Resource scheduling method, device and equipment of computing center, medium and product

Abstract

The invention provides a resource scheduling method and device of a computing center, equipment, a medium and a product. The method comprises the steps that a login server of a second computing center can receive an access request corresponding to target software sent by a target computing node, and then sends an authorization request to an authorization server of a first computing center through a first mapping relation, the Internet and a second mapping relation according to a target network address, and receiving an authorization response message sent by the authorization server, and sending the authorization response message to the target computing node. According to the embodiment of the invention, through the first mapping relation between the network address of the login server and the network address of the Internet and the second mapping relation between the network address of the authorization server and the network address of the Internet, the forwarding of the authorization request across the local area network can be realized; therefore, the computing node of the computing center lacking the authorized resource of the target software can obtain the authorized resource of other computing centers, so that the operation of the computing node is successful.

Description

Technical Field

[0001] The present application relates to the field of computer technology, and in particular to a resource scheduling method, device, equipment, medium and product for a computing center. Background Art

[0002] For software running in computing centers (such as supercomputing centers), such software needs to be authorized before it can be used.

[0003] For an enterprise, in order to meet operational needs, multiple computing centers can be set up. Each computing center is located in a different local area network. The software of each computing center needs to be authorized before use. Each computing center includes an authorization server, and each computing node can obtain authorization from the authorization server.

[0004] However, when the computing node and the authorization server are not in the same local area network, the computing node cannot introduce authorization, resulting in failure when the computing node runs a job. Summary of the invention

[0005] The present application provides a resource scheduling method, device, equipment, medium and product for a computing center, which is used to solve the problem that when a computing node and an authorization server are not in a local area network, the computing node cannot introduce authorization, resulting in failure of the computing node to run a job.

[0006] In a first aspect, the present application provides a resource scheduling method for a computing center, comprising:

[0007] The computing center includes a first computing center and a second computing center, the first computing center and the second computing center are respectively located in different local area networks, the first computing center includes an authorization server of the target software, the second computing center includes a login server, and the login server communicates with the authorization server of the first computing center through the Internet; the method is applied to the login server, and the method includes:

[0008] Receiving an access request corresponding to the target software sent by a target computing node of the second computing center, wherein the access request includes a target network address of the login server;

[0009] According to the target network address, an authorization request is sent to the authorization server through a first mapping relationship, the Internet, and a second mapping relationship, wherein the authorization request includes the network address of the authorization server; wherein the first mapping relationship is a mapping relationship between the network address of the login server and the network address of the Internet, and the second mapping relationship is a mapping relationship between the network address of the authorization server and the network address of the Internet;

[0010] Receiving an authorization response message sent by the authorization server, wherein the authorization response message includes authorization information of the target software;

[0011] Send the authorization response message to the target computing node.

[0012] In this embodiment, the login server can receive an access request corresponding to the target software sent by the target computing node of the second computing center, and then send an authorization request to the authorization server of the first computing center through the first mapping relationship, the Internet, and the second mapping relationship according to the target network address, receive the authorization response message sent by the authorization server, and send the authorization response message to the target computing node. The embodiment of the present application can realize the forwarding of authorization requests across local area networks through the first mapping relationship between the network address of the login server and the network address of the Internet, and the second mapping relationship between the network address of the authorization server and the network address of the Internet, so that the computing node of the computing center that lacks the authorization resources of the target software can obtain the authorization resources of other computing centers, so that the job of the computing node runs successfully.

[0013] Optionally, in the method as described above, the login server includes a plurality of network addresses, and the first mapping relationship includes the plurality of network addresses and a network address of the Internet corresponding to each network address;

[0014] Sending an authorization request to the authorization server through the first mapping relationship, the Internet, and the second mapping relationship includes:

[0015] Determining a first network address of the Internet in the first mapping relationship according to the target network address;

[0016] Determining a first transmission link according to the target network address and the first network address;

[0017] Determine the network address of the authorization server in the second mapping relationship according to the first network address, and determine a second transmission link according to the first network address and the network address of the authorization server;

[0018] The authorization request is sent to the authorization server through the first transmission link and the second transmission link.

[0019] In this embodiment, the transmission link may be determined according to the first mapping relationship and the second mapping relationship, so as to implement sending the authorization request to the authorization server according to the transmission link.

[0020] Optionally, in the method as described above, sending the authorization request to the authorization server through the first transmission link and the second transmission link includes:

[0021] Obtaining an execution file, wherein the execution file includes an authorized port configuration file and an agent configuration program file, wherein the authorized port configuration file includes the second mapping relationship;

[0022] Executing the proxy configuration program file so that the second mapping relationship in the authorized port configuration file is written into the configuration file of the traffic forwarding application program; Executing the proxy configuration program file so that the second mapping relationship in the authorized port configuration file is written into the configuration file of the traffic forwarding application program;

[0023] The traffic forwarding application is started to transmit the authorization request to the second transmission link through the first transmission link, so as to send the authorization request to the authorization server through the second transmission link.

[0024] In this embodiment, the traffic forwarding proxy service is started through the authorization port configuration file and the proxy configuration program file, and the authorization request is sent from the first transmission link to the authorization server through the second transmission link through the traffic forwarding proxy service.

[0025] Optionally, in the method described above, the second computing center includes a management server; obtaining the execution file:

[0026] Acquire the authorized port configuration file, where the authorized port configuration file is generated by the management server according to the generated first mapping relationship and then sent;

[0027] The authorization port configuration file and the proxy configuration program file are written into an empty file to obtain the execution file.

[0028] In this embodiment, the first mapping relationship may be formed into an authorized port configuration file, and an execution file may be generated based on the authorized port configuration file, thereby providing a basis for implementing traffic forwarding of the authorization request.

[0029] Optionally, in the method as described above, receiving an access request corresponding to the target software sent by the target computing node includes:

[0030] When the target computing node runs the target job, receiving the access request sent by the target computing node;

[0031] Among them, the environment variable configuration file of the target software corresponding to the target job includes authorized environment variables, and the authorized environment variables include the target network address of the login server. The authorized environment variables are written into the environment variable configuration file before the target computing node runs the target job.

[0032] In this embodiment, before running the target job, the target network address of the login server is written as an authorized environment variable into the environment variable configuration file of the target software corresponding to the target job, thereby initiating an access request.

[0033] Optionally, in the method as described above, the number of the first computing centers is multiple, and the number of the target network addresses is multiple;

[0034] Receiving an authorization response message sent by the authorization server, including:

[0035] Receiving response messages sent by the authorization servers of the plurality of first computing centers, wherein the response messages sent by the authorization servers of the plurality of first computing centers are respectively used to indicate authorization success or authorization failure;

[0036] The authorization response message is determined by taking a response message indicating a successful authorization from among the response messages sent by the authorization servers of the plurality of first computing centers.

[0037] In this embodiment, authorization environment variables corresponding to multiple computing centers may be introduced when submitting an access request, so that a response message indicating successful authorization may be detected from response messages of multiple authorization servers.

[0038] In a second aspect, the present application provides a resource scheduling device for a computing center, the computing center comprising a first computing center and a second computing center, the first computing center and the second computing center being respectively located in different local area networks, the first computing center comprising an authorization server for target software, the second computing center comprising a login server, the login server communicating with the authorization server of the first computing center via the Internet; the device is applied to the login server, and the device comprises:

[0039] A first receiving module, configured to receive an access request corresponding to the target software sent by a target computing node of the second computing center, wherein the access request includes a target network address of the login server;

[0040] A first sending module is used to send an authorization request to the authorization server according to the target network address through a first mapping relationship, the Internet, and a second mapping relationship, wherein the authorization request includes the network address of the authorization server; wherein the first mapping relationship is a mapping relationship between the network address of the login server and the network address of the Internet, and the second mapping relationship is a mapping relationship between the network address of the authorization server and the network address of the Internet;

[0041] A second receiving module, configured to receive an authorization response message sent by the authorization server, wherein the authorization response message includes authorization information of the target software;

[0042] The second sending module is used to send the authorization response message to the target computing node.

[0043] Optionally, in the above-mentioned device, the login server includes multiple network addresses, the first mapping relationship includes the multiple network addresses, and the network address of the Internet corresponding to each network address; the first sending module is specifically used for:

[0044] Determining a first network address of the Internet in the first mapping relationship according to the target network address;

[0045] Determining a first transmission link according to the target network address and the first network address;

[0046] Determine the network address of the authorization server in the second mapping relationship according to the first network address, and determine a second transmission link according to the first network address and the network address of the authorization server;

[0047] The authorization request is sent to the authorization server through the first transmission link and the second transmission link.

[0048] Optionally, in the above device, the first sending module is specifically used for:

[0049] Obtaining an execution file, wherein the execution file includes an authorized port configuration file and an agent configuration program file, wherein the authorized port configuration file includes the second mapping relationship;

[0050] Executing the proxy configuration program file so that the second mapping relationship in the authorized port configuration file is written into the configuration file of the traffic forwarding application program;

[0051] The traffic forwarding application is started to transmit the authorization request to the second transmission link through the first transmission link, so as to send the authorization request to the authorization server through the second transmission link.

[0052] Optionally, in the above device, the first sending module is specifically used for:

[0053] Acquire the authorized port configuration file, where the authorized port configuration file is generated by the management server according to the generated first mapping relationship and then sent;

[0054] The authorization port configuration file and the proxy configuration program file are written into an empty file to obtain the execution file.

[0055] Optionally, in the above device, the first receiving module is specifically used for:

[0056] When the target computing node runs the target job, receiving the access request sent by the target computing node;

[0057] Among them, the environment variable configuration file of the target software corresponding to the target job includes authorized environment variables, and the authorized environment variables include the target network address of the login server. The authorized environment variables are written into the environment variable configuration file before the target computing node runs the target job.

[0058] Optionally, in the device as described above, the number of the first computing centers is multiple, and the number of the target network addresses is multiple;

[0059] The second receiving module is specifically used for:

[0060] Receiving response messages sent by the authorization servers of the plurality of first computing centers, wherein the response messages sent by the authorization servers of the plurality of first computing centers are respectively used to indicate authorization success or authorization failure;

[0061] The authorization response message is determined by taking a response message indicating a successful authorization from among the response messages sent by the authorization servers of the plurality of first computing centers.

[0062] The resource scheduling device of the computing center provided in the embodiment of the present application can execute the technical solution in the above method embodiment, and its beneficial effects are similar and will not be repeated here.

[0063] In a third aspect, the present application provides an electronic device, comprising: a processor, and a memory communicatively connected to the processor;

[0064] The memory stores computer-executable instructions;

[0065] The processor executes the computer-executable instructions stored in the memory to implement the method according to the first aspect.

[0066] In a fourth aspect, the present application provides a computer-readable storage medium, wherein the computer-readable storage medium stores computer-executable instructions, and when the computer-executable instructions are executed by a computer, they are used to implement the method described in the first aspect.

[0067] The computer-readable storage medium provided in the embodiment of the present application can execute the technical solution in the above method embodiment, and its beneficial effects are similar, which will not be repeated here.

[0068] In a fifth aspect, the present application provides a computer program product, including a computer program, which is used to implement the method described in the first aspect when executed by a computer.

[0069] The computer program product provided in the embodiment of the present application can execute the technical solution in the above method embodiment, and its beneficial effects are similar and will not be described in detail here.

[0070] The resource scheduling method, device, equipment, medium and product of the computing center provided by the present application, the login server of the second computing center can receive the access request corresponding to the target software sent by the target computing node of the second computing center, and then send the authorization request to the authorization server of the first computing center through the first mapping relationship, the Internet and the second mapping relationship according to the target network address, receive the authorization response message sent by the authorization server, and send the authorization response message to the target computing node. The embodiment of the present application can realize the forwarding of authorization requests across local area networks through the first mapping relationship between the network address of the login server and the network address of the Internet, and the second mapping relationship between the network address of the authorization server and the network address of the Internet, so that the computing center that lacks the authorization resources of the target software, its computing node can obtain the authorization resources of other computing centers, so that the job of the computing node runs successfully. BRIEF DESCRIPTION OF THE DRAWINGS

[0071] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0072] Figure 1 A schematic diagram of an application scenario provided for an embodiment of the present application;

[0073] Figure 2 A flowchart of a resource scheduling method for a computing center provided in an embodiment of the present application;

[0074] Figure 3 A flowchart of another resource scheduling method for a computing center provided in an embodiment of the present application;

[0075] Figure 4 A schematic diagram of a first transmission link and a second transmission link of an example of the present application;

[0076] Figure 5 A flowchart of another resource scheduling method for a computing center provided in an embodiment of the present application;

[0077] Figure 6 A schematic diagram of calling software resources between multiple computing centers in the example of this application;

[0078] Figure 7 A flowchart of another resource scheduling method for a computing center provided in an embodiment of the present application;

[0079] Figure 8A schematic diagram of the structure of a resource scheduling device for a computing center provided in an embodiment of the present application;

[0080] Fig. 9 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application.

[0081] The above drawings have shown clear embodiments of the present application, which will be described in more detail later. These drawings and text descriptions are not intended to limit the scope of the present application in any way, but to illustrate the concept of the present application to those skilled in the art by referring to specific embodiments. DETAILED DESCRIPTION

[0082] Exemplary embodiments will be described in detail herein, examples of which are shown in the accompanying drawings. When the following description refers to the drawings, the same numbers in different drawings represent the same or similar elements unless otherwise indicated. The implementations described in the following exemplary embodiments do not represent all implementations consistent with the present application. Instead, they are merely examples of devices and methods consistent with some aspects of the present application as detailed in the appended claims.

[0083] Usually, a computing center is equipped with an authorization server to provide other computing nodes in the computing center with authorization for the software required to run jobs. The computing nodes and the authorization server are in a local area network. Taking the target software as an example, if computing center A has authorization for the target software, computing center B also has authorization for the target software, but the number of authorizations for the target software used by computing center A is less than that of computing center A. If the computing node of computing center B needs authorization for the target software when running a job, but the number of authorizations for the target software of computing center B is insufficient (it has been used by other computing nodes), then the authorization for the target software can be obtained from supercomputing center A.

[0084] The way to introduce authorization, for example, is to access the Internet Protocol address (IP) and port number of the software's authorization server by introducing environment variables during the job running process to obtain authorization. However, the computing node that needs authorization for the target software and the authorization server need to be in the same local area network. By introducing environment variables, the computing node running the job can access the IP address and port number to obtain authorization.

[0085] However, for an enterprise, in order to meet the operation requirements, multiple computing centers can be set up, each of which is in a different local area network. When the computing node and the authorization server are not in the same local area network, the computing node cannot introduce authorization, resulting in the failure of the computing node to run the job or the need to wait for the number of software authorizations in the computing center where the computing node is located to be free. Therefore, for the authorization of the target software owned by the enterprise, how to realize the scheduling of software resources across computing centers is a problem that needs to be solved.

[0086] Therefore, the present application provides a resource scheduling method for a computing center. Through a first mapping relationship between the network address of the login server of the second computing center and the network address of the Internet, and a second mapping relationship between the network address of the authorization server of the first computing center and the network address of the Internet, the forwarding of authorization requests across local area networks between the first computing center and the second computing center can be realized, so that the computing nodes of the computing center that lack the authorization resources of the target software can obtain the authorization resources of other computing centers, so that the job of the computing node can run successfully.

[0087] Combine the following Figure 1 , the application scenarios to which the embodiments of the present application are applicable are described.

[0088] Figure 1 A schematic diagram of an application scenario provided in an embodiment of the present application, such as Figure 1 As shown, the computing center 10 includes a first computing center 101 and a second computing center 102. The first computing center 101 includes a plurality of computing nodes (such as Figure 1 1011a, 1011b, 1011c, collectively referred to as 1011), an authorization server 1012 and a first management server 1013. The first computing center 102 includes a plurality of computing nodes (such as Figure 1 1012a, 1012b, 1012c are collectively referred to as 1012), a login server 1022 and a second management server 1023.

[0089] It should be understood that Figure 1 The number of computing nodes in the first computing center 101 and the second computing center 102 is only an example, and the present application does not impose any limitation on this.

[0090] The first computing center 101 and the second computing center 102 are located in different local area networks, and the login server 1022 can communicate with the authorization server 1012 of the first computing center 101 through the Internet. In other words, the login server 1022 and the authorization server 1012 can access the Internet (or public network).

[0091] It should be understood that the multiple computing nodes in the first computing center 101 and the multiple computing nodes in the second computing center 102 cannot access the Internet.

[0092] The first management server 1013 in the first computing center 101 can enable mapping of the network address of the authorization server 1012 on the firewall of the first computing center 101, that is, map the network address of the authorization server 1012 to the network address of the Internet through the firewall of the first computing center 10 to form a second mapping relationship.

[0093] The second management server 1023 of the second computing center 102 can open the mapping of the network address of the login server 1022 on the firewall of the second computing center 102, that is, the network address of the login server 1022 is mapped to the network address of the Internet through the firewall of the second computing center 20 to form a first mapping relationship. It can be understood that the network address of the Internet is the same as the network address of the Internet mapped to the network address of the authorization server 1012.

[0094] If the authorization of the target software corresponding to the target job of the target computing node (for example, computing node 1012a) in the second computing center 102 is required, the authorization request can be forwarded through the login server 1022. The login server 1022 can send an authorization request to the authorization server 1012 based on the first mapping relationship and the second mapping relationship to obtain authorization.

[0095] It can be understood that the authorization of the target software obtained by the target computing node from the authorization server 1012 in the first computing center 101 is one of the remaining software authorizations in the total number of authorizations for the target software of the first computing center 101, wherein the total number of authorizations is held by the enterprises to which the first computing center 101 and the second computing center 102 belong, and can be used in both the first computing center 101 and the second computing center 102.

[0096] The technical solution of the present application and how the technical solution of the present application solves the above-mentioned technical problems are described in detail below with specific embodiments. The following specific embodiments can be combined with each other, and the same or similar concepts or processes may not be repeated in some embodiments. The embodiments of the present application will be described below in conjunction with the accompanying drawings.

[0097] Figure 2The flowchart of a resource scheduling method for a computing center provided in an embodiment of the present application is a flowchart of a resource scheduling method for a computing center. The method can be executed by a resource scheduling device of a computing center. The resource scheduling device of the computing center can be implemented by a computer program; it can also be implemented by a medium storing relevant computer programs, such as a USB flash drive and / or a CD, or it can also be implemented by a physical device integrated or installed with relevant computer programs, such as a chip or an electronic device. The electronic device can be, for example, Figure 1 The login server 1022 of the second computing center 102 in the computing center 10 shown in FIG. Figure 2 As shown, the method may include the following steps.

[0098] S201, receiving an access request corresponding to a target software sent by a target computing node of a second computing center, wherein the access request includes a target network address of a login server.

[0099] When the target computing node of the second computing center runs the target job, it needs to obtain authorization for the target software used by the target job. The target computing node can send an access request to the login server, and the access request includes the target network address of the login server.

[0100] The target network address may include an IP address and a port number.

[0101] S202: Send an authorization request to an authorization server according to the target network address through the first mapping relationship, the Internet, and the second mapping relationship, where the authorization request includes the network address of the authorization server.

[0102] The login server can send an authorization request to the authorization server according to the target network address through the first mapping relationship, the Internet and the second mapping relationship.

[0103] Exemplarily, the first mapping relationship is shown in Table 1, and the second mapping relationship is shown in Table 2.

[0104] Table 1

[0105] Network address of the login server Internet network address IP address 1-Port number 11 IP address 2-Port number 21 IP address 1-Port number 12 IP address 2-Port number 22 IP address 1-Port number 13 IP address 2 - port number 23 …… ……

[0106] Table 2

[0107] The network address of the authorization server Internet network address IP address 3-Port number 31 IP address 2-Port number 21 IP address 4-Port number 41 IP address 2-Port number 22 IP address 5-Port number 51 IP address 2-Port number 23 …… ……

[0108] As shown in Table 1 and Table 2, in addition to the network address of the receiving authorization server, taking multiple network addresses of the login server as an example, the IP addresses of the multiple network addresses can be the same, but the port numbers are different.

[0109] It can be understood that when there are multiple first computing centers, the multiple network addresses of the authorization server correspond to different authorization servers of the first computing center. If there is one network address of the authorization server, it means that there is only one mapping relationship of the authorization server of the first computing center in the second mapping relationship, and the network addresses of the authorization servers in Table 2 are the same network addresses, that is, there is a mapping relationship between multiple network addresses of the Internet and the network address of one authorization server.

[0110] The first mapping relationship may be a management server of the second computing center (eg Figure 1 Specifically, the management server may obtain multiple network addresses of the Internet and multiple network addresses of the login server, and determine the first mapping relationship according to the multiple network addresses of the Internet and the multiple network addresses of the login server. Exemplarily, the management server may map the network address of the login server to the network address of the Internet through the firewall of the second computing center to form the first mapping relationship.

[0111] The second mapping relationship may be a management server of the first computing center (eg Figure 1 Specifically, the management server may obtain multiple network addresses of the Internet and the network address of the authorization server, and determine the second mapping relationship according to the multiple network addresses of the Internet and the network address of the authorization server. Exemplarily, the management server may map the network address of the authorization server to the network address of the Internet through the firewall of the first computing center to form the second mapping relationship.

[0112] S203: Receive an authorization response message sent by the authorization server, where the authorization response message includes authorization information of the target software.

[0113] The login server can receive an authorization response message sent by the authorization server, and the authorization response message includes authorization information of the target software.

[0114] S204. Send an authorization response message to the target computing node.

[0115] The login server may forward the authorization response message to the target computing node, so that the target computing node may use the target software based on the authorization information of the target software.

[0116] In this embodiment, the login server can receive an access request corresponding to the target software sent by the target computing node of the second computing center, and then send an authorization request to the authorization server of the first computing center through the first mapping relationship, the Internet, and the second mapping relationship according to the target network address, receive the authorization response message sent by the authorization server, and send the authorization response message to the target computing node. The embodiment of the present application can realize the forwarding of authorization requests across local area networks through the first mapping relationship between the network address of the login server and the network address of the Internet, and the second mapping relationship between the network address of the authorization server and the network address of the Internet, so that the computing node of the computing center that lacks the authorization resources of the target software can obtain the authorization resources of other computing centers, so that the job of the computing node runs successfully.

[0117] Next, it is described how the login server of the second computing center sends an authorization request to the authorization server of the first computing center through the first mapping relationship, the Internet, and the second mapping relationship.

[0118] Figure 3 A flowchart of another resource scheduling method for a computing center provided in an embodiment of the present application, the method can be executed by a resource scheduling device of a computing center, and the resource scheduling device of the computing center can be implemented by a computer program; it can also be implemented by a medium storing relevant computer programs, such as a USB flash drive and / or a CD, or it can also be implemented by a physical device integrated or installed with relevant computer programs, such as a chip or an electronic device. The electronic device can be, for example, Figure 1 The login server 1022 of the second computing center 102 in the computing center 10 shown in FIG. Figure 3 As shown, the method may include the following steps.

[0119] S301. Determine a first network address of the Internet in a first mapping relationship according to a target network address.

[0120] Exemplarily, as shown in Table 1, the first mapping relationship includes multiple network addresses of the login server and the network addresses of the Internet corresponding to each network address. After receiving the access request of the target computing node, the login server can determine the first network address of the Internet in the first mapping relationship according to the target network address. Taking Table 1 as an example, if the target network address is IP address 1-port number 12, then the first network address of the Internet is IP address 2-port number 22.

[0121] S302: Determine a first transmission link according to the target network address and the first network address.

[0122] After determining the first network address, the login server may determine a first transmission link between the target network address and the first network address.

[0123] S303: Determine the network address of the authorization server in the second mapping relationship according to the first network address, and determine the second transmission link according to the first network address and the network address of the authorization server.

[0124] The login server may determine the network address of the authorization server in the second mapping relationship according to the first network address, and determine the second transmission link according to the first network address and the network address of the authorization server. Exemplarily, the second mapping relationship may be stored in advance in the login server.

[0125] In one possible implementation, there may be multiple authorization servers, that is, the multiple authorization servers are respectively authorization servers of multiple first computing centers, as shown in Table 2. The login server can determine the network address of the authorization service corresponding to the first network address in the second mapping relationship based on the first network address, and thus can determine the second transmission link based on the first network address and the network address of the determined authorization server.

[0126] S304: Send an authorization request to the authorization server through the first transmission link and the second transmission link.

[0127] The login server may send an authorization request to the authorization server through the first transmission link and the second transmission link.

[0128] In a possible implementation, the login server may obtain an execution file, wherein the execution file includes an authorization port configuration file and an agent configuration program file, wherein the authorization port configuration file includes the second mapping relationship. The login server may execute the agent configuration program file so that the second mapping relationship in the authorization port configuration file is written into the configuration file of the traffic forwarding application. The traffic forwarding application is started so that the authorization request is transmitted to the second transmission link through the first transmission link, so as to send the authorization request to the authorization server through the second transmission link.

[0129] The login server can execute the proxy configuration program file, automatically install the traffic forwarding application, and write the second mapping relationship in the authorization port configuration file into the configuration file of the traffic forwarding application. After the second mapping relationship is written into the configuration file of the traffic forwarding application, the traffic forwarding application can be started, so that the traffic forwarding proxy service of the application is started, and the authorization request can be transmitted to the second transmission link through the first transmission link through the traffic forwarding proxy service, so as to send the authorization request to the authorization server through the second transmission link.

[0130] For example, Figure 4 This is a schematic diagram of a first transmission link and a second transmission link of an example of this application. Figure 4For example, the target network address of the login server is IP address 1-port number 11, the network address of the Internet is IP address 2-port number 21, and the network address of the authorization server is IP address 3-port number 31. Figure 4 It can be seen that the target network address of the login server points to the network address of the authorization server through the first transmission link and the second transmission link. In the embodiment of the present application, the first transmission link and the second transmission link can be understood as communication paths. Through the authorization port configuration file and the existing proxy configuration program file, the traffic forwarding proxy service is started, and the authorization request is sent from the first transmission link to the authorization server through the second transmission link through the traffic forwarding proxy service.

[0131] In one possible implementation, the login server can obtain an execution file, for example, an authorized port configuration file, which is generated and sent by the management server based on the generated first mapping relationship, and writes the authorized port configuration file and the proxy configuration program file into an empty file to obtain the execution file.

[0132] Exemplarily, the empty file can be an empty folder, and the authorized port configuration file and the proxy configuration program file can be written into the folder to obtain the execution file. The first mapping relationship can be formed into an authorized port configuration file, and the execution file can be generated based on the authorized port configuration file to provide a basis for implementing the traffic forwarding of the authorization request.

[0133] In this embodiment, the transmission link (ie, the first transmission link and the second transmission link) may be determined based on the first mapping relationship and the second mapping relationship, so as to implement sending the authorization request to the authorization server according to the transmission link.

[0134] Next, how the target computing node sends an access request to the target software is described.

[0135] Figure 5 A flowchart of another resource scheduling method for a computing center provided in an embodiment of the present application is provided. The method can be executed by a resource scheduling device of a computing center, which can be implemented by a computer program; it can also be implemented by a medium storing relevant computer programs, such as a USB flash drive and / or a CD, or it can also be implemented by a physical device integrated or installed with relevant computer programs, such as a chip or an electronic device. The electronic device can be, for example, Figure 1 The target computing node of the second computing center 102 in the computing center 10 shown in FIG. Figure 5 As shown, the method may include the following steps.

[0136] S501, obtaining authorization environment variables, where the authorization environment variables include a target network address for logging into a server.

[0137] In an embodiment of the present application, based on the first mapping relationship and the second mapping relationship, the target network address of the login server can be used as an authorization environment variable.

[0138] S502: Before running the target job, write the authorized environment variables into the environment variable configuration file of the target software corresponding to the target job.

[0139] Before running the target job, the target computing node can write the authorization environment variable into the environment variable configuration file of the target software corresponding to the target job, so that the target network address of the login server can point to the network address of the authorization server.

[0140] S503: Run the target job to send an access request to the login server.

[0141] After the authorized environment variables are written into the environment variable configuration file of the target software corresponding to the target job, the target computing node can run the target job so that an access request can be sent to the login server.

[0142] In a possible implementation, the number of target network addresses can be multiple, that is, when the target computing node writes the authorized environment variable into the environment variable configuration file of the target software corresponding to the target job, the target computing node can write multiple target network addresses into the environment variable configuration file. Exemplarily, the multiple target network addresses can be all or part of those in Table 1. If the second mapping relationship includes the network addresses of the authorized services of multiple first computing centers, it is possible to attempt to request the authorized resources of the target software from multiple first computing centers, so as to improve the success rate of the authorization request.

[0143] Exemplarily, multiple target network addresses can be IP address 1-port number 11 and IP address 1-port number 12 in Table 1, which can be mapped to the network addresses of the Internet respectively: IP address 2-port number 21 and IP address 2-port number 22, and based on a second mapping relationship, such as Table 2, further mapped to the network address of the authorization server: IP address 3-port number 31 and IP address 4-port number 41, thereby requesting authorization for the target software from the computing center corresponding to IP address 3-port number 31 and the computing center corresponding to IP address 4-port number 41.

[0144] Then, the login server may receive the authorization response message from the authorization server in the following manner: the login server receives the response messages sent by the authorization servers of the plurality of first computing centers, wherein the response messages sent by the authorization servers of the plurality of first computing centers are respectively used to indicate the authorization success or the authorization failure. Then, the authorization response message is determined from the response messages sent by the authorization servers of the plurality of first computing centers by using the response message indicating the authorization success.

[0145] Taking the above example as an example, the multiple authorization servers may include an authorization server in a computing center corresponding to IP address 3-port number 31 and an authorization server in a computing center corresponding to IP address 4-port number 41.

[0146] In this embodiment, authorization environment variables corresponding to multiple first computing centers may be introduced when submitting an access request, so that a response message indicating successful authorization may be detected from response messages of multiple authorization servers.

[0147] It should be noted that, in the embodiment of the present application, the computing node in the second computing center needs to request authorization of the target software from other computing centers as an example. The computing node in the first computing center can also apply to the second computing center for authorization of the required software. Figure 6 This is a schematic diagram of the calling of software resources between multiple computing centers exemplified in the present application. For example, computing center A, computing center B, and computing center C may belong to multiple first computing centers, and computing center D may be a second computing center.

[0148] Figure 7 A flowchart of another resource scheduling method for a computing center provided in an embodiment of the present application is shown as follows: Figure 7 As shown, the method may include the following steps.

[0149] S701. The target computing node obtains an authorization environment variable, where the authorization environment variable includes a target network address for logging into a server.

[0150] S702: Before running the target job, the target computing node writes the authorized environment variables into the environment variable configuration file of the target software corresponding to the target job.

[0151] S703: The target computing node runs the target job, so as to send an access request to the login server.

[0152] S704: The login server determines a first transmission link according to the target network address and the first network address.

[0153] S705. The login server determines the network address of the authorization server in the second mapping relationship according to the first network address, and determines the second transmission link according to the first network address and the network address of the authorization server.

[0154] S706. Log in to the server to obtain an execution file, which includes an authorization port configuration file and a proxy configuration program file.

[0155] S707: The login server executes the proxy configuration program file to write the second mapping relationship in the authorized port configuration file into the configuration file of the traffic forwarding application program.

[0156] S708. The login server starts a traffic forwarding application program to transmit the authorization request to the second transmission link through the first transmission link, so as to send the authorization request to the authorization server through the second transmission link.

[0157] S709: The login server receives the authorization response message sent by the authorization server, where the authorization response message includes the authorization information of the target software.

[0158] S710. The login server sends an authorization response message to the target computing node.

[0159] For the specific implementation and beneficial effects of the above steps, please refer to the above embodiments, which will not be described again here.

[0160] Figure 8 This is a schematic diagram of the structure of a resource scheduling device for a computing center provided in an embodiment of the present application. The device 80 can be applied to a job scheduling server of a local cluster. Figure 8 As shown, the device 80 includes: a first receiving module 801 , a first sending module 802 , a second receiving module 803 and a second sending module 803 .

[0161] The first receiving module 801 is used to receive an access request corresponding to the target software sent by the target computing node of the second computing center, where the access request includes a target network address of the login server.

[0162] The first sending module 802 is used to send an authorization request to the authorization server according to the target network address through the first mapping relationship, the Internet, and the second mapping relationship, and the authorization request includes the network address of the authorization server; wherein the first mapping relationship is the mapping relationship between the network address of the login server and the network address of the Internet, and the second mapping relationship is the mapping relationship between the network address of the authorization server and the network address of the Internet.

[0163] The second receiving module 803 is used to receive an authorization response message sent by the authorization server, where the authorization response message includes authorization information of the target software.

[0164] The second sending module 804 is used to send an authorization response message to the target computing node.

[0165] In a possible implementation, the login server includes multiple network addresses, the first mapping relationship includes the multiple network addresses, and the network address of the Internet corresponding to each network address; the first sending module 802 is specifically used for:

[0166] According to the target network address, a first network address of the Internet is determined in the first mapping relationship.

[0167] A first transmission link is determined according to the target network address and the first network address.

[0168] The network address of the authorization server is determined in the second mapping relationship according to the first network address, and the second transmission link is determined according to the first network address and the network address of the authorization server.

[0169] An authorization request is sent to the authorization server through the first transmission link and the second transmission link.

[0170] In a possible implementation, the first sending module 802 is specifically configured to:

[0171] An execution file is obtained, wherein the execution file includes an authorized port configuration file and an agent configuration program file, wherein the authorized port configuration file includes a second mapping relationship.

[0172] The proxy configuration program file is executed to write the second mapping relationship in the authorized port configuration file into the configuration file of the traffic forwarding application program.

[0173] A traffic forwarding application is started to transmit the authorization request through the first transmission link to the second transmission link, so as to send the authorization request to the authorization server through the second transmission link.

[0174] In a possible implementation, the first sending module 802 is specifically configured to:

[0175] An authorized port configuration file is obtained, where the authorized port configuration file is generated by the management server according to the generated first mapping relationship and then sent.

[0176] Write the authorization port configuration file and the proxy configuration program file into an empty file to obtain the execution file.

[0177] In a possible implementation, the first receiving module 801 is specifically configured to:

[0178] When the target computing node runs the target job, an access request sent by the target computing node is received.

[0179] The environment variable configuration file of the target software corresponding to the target job includes the authorized environment variables, which include the target network address of the login server. The authorized environment variables are written into the environment variable configuration file before the target computing node runs the target job.

[0180] In a possible implementation manner, there are multiple first computing centers and multiple target network addresses.

[0181] The second receiving module 803 is specifically used for:

[0182] Response messages sent by the authorization servers of the plurality of first computing centers are received, where the response messages sent by the authorization servers of the plurality of first computing centers are respectively used to indicate authorization success or authorization failure.

[0183] The authorization response message is determined by including a response message indicating successful authorization from among the response messages sent by the authorization servers of the plurality of first computing centers.

[0184] The resource scheduling device of the computing center provided in the embodiment of the present application can execute the technical solution in the above method embodiment, and its beneficial effects are similar and will not be repeated here.

[0185] Fig. 9 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application is shown in FIG. Fig. 9 As shown, the electronic device 90 may include: at least one processor 901 and a memory 902 .

[0186] The memory 902 is used to store programs. Specifically, the programs may include program codes, and the program codes include computer-executable instructions.

[0187] The memory 902 may include a random access memory (RAM), and may also include a non-volatile memory (non-volatile memory), such as at least one disk memory.

[0188] The processor 901 is used to execute the computer-executable instructions stored in the memory 902 to implement the method described in the above method embodiment. The processor 901 may be a CPU, or an application specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of the present application.

[0189] Optionally, the electronic device 90 may further include: a communication interface 903. In a specific implementation, if the communication interface 903, the memory 902 and the processor 901 are implemented independently, the communication interface 903, the memory 902 and the processor 901 may be interconnected through a bus and communicate with each other. The bus may be an industry standard architecture (ISA) bus, a peripheral component interconnect (PCI) bus or an extended industry standard architecture (EISA) bus, etc. The bus may be divided into an address bus, a data bus, a control bus, etc., but it does not mean that there is only one bus or one type of bus.

[0190] Optionally, in a specific implementation, if the communication interface 903, the memory 902 and the processor 901 are integrated on a chip, the communication interface 903, the memory 902 and the processor 901 can communicate through an internal interface.

[0191] The electronic device 90 may be a server, such as a login server of the second computing center.

[0192] The electronic device of this embodiment can be used to execute the technical solution corresponding to the server login in the above method embodiment. The specific implementation method and technical effect are similar and will not be repeated here.

[0193] An embodiment of the present application provides a computer-readable storage medium, which may include: a USB flash drive, a mobile hard disk, a read-only memory (ROM), a RAM, a disk or an optical disk, and other media that can store computer-executable instructions. Specifically, the computer-readable storage medium stores computer-executable instructions, and when the computer-executable instructions are executed by a computer, the technical solution shown in the above method embodiment is executed. The specific implementation method and technical effect are similar and will not be repeated here.

[0194] An embodiment of the present application provides a computer program product, including a computer program. When the computer program is executed by a computer, the technical solution shown in the above method embodiment is executed. The specific implementation method and technical effect are similar and will not be repeated here.

[0195] It should be noted that, for the aforementioned method embodiments, for the sake of simplicity, they are all expressed as a series of action combinations, but those skilled in the art should be aware that the present application is not limited by the described order of actions, because according to the present application, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all optional embodiments, and the actions and modules involved are not necessarily required by the present application.

[0196] It should be further noted that, although the various steps in the flowchart are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence in the order indicated by the arrows. Unless there is a clear description in this article, the execution of these steps is not strictly limited in order, and these steps can be executed in other orders. Moreover, at least a portion of the steps in the flowchart may include multiple sub-steps or multiple stages, and these sub-steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these sub-steps or stages is not necessarily to be carried out in sequence, but can be executed in turn or alternately with other steps or at least a portion of the sub-steps or stages of other steps.

[0197] It should be understood that the above-mentioned device embodiments are only illustrative, and the device of the present application can also be implemented in other ways. For example, the division of units / modules in the above-mentioned embodiments is only a logical function division, and there may be other division methods in actual implementation. For example, multiple units, modules or components can be combined, or can be integrated into another system, or some features can be ignored or not executed.

[0198] In addition, unless otherwise specified, each functional unit / module in each embodiment of the present application may be integrated into one unit / module, each unit / module may exist physically separately, or two or more units / modules may be integrated together. The above-mentioned integrated unit / module may be implemented in the form of hardware or in the form of a software program module.

[0199] If the integrated unit / module is implemented in the form of hardware, the hardware may be a digital circuit, an analog circuit, etc. The physical implementation of the hardware structure includes but is not limited to transistors, memristors, etc. If not specifically stated, the processor may be any appropriate hardware processor, such as a CPU, a graphics processing unit (GPU), a field programmable gate array (FPGA), a digital signal processing technology (DSP) chip, and an application-specific integrated circuit (ASIC), etc. If not specifically stated, the storage unit may be any appropriate magnetic storage medium or magneto-optical storage medium, such as a resistive random access memory (RRAM), a dynamic random access memory (DRAM), a static random access memory (SRAM), an enhanced dynamic random access memory (EDRAM), a high-bandwidth memory (HBM), a hybrid memory cube (HMC), etc.

[0200] If the integrated unit / module is implemented in the form of a software program module and sold or used as an independent product, it can be stored in a computer-readable memory. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product, which is stored in a memory and includes several instructions for a computer device (which can be a personal computer, server or network device, etc.) to perform all or part of the steps of the various embodiments of the present application. The aforementioned memory includes: various media that can store program codes, such as USB flash drives, ROM, RAM, mobile hard disks, magnetic disks or optical disks.

[0201] In the above embodiments, the description of each embodiment has its own emphasis. For the part not described in detail in a certain embodiment, please refer to the relevant description of other embodiments. The technical features of the above embodiments can be combined arbitrarily. In order to make the description concise, all possible combinations of the technical features in the above embodiments are not described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0202] Those skilled in the art will readily appreciate other embodiments of the present application after considering the specification and practicing the invention disclosed herein. The present application is intended to cover any modification, use or adaptation of the present application, which follows the general principles of the present application and includes common knowledge or customary techniques in the art that are not disclosed in the present application. The specification and examples are intended to be exemplary only, and the true scope and spirit of the present application are indicated by the following claims.

[0203] It should be understood that the present application is not limited to the precise structures that have been described above and shown in the drawings, and that various modifications and changes may be made without departing from the scope thereof. The scope of the present application is limited only by the appended claims.

Claims

1. A resource scheduling method for a computing center, characterized in that: The computing center includes a first computing center and a second computing center, the first computing center and the second computing center are respectively located in different local area networks, the first computing center includes an authorization server of the target software, the second computing center includes a login server, and the login server communicates with the authorization server of the first computing center via the Internet; The method is applied to the login server, and the method includes: receiving an access request corresponding to the target software sent by a target computing node of the second computing center, wherein the access request includes a target network address of the login server; According to the target network address, an authorization request is sent to the authorization server through a first mapping relationship, the Internet, and a second mapping relationship, wherein the authorization request includes the network address of the authorization server; wherein the first mapping relationship is a mapping relationship between the network address of the login server and the network address of the Internet, and the second mapping relationship is a mapping relationship between the network address of the authorization server and the network address of the Internet; Receiving an authorization response message sent by the authorization server, wherein the authorization response message includes authorization information of the target software; Send the authorization response message to the target computing node.

2. The method according to claim 1, characterized in that The login server includes a plurality of network addresses, and the first mapping relationship includes the plurality of network addresses and the network address of the Internet corresponding to each network address; Sending an authorization request to the authorization server through the first mapping relationship, the Internet, and the second mapping relationship includes: Determining a first network address of the Internet in the first mapping relationship according to the target network address; Determining a first transmission link according to the target network address and the first network address; Determine the network address of the authorization server in the second mapping relationship according to the first network address, and determine a second transmission link according to the first network address and the network address of the authorization server; The authorization request is sent to the authorization server through the first transmission link and the second transmission link.

3. The method according to claim 2, characterized in that Sending the authorization request to the authorization server through the first transmission link and the second transmission link includes: Obtaining an execution file, wherein the execution file includes an authorized port configuration file and an agent configuration program file, wherein the authorized port configuration file includes the second mapping relationship; Executing the proxy configuration program file so that the second mapping relationship in the authorized port configuration file is written into the configuration file of the traffic forwarding application program; The traffic forwarding application is started to transmit the authorization request to the second transmission link through the first transmission link, so as to send the authorization request to the authorization server through the second transmission link.

4. The method according to claim 3, characterized in that The second computing center includes a management server; obtaining an execution file includes: Acquire the authorized port configuration file, where the authorized port configuration file is generated by the management server according to the generated first mapping relationship and then sent; The authorization port configuration file and the proxy configuration program file are written into an empty file to obtain the execution file.

5. The method according to any one of claims 1 to 4, characterized in that: Receiving an access request corresponding to the target software sent by the target computing node, including: When the target computing node runs the target job, receiving the access request sent by the target computing node; Among them, the environment variable configuration file of the target software corresponding to the target job includes authorized environment variables, and the authorized environment variables include the target network address of the login server. The authorized environment variables are written into the environment variable configuration file before the target computing node runs the target job.

6. The method according to any one of claims 1 to 5, characterized in that: The number of the first computing centers is multiple, and the number of the target network addresses is multiple; Receiving an authorization response message sent by the authorization server, including: Receiving response messages sent by the authorization servers of the plurality of first computing centers, wherein the response messages sent by the authorization servers of the plurality of first computing centers are respectively used to indicate authorization success or authorization failure; The authorization response message is determined by taking a response message indicating a successful authorization from among the response messages sent by the authorization servers of the plurality of first computing centers.

7. A resource scheduling device for a computing center, characterized in that: The computing center includes a first computing center and a second computing center, the first computing center and the second computing center are respectively located in different local area networks, the first computing center includes an authorization server of the target software, the second computing center includes a login server, and the login server communicates with the authorization server of the first computing center through the Internet; The device is applied to the login server, and the device includes: A first receiving module, configured to receive an access request corresponding to the target software sent by a target computing node of the second computing center, wherein the access request includes a target network address of the login server; A first sending module is used to send an authorization request to the authorization server according to the target network address through a first mapping relationship, the Internet, and a second mapping relationship, wherein the authorization request includes the network address of the authorization server; wherein the first mapping relationship is a mapping relationship between the network address of the login server and the network address of the Internet, and the second mapping relationship is a mapping relationship between the network address of the authorization server and the network address of the Internet; A second receiving module, configured to receive an authorization response message sent by the authorization server, wherein the authorization response message includes authorization information of the target software; The second sending module is used to send the authorization response message to the target computing node.

8. An electronic device, characterized in that: include: A processor, and a memory communicatively connected to the processor; The memory stores computer-executable instructions; The processor executes the computer-executable instructions stored in the memory to implement the method according to any one of claims 1 to 6.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer-executable instructions, which are used to implement the method according to any one of claims 1 to 6 when executed by a processor.

10. A computer program product, characterized in that The invention comprises a computer program, which implements the method according to any one of claims 1 to 6 when being executed by a processor.

Images