup request corresponding to any source virtual machine 1022, and obtain the snapshot disk information of the source virtual machine 1022.

[0037] Optionally, the snapshot copy disk of the source virtual machine 1022 is the same disk as the disk of the source virtual machine 1022. The snapshot copy disk stores the data in the disk of the source virtual machine 1022. The location of the data in the snapshot copy disk is the same as the location of the data in the disk of the source virtual machine 1022. The virtual protection server 101 can generate a snapshot copy disk of the source virtual machine 1022 according to the snapshot disk information of the source virtual machine 1022, and mount the snapshot copy disk to the first proxy virtual machine 1021.

[0038] Optionally, after the snapshot copy disk is mounted to the first proxy virtual machine 1021, the first proxy virtual machine 1021 can read the data in the snapshot copy disk in sequence according to a preset data volume to obtain multiple data blocks, and store each of the data blocks and the data block information of each of the data blocks in a backup file corresponding to the source virtual machine 1022 in the virtual protection server 101.

[0039] Optionally, the data block information includes: location information, size information and a hash value. The data block information of the data block may refer to the location information, size information and hash value of the data block. The location information of the data block may refer to the location of the data block in the snapshot copy disk. The size information of the data block may refer to the amount of data in the data block. The hash value of the data block may be a hash value of the data block calculated according to a preset hash algorithm. The preset hash algorithm may be a pre-set algorithm for calculating the hash value of the data block.

[0040] Optionally, the first proxy virtual machine 1021 reads the data in the snapshot copy disk in sequence according to a preset data volume to obtain multiple data blocks, and stores each of the data blocks and the data block information of each of the data blocks in a backup file corresponding to the source virtual machine 1022 in the virtual protection server 101, including: the first proxy virtual machine 1021 reads the data in the snapshot copy disk in sequence according to a preset data volume to obtain multiple data blocks; the first proxy virtual machine 1021 determines the data block information of each of the data blocks; the first proxy virtual machine 1021 stores each of the data blocks and the data block information of each of the data blocks in the backup file corresponding to the source virtual machine 1022 in the virtual protection server 101.

[0041] Optionally, the preset data volume can be a pre-set data volume. The first proxy virtual machine 1021 can read the preset data volume from the starting position of the data in the snapshot copy disk of the source virtual machine 1022 in sequence until the end position of the data in the snapshot copy disk. The preset data volume read each time is a data block. The data blocks are arranged in the order of reading. The data block read for the first time is ranked first. The data block read for the last time is ranked last.

[0042] Optionally, if the amount of data remaining at the end is less than the preset data amount, the remaining data is read, and the remaining data is determined as a data block to obtain the last data block. The data amount of the last data block is less than the preset data amount. If the data amount of the data remaining at the end is equal to the preset data amount, the remaining data is read, and the remaining data is determined as a data block to obtain the last data block. The data amount of the last data block is equal to the preset data amount.

[0043] Optionally, for each data block, the first proxy virtual machine 1021 can detect the position and size of the data block to obtain the position information and size information of the data block, calculate the hash value of the data block according to a preset hash algorithm, and thus determine the data block information of the data block, the data block information including: position information, size information and hash value.

[0044] Optionally, the first proxy virtual machine 1021 stores each of the data blocks and the data block information of each of the data blocks in a backup file corresponding to the source virtual machine 1022 in the virtual protection server 101, including: if the backup request is a full backup request, the first proxy virtual machine 1021 determines in turn whether each of the data blocks is a non-empty data block, and stores the non-empty data blocks and the data block information of non-empty data blocks in the backup file corresponding to the source virtual machine 1022 in the virtual protection server 101.

[0045] Optionally, the full backup request may refer to a backup request for requesting to copy all data in the disk of the source virtual machine 1022 to a backup file corresponding to the source virtual machine 1022 in the virtual protection server 101. A non-empty data block may refer to a data block containing data that is not all zero.

[0046] Optionally, determining whether each of the data blocks is a non-empty data block includes: performing the following operations for each data block: determining whether the data in the data block are all 0; if so, determining that the data block is not a non-empty data block; if not, determining that the data block is a non-empty data block. The first proxy virtual machine 1021 stores the data block information of each data block determined to be a non-empty data block and each data block determined to be a non-empty data block in the backup file corresponding to the source virtual machine 1022 in the virtual protection server 101.

[0047] Optionally, the first proxy virtual machine 1021 stores each of the data blocks and the data block information of each of the data blocks in a backup file corresponding to the source virtual machine 1022 in the virtual protection server 101, including: if the backup request is an incremental backup request, the first proxy virtual machine 1021 detects whether each of the data blocks is a changed data block based on the hash value of each of the data blocks and the historical disk hash value list corresponding to the source virtual machine 1022, and stores the changed data blocks and the data block information of the changed data blocks in the backup file corresponding to the source virtual machine 1022 in the virtual protection server 101.

[0048] Optionally, the incremental backup request may refer to a backup request for requesting to copy data in the disk of the source virtual machine 1022 that has undergone data changes since the last data backup to the backup file corresponding to the source virtual machine 1022 in the virtual protection server 101. The historical disk hash value list corresponding to the source virtual machine 1022 may be a list of hash values ​​of each data block obtained during the last data backup of the source virtual machine 1022, which is set in the first proxy virtual machine 1021. The arrangement order of the hash values ​​of each data block in the historical disk hash value list is the same as the arrangement order of the data blocks to which it belongs. A changed data block may refer to a data block containing data that has undergone data changes since the last data backup.

[0049] Optionally, according to the hash value of each data block and the historical disk hash value list corresponding to the source virtual machine 1022, detecting whether each data block is a changed data block includes: performing the following operation for each data block: determining whether the hash value of the data block is the same as the hash value of the data block in the historical disk hash value list corresponding to the source virtual machine 1022 and having the same sorting position as the data block; if so, determining that the data block is not a changed data block; if not, determining that the data block is a changed data block. The first proxy virtual machine 1021 stores the data block information of each data block determined to be a changed data block and each data block determined to be a changed data block in the backup file corresponding to the source virtual machine 1022 in the virtual protection server 101.

[0050] Optionally, the first proxy virtual machine 1021 may send first completion prompt information to the virtual protection server 101 after completing the process of storing each of the data blocks and the data block information of each of the data blocks in the backup file corresponding to the source virtual machine 1022 in the virtual protection server 101. The first completion prompt information may be pre-set information for representing that the first proxy virtual machine 1021 completes the process of storing the data blocks and the data block information in the corresponding backup file.

[0051] Optionally, the virtual protection server 101 may determine that the storage process of each data block and the data block information of each data block is completed after receiving the first completion prompt information. After determining that the storage process of each data block and the data block information of each data block is completed, the virtual protection server 101 unmounts the snapshot copy disk mounted to the first proxy virtual machine 1021, thereby determining that the data backup process of the source virtual machine 1022 is completed.

[0052] Optionally, after determining that the data backup process of the source virtual machine 1022 is completed, the virtual protection server 101 sends a data backup completion prompt message to the terminal device of the target user. The data backup completion prompt message may be pre-set information used to indicate that the data backup process is completed. The terminal device of the target user may be a terminal device used by the target user.

[0053] Optionally, after unmounting the snapshot copy disk mounted to the first proxy virtual machine 1021 , the virtual protection server 101 deletes the snapshot copy disk.

[0054] Optionally, the recovery request corresponding to the source virtual machine 1022 may be a request for requesting data recovery of the source virtual machine 1022. The recovery request corresponding to the source virtual machine 1022 may be sent by the target user through a terminal device. Data recovery of the source virtual machine 1022 may refer to creating a target virtual machine 1032 corresponding to the source virtual machine 1022 on the backup cloud platform, and storing the data in the disk of the source virtual machine 1022 in the backup file corresponding to the source virtual machine 1022 in the virtual protection server 101 to the disk of the target virtual machine 1032 corresponding to the source virtual machine 1022. The target virtual machine 1032 corresponding to the source virtual machine 1022 may be a virtual machine with the same specifications as the source virtual machine 1022. The target virtual machine 1032 corresponding to the source virtual machine 1022 may also be a virtual machine with the same specifications as a user-defined virtual machine. The user-defined virtual machine may be a virtual machine specified by the target user.

[0055] Optionally, when the virtual protection server 101 receives a recovery request corresponding to the source virtual machine 1022, the virtual protection server 101 creates a target virtual machine 1032 corresponding to the source virtual machine 1022 on the backup cloud platform 103 according to the backup file, including: when the virtual protection server 101 receives a recovery request corresponding to the source virtual machine 1022, the virtual protection server 101 creates a target virtual machine 1032 corresponding to the source virtual machine 1022 on the backup cloud platform 103 according to the virtual machine configuration information and disk information in the backup file; wherein the target virtual machine 1032 is a virtual machine with the same specifications as the source virtual machine 1022. The virtual protection server 101 can create a virtual machine with the same specifications as the source virtual machine 1022, that is, the target virtual machine 1032 corresponding to the source virtual machine 1022, on the backup cloud platform 103 according to the virtual machine configuration information and disk information of the source virtual machine 1022 in the backup file.

[0056] Optionally, when the virtual protection server 101 receives a recovery request corresponding to the source virtual machine 1022, it creates a target virtual machine 1032 corresponding to the source virtual machine 1022 on the backup cloud platform 103 according to the backup file, including: when the virtual protection server 101 receives a recovery request corresponding to the source virtual machine 1022, it creates a target virtual machine 1032 corresponding to the source virtual machine 1022 on the backup cloud platform 103 according to the user-defined setting information corresponding to the source virtual machine 1022; wherein the target virtual machine 1032 is a virtual machine consistent with the specifications of the user-defined virtual machine. The user-defined setting information corresponding to the source virtual machine 1022 may be information related to the specifications of the user-defined virtual machine. The information related to the specifications of the user-defined virtual machine includes, but is not limited to, information used to describe the processor and disk of the user-defined virtual machine. The user-defined setting information corresponding to the source virtual machine 1022 may be the information stored in the backup file by the target user. The virtual protection server 101 can create a virtual machine with the same specifications as the user-defined virtual machine on the backup cloud platform 103 according to the user-defined setting information corresponding to the source virtual machine 1022, that is, a target virtual machine 1032 corresponding to the source virtual machine 1022. The disk of the user-defined virtual machine has the same specifications as the disk of the source virtual machine 1022.

[0057] Optionally, after creating a target virtual machine 1032 corresponding to the source virtual machine 1022, the virtual protection server 101 mounts the disk of the target virtual machine 1032 to the second proxy virtual machine 1031, and sends each data block in the backup file and the data information of each data block to the second proxy virtual machine 1031. After receiving each data block in the backup file and the data information of each data block, the second proxy virtual machine 1031 writes each data block in the backup file to the disk of the target virtual machine 1032 according to the data information of each data block in the backup file.

[0058] Optionally, the second proxy virtual machine 1031 writes each data block in the backup file to the disk of the target virtual machine 1032 according to the data information of each data block in the backup file, including: the second proxy virtual machine 1031 writes each data block in the backup file to the disk of the target virtual machine 1032 according to the location information and size information of each data block. For each data block, the second proxy virtual machine 1031 may write the data block to the disk of the target virtual machine 1032 according to the location information and size information in the data information of the data block, so that the location of the data block in the disk of the target virtual machine 1032 corresponding to the source virtual machine 1022 is the same as the location of the data block in the disk of the source virtual machine 1022.

[0059] Optionally, the second proxy virtual machine 1031 may send a second completion prompt message to the virtual protection server 101 after completing the process of writing each data block in the backup file to the disk of the target virtual machine 1032. The second completion prompt message may be pre-set information for representing that the second proxy virtual machine 1031 completes the process of writing each data block in the backup file to the disk of the target virtual machine 1032.

[0060] Optionally, the virtual protection server 101 may determine that the writing process of each data block is completed after receiving the second completion prompt information. After determining that the writing process of each data block is completed, the virtual protection server 101 remounts the disk of the target virtual machine 1032 to the target virtual machine 1032, and determines that the data recovery process of the source virtual machine 1022 is completed.

[0061] Optionally, after determining that the data recovery process of the source virtual machine 1022 is completed, the virtual protection server 101 sends a data recovery completion prompt message to the terminal device of the target user. The data recovery completion prompt message may be pre-set information used to indicate that the data recovery process is completed.

[0062] Optionally, the virtual machine protection system further includes: a user interaction module, configured to provide data related to the virtual protection server, the cloud platform to be protected or the backup cloud platform to a target user through a user interaction page.

[0063] Optionally, the user interaction module may be an electronic device for providing data related to the virtual protection server 101, the cloud platform to be protected 102, or the backup cloud platform 103 to the target user. The user interaction page may be a page set in the user interaction module for interacting with the user. The data related to the virtual protection server 101, the cloud platform to be protected 102, or the backup cloud platform 103 include, but are not limited to, data related to users, permissions, permissions, logs, historical records, and rules of the virtual protection server 101, the cloud platform to be protected 102, or the backup cloud platform 103.

[0064] In the technical scheme of the embodiment of the present invention, when the virtual protection server receives a backup request corresponding to any source virtual machine, it creates a snapshot of the source virtual machine, obtains the snapshot disk information of the source virtual machine, generates a snapshot copy disk of the source virtual machine according to the snapshot disk information, and mounts the snapshot copy disk to the first proxy virtual machine; the first proxy virtual machine reads the data in the snapshot copy disk in sequence according to the preset data volume to obtain multiple data blocks, and stores each data block and the data block information of each data block in the backup file corresponding to the source virtual machine in the virtual protection server; after the virtual protection server determines that the storage process of each data block and the data block information of each data block is completed, it unmounts the snapshot copy disk mounted to the first proxy virtual machine and deletes the snapshot copy disk; then, when the virtual protection server receives a recovery request corresponding to the source virtual machine, it creates a target virtual machine corresponding to the source virtual machine on the backup cloud platform according to the backup file, mounts the disk of the target virtual machine to the second proxy virtual machine, and mounts each data block in the backup file and the data information of each data block is sent to the second proxy virtual machine; the second proxy virtual machine writes each data block in the backup file to the disk of the target virtual machine according to the data information of each data block in the backup file; the virtual protection server remounts the disk of the target virtual machine to the target virtual machine after determining that the writing process of each data block is completed, thereby solving the problem that the virtual machine protection scheme in the related technology cannot effectively protect the virtual machines related to the computing resources, storage resources and network resources in the cloud platform on the basis of ensuring the stable operation of the cloud platform and the virtual machines, and ensure the data security of the virtual machines. Based on the virtual protection server, the second proxy virtual machine and the second proxy virtual machine, the data backup and data recovery of the virtual machines related to the computing resources, storage resources and network resources in the cloud platform can be efficiently performed, thereby effectively protecting the virtual machines related to the computing resources, storage resources and network resources in the cloud platform, ensuring the data security of the virtual machines, and will not affect the stable operation of the cloud platform and the virtual machines.

[0065] Embodiment 2

[0066] Figure 2 This is a flowchart of a virtual machine protection method provided in the second embodiment of the present invention. The method can be executed by the virtual machine protection system provided in the above embodiment of the present invention. Figure 2 As shown, the method of this embodiment specifically includes:

[0067] Step 201: When receiving a backup request corresponding to any source virtual machine, the virtual protection server creates a snapshot of the source virtual machine, obtains the snapshot disk information of the source virtual machine, generates a snapshot copy disk of the source virtual machine according to the snapshot disk information, and mounts the snapshot copy disk to the first proxy virtual machine.

[0068] Step 202: The first proxy virtual machine sequentially reads the data in the snapshot copy disk according to a preset data volume to obtain multiple data blocks, and stores each of the data blocks and the data block information of each of the data blocks in a backup file corresponding to the source virtual machine in the virtual protection server.

[0069] Optionally, the data block information includes: location information, size information and a hash value.

[0070] Optionally, the first proxy virtual machine reads the data in the snapshot copy disk in sequence according to a preset data volume to obtain multiple data blocks, and stores each of the data blocks and the data block information of each of the data blocks in a backup file corresponding to the source virtual machine in the virtual protection server, including: the first proxy virtual machine reads the data in the snapshot copy disk in sequence according to a preset data volume to obtain multiple data blocks; the first proxy virtual machine determines the data block information of each of the data blocks; the first proxy virtual machine stores each of the data blocks and the data block information of each of the data blocks in the backup file corresponding to the source virtual machine in the virtual protection server.

[0071] Optionally, the first proxy virtual machine stores each of the data blocks and the data block information of each of the data blocks in a backup file corresponding to the source virtual machine in the virtual protection server, including: if the backup request is a full backup request, the first proxy virtual machine determines in turn whether each of the data blocks is a non-empty data block, and stores the non-empty data blocks and the data block information of non-empty data blocks in the backup file corresponding to the source virtual machine in the virtual protection server.

[0072] Optionally, the first proxy virtual machine stores each of the data blocks and the data block information of each of the data blocks in a backup file corresponding to the source virtual machine in the virtual protection server, including: if the backup request is an incremental backup request, the first proxy virtual machine detects whether each of the data blocks is a changed data block based on the hash value of each of the data blocks and the historical disk hash value list corresponding to the source virtual machine, and stores the changed data blocks and the data block information of the changed data blocks in the backup file corresponding to the source virtual machine in the virtual protection server.

[0073] Step 203: After determining that the storage process of each data block and the data block information of each data block is completed, the virtual protection server unmounts the snapshot copy disk mounted to the first proxy virtual machine and deletes the snapshot copy disk.

[0074] Step 204: When the virtual protection server receives a recovery request corresponding to the source virtual machine, it creates a target virtual machine corresponding to the source virtual machine on the backup cloud platform based on the backup file, mounts the disk of the target virtual machine to the second proxy virtual machine, and sends each data block and data information of each data block in the backup file to the second proxy virtual machine.

[0075] Optionally, when the virtual protection server receives a recovery request corresponding to the source virtual machine, the virtual protection server creates a target virtual machine corresponding to the source virtual machine on the backup cloud platform according to the backup file, including: when the virtual protection server receives a recovery request corresponding to the source virtual machine, the virtual protection server creates a target virtual machine corresponding to the source virtual machine on the backup cloud platform according to the virtual machine configuration information and disk information in the backup file; wherein the target virtual machine is a virtual machine with specifications consistent with the source virtual machine.

[0076] Optionally, when the virtual protection server receives a recovery request corresponding to the source virtual machine, the virtual protection server creates a target virtual machine corresponding to the source virtual machine on the backup cloud platform according to the backup file, including: when the virtual protection server receives a recovery request corresponding to the source virtual machine, the virtual protection server creates a target virtual machine corresponding to the source virtual machine on the backup cloud platform according to user-defined setting information corresponding to the source virtual machine; wherein the target virtual machine is a virtual machine consistent with the user-defined virtual machine specifications.

[0077] Step 205: The second proxy virtual machine writes each data block in the backup file into the disk of the target virtual machine according to the data information of each data block in the backup file.

[0078] Optionally, the second proxy virtual machine writes each data block in the backup file to the disk of the target virtual machine based on the data information of each data block in the backup file, including: the second proxy virtual machine writes each data block in the backup file to the disk of the target virtual machine based on the location information and size information of each data block.

[0079] Step 206: After determining that the writing process of each data block is completed, the virtual protection server remounts the disk of the target virtual machine to the target virtual machine.

[0080] In the technical scheme of the embodiment of the present invention, when the virtual protection server receives a backup request corresponding to any source virtual machine, it creates a snapshot of the source virtual machine, obtains the snapshot disk information of the source virtual machine, generates a snapshot copy disk of the source virtual machine according to the snapshot disk information, and mounts the snapshot copy disk to the first proxy virtual machine; the first proxy virtual machine reads the data in the snapshot copy disk in sequence according to the preset data volume to obtain multiple data blocks, and stores each data block and the data block information of each data block in the backup file corresponding to the source virtual machine in the virtual protection server; after the virtual protection server determines that the storage process of each data block and the data block information of each data block is completed, it unmounts the snapshot copy disk mounted to the first proxy virtual machine and deletes the snapshot copy disk; then, when the virtual protection server receives a recovery request corresponding to the source virtual machine, it creates a target virtual machine corresponding to the source virtual machine on the backup cloud platform according to the backup file, mounts the disk of the target virtual machine to the second proxy virtual machine, and mounts each data block in the backup file and the data information of each data block is sent to the second proxy virtual machine; the second proxy virtual machine writes each data block in the backup file to the disk of the target virtual machine according to the data information of each data block in the backup file; the virtual protection server remounts the disk of the target virtual machine to the target virtual machine after determining that the writing process of each data block is completed, thereby solving the problem that the virtual machine protection scheme in the related technology cannot effectively protect the virtual machines related to the computing resources, storage resources and network resources in the cloud platform on the basis of ensuring the stable operation of the cloud platform and the virtual machines, and ensure the data security of the virtual machines. Based on the virtual protection server, the second proxy virtual machine and the second proxy virtual machine, the data backup and data recovery of the virtual machines related to the computing resources, storage resources and network resources in the cloud platform can be efficiently performed, thereby effectively protecting the virtual machines related to the computing resources, storage resources and network resources in the cloud platform, ensuring the data security of the virtual machines, and will not affect the stable operation of the cloud platform and the virtual machines.

[0081] It should be understood that the various forms of processes shown above can be used to reorder, add or delete steps. For example, the steps described in the present invention can be executed in parallel, sequentially or in different orders, as long as the desired results of the technical solution of the present invention can be achieved, and this document does not limit this.

[0082] The above specific implementations do not constitute a limitation on the protection scope of the present invention. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions can be made according to design requirements and other factors. Any modification, equivalent substitution and improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A virtual machine protection system, characterized in that: include: A virtual protection server, a cloud platform to be protected, and a backup cloud platform corresponding to the cloud platform to be protected; The cloud platform to be protected is provided with a first proxy virtual machine and a plurality of source virtual machines to be protected, and the backup cloud platform is provided with a second proxy virtual machine; When receiving a backup request corresponding to any source virtual machine, the virtual protection server creates a snapshot of the source virtual machine, obtains the snapshot disk information of the source virtual machine, generates a snapshot copy disk of the source virtual machine according to the snapshot disk information, and mounts the snapshot copy disk to the first proxy virtual machine; the first proxy virtual machine sequentially reads the data in the snapshot copy disk according to a preset data volume to obtain a plurality of data blocks, and stores each of the data blocks and the data block information of each of the data blocks in the backup file corresponding to the source virtual machine in the virtual protection server; after determining that the storage process of each of the data blocks and the data block information of each of the data blocks is completed, the virtual protection server unmounts the snapshot copy disk mounted to the first proxy virtual machine, and deletes the snapshot copy disk; When the virtual protection server receives a recovery request corresponding to the source virtual machine, it creates a target virtual machine corresponding to the source virtual machine on the backup cloud platform according to the backup file, mounts the disk of the target virtual machine to the second proxy virtual machine, and sends each data block in the backup file and the data information of each data block to the second proxy virtual machine; the second proxy virtual machine writes each data block in the backup file to the disk of the target virtual machine according to the data information of each data block in the backup file; and after determining that the writing process of each data block is completed, the virtual protection server remounts the disk of the target virtual machine to the target virtual machine.

2. The virtual machine protection system according to claim 1, characterized in that: Also includes: The user interaction module is used to provide data related to the virtual protection server, the cloud platform to be protected or the backup cloud platform to a target user through a user interaction page.

3. A virtual machine protection method, applied to the virtual machine protection system as claimed in claim 1, characterized in that: include: When receiving a backup request corresponding to any source virtual machine, the virtual protection server creates a snapshot of the source virtual machine, obtains snapshot disk information of the source virtual machine, generates a snapshot copy disk of the source virtual machine according to the snapshot disk information, and mounts the snapshot copy disk to the first proxy virtual machine; The first proxy virtual machine sequentially reads the data in the snapshot copy disk according to a preset data volume to obtain a plurality of data blocks, and stores each of the data blocks and the data block information of each of the data blocks in a backup file corresponding to the source virtual machine in the virtual protection server; After determining that the storage process of each data block and the data block information of each data block is completed, the virtual protection server unmounts the snapshot copy disk mounted to the first proxy virtual machine and deletes the snapshot copy disk; When receiving a recovery request corresponding to the source virtual machine, the virtual protection server creates a target virtual machine corresponding to the source virtual machine on the backup cloud platform according to the backup file, mounts the disk of the target virtual machine to the second proxy virtual machine, and sends each data block and data information of each data block in the backup file to the second proxy virtual machine; The second proxy virtual machine writes each data block in the backup file to the disk of the target virtual machine according to the data information of each data block in the backup file; After determining that the writing process of each data block is completed, the virtual protection server remounts the disk of the target virtual machine to the target virtual machine.

4. The virtual machine protection method according to claim 3, characterized in that: The data block information includes: location information, size information and hash value.

5. The virtual machine protection method according to claim 4, characterized in that: The first proxy virtual machine sequentially reads the data in the snapshot copy disk according to a preset data volume to obtain a plurality of data blocks, and stores each of the data blocks and data block information of each of the data blocks in a backup file corresponding to the source virtual machine in the virtual protection server, including: The first proxy virtual machine sequentially reads the data in the snapshot copy disk according to a preset data volume to obtain a plurality of data blocks; The first proxy virtual machine determines data block information of each of the data blocks; The first proxy virtual machine stores each of the data blocks and the data block information of each of the data blocks in a backup file corresponding to the source virtual machine in the virtual protection server.

6. The virtual machine protection method according to claim 5, characterized in that: The first proxy virtual machine stores each of the data blocks and the data block information of each of the data blocks in a backup file corresponding to the source virtual machine in the virtual protection server, including: If the backup request is a full backup request, the first proxy virtual machine sequentially determines whether each data block is a non-empty data block, and stores the non-empty data blocks and data block information of the non-empty data blocks in the backup file corresponding to the source virtual machine in the virtual protection server.

7. The virtual machine protection method according to claim 5, characterized in that: The first proxy virtual machine stores each of the data blocks and the data block information of each of the data blocks in a backup file corresponding to the source virtual machine in the virtual protection server, including: If the backup request is an incremental backup request, the first proxy virtual machine detects whether each data block is a changed data block based on the hash value of each data block and the historical disk hash value list corresponding to the source virtual machine, and stores the changed data blocks and data block information of the changed data blocks in the backup file corresponding to the source virtual machine in the virtual protection server.

8. The virtual machine protection method according to claim 3, characterized in that: When receiving the recovery request corresponding to the source virtual machine, the virtual protection server creates a target virtual machine corresponding to the source virtual machine on the backup cloud platform according to the backup file, including: When the virtual protection server receives a recovery request corresponding to the source virtual machine, it creates a target virtual machine corresponding to the source virtual machine on the backup cloud platform according to the virtual machine configuration information and disk information in the backup file; wherein the target virtual machine is a virtual machine with the same specifications as the source virtual machine.

9. The virtual machine protection method according to claim 3, characterized in that: When receiving the recovery request corresponding to the source virtual machine, the virtual protection server creates a target virtual machine corresponding to the source virtual machine on the backup cloud platform according to the backup file, including: When the virtual protection server receives a recovery request corresponding to the source virtual machine, it creates a target virtual machine corresponding to the source virtual machine on the backup cloud platform according to the user-defined setting information corresponding to the source virtual machine; wherein the target virtual machine is a virtual machine consistent with the user-defined virtual machine specifications.

10. The virtual machine protection method according to claim 3, characterized in that: The second proxy virtual machine writes each data block in the backup file to the disk of the target virtual machine according to the data information of each data block in the backup file, including: The second proxy virtual machine writes each data block in the backup file into the disk of the target virtual machine according to the location information and size information of each data block.

Images