Resource deployment method and device for bastion host cluster, equipment and medium

Abstract

The embodiment of the invention provides a resource deployment method and device for a bastion host cluster, equipment and a medium, and relates to the technical field of network security. The resource deployment method of the bastion host cluster comprises the following steps: evaluating a use index value of at least one operation and maintenance protocol supported by the bastion host cluster; wherein the use index values of various operation and maintenance protocols in the at least one operation and maintenance protocol are used for indicating the use conditions of the bastion host cluster on the various operation and maintenance protocols; and downloading an agent program of the operation and maintenance protocol to a program library under the condition that the use index value of any one operation and maintenance protocol in the at least one operation and maintenance protocol exceeds a first preset threshold value and the program library of the bastion host cluster does not have the agent program of the operation and maintenance protocol. According to the embodiment of the invention, the technical effects of dynamically deploying the agent program of the operation and maintenance protocol for the bastion host cluster and avoiding excessive occupation of storage resources of the bastion host cluster can be realized.

Description

Technical Field

[0001] The present application relates to the field of network security technology, and more specifically, to a resource deployment method, device, equipment, and medium for a bastion host cluster. Background Art

[0002] A bastion host is a network security management tool that acts as an interface or gateway between the external network and the internal network. It mainly uses a protocol proxy to take over the external operation and maintenance terminal's access to various devices in the internal network. By monitoring and recording the operation behaviors of the operation and maintenance users on various devices in the internal network, it can achieve centralized alarm, timely processing and auditing and accountability, thereby ensuring the security of the internal network.

[0003] Since there are many devices in the internal network, the operation and maintenance of multiple devices in the internal network are usually shared by multiple bastion hosts in the bastion host cluster. However, in order to ensure that all bastion hosts in the bastion host cluster support all functions, it is necessary to deploy the agent program of each operation and maintenance protocol in the bastion host cluster, such as SSH (Secure Shell), RDP (Remote Desktop Protocol), and SQL (Structured Query Language, which refers to the protocol for transmitting SQL requests and responses in the network). This results in excessive storage resources of the bastion host cluster being occupied, reducing the operation and maintenance efficiency of the bastion host cluster. Summary of the invention

[0004] The purpose of the embodiments of the present application is to provide a resource deployment method, device, equipment and medium for a bastion host cluster, so as to realize the technical effect of dynamically deploying an agent program for the operation and maintenance protocol of the bastion host cluster and avoiding occupying too many storage resources of the bastion host cluster.

[0005] In a first aspect, an embodiment of the present application provides a resource deployment method for a bastion host cluster, including:

[0006] Evaluate the usage index value of at least one operation and maintenance protocol supported by the bastion host cluster; wherein the usage index values ​​of various operation and maintenance protocols in the at least one operation and maintenance protocol are used to indicate the usage of the various operation and maintenance protocols by the bastion host cluster;

[0007] When the usage index value of any one of the at least one operation and maintenance protocols is greater than a first preset threshold and there is no agent program of the operation and maintenance protocol in the program library of the bastion host cluster, the agent program of the operation and maintenance protocol is downloaded to the program library.

[0008] In the above implementation process, by evaluating the usage index values ​​of various operation and maintenance protocols, based on the comparison results of the usage index values ​​of various operation and maintenance protocols with the first preset threshold value, and the judgment result of whether there are agent programs of various operation and maintenance protocols in the program library of the bastion host cluster, it is determined whether to download the agent programs of various operation and maintenance protocols to the program library of the bastion host cluster. The agent programs of the operation and maintenance protocols commonly used by the bastion host cluster can be deployed on the bastion host cluster, thereby dynamically deploying the agent programs of the operation and maintenance protocols on the bastion host cluster to avoid occupying too many storage resources of the bastion host cluster.

[0009] Furthermore, the use index value of at least one operation and maintenance protocol supported by the bastion host cluster is evaluated, including:

[0010] Determine the data packet statistics of the various operation and maintenance protocols according to the data packets of the various operation and maintenance protocols received by the bastion host cluster within a preset time period;

[0011] Determine operation statistics of the various operation and maintenance protocols according to the operation and maintenance operations performed by the bastion host cluster using the various operation and maintenance protocols within the preset time period;

[0012] Based on the data packet statistics of the various operation and maintenance protocols and the operation and maintenance operation statistics of the various operation and maintenance protocols, the usage index values ​​of the various operation and maintenance protocols are evaluated.

[0013] In the above implementation process, the usage index values ​​of various operation and maintenance protocols are evaluated based on the statistics of data packets of various operation and maintenance protocols received by the bastion host cluster within a preset period of time, and the statistics of operation and maintenance operations performed by the bastion host cluster using various operation and maintenance protocols within the preset period of time. The usage index values ​​of various operation and maintenance protocols can be evaluated by comprehensively considering the usage of various operation and maintenance protocols for data packets processed by the bastion host cluster and the usage of various operation and maintenance protocols for operation and maintenance operations performed by the bastion host cluster, thereby ensuring that the usage index values ​​of various operation and maintenance protocols are evaluated reasonably and accurately.

[0014] Further, the evaluating the usage index values ​​of the various operation and maintenance protocols according to the data packet statistics of the various operation and maintenance protocols and the operation and maintenance operation statistics of the various operation and maintenance protocols includes:

[0015] According to the preset data packet statistics weight and operation and maintenance operation statistics weight, the data packet statistics of the various operation and maintenance protocols and the operation and maintenance operation statistics of the various operation and maintenance protocols are weightedly calculated to obtain the usage index values ​​of the various operation and maintenance protocols.

[0016] In the above implementation process, by performing weighted calculation on the data packet statistics of various operation and maintenance protocols and the operation and maintenance operation statistics of various operation and maintenance protocols according to the pre-set data packet statistics weights and operation and maintenance operation statistics weights, the usage index values ​​of various operation and maintenance protocols are obtained. The usage of various operation and maintenance protocols for data packets processed by the bastion host cluster and the usage of various operation and maintenance protocols for operation and maintenance operations performed by the bastion host cluster can be comprehensively evaluated to ensure more reasonable and accurate evaluation of the usage index values ​​of various operation and maintenance protocols.

[0017] Furthermore, the data packet statistics of the various operation and maintenance protocols include the number of data packets and / or the proportion of data packets of the various operation and maintenance protocols, and the operation and maintenance operation statistics of the various operation and maintenance protocols include the number of operation and maintenance operations and / or the frequency of operation and maintenance operations of the various operation and maintenance protocols.

[0018] In the above implementation process, by evaluating the usage index values ​​of various operation and maintenance protocols based on the number of data packets and / or the proportion of data packets of various operation and maintenance protocols, as well as the number of operation and maintenance operations and / or the frequency of operation and maintenance operations of various operation and maintenance protocols, the usage index values ​​of various operation and maintenance protocols can be evaluated by comprehensively considering the usage of various operation and maintenance protocols by the data packets processed by the bastion host cluster, as well as the usage of various operation and maintenance protocols by the operation and maintenance operations performed by the bastion host cluster, thereby ensuring that the usage index values ​​of various operation and maintenance protocols are evaluated quickly and accurately.

[0019] Furthermore, the method further comprises:

[0020] When the bastion host cluster receives an operation and maintenance request sent by the operation and maintenance terminal, the target bastion host in the bastion host cluster is controlled to respond to the operation and maintenance request, and load the target agent program from the program library to perform the target operation and maintenance operation; wherein the target agent program and the target operation and maintenance operation are determined according to the operation and maintenance request.

[0021] In the above implementation process, when the bastion host cluster receives an operation and maintenance request sent by the operation and maintenance terminal, the target bastion host in the bastion host cluster is controlled to respond to the operation and maintenance request, and the target agent program is loaded from the program library to perform the target operation and maintenance operation. This enables the target bastion host to respond to the operation and maintenance request and directly load the target agent program from the program library to perform the target operation and maintenance operation, which is beneficial to improving the operation and maintenance efficiency of the bastion host cluster.

[0022] Furthermore, the method further comprises:

[0023] When a preset period arrives, for each agent program in the program library, evaluating the usage index value of the operation and maintenance protocol corresponding to the current agent program;

[0024] When the usage index value of the operation and maintenance protocol corresponding to the current agent program is less than a second preset threshold, the current agent program is uninstalled from the program library; wherein the second preset threshold is less than the first preset threshold.

[0025] In the above implementation process, by regularly determining whether to uninstall each agent program from the program library based on whether the usage indicator value of the operation and maintenance protocol corresponding to each agent program in the program library is less than the second preset threshold, the agent programs of the operation and maintenance protocol that are no longer frequently used by the bastion host cluster in the program library can be regularly cleaned up, thereby better avoiding occupying too many storage resources of the bastion host cluster.

[0026] Furthermore, when the usage indicator value of the operation and maintenance protocol corresponding to the current agent program is less than a second preset threshold, uninstalling the current agent program from the program library includes:

[0027] When the usage index value of the operation and maintenance protocol corresponding to the current agent program is less than the second preset threshold, marking the current agent program as a program to be uninstalled;

[0028] When the program to be uninstalled stops running, the program to be uninstalled is uninstalled from the program library.

[0029] In the above implementation process, by first marking the agent program of the operation and maintenance protocol that is no longer frequently used by the bastion host in the program library as a program to be uninstalled, and then uninstalling the program to be uninstalled from the program library after confirming that the program to be uninstalled has stopped running, it can prevent problems such as abnormal execution of operation and maintenance operations caused by uninstalling the program during program running, and effectively improve the operation and maintenance efficiency of the bastion host cluster.

[0030] In a second aspect, an embodiment of the present application provides a resource deployment device for a bastion host cluster, including:

[0031] An indicator evaluation module, used to evaluate the usage indicator value of at least one operation and maintenance protocol supported by the bastion host cluster; wherein the usage indicator values ​​of various operation and maintenance protocols in the at least one operation and maintenance protocol are used to indicate the usage of the various operation and maintenance protocols by the bastion host cluster;

[0032] A resource deployment module is used to download the agent program of the operation and maintenance protocol to the program library when the usage index value of any one of the at least one operation and maintenance protocols exceeds a first preset threshold and there is no agent program of the operation and maintenance protocol in the program library of the bastion host cluster.

[0033] In a third aspect, an embodiment of the present application provides an electronic device, comprising a processor, a memory, and a computer program stored in the memory and configured to be executed by the processor; when the processor executes the computer program, the method as described above is implemented.

[0034] In a fourth aspect, an embodiment of the present application provides a computer-readable storage medium, wherein the computer-readable storage medium includes a stored computer program; wherein, when the computer program is running, the device where the computer-readable storage medium is located is controlled to execute the method described above. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the embodiments of the present application will be briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present application and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0036] Figure 1 A schematic diagram of a process for resource deployment of a bastion host cluster provided in the first embodiment of the present application;

[0037] Figure 2 A schematic diagram of the structure of a resource deployment device for a bastion host cluster provided in the second embodiment of the present application;

[0038] Figure 3 A schematic diagram of the structure of an electronic device provided in the third embodiment of the present application. DETAILED DESCRIPTION

[0039] The technical solutions in the embodiments of the present application will be described below in conjunction with the drawings in the embodiments of the present application.

[0040] It should be noted that in the description of this application, the terms "first", "second", etc. are only used to distinguish descriptions and cannot be understood as indicating or implying relative importance. At the same time, the step numbers in the text are only for the convenience of explaining the embodiments of this application and do not serve to limit the order of execution of the steps.

[0041] A bastion host is a network security management tool that acts as an interface or gateway between the external network and the internal network. It mainly uses a protocol proxy to take over the external operation and maintenance terminal's access to various devices in the internal network. By monitoring and recording the operation behaviors of the operation and maintenance users on various devices in the internal network, it can achieve centralized alarm, timely processing and auditing and accountability, thereby ensuring the security of the internal network.

[0042] In the related art, since there are many devices in the internal network, the operation and maintenance of multiple devices in the internal network are usually shared by multiple bastion hosts in the bastion host cluster. However, in order to ensure that all bastion hosts in the bastion host cluster support all functions, it is necessary to deploy the agent program of the operation and maintenance protocol for each operation and maintenance protocol in the bastion host cluster, such as SSH protocol (Secure Shell), RDP protocol (Remote Desktop Protocol), and SQL protocol (Structured Query Language, SQL protocol refers to the protocol for transmitting SQL requests and responses in the network), which results in occupying too much storage resources of the bastion host cluster and reducing the operation and maintenance efficiency of the bastion host cluster.

[0043] To this end, the present application proposes a resource deployment method for a bastion host cluster, which determines whether to download the agent programs of various operation and maintenance protocols to the program library of the bastion host cluster by evaluating the usage index values ​​of various operation and maintenance protocols and comparing the usage index values ​​of various operation and maintenance protocols with a first preset threshold value, as well as the judgment result of whether there are agent programs of various operation and maintenance protocols in the program library of the bastion host cluster. This method can deploy agent programs of operation and maintenance protocols commonly used by the bastion host cluster to the bastion host cluster, thereby dynamically deploying agent programs of operation and maintenance protocols to the bastion host cluster to avoid occupying too many storage resources of the bastion host cluster.

[0044] The technical solutions in the embodiments of the present application will be described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, rather than all of the embodiments.

[0045] The method provided in the embodiment of the present application can be executed by relevant terminal devices, and the following description will be given using the server of the bastion host cluster as an example of the execution subject.

[0046] Please see Figure 1 , Figure 1 A schematic diagram of a process flow of a resource deployment method for a bastion host cluster provided in the first embodiment of the present application. The first embodiment of the present application provides a resource deployment method for a bastion host cluster, including steps S101 to S102:

[0047] S101. Evaluate a usage index value of at least one operation and maintenance protocol supported by a bastion host cluster; wherein the usage index values ​​of various operation and maintenance protocols in the at least one operation and maintenance protocol are used to indicate usage of the various operation and maintenance protocols by the bastion host cluster.

[0048] As an example, there are multiple bastion hosts in a bastion host cluster. Each bastion host can adopt a protocol proxy method to take over the access of external operation and maintenance terminals to various devices in the internal network, and use one or more operation and maintenance protocols such as SSH protocol, RDP protocol and SQL protocol supported by the bastion host. By monitoring and recording the operating behaviors of operation and maintenance users on various devices in the internal network, it performs operation and maintenance operations such as centralized alarm, timely processing and auditing and determining responsibilities.

[0049] It should be noted that operation and maintenance terminals include terminal devices such as mobile phones, tablets and computers held by operation and maintenance users.

[0050] During the operation of the bastion host cluster, the server determines at least one operation and maintenance protocol supported by the bastion host cluster, and evaluates the usage index value of each operation and maintenance protocol. The usage index value of the operation and maintenance protocol is used to indicate the usage of the operation and maintenance protocol by the bastion host cluster, thereby obtaining the usage index values ​​of various operation and maintenance protocols.

[0051] S102. When the usage index value of any one of the at least one operation and maintenance protocols is greater than a first preset threshold and there is no agent program of the operation and maintenance protocol in the program library of the bastion host cluster, download the agent program of the operation and maintenance protocol to the program library.

[0052] As an example, considering factors such as the amount of available storage resources of the bastion host cluster and the enterprise's internal network operation and maintenance strategy in actual applications, a usage indicator threshold is pre-set as the first preset threshold.

[0053] After obtaining the usage index values ​​of various operation and maintenance protocols, the server compares the usage index value of each operation and maintenance protocol with the first preset threshold value, and searches for the agent program of the operation and maintenance protocol in the program library of the bastion host cluster.

[0054] If the usage index value of this operation and maintenance protocol is greater than the first preset threshold, and there is no agent program for this operation and maintenance protocol in the program library, it is considered that the bastion host cluster frequently uses this operation and maintenance protocol to perform operation and maintenance operations, and the agent program for this operation and maintenance protocol has not yet been stored in the program library. At this time, the agent program for this operation and maintenance protocol is downloaded to the program library.

[0055] If the usage index value of this operation and maintenance protocol is greater than the first preset threshold, and there is an agent program for this operation and maintenance protocol in the program library, it is considered that the program library has stored the agent program for this operation and maintenance protocol commonly used by the bastion host cluster. At this time, there is no need to repeatedly download the agent program for this operation and maintenance protocol to the program library, and no processing is performed.

[0056] If the usage index value of this operation and maintenance protocol is less than or equal to the first preset threshold value, it is considered that the bastion host cluster does not frequently use this operation and maintenance protocol to perform operation and maintenance operations. At this time, there is no need to consider deploying an agent program of this operation and maintenance protocol on the bastion host cluster to occupy the storage resources of the bastion host cluster. There is no need to search for the agent program of this operation and maintenance protocol in the program library, and no processing is required.

[0057] Since an operation and maintenance protocol has one or more agent programs, if an operation and maintenance protocol has an agent program, the usage index value of the operation and maintenance protocol is greater than the first preset threshold, and there is no agent program for the operation and maintenance protocol in the program library, then the agent program for the operation and maintenance protocol is downloaded to the program library; if an operation and maintenance protocol has multiple agent programs, the usage index value of the operation and maintenance protocol is greater than the first preset threshold, and there is no at least part of the agent program for the operation and maintenance protocol in the program library, then this part of the agent program for the operation and maintenance protocol is downloaded to the program library.

[0058] In actual applications, in order to ensure that the agent program of the operation and maintenance protocol is downloaded safely and completely to the program library, the server can establish a secure connection with the external protocol program source, encrypt and transmit the agent program of the operation and maintenance protocol from the protocol program source to the local server, and store the agent program of the operation and maintenance protocol in the program library after the agent program of the operation and maintenance protocol on the local server passes the data integrity verification. Among them, the protocol program source can be an internal software warehouse of the enterprise or an authorized third-party software supplier. For example, the server uses the HTTPS protocol (Hypertext Transfer Protocol Secure) to download the agent program of the operation and maintenance protocol from the internal software warehouse of the enterprise, and verifies whether the downloaded agent program of the operation and maintenance protocol has been tampered with through a digital signature. If it has not been tampered with, the agent program of the operation and maintenance protocol is stored in the program library.

[0059] In actual applications, the program library, as a central warehouse for storing the proxy programs of the operation and maintenance protocol, can use an efficient storage structure and index mechanism to store the proxy programs of the operation and maintenance protocol, so that the server can quickly find and manage the proxy programs of the operation and maintenance protocol in the program library. The proxy programs of the operation and maintenance protocol in the program library can be stored in the form of executable files or scripts. For example, the program library stores client programs for remote login using the SSH protocol and related programs for remote desktop connection using the RDP protocol.

[0060] The embodiment of the present application determines whether to download the agent programs of various operation and maintenance protocols to the program library of the bastion host cluster by evaluating the usage index values ​​of various operation and maintenance protocols, based on the comparison results of the usage index values ​​of various operation and maintenance protocols with the first preset threshold value, and the judgment result of whether there are agent programs of various operation and maintenance protocols in the program library of the bastion host cluster. The agent programs of the operation and maintenance protocols commonly used by the bastion host cluster can be deployed to the bastion host cluster, thereby dynamically deploying the agent programs of the operation and maintenance protocols to the bastion host cluster to avoid occupying too many storage resources of the bastion host cluster.

[0061] In an optional embodiment, the evaluation of the usage index value of at least one operation and maintenance protocol supported by the bastion host cluster includes: determining the data packet statistics of various operation and maintenance protocols based on the data packets of various operation and maintenance protocols received by the bastion host cluster within a preset time period; determining the operation and maintenance operation statistics of various operation and maintenance protocols based on the operation and maintenance operations performed by the bastion host cluster using the various operation and maintenance protocols within a preset time period; and evaluating the usage index values ​​of various operation and maintenance protocols based on the data packet statistics of various operation and maintenance protocols and the operation and maintenance operation statistics of various operation and maintenance protocols.

[0062] As an example, during the operation of the bastion host cluster, the server monitors the network traffic of the bastion host cluster in real time, identifies the operation and maintenance protocols used by each data packet, and organizes the data packets of various operation and maintenance protocols received by the bastion host cluster within a time period before the current moment, i.e., a preset time period. For example, within 1 minute before the current moment, the server counts the data packets of various operation and maintenance protocols received by the bastion host cluster within the preset time period to determine the data packet statistics of various operation and maintenance protocols.

[0063] In actual applications, the server can use deep packet inspection technology to identify the type of operation and maintenance protocol used by each data packet.

[0064] During the operation of the bastion host cluster, the server monitors the operation and maintenance operations performed by the operation and maintenance users through the bastion host cluster in real time, identifies the operation and maintenance protocols used for each operation and maintenance operation, organizes the operation and maintenance operations performed by the bastion host cluster using various operation and maintenance protocols within a preset period, and counts the operation and maintenance operations performed by the bastion host cluster using various operation and maintenance protocols within the preset period to determine the operation and maintenance operation statistics of various operation and maintenance protocols.

[0065] In actual applications, the server can check the operation and maintenance operations performed by the operation and maintenance user through the bastion host cluster by obtaining the operation and maintenance operation logs of the bastion host cluster in real time.

[0066] For each operation and maintenance protocol, after obtaining the data packet statistics and the operation and maintenance operation statistics of the operation and maintenance protocol, the server evaluates the usage index value of the operation and maintenance protocol based on the data packet statistics and the operation and maintenance operation statistics of the operation and maintenance protocol, thereby obtaining the usage index values ​​of various operation and maintenance protocols.

[0067] The embodiment of the present application evaluates the usage index values ​​of various operation and maintenance protocols based on the statistics of data packets of various operation and maintenance protocols received by the bastion host cluster within a preset time period, and the statistics of operation and maintenance operations performed by the bastion host cluster using various operation and maintenance protocols within a preset time period. It can comprehensively evaluate the usage index values ​​of various operation and maintenance protocols based on the usage of various operation and maintenance protocols by data packets processed by the bastion host cluster, and the usage of various operation and maintenance protocols by the operation and maintenance operations performed by the bastion host cluster, thereby ensuring reasonable and accurate evaluation of the usage index values ​​of various operation and maintenance protocols.

[0068] In an optional embodiment, the usage index values ​​of various operation and maintenance protocols are evaluated based on the data packet statistics of various operation and maintenance protocols and the operation and maintenance operation statistics of various operation and maintenance protocols, including: performing weighted calculations on the data packet statistics of various operation and maintenance protocols and the operation and maintenance operation statistics of various operation and maintenance protocols according to pre-set data packet statistics weights and operation and maintenance operation statistics weights to obtain the usage index values ​​of various operation and maintenance protocols.

[0069] As an example, in actual applications, considering factors such as enterprise internal network operation and maintenance strategies, the weight of data packet statistics and the weight of operation and maintenance operation statistics are pre-set. For example, the enterprise pays more attention to the impact of operation and maintenance operations on the use of operation and maintenance protocols, and the weight of data packet statistics and the weight of operation and maintenance operation statistics are pre-set, and the weight of data packet statistics is less than the weight of operation and maintenance operation statistics.

[0070] For each operation and maintenance protocol, after obtaining the data packet statistics and the operation and maintenance operation statistics of the operation and maintenance protocol, the server performs weighted calculation on the data packet statistics and the operation and maintenance operation statistics of the operation and maintenance protocol according to the data packet statistics weight and the operation and maintenance operation statistics weight, and obtains the usage index value of the operation and maintenance protocol, thereby obtaining the usage index values ​​of various operation and maintenance protocols. For example, the usage index value of the operation and maintenance protocol = data packet statistics of the operation and maintenance protocol × data packet statistics weight + operation and maintenance operation statistics of the operation and maintenance protocol × operation and maintenance operation statistics weight.

[0071] The embodiment of the present application obtains usage index values ​​of various operation and maintenance protocols by performing weighted calculation on the data packet statistics of various operation and maintenance protocols and the operation and maintenance operation statistics of various operation and maintenance protocols according to pre-set data packet statistics weights and operation and maintenance operation statistics weights. The usage index values ​​of various operation and maintenance protocols can be evaluated based on the usage of various operation and maintenance protocols by data packets processed by the bastion host cluster and the usage of various operation and maintenance protocols by the operation and maintenance operations performed by the bastion host cluster, thereby ensuring a more reasonable and accurate evaluation of the usage index values ​​of various operation and maintenance protocols.

[0072] In an optional embodiment, the data packet statistics of various operation and maintenance protocols include the number of data packets and / or the proportion of data packets of various operation and maintenance protocols, and the operation and maintenance operation statistics of various operation and maintenance protocols include the number of operation and maintenance operations and / or the frequency of operation and maintenance operations of various operation and maintenance protocols.

[0073] As an example, the server may select the number of data packets and / or the proportion of data packets of various operation and maintenance protocols as the data packet statistics of various operation and maintenance protocols, and select the number of operation and maintenance operations and / or the frequency of operation and maintenance operations of various operation and maintenance protocols as the operation and maintenance operation statistics of various operation and maintenance protocols.

[0074] It should be noted that the data packet statistics of various operation and maintenance protocols include the number of data packets and / or the proportion of data packets of various operation and maintenance protocols. There are mainly three situations: the data packet statistics of various operation and maintenance protocols include the number of data packets of various operation and maintenance protocols; the data packet statistics of various operation and maintenance protocols include the proportion of data packets of various operation and maintenance protocols; the data packet statistics of various operation and maintenance protocols include the number of data packets and the proportion of data packets of various operation and maintenance protocols.

[0075] The operation and maintenance operation statistics of various operation and maintenance protocols include the number of operation and maintenance operations and / or the frequency of operation and maintenance operations of various operation and maintenance protocols. There are mainly three situations: the operation and maintenance operation statistics of various operation and maintenance protocols include the number of operation and maintenance operations of various operation and maintenance protocols; the operation and maintenance operation statistics of various operation and maintenance protocols include the frequency of operation and maintenance operations of various operation and maintenance protocols; the operation and maintenance operation statistics of various operation and maintenance protocols include the number of operation and maintenance operations and the frequency of operation and maintenance operations of various operation and maintenance protocols.

[0076] If the server selects the number of data packets of various operation and maintenance protocols as the data packet statistics of various operation and maintenance protocols, then after obtaining the data packets of various operation and maintenance protocols received by the bastion host cluster within the preset time period, for each operation and maintenance protocol, the number of data packets of the operation and maintenance protocol received by the bastion host cluster within the preset time period is counted to obtain the number of data packets of the operation and maintenance protocol, thereby obtaining the number of data packets of various operation and maintenance protocols; if the data packet proportion of various operation and maintenance protocols is selected as the data packet statistics of various operation and maintenance protocols, then after obtaining the data packets of various operation and maintenance protocols received by the bastion host cluster within the preset time period, for each operation and maintenance protocol, the number of data packets of the operation and maintenance protocol received by the bastion host cluster within the preset time period and the total number of data packets of all operation and maintenance protocols are counted, and the proportion of the number of data packets of the operation and maintenance protocol in the total number of data packets of all operation and maintenance protocols is calculated to obtain the data packet proportion of the operation and maintenance protocol, thereby obtaining the data packet proportion of various operation and maintenance protocols; if the number of data packets and the data packet proportion of various operation and maintenance protocols are selected as the data packet statistics of various operation and maintenance protocols, the number of data packets and the data packet proportion of various operation and maintenance protocols are obtained according to the above statistical operation.

[0077] If the server selects the number of operation and maintenance operations of various operation and maintenance protocols as the operation and maintenance operation statistics of various operation and maintenance protocols, then after obtaining the operation and maintenance operations performed by the bastion host cluster using various operation and maintenance protocols within a preset period, for each operation and maintenance protocol, the number of operation and maintenance operations performed by the bastion host cluster using this operation and maintenance protocol within the preset period is counted to obtain the number of operation and maintenance operations of this operation and maintenance protocol, thereby obtaining the number of operation and maintenance operations of various operation and maintenance protocols; if the operation and maintenance operation frequencies of various operation and maintenance protocols are selected as the operation and maintenance operation statistics of various operation and maintenance protocols, then after obtaining the operation and maintenance operations performed by the bastion host cluster using various operation and maintenance protocols within the preset period, for each operation and maintenance protocol, the frequency of operation and maintenance operations performed by the bastion host cluster using this operation and maintenance protocol within the preset period is counted to obtain the operation and maintenance operation frequency of this operation and maintenance protocol, thereby obtaining the operation and maintenance operation frequencies of various operation and maintenance protocols; if the number of operation and maintenance operations and the operation and maintenance operation frequencies of various operation and maintenance protocols are selected as the operation and maintenance operation statistics of various operation and maintenance protocols, the number of operation and maintenance operations and the operation and maintenance operation frequencies of various operation and maintenance protocols are obtained according to the above statistical operations.

[0078] The embodiments of the present application evaluate the usage index values ​​of various operation and maintenance protocols according to the number of data packets and / or the proportion of data packets of various operation and maintenance protocols, as well as the number of operation and maintenance operations and / or the frequency of operation and maintenance operations of various operation and maintenance protocols. This can comprehensively evaluate the usage index values ​​of various operation and maintenance protocols by the usage of data packets processed by the bastion host cluster, as well as the usage of various operation and maintenance protocols by the operation and maintenance operations performed by the bastion host cluster, thereby ensuring that the usage index values ​​of various operation and maintenance protocols are evaluated quickly and accurately.

[0079] In an optional embodiment, the method further includes step S103:

[0080] S103. When the bastion host cluster receives an operation and maintenance request sent by the operation and maintenance terminal, the target bastion host in the bastion host cluster is controlled to respond to the operation and maintenance request, and the target agent program is loaded from the program library to perform the target operation and maintenance operation; wherein the target agent program and the target operation and maintenance operation are determined according to the operation and maintenance request.

[0081] As an example, when the server detects that the bastion host cluster receives an operation and maintenance request sent by the operation and maintenance terminal, it selects a bastion host from the bastion host cluster as the target bastion host, controls the target bastion host to respond to the operation and maintenance request, determines the target agent program in the program library according to the operation and maintenance request, runs the target operation and maintenance operation executable by the target agent program, loads the target agent program from the program library, and runs the target agent program to perform the target operation and maintenance operation. For example, the agent program of the SSH protocol is run to connect to the server for command line input operations, and the agent program of the RDP protocol is run to perform remote desktop control operations.

[0082] In actual applications, the server can randomly select an idle bastion host from the bastion host cluster as the target bastion host. The server can monitor the execution status of the target operation and maintenance operation in real time during the target bastion host's execution of the target operation and maintenance operation. Once the target operation and maintenance operation is detected to be abnormally executed, such as connection interruption and operation timeout, the server returns a response message of abnormal execution of the target operation and maintenance operation to the operation and maintenance terminal, and records the relevant error information.

[0083] The embodiment of the present application controls the target bastion host in the bastion host cluster to respond to the operation and maintenance request and loads the target agent program from the program library to perform the target operation and maintenance operation when the bastion host cluster receives the operation and maintenance request sent by the operation and maintenance terminal. This enables the target bastion host to respond to the operation and maintenance request and directly load the target agent program from the program library to perform the target operation and maintenance operation, which is beneficial to improving the operation and maintenance efficiency of the bastion host cluster.

[0084] In an optional embodiment, the method further includes steps S104 to S105:

[0085] S104, when the preset period arrives, for each agent program in the program library, evaluating the usage index value of the operation and maintenance protocol corresponding to the current agent program;

[0086] S105. When the usage index value of the operation and maintenance protocol corresponding to the current agent program is less than a second preset threshold, uninstall the current agent program from the program library; wherein the second preset threshold is less than the first preset threshold.

[0087] As an example, since the proxy programs of the operation and maintenance protocols in the program library are unlikely to always be the proxy programs of the operation and maintenance protocols commonly used by the bastion host cluster, they may become the proxy programs of the operation and maintenance protocols that are not commonly used by the bastion host cluster. Therefore, it is necessary to regularly clean up the proxy programs of the operation and maintenance protocols that are no longer commonly used by the bastion host cluster in the program library.

[0088] Taking into account factors such as the available storage resources of the bastion host cluster and the enterprise's internal network operation and maintenance strategy in actual applications, a period is pre-set as a preset period, and another usage indicator threshold is pre-set as a second preset threshold, wherein the second preset threshold is smaller than the first preset threshold.

[0089] When the preset period arrives, the server evaluates the usage indicator value of the operation and maintenance protocol corresponding to the current agent program for each agent program in the program library according to the above-mentioned usage indicator evaluation operation, and compares the usage indicator value of the operation and maintenance protocol corresponding to the current agent program with the second preset threshold.

[0090] If the usage index value of the operation and maintenance protocol corresponding to the current agent program is less than the second preset threshold, it is considered that the bastion host cluster no longer frequently uses the operation and maintenance protocol corresponding to the current agent program, and it is unreasonable for the current agent program to occupy the storage resources of the program library. At this time, the current agent program is uninstalled from the program library, the relevant configuration information and temporary files are cleaned up, and the storage resources of the program library are released.

[0091] If the usage index value of the operation and maintenance protocol corresponding to the current agent program is greater than or equal to the second preset threshold, it is considered that the bastion host cluster still frequently uses the operation and maintenance protocol corresponding to the current agent program, and it is reasonable for the current agent program to occupy the storage resources of the program library. At this time, there is no need to uninstall the current agent program from the program library and no processing is performed.

[0092] The embodiment of the present application determines whether to uninstall each agent program from the program library by regularly determining whether the usage index value of the operation and maintenance protocol corresponding to each agent program in the program library is less than a second preset threshold value. This can regularly clean up the agent programs of the operation and maintenance protocol that are no longer frequently used by the bastion host cluster in the program library, thereby better avoiding occupying too many storage resources of the bastion host cluster.

[0093] In an optional embodiment, when the usage index value of the operation and maintenance protocol corresponding to the current agent program is less than a second preset threshold value, the current agent program is uninstalled from the program library, including: when the usage index value of the operation and maintenance protocol corresponding to the current agent program is less than the second preset threshold value, marking the current agent program as a program to be uninstalled; when the program to be uninstalled stops running, uninstalling the program to be uninstalled from the program library.

[0094] As an example, when the server determines that the usage index value of the operation and maintenance protocol corresponding to the current agent program is less than the second preset threshold, it believes that the bastion host cluster no longer frequently uses the operation and maintenance protocol corresponding to the current agent program, and it is unreasonable for the current agent program to occupy the storage resources of the program library. At this time, the current agent program is first marked as a program to be uninstalled, and then after confirming that the program to be uninstalled has stopped running, the current agent program is uninstalled from the program library, and the related configuration information and temporary files are cleaned up to release the storage resources of the program library.

[0095] The embodiment of the present application first marks the agent program of the operation and maintenance protocol that is no longer frequently used by the bastion host in the program library as a program to be uninstalled, and then uninstalls the program to be uninstalled from the program library after confirming that the program to be uninstalled has stopped running. This can prevent problems such as abnormal execution of operation and maintenance operations caused by uninstalling the program during program running, and effectively improve the operation and maintenance efficiency of the bastion host cluster.

[0096] The resource deployment method of a bastion host cluster provided by the first embodiment of the present application has the following advantages:

[0097] 1. Optimize resource utilization: By dynamically downloading and uninstalling the proxy programs of various operation and maintenance protocols, only the proxy programs of the operation and maintenance protocols commonly used by the bastion host cluster are retained in the program library of the bastion host cluster. This not only avoids wasting the storage resources of the bastion host cluster, but also limits the occupation of the storage resources of the bastion host cluster by the proxy programs of various operation and maintenance protocols. This can improve the performance of the bastion host cluster in performing operation and maintenance operations, and improve the operation and maintenance efficiency of the bastion host cluster.

[0098] 2. Enhanced security protection: Since the proxy programs of various operation and maintenance protocols may have security vulnerabilities, by only retaining the proxy programs of the operation and maintenance protocols commonly used by the bastion host cluster in the program library, the security vulnerabilities in the proxy programs of the operation and maintenance protocols that are not commonly used by the bastion host cluster will not pose a threat to the bastion host cluster, which can reduce the security risks caused by storing the proxy programs of the operation and maintenance protocols that are not commonly used by the bastion host cluster. At the same time, the proxy programs of the operation and maintenance protocols that are no longer commonly used or outdated in the program library of the bastion host cluster are cleaned up in time, so that the security protection of the bastion host cluster is tighter and in line with the best practices of enterprise network security.

[0099] 3. Improve flexibility and adaptability: It can automatically adapt to the dynamically changing internal network operation and maintenance needs of the enterprise. When new business applications require new operation and maintenance protocol support, the bastion host cluster can automatically download the agent program of the new operation and maintenance protocol without manual intervention, reducing the downtime of the bastion host cluster.

[0100] Please see Figure 2 , Figure 2 A structural diagram of a resource deployment device for a bastion host cluster provided in the second embodiment of the present application. The second embodiment of the present application provides a resource deployment device for a bastion host cluster, including: an indicator evaluation module 201, used to evaluate the usage indicator value of at least one operation and maintenance protocol supported by the bastion host cluster; wherein the usage indicator values ​​of various operation and maintenance protocols in at least one operation and maintenance protocol are used to indicate the usage of various operation and maintenance protocols by the bastion host cluster; a resource deployment module 202, used to download the agent program of the operation and maintenance protocol to the program library when the usage indicator value of any one of the at least one operation and maintenance protocol exceeds a first preset threshold value and there is no agent program of the operation and maintenance protocol in the program library of the bastion host cluster.

[0101] In an optional embodiment, the evaluation of the usage index value of at least one operation and maintenance protocol supported by the bastion host cluster includes: determining the data packet statistics of various operation and maintenance protocols based on the data packets of various operation and maintenance protocols received by the bastion host cluster within a preset time period; determining the operation and maintenance operation statistics of various operation and maintenance protocols based on the operation and maintenance operations performed by the bastion host cluster using the various operation and maintenance protocols within a preset time period; and evaluating the usage index values ​​of various operation and maintenance protocols based on the data packet statistics of various operation and maintenance protocols and the operation and maintenance operation statistics of various operation and maintenance protocols.

[0102] In an optional embodiment, the usage index values ​​of various operation and maintenance protocols are evaluated based on the data packet statistics of various operation and maintenance protocols and the operation and maintenance operation statistics of various operation and maintenance protocols, including: performing weighted calculations on the data packet statistics of various operation and maintenance protocols and the operation and maintenance operation statistics of various operation and maintenance protocols according to pre-set data packet statistics weights and operation and maintenance operation statistics weights to obtain the usage index values ​​of various operation and maintenance protocols.

[0103] In an optional embodiment, the data packet statistics of various operation and maintenance protocols include the number of data packets and / or the proportion of data packets of various operation and maintenance protocols, and the operation and maintenance operation statistics of various operation and maintenance protocols include the number of operation and maintenance operations and / or the frequency of operation and maintenance operations of various operation and maintenance protocols.

[0104] In an optional embodiment, the device also includes: an operation and maintenance operation module, which is used to control the target bastion host in the bastion host cluster to respond to the operation and maintenance request when receiving the operation and maintenance request initiated by the user, and load the target agent program from the program library to perform the target operation and maintenance operation; wherein the target agent program and the target operation and maintenance operation are determined according to the operation and maintenance request.

[0105] In an optional embodiment, the indicator evaluation module 201 is also used to evaluate the usage indicator value of the operation and maintenance protocol corresponding to the current agent program for each agent program in the program library when a preset period arrives; the resource deployment module 202 is also used to uninstall the current agent program from the program library when the usage indicator value of the operation and maintenance protocol corresponding to the current agent program is less than a second preset threshold; wherein the second preset threshold is less than the first preset threshold.

[0106] In an optional embodiment, when the usage index value of the operation and maintenance protocol corresponding to the current agent program is less than a second preset threshold value, the current agent program is uninstalled from the program library, including: when the usage index value of the operation and maintenance protocol corresponding to the current agent program is less than the second preset threshold value, marking the current agent program as a program to be uninstalled; when the program to be uninstalled stops running, uninstalling the program to be uninstalled from the program library.

[0107] The implementation process of the functions and effects of each module in the above-mentioned device is specifically described in the implementation process of the corresponding steps in the method described in the first embodiment of the present application, and will not be repeated here.

[0108] Please see Figure 3 , Figure 3The third embodiment of the present application provides an electronic device 30, comprising a processor 301, a memory 302, and a computer program stored in the memory 302 and configured to be executed by the processor 301; when the processor 301 executes the computer program, the method described in the first embodiment of the present application is implemented and the same beneficial effects can be achieved.

[0109] When the processor 301 reads the computer program from the memory 302 through the bus 303 and executes the computer program, the method of any embodiment included in the method described in the first embodiment of the present application can be implemented.

[0110] Processor 301 can process digital signals and can include various computing structures, such as complex instruction set computer structure, reduced instruction set computer structure, or a structure that implements a combination of multiple instruction sets. In some examples, processor 301 can be a microprocessor.

[0111] The memory 302 may be used to store instructions executed by the processor 301 or data related to the execution of instructions. These instructions and / or data may include codes for implementing some or all functions of one or more modules described in the embodiments of the present application. The processor 301 of the disclosed embodiment may be used to execute instructions in the memory 302 to implement the method described in the first embodiment of the present application. The memory 302 includes a dynamic random access memory, a static random access memory, a flash memory, an optical memory, or other memory known to those skilled in the art.

[0112] The fourth embodiment of the present application provides a computer-readable storage medium, which includes a stored computer program; wherein, when the computer program is running, the device where the computer-readable storage medium is located is controlled to execute the method described in the first embodiment of the present application, and can achieve the same beneficial effects as the method.

[0113] The method described in the first embodiment of the present application can be implemented in whole or in part by software, hardware, firmware or any combination thereof. When implemented using software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer programs or instructions. When the computer program or instruction is loaded and executed on a computer, the process or function described in each embodiment of the present application is executed in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, a network device, a user device, a core network device, an OAM (Open Application Model) or other programmable device.

[0114] The computer program or instructions may be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium, for example, the computer program or instructions may be transmitted from one website, computer, server or data center to another website, computer, server or data center by wired or wireless means. The computer-readable storage medium may be any available medium that can be accessed by a computer or a data storage device such as a server or data center that integrates one or more available media. The available medium may be a magnetic medium, such as a floppy disk, a hard disk, or a magnetic tape; it may also be an optical medium, such as a digital video disk; it may also be a semiconductor medium, such as a solid-state drive. The computer-readable storage medium may be a volatile or non-volatile storage medium, or may include both volatile and non-volatile types of storage media.

[0115] In summary, the embodiments of the present application provide a resource deployment method, device, medium and program product for a bastion host cluster, wherein the resource deployment method for the bastion host cluster comprises: evaluating the usage index value of at least one operation and maintenance protocol supported by the bastion host cluster; wherein the usage index values ​​of various operation and maintenance protocols in at least one operation and maintenance protocol are used to indicate the usage of various operation and maintenance protocols by the bastion host cluster; when the usage index value of any one of the at least one operation and maintenance protocol is greater than a first preset threshold value, and there is no agent program of the operation and maintenance protocol in the program library of the bastion host cluster, the agent program of the operation and maintenance protocol is downloaded to the program library. The embodiments of the present application evaluate the usage index values ​​of various operation and maintenance protocols, and determine whether to download the agent programs of various operation and maintenance protocols to the program library of the bastion host cluster according to the comparison results of the usage index values ​​of various operation and maintenance protocols and the first preset threshold value, and the judgment results of whether there are agent programs of various operation and maintenance protocols in the program library of the bastion host cluster, so as to deploy the agent programs of the operation and maintenance protocols commonly used by the bastion host cluster to the bastion host cluster, thereby dynamically deploying the agent programs of the operation and maintenance protocols to the bastion host cluster, and avoiding occupying too many storage resources of the bastion host cluster.

[0116] In several embodiments provided in the present application, it should be understood that the disclosed devices and methods can also be implemented in other ways. The device embodiments described above are merely schematic. For example, the flowcharts and block diagrams in the accompanying drawings show the possible architecture, functions and operations of the devices, methods and computer program products according to multiple embodiments of the present application. In this regard, each box in the flowchart or block diagram can represent a module, a program segment or a part of a code, and the module, a program segment or a part of a code contains one or more executable instructions for implementing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two consecutive boxes can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram and / or flowchart, and the combination of boxes in the block diagram and / or flowchart can be implemented with a dedicated hardware-based system that performs a specified function or action, or can be implemented with a combination of dedicated hardware and computer instructions.

[0117] In addition, the functional modules in the various embodiments of the present application may be integrated together to form an independent part, or each module may exist separately, or two or more modules may be integrated to form an independent part.

[0118] If the functions are implemented in the form of software function modules and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application can be essentially or partly embodied in the form of a software product that contributes to the prior art. The computer software product is stored in a storage medium, including several instructions to enable a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the methods described in each embodiment of the present application. The aforementioned storage medium includes: various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0119] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A resource deployment method for a bastion host cluster, characterized in that: include: Evaluate the usage index value of at least one operation and maintenance protocol supported by the bastion host cluster; wherein the usage index values ​​of various operation and maintenance protocols in the at least one operation and maintenance protocol are used to indicate the usage of the various operation and maintenance protocols by the bastion host cluster; When the usage index value of any one of the at least one operation and maintenance protocols is greater than a first preset threshold and there is no agent program of the operation and maintenance protocol in the program library of the bastion host cluster, the agent program of the operation and maintenance protocol is downloaded to the program library.

2. The method according to claim 1, characterized in that The use index value of at least one operation and maintenance protocol supported by the bastion host cluster is evaluated, including: Determine the data packet statistics of the various operation and maintenance protocols according to the data packets of the various operation and maintenance protocols received by the bastion host cluster within a preset time period; Determine operation statistics of the various operation and maintenance protocols according to the operation and maintenance operations performed by the bastion host cluster using the various operation and maintenance protocols within the preset time period; Based on the data packet statistics of the various operation and maintenance protocols and the operation and maintenance operation statistics of the various operation and maintenance protocols, the usage index values ​​of the various operation and maintenance protocols are evaluated.

3. The method according to claim 2, characterized in that The step of evaluating the usage index values ​​of the various operation and maintenance protocols according to the data packet statistics of the various operation and maintenance protocols and the operation and maintenance operation statistics of the various operation and maintenance protocols comprises: According to the preset data packet statistics weight and operation and maintenance operation statistics weight, the data packet statistics of the various operation and maintenance protocols and the operation and maintenance operation statistics of the various operation and maintenance protocols are weightedly calculated to obtain the usage index values ​​of the various operation and maintenance protocols.

4. The method according to claim 2, characterized in that: The data packet statistics of the various operation and maintenance protocols include the number of data packets and / or the proportion of data packets of the various operation and maintenance protocols, and the operation and maintenance operation statistics of the various operation and maintenance protocols include the number of operation and maintenance operations and / or the frequency of operation and maintenance operations of the various operation and maintenance protocols.

5. The method according to claim 1, characterized in that The method further comprises: When the bastion host cluster receives an operation and maintenance request sent by the operation and maintenance terminal, the target bastion host in the bastion host cluster is controlled to respond to the operation and maintenance request, and load the target agent program from the program library to perform the target operation and maintenance operation; wherein the target agent program and the target operation and maintenance operation are determined according to the operation and maintenance request.

6. The method according to any one of claims 1 to 5, characterized in that: The method further comprises: When a preset period arrives, for each agent program in the program library, evaluating the usage index value of the operation and maintenance protocol corresponding to the current agent program; When the usage index value of the operation and maintenance protocol corresponding to the current agent program is less than a second preset threshold, the current agent program is uninstalled from the program library; wherein the second preset threshold is less than the first preset threshold.

7. The method according to claim 6, characterized in that When the usage indicator value of the operation and maintenance protocol corresponding to the current agent program is less than a second preset threshold, uninstalling the current agent program from the program library includes: When the usage index value of the operation and maintenance protocol corresponding to the current agent program is less than the second preset threshold, marking the current agent program as a program to be uninstalled; When the program to be uninstalled stops running, the program to be uninstalled is uninstalled from the program library.

8. A resource deployment device for a bastion host cluster, characterized in that: include: An indicator evaluation module, used to evaluate the usage indicator value of at least one operation and maintenance protocol supported by the bastion host cluster; wherein the usage indicator values ​​of various operation and maintenance protocols in the at least one operation and maintenance protocol are used to indicate the usage of the various operation and maintenance protocols by the bastion host cluster; A resource deployment module is used to download the agent program of the operation and maintenance protocol to the program library when the usage index value of any one of the at least one operation and maintenance protocols exceeds a first preset threshold and there is no agent program of the operation and maintenance protocol in the program library of the bastion host cluster.

9. An electronic device, characterized in that: The method comprises a processor, a memory, and a computer program stored in the memory and configured to be executed by the processor; when the processor executes the computer program, the method according to any one of claims 1 to 7 is implemented.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium includes a stored computer program; wherein, when the computer program is running, the device where the computer-readable storage medium is located is controlled to execute the method according to any one of claims 1 to 7.

Images