Host machine access method and system

Abstract

The invention provides a host machine access method and system, and relates to the technical field of communication. The method comprises the following steps: the host machine receives an address configuration instruction set from the network management platform through the service port; configuring a routing node address according to the address configuration instruction set, wherein the routing node address comprises a network bridge address and a virtual machine interface address; the network bridge address is sent to the network management platform, so that the network management platform configures a first route according to the network bridge address, and the first route refers to a route from the network management platform to the host machine; and accessing the network management platform to the host machine according to the access request. According to the embodiment of the invention, automatic host machine access can be realized based on the route, the operation is convenient, the labor cost is saved, and the security can be improved.

Description

Technical Field

[0001] The present disclosure belongs to the field of communication technology, and particularly relates to a host machine access method and system. Background Art

[0002] In the Kernel-based Virtual Machine (KVM) technology, the business system is deployed in the virtual machine, and the virtual machine is hosted on a physical machine. The physical machine hosting the virtual machine can be called the host machine. Since the virtual machine runs on the host machine, in order to manage and maintain the virtual machine and business system, the host machine should usually be connected to and obtain the parameters of the host machine's software and hardware modules.

[0003] A common way to access the host is for the operation and maintenance personnel to use an external device to access the host through the serial port and management port of the host. However, this method not only consumes manpower costs and is inconvenient to operate, but also poses serious security risks. Summary of the invention

[0004] The present disclosure proposes a host machine access method and system, which triggers the host machine to configure routing node addresses such as a bridge address and a virtual machine interface address by sending configuration instructions to the host machine through a network management platform. The network management platform can create a route between the host machine and the bridge address, and then automatically access the host machine based on the route. This method is not only convenient to operate and saves labor costs, but also can improve security.

[0005] A first aspect of the present disclosure provides a host machine access method, which is applied to a host machine, wherein the host machine includes a virtual machine, a service system is running in the virtual machine, and the host machine is connected to a network management platform through a service port. The method includes:

[0006] receiving an address configuration instruction set from the network management platform through the service port, wherein the address configuration instruction set is sent by the network management platform in response to an access instruction, and the access instruction is input to the network management platform through a port of the service system;

[0007] Configure a routing node address according to the address configuration instruction set, wherein the routing node address includes a bridge address and a virtual machine interface address, and the bridge corresponding to the bridge address is used to connect the host machine and the virtual machine corresponding to the virtual machine interface address;

[0008] Sending the bridge address to the network management platform, so that the network management platform configures a first route according to the bridge address, wherein the first route refers to a route from the network management platform to the host machine;

[0009] The network management platform is connected to the host machine according to an access request, and the access request is sent by the network management platform based on the first route.

[0010] An embodiment of a second aspect of the present disclosure provides a host machine access method, which is applied to a network management platform, wherein the network platform is connected to a host machine through a service port, wherein the host machine includes a virtual machine, and a service system is running in the virtual machine, wherein the method includes:

[0011] In response to an access instruction input through a port of a service system, sending an address configuration instruction set to the host machine through the service port;

[0012] In response to receiving the bridge address from the host machine, configuring a route from the network management platform to the host machine according to the bridge address to obtain a first route;

[0013] An access request is sent to the host machine based on the first route, so that the host machine authorizes the network management platform to access.

[0014] The third aspect of the present disclosure provides a host machine access system, the system comprising a host machine and a network management platform connected through a service port of the host machine, the host machine comprising a virtual machine, a service system running in the virtual machine; wherein:

[0015] The network management platform is used to send an address configuration instruction set to the host machine through the service port in response to an access instruction input through a port of the service system;

[0016] The host machine is used to configure a routing node address, wherein the routing node address includes a bridge address and a virtual machine interface address, and sends the bridge address to the network management platform, wherein the bridge corresponding to the bridge address is used to connect the virtual machine corresponding to the virtual machine interface address and the host machine;

[0017] The network management platform is further used to configure a route from the network management platform to the host machine according to the bridge address to obtain a first route; and send an access request to the host machine based on the first route;

[0018] The host machine is further used to connect the network management platform to the host machine according to the access request.

[0019] An embodiment of the fourth aspect of the present disclosure provides an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement the method described in the first aspect or the second aspect.

[0020] An embodiment of the fifth aspect of the present disclosure provides a computer-readable storage medium on which a computer program is stored, and the program is executed by a processor to implement the method described in the first aspect or the second aspect.

[0021] The technical solution provided in the embodiments of the present disclosure has at least the following technical effects or advantages:

[0022] In the technical solution disclosed in the present invention, the host machine is connected to the network management platform through the service port, that is, the network management platform is connected to the service system of the host machine. Based on this, the network management platform can send an address configuration instruction set to the host machine through the service port to trigger the host machine to configure the routing node address, and the routing node address includes the bridge address and the virtual machine interface address. The bridge is used to connect the host machine with the virtual machine, so the bridge address can be used as the address of the host machine, so that the network management platform can build a route to the host machine based on the bridge address, and then access the host machine based on the route. It can be seen that in the embodiment of the present invention, by sending instructions to the host machine through the network management platform, automatic access to the host machine can be achieved, which is not only convenient to operate and saves labor costs, but also can improve security.

[0023] Additional aspects and advantages of the present disclosure will be given in part in the following description and in part will become apparent from the following description or be learned through practice of the present disclosure. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] By reading the detailed description of the preferred embodiment below, various other advantages and benefits will become clear to those of ordinary skill in the art. The accompanying drawings are only used for the purpose of illustrating the preferred embodiment and are not considered to be limitations of the present disclosure. In addition, the same reference symbols are used to represent the same components throughout the accompanying drawings.

[0025] In the attached picture:

[0026] Figure 1 A schematic diagram showing a typical host machine access scenario;

[0027] Figure 2 A schematic diagram of the structure of a host machine access system provided by an embodiment of the present disclosure is shown;

[0028] Figure 3A The method flow diagram of the host machine access method provided by an embodiment of the present disclosure is shown as follows Figure 1 ;

[0029] Figure 3B The method flow diagram of the host machine access method provided by an embodiment of the present disclosure is shown as follows Figure 2 ;

[0030] Figure 4 A schematic diagram of signaling interaction of a host machine access method provided by an embodiment of the present disclosure is shown;

[0031] Figure 5A The schematic diagram of the host access device provided by an embodiment of the present disclosure is shown. Figure 1 ;

[0032] Figure 5B The schematic diagram of the host access device provided by an embodiment of the present disclosure is shown. Figure 2 ;

[0033] Figure 6 A schematic diagram of the structure of an electronic device provided by an embodiment of the present disclosure is shown;

[0034] Figure 7 A schematic diagram of a storage medium provided by an embodiment of the present disclosure is shown. DETAILED DESCRIPTION

[0035] The exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although the exemplary embodiments of the present disclosure are shown in the accompanying drawings, it should be understood that the present disclosure can be implemented in various forms and should not be limited by the embodiments described herein. On the contrary, these embodiments are provided in order to enable a more thorough understanding of the present disclosure and to fully convey the scope of the present disclosure to those skilled in the art.

[0036] It should be noted that, unless otherwise specified, the technical terms or scientific terms used in the present disclosure should have the common meanings understood by those skilled in the art to which the present disclosure belongs.

[0037] The following introduces the implementation scenarios and related technologies involved in the embodiments of the present disclosure.

[0038] The embodiments of the present disclosure relate to KVM technology scenarios. Figure 1 As shown in the scenario diagram, the technology based on KVM can support the deployment of at least one virtual machine on the hardware resources of a physical device (i.e., the host machine), and each virtual machine can run a set of business systems. The host machine can be set with information transmission interfaces such as management port, serial port and business port, among which the management port can be used to transmit login credentials, configuration information, monitoring information, system update information, etc. of the host machine, for managing and maintaining the information of the host machine, and the management port can also support remote login to the host machine through a network (e.g., a secure shell (SSH) protocol network). The serial port, i.e., a serial communication interface, can be used for communication between the host machine and external devices (such as a console, a modem, a printer, etc.). In the KVM environment disclosed in the present invention, the serial port can support access to the console of the host machine, that is, the console of the host machine can be accessed through the serial port. The business port is an interface on the host machine for processing business system traffic. The business port can connect the virtual machine and the external network, and is used to transmit business communication data between the external network, such as Web service data, database query data, etc.

[0039] Since virtual machines run on host machines, they involve management, monitoring, and maintenance of business systems in virtual machines. They need to be connected to the host machine to collect status information such as the host machine's temperature, central processing unit (CPU), memory, and hard disk, in order to inspect, start and stop virtual machines, and locate problems.

[0040] A common way to access the host is as follows: Figure 1 As shown in the figure, the operation and maintenance personnel connect an electronic device (such as a laptop) to the host machine as a network management device through the serial port and the management port, log in to the host machine through the serial port, and configure the network address of the host machine management port to directly access the host machine. However, this method not only takes up manpower costs, is inconvenient to operate and has the risk of leakage, but also requires coordination with the operation and maintenance personnel when maintenance is required, so the status of the host machine cannot be maintained in time. Refer again Figure 1 , it can be obtained that the virtual machine accesses the network through the business port, and from the perspective of logical functions, the virtual machine and the host machine can be equivalent to independent devices. Based on this, if the host machine is automatically connected through the network, the operation and maintenance personnel should pre-configure and maintain the network address of the management port through the serial port. Then, the operation and maintenance personnel pre-configure the network connection from the network management platform to the management port, and the network connected to the host machine should be isolated from the network connected to the virtual machine. In this way, not only does it still require labor costs, but the network interface of the host machine is exposed to the network, which poses a great security risk. In addition, it is necessary to add a network connection from the network management platform to the management port, which increases the network burden.

[0041] The technical solution proposed in the embodiment of the present disclosure is that the network management platform is only connected to the service system of the host machine, that is, the network management platform and the host machine have only one network connection. Afterwards, the network management platform sends a configuration instruction to the host machine, triggering the host machine to configure the bridge address, so that a route between the host machine and the bridge address can be created based on the bridge address, and then the host machine can be automatically connected based on the route, which is not only convenient to operate and save labor costs, but also can improve security.

[0042] The following describes the host access method, system, device, electronic device and storage medium proposed according to the embodiments of the present disclosure. The technical solution of the present disclosure is described in detail with specific embodiments. The following specific embodiments can be combined with each other, and the same or similar concepts or processes may not be repeated in some embodiments. The embodiments of the present disclosure will be described below in conjunction with the accompanying drawings.

[0043] See also Figure 2 , Figure 2A structural diagram of a host machine access system provided by an embodiment of the present disclosure is shown. The host machine access system may include a network management platform 1000 and a host machine 2000. The network management platform 1000 and the host machine 2000 are connected to each other through a service port network of the host machine 2000.

[0044] The network management platform 1000 can be an independent physical server, or a server cluster, a distributed system or a cloud platform composed of multiple physical servers, or software on the cloud. The network management platform 1000 can be configured to manage the network between the virtual machine and the network nodes at various locations. The network management platform 1000 can also be configured to read the metadata of the business system based on the business port to manage the corresponding business system, and can visualize the ports of the managed business system in the form of an interface, so as to facilitate the operation and maintenance of the managed business system. In the embodiment of the present disclosure, the network management platform 1000 can also be configured to maintain a series of access instructions, and maintain the sending strategy of these instructions, so that after responding to the trigger operation of accessing the host machine, various instructions are sent to the host machine according to the sending strategy, instructing the host machine to configure according to the corresponding instructions to meet the conditions for supporting the access of the network management platform.

[0045] The host machine 2000 may be an independent physical machine, in which at least one virtual machine may be deployed, and a business system may be run in each virtual machine. The host machine 2000 may create a business function support module (referred to as the function support module) based on the business systems respectively running in at least one virtual machine. Optionally, the function support module may include multiple function plug-ins, and the functions supported by these function plug-ins may be different. The function support module may exchange data with the business system through the data channel inside the host machine. Optionally, the data channel supports the transmission of data in a matching protocol format, and the protocol format is determined by negotiation between the function support module and the business system.

[0046] Each of the at least one virtual machine is provided with a management interface, and the host machine 2000 can connect to the management interface of the virtual machine through a bridge, so that the virtual machine can access the host machine 2000. The management interface of at least one virtual machine is respectively connected to a bridge, for example, the management interface of virtual machine 01 is interface 001, and interface 001 is connected to the host machine 2000 through bridge br0; the management interface of virtual machine 02 is interface 002, and interface 002 is connected to the host machine 2000 through bridge br1.

[0047] In the embodiment of the present disclosure, the host machine 2000 can respond to a series of access instructions of the network management platform 1000, and correspondingly configure the network address of the virtual machine management interface, the network address of the bridge, the route from the host machine 2000 to the network management platform 1000, etc., to support the access of the network management platform 1000. It should be understood that the host machine 2000 receives various instructions from the network management platform 1000 through the service port, so the instructions received in the host machine 2000 are all service systems, and the instructions executed by the function support module in the host machine 2000 are forwarded to the function support module by the service system.

[0048] It can be seen that by adopting this implementation method, a series of configuration processes are integrated into the network management platform, and automatic access is triggered by instructions, which can save labor costs. In addition, there is no need to connect to the host machine with an additional network connection, so there is no need to increase the complexity of the network connection.

[0049] A host machine access method proposed according to an embodiment of the present disclosure is described below in combination with the above implementation scenario and the accompanying drawings.

[0050] like Figure 3A As shown, the embodiment of the present disclosure provides a host machine access method, which can be applied to a host machine, and the host machine can be implemented as Figure 2 The method comprises:

[0051] In step S311, an address configuration instruction set is received from the network management platform through the service port.

[0052] The address configuration instruction set is sent by the network management platform in response to an access instruction, and the access instruction is input to the network management platform through a port of the service system.

[0053] In combination with the foregoing description, it can be known that the network management platform can manage at least one business system running on the host machine. For any business system, after management, the network management platform can visualize the port of the business system on the interface. Further, the network management platform can receive an access instruction input by a user through a port of a business system, and transmit the address configuration instruction set to the host machine through the business port. It should be understood that the business system that receives the address configuration instruction set in the host machine can be the business system to which the port of the network management platform that receives the access instruction belongs. The implementation method of the network management platform managing at least one business system, etc., is described in detail below and will not be described in detail here.

[0054] The address configuration instruction set includes a first address configuration instruction and a second address configuration instruction. In some embodiments, the host machine can receive the first address configuration instruction and the second address configuration instruction together; in other embodiments, the host machine can receive the first address configuration instruction, perform a configuration operation in response to the first address configuration instruction, and then receive the second address configuration instruction; in still other embodiments, the host machine can receive the second address configuration instruction, perform a configuration operation in response to the second address configuration instruction, and then receive the first address configuration instruction.

[0055] In step S312, a routing node address is configured according to the address configuration instruction set, where the routing node address includes a bridge address and a virtual machine interface address.

[0056] The bridge corresponding to the bridge address is used to connect the host machine and the virtual machine corresponding to the virtual machine interface address.

[0057] Exemplarily, the first address configuration instruction may instruct configuration of the virtual machine interface address, and the second address configuration instruction may instruct configuration of the bridge address.

[0058] In some embodiments, if the host machine receives the first address configuration instruction and the second address configuration instruction, the service system can be used to respond to the first address configuration instruction to configure the network address for the management interface of the virtual machine, and obtain the virtual machine interface address. After that, the service system is used to encapsulate the second address configuration instruction into first encapsulated data that conforms to a preset transmission protocol, and the first encapsulated data is transmitted to the function support module of the host machine through a data channel, and the function support module is used to configure the bridge address based on the first encapsulated data. After that, the service system is used to send the bridge address and the virtual machine interface address to the network management platform.

[0059] In some other embodiments, if the host machine first receives the first address configuration instruction, the service system can be used to respond to the first address configuration instruction to configure the network address for the management interface of the virtual machine, and the virtual machine interface address can be obtained. After that, the service system can be used to send the configuration result of the successful configuration of the virtual machine interface address to the network management platform. Furthermore, the service system can receive the second address configuration instruction, and the service system can be used to encapsulate the second address configuration instruction into the first encapsulation data that conforms to the preset transmission protocol, and transmit it to the function support module of the host machine through the data channel, and the function support module can be used to configure the bridge address based on the first encapsulation data, and then the bridge address can be sent to the network management platform.

[0060] In some further embodiments, if the host machine first receives the second address configuration instruction, the business system is used to encapsulate the second address configuration instruction into first encapsulated data that complies with the preset transmission protocol, and the data is transmitted to the functional support module of the host machine through the data channel, and the functional support module is used to configure the bridge address based on the first encapsulated data, and then the bridge address is sent to the network management platform. Furthermore, the first address configuration instruction can be received, and the business system can be used to respond to the first address configuration instruction to configure the network address for the management interface of the virtual machine to obtain the virtual machine interface address, and then the configuration result of the virtual machine interface address is sent to the network management platform. The preset transmission protocol can be a transmission protocol supported by the data channel in the host machine, and the preset transmission protocol can be a data transmission protocol determined by negotiation between the business system and the functional support module.

[0061] In step S313, the bridge address is sent to the network management platform.

[0062] Among them, sending the bridge address to the network management platform can trigger the network management platform to configure a first route, the first route refers to the route from the network management platform to the host machine, the starting node of the first route can be the network address of the network management platform, and the destination node can be the bridge address.

[0063] Exemplarily, the addresses involved in the embodiments of the present disclosure may all be Internet Protocol (IP) addresses.

[0064] Furthermore, after sending the bridge address to the network management platform, the host machine may also receive a function configuration instruction set from the network management platform, and in response to the function configuration instruction set, configure a second route, account, password, and account access rights. The second route is a route from the host machine to the network management platform, the starting node of the second route may be the bridge address, and the destination node may be the network address of the network management platform.

[0065] The account access rights may be, for example, the configuration of authorizing the IP address of the network management platform to access the account. In this way, the authorized network management platform can access and access the host machine, while the unauthorized IP address cannot access the host machine, thus ensuring the security of the host machine.

[0066] Among them, the functional configuration instruction set may include routing configuration instructions and access information configuration instructions. In some embodiments, the host machine can receive routing configuration instructions and access information configuration instructions together; in other embodiments, the host machine can receive routing configuration instructions, respond to routing configuration instructions to perform configuration operations, and then receive access information configuration instructions; in still other embodiments, the host machine can receive access information configuration instructions, respond to access information configuration instructions to perform configuration operations, and then receive routing configuration instructions.

[0067] It should be understood that the second route, account, password and account access rights should all be configured by the functional support module of the host machine. Based on this, after receiving the route configuration instruction, the host machine uses the business system to encapsulate the route configuration instruction to obtain the second encapsulated data that complies with the preset transmission protocol; transmits the second encapsulated data to the functional support module of the host machine through the data channel, and uses the functional support module to configure the second route based on the second encapsulated data; after receiving the access information configuration instruction, the host machine uses the business system to encapsulate the access information configuration instruction to obtain the third encapsulated data that complies with the preset transmission protocol; transmits the third encapsulated data to the functional support module of the host machine through the data channel, and uses the functional support module to configure the account, the password and the account access rights based on the third encapsulated data.

[0068] The access information configuration instruction may include a login information configuration instruction and a permission configuration instruction. In some embodiments, the host machine may receive the login information configuration instruction and the permission configuration instruction together. Then, the business system may first encapsulate the login information configuration instruction, and transmit the encapsulated login information configuration instruction to the function support module. The function support module may be used to first configure the account and password. Then, the host machine uses the business system to encapsulate the permission configuration instruction, and after transmitting the encapsulated permission configuration instruction to the function support module, the function support module may be used to configure the account access rights. In other embodiments, the host machine may first receive the login information configuration instruction. Correspondingly, the host machine uses the business system to encapsulate the login information configuration instruction, and transmits the encapsulated login information configuration instruction to the function support module. The function support module may configure the account and password, and feedback the configured account to the business system. After the configured account is sent to the network management platform by the business system, the permission configuration instruction from the network management platform is received. Then, the host machine uses the business system to encapsulate the permission configuration instruction, and after transmitting the encapsulated permission configuration instruction to the function support module, the function support module may be used to configure the account access rights.

[0069] Exemplarily, the second encapsulated data, the third encapsulated data, the encapsulated login information configuration instruction, and the encapsulated permission configuration instruction, for example, may all be protocol data of a protocol supported by the data channel.

[0070] In the actual implementation scenario, the function support module may include multiple function plug-ins, and the functions supported by each function plug-in are the same. After receiving the encapsulated data transmitted by the business system, the function support module may call the function plug-in that matches the configuration instruction in the encapsulated data to perform the operation indicated by the corresponding configuration instruction. For example, after receiving the first encapsulated data, the function support module may call the function plug-in that performs the routing configuration function, and configure the second routing in response to the routing configuration instruction in the first encapsulated data. For another example, after receiving the second encapsulated data, the function support module may call the function plug-in that performs the account and password configuration function, and configure the account and the password in response to the access information configuration instruction in the second encapsulated data.

[0071] In step S314, the network management platform is connected to the host machine according to the access request.

[0072] The access request is sent by the network management platform based on the first route.

[0073] In some embodiments, a remote connection link, such as an SSH link, may be established between the network management platform and the host machine, and then, based on the remote connection link, the first route and the second route are used to transmit messages so that the network management platform can access the host machine.

[0074] Exemplarily, the host machine can respond to the instruction to build a remote connection, and build a remote connection link with the network management platform based on the first route and the second route. The instruction to build a remote connection can be sent by the network management platform when it receives that the host machine has configured the second route. The host machine receives a login instruction sent from the network management platform through the remote connection link, and the login instruction includes a login account and a login password. Afterwards, the host machine can verify the login account and login password. Specifically, the host machine can determine whether the login account is consistent with the account, and whether the login password is consistent with the password. If it is determined that the login account is consistent with the account, and the login password is consistent with the password, it can be considered that the verification of the login account and login password is passed, and the host machine can send the login information to the network management platform through the remote connection link, so that the network management platform determines to access the host machine.

[0075] It should be noted that the remote connection link is a communication link based on a remote transmission protocol, and information transmitted based on the remote connection link needs to be forwarded by routing. Based on this, the host receives the login instruction sent from the network management platform through the remote connection link, which is sent by the network management platform based on the first route, and the host sends the login information to the network management platform through the remote connection link, which is sent by the host based on the second route.

[0076] It should be understood that the SSH link is only a schematic description and does not constitute a limitation on the embodiments of the present disclosure. In actual implementation scenarios, the connection link between the network management platform and the host machine can also be implemented as a connection link based on the Secure FTP (SFTP) protocol, a connection link based on the console over IP (CoIP), and other network connection links. The embodiments of the present disclosure are not limited to this.

[0077] It should be noted that during the above configuration process, each time the host successfully configures a piece of information, it can send feedback information of the corresponding information configuration success to the network management platform through the service port to trigger the network management platform to perform subsequent operations. If the host fails to configure any information, it can send feedback information of the corresponding information configuration failure to the network management platform to enable the network management platform to end the configuration process.

[0078] It can be seen that by adopting this implementation method, the network bridge inside the host machine is used as the routing node of the host machine, and the management interface of the virtual machine is used as the connection node between the business port and the host machine, so that the network management platform can build a connection link to the host machine based on the network between the business system, so that instructions can be sent to the host machine through the network management device to achieve automatic access to the host machine, which not only saves labor costs, but also eliminates the need to add a network connection to the host machine.

[0079] Furthermore, after receiving the access request from the network management platform, the host machine can also receive a configuration clearing instruction from the network management platform, and clear at least one of the configuration information of the first route, the configuration information of the second route, the account, the password and the account access rights.

[0080] In some embodiments, the host machine may clear the source node address (such as the bridge address and the virtual machine interface address), the account number, and the password. In other embodiments, the host machine may clear all the configuration information configured above.

[0081] Exemplarily, if the host machine clears all the aforementioned configured configuration information, the host machine can clear them in reverse order according to the configuration order of each configuration information. For example, the order in which the host machine configures the above configuration information is virtual machine interface address, bridge address, account number and password, and second route. Then, after the host machine receives the configuration clearing instruction, it clears the second route, account number and password, bridge address, and virtual machine interface address in sequence.

[0082] The configuration clearing instruction is sent by the network management platform when it detects that the remote connection link is disconnected. In this way, after the operation and maintenance of the host machine is completed, the host machine can be triggered to clear all the configuration information of this time, thereby avoiding the exposure of the network address and login account of each routing node in the host machine, which is conducive to improving network security.

[0083] like Figure 3B As shown, the embodiment of the present disclosure provides a host machine access method, which can be applied to a network management platform, and the network management platform can be implemented as Figure 2 The network management platform 1000.

[0084] It should be pointed out that Figure 3B is with Figure 3A The implementation method of the network management platform corresponding to the implementation scenario shown in the figure is based on this. Figure 3A For the same or similar implementations, please refer to Figure 3A The description in the corresponding embodiment will not be repeated here.

[0085] The method includes:

[0086] In step S301, in response to an access instruction input through a port of a service system, an address configuration instruction set is sent to the host machine through the service port.

[0087] The port of the business system refers to the visual presentation of the business system operation entrance on the interface of the network management platform after the network management platform manages the business system on the host machine.

[0088] It should be noted that at least one business system is running in the host machine, and the at least one business system is running in a virtual machine respectively. Before responding to receiving an access instruction input by a port of a business system, the network management platform may receive metadata of at least one business system running in the host machine via the business port, and generate a port for each business system in the at least one business system respectively. In some embodiments, the at least one business system may not all have the remote access function of the embodiment of the present disclosure. Based on this, the network management platform can determine and mark the business system that supports the remote access function in the at least one business system based on the metadata. Furthermore, the user can learn about the port that can trigger remote access through the marking, as well as the access instruction input through the port of the marked business system, to trigger the access processing of the embodiment of the present disclosure.

[0089] Any metadata may include at least one of the functional description, model, version number and working status of the corresponding business system. In some embodiments, the network management platform can determine whether the business system supports the remote access function through the version number of the business system. For example, a business system with a version number lower than V1.0.5 (i.e., a relatively low version of the business system) does not have the remote access function of the embodiment of the present disclosure, while a business system with a version number higher than V1.0.5 has the remote access function of the embodiment of the present disclosure.

[0090] For the ports of business systems with remote access functions, in some embodiments, the network management platform can use colors to mark them. For example, the ports of business systems with remote access functions have higher color brightness, while the ports of business systems without remote access functions have lower color brightness. In other embodiments, the network management platform can use symbols to mark them. For example, a circular symbol is marked in the upper right corner of the port interface of a business system with remote access functions, while there is no circular symbol at the port interface of a business system without remote access functions.

[0091] In step S302, in response to receiving the bridge address from the host machine, a route from the network management platform to the host machine is configured according to the bridge address to obtain a first route.

[0092] In combination with the description of the foregoing embodiments, it can be known that the host machine configures the bridge address and the virtual machine interface address according to the address configuration instruction set, wherein the bridge corresponding to the bridge address is used to connect the virtual machine corresponding to the virtual machine interface address and the host machine, and the business system runs in the virtual machine. In combination with the foregoing description, it can be known that the address configuration instruction set includes a first address configuration instruction and a second address configuration instruction. In some embodiments, the network management platform can send the first address configuration instruction and the second address configuration instruction together to the host machine, and then the network management platform can receive the bridge address and the virtual machine interface address; in other embodiments, the network management platform can first send the first address configuration instruction, and after receiving the virtual machine interface address configured by the host machine in response to the first address configuration instruction, send the second address configuration instruction to the host machine; in still other embodiments, the network management platform can first send the second address configuration instruction, and after receiving the bridge address configured by the host machine in response to the first address configuration instruction, send the first address configuration instruction to the host machine.

[0093] After the host machine receives the first address configuration instruction and the second address configuration instruction, the process of configuring the bridge address and the virtual machine interface address is described in detail in the above embodiment and will not be repeated here.

[0094] Furthermore, after receiving the bridge address from the host machine, the network management platform may also send a function configuration instruction set to the host machine to instruct the host machine to configure a second route, account and password; the second route is the route from the host machine to the network management platform.

[0095] As described in the above embodiments, the function configuration instruction set includes routing configuration instructions and access information configuration instructions, and the access information configuration instructions may include login information configuration instructions and permission configuration instructions. In some embodiments, the network management platform may send the routing configuration instructions and the access information configuration instructions to the host machine together. In other embodiments, the network management platform may first send the access information configuration instructions to the host machine, and after receiving the account number, password and account access rights sent by the host machine, send the routing configuration instructions to the host machine. In still other embodiments, the network management platform may first send the login information configuration instructions to the host machine, and after receiving the account number and password sent by the host machine, send the permission configuration instructions to the host machine, and after receiving the account access rights sent by the host machine, send the routing configuration instructions to the host machine.

[0096] After the host receives the routing configuration instruction and the access information configuration instruction, it processes each configuration instruction and configures the second route, account, password and account access rights. Please refer to the description of the above embodiment for details, which will not be repeated here.

[0097] During the above configuration process, the network management platform can receive feedback information on whether any information of the host machine configuration is successful or not. If feedback information of successful configuration is received, the network management platform can continue to send subsequent configuration instructions to the host machine according to the configuration process. If feedback information of configuration failure is received, the network management platform can end the configuration process.

[0098] It can be seen that by adopting this implementation method, a series of configuration instructions and configuration processes are integrated into the network management platform. By sending configuration instructions to the host machine according to the configuration process through the network management platform, the information required for the host machine configuration access can be triggered, thereby eliminating the need for operation and maintenance personnel to use an external PC for configuration, which can save a lot of labor costs.

[0099] In step S303, an access request is sent to the host machine based on the first route, so that the host machine authorizes the network management platform to access.

[0100] After receiving the feedback information that the host has successfully configured the second route, the network management platform can send a remote connection instruction to the host, and build a remote connection link with the host based on the first route and the second route, and then log in to the host using the login account and login password through the remote connection link, and after receiving the login information of the host, determine to access the host. The login information is sent by the host after determining that the login account is consistent with the account, and the login password is consistent with the password, which will not be described in detail here.

[0101] In some embodiments, after determining to access the host machine, the network management platform can periodically detect the connection status of the remote connection link. If the remote connection link is disconnected, the network management platform can send a configuration clearing instruction to the host machine to instruct the host machine to clear the configuration information of the first route, the configuration information of the second route, the account number and at least one of the password. For the embodiment of clearing the configuration information of the host machine, please refer to the description of the above embodiment, which will not be repeated here.

[0102] Exemplarily, the remote connection link can disconnect in response to a user trigger. For example, starting from logging into the host machine, the network management platform can always display the operation interface of the business system. If the user closes the operation interface, it can be considered that the maintenance of the host machine is completed and the remote connection link is disconnected.

[0103] In this way, a remote connection link will be established only when there is a need for maintenance of the host machine. After the maintenance is completed, the remote connection link will be disconnected and the configuration information will be cleared, which is conducive to improving security.

[0104] The following describes the host machine access method of the embodiment of the present disclosure from the perspective of interaction between a network management platform and a host machine in combination with an exemplary implementation scenario.

[0105] The connection method between the network management platform and the host machine can be referred to Figure 2 .like Figure 4 As shown, in one example, the process of the network management platform accessing the host machine may include the following steps:

[0106] Step 41, the network management platform receives the access instruction input by the user through the port of the service system, and sends an instruction for configuring the IP address of the virtual machine interface to the service system.

[0107] In step 42, the business system configures an IP address for the management interface of the running virtual machine. If the configuration is successful, a configuration result indicating successful configuration is sent to the network management platform, and step S43 is executed; if the configuration fails, a configuration result indicating failed configuration is sent to the network management platform, and step 415 is executed.

[0108] Step 43: The network management platform sends an instruction to configure the bridge IP address to the business system.

[0109] Step 44, the business system encapsulates the instruction for configuring the bridge IP address into protocol data, and transmits it to the function support module of the host machine through the data channel, so that the function support module configures the bridge IP address.

[0110] If the configuration is successful, the configuration result and the bridge IP address indicating successful configuration are sent to the network management platform, and step S45 is executed; if the configuration fails, the configuration result indicating configuration failure is sent to the network management platform, and step 415 is executed.

[0111] Step 45, the network management platform configures the route to the bridge IP address and sends a login information configuration instruction to the business system.

[0112] Step 46, the business system encapsulates the login information configuration instruction into protocol data, and transmits it to the function support module of the host machine through the data channel, so that the function support module configures the account and password.

[0113] If the configuration is successful, the account number and password are sent to the network management platform, and step S47 is executed; if the configuration fails, step 415 is executed.

[0114] Step 47: The network management platform sends an instruction for configuring access rights to the business system.

[0115] In step 48, the business system encapsulates the instruction for configuring access rights into protocol data, and transmits it to the function support module of the host machine through the data channel, so that the function support module configures the account access rights.

[0116] If the configuration is successful, a feedback message of successful configuration is sent to the network management platform, and step S49 is executed; if the configuration fails, step 415 is executed.

[0117] Step 49: The network management platform sends a routing configuration instruction to the business system.

[0118] Step 410, the business system encapsulates the instruction for configuring access rights into protocol data, and transmits it to the function support module of the host machine through the data channel, so that the function support module configures the route from the bridge IP address to the network management platform.

[0119] If the configuration is successful, a feedback message of successful configuration is sent to the network management platform, and step S411 is executed; if the configuration fails, step 415 is executed.

[0120] Step 411, the network management platform logs in to the host machine using the account and password through the route to the bridge IP address. If the login is successful, execute step 412; if the login fails, execute 415.

[0121] If the network management platform receives feedback information indicating successful login, it considers that the login is successful. The feedback information indicating successful login is sent by the host machine through the route from the bridge IP address to the network management platform.

[0122] Step 412, the network management platform opens the operation interface corresponding to the business system, and cyclically detects whether the remote connection is in a connected state. If it is no longer in a connected state, execute step 413.

[0123] Step 413: The network management platform sends an instruction to clear the configuration information to the business system, and clears the route to the bridge IP address.

[0124] Step 414, the business system responds to the instruction to clear the configuration information, triggering the host machine to sequentially clear the route, account, bridge IP address, and virtual machine interface IP address from the bridge IP address to the network management platform.

[0125] Step 415, end configuration.

[0126] It should be understood that Figure 4 The host machine access method shown, and the related signaling interaction process are all illustrative implementations of the present disclosure, and do not limit the implementation of the embodiments of the present disclosure. In some other implementations, the network management platform can send some configuration instructions to the host machine together, or the network management platform can also send the above configuration instructions in other sending orders. The embodiments of the present disclosure are not limited to this.

[0127] In summary, in the technical solution disclosed in the present invention, the host machine is connected to the network management platform through the service port, that is, the network management platform is connected to the service system of the host machine. Based on this, the network management platform can send an address configuration instruction set to the host machine through the service port to trigger the host machine to configure the routing node address, and the routing node address includes the bridge address and the virtual machine interface address. The bridge is used to connect the host machine with the virtual machine, so the bridge address can be used as the address of the host machine, so that the network management platform can build a route to the host machine based on the bridge address, and then access the host machine based on the route. It can be seen that in the embodiment of the present invention, by sending instructions to the host machine through the network management platform, automatic access to the host machine can be achieved, which is not only convenient to operate and saves labor costs, but also can improve security.

[0128] The present disclosure also provides a host machine access device. Figure 5A As shown, Figure 5A The illustrated host machine access device can be deployed in a host machine to perform operations corresponding to the host machine in any of the above embodiments, and the device includes:

[0129] The receiving unit 501 is used to receive an address configuration instruction set from the network management platform through the service port, wherein the address configuration instruction set is sent by the network management platform in response to an access instruction, and the access instruction is input to the network management platform through a port of the service system;

[0130] An address configuration unit 502 is used to configure a routing node address according to the address configuration instruction set, wherein the routing node address includes a bridge address and a virtual machine interface address, and the bridge corresponding to the bridge address is used to connect the host machine and the virtual machine corresponding to the virtual machine interface address;

[0131] A sending unit 503 is used to send the bridge address to the network management platform, so that the network management platform configures a first route according to the bridge address, where the first route refers to a route from the network management platform to the host machine;

[0132] The access unit 504 connects the network management platform to the host machine according to the access request, where the access request is sent by the network management platform based on the first route.

[0133] In the embodiment of the present disclosure, the device further includes a function configuration unit. The receiving unit 501 is further used to receive a function configuration instruction set from the network management platform; the function configuration unit is used to respond to the function configuration instruction set to configure a second route, an account number and a password, where the second route is a route from the host machine to the network management platform.

[0134] In the embodiment of the present disclosure, the access unit 504 is also used to respond to an instruction to establish a remote connection, establish a remote connection link with the network management platform based on the first route and the second route; receive a login instruction sent from the network management platform through the remote connection link, and the login instruction includes a login account and a login password; if it is determined that the login account is consistent with the account, and the login password is consistent with the password, then send the login information to the network management platform through the remote connection link, so that the network management platform determines to access the host machine.

[0135] In the embodiment of the present disclosure, the address configuration instruction set includes a first address configuration instruction, and the receiving unit 501 is also used to use the business system to receive the first address configuration instruction through the business port; the address configuration unit 502 is also used to use the business system to respond to the first address configuration instruction to configure the virtual machine interface address for the management interface of the virtual machine.

[0136] In the embodiment of the present disclosure, the address configuration instruction set also includes a second address configuration instruction, and the receiving unit 501 is further used to use the business system to receive the second address configuration instruction through the business port; the address configuration unit 502 is further used to encapsulate the second address configuration instruction into a first encapsulation data that complies with a preset transmission protocol; transmit the first encapsulation data to the functional support module of the host machine through a data channel; and use the functional support module to configure the bridge address based on the first encapsulation data.

[0137] In an embodiment of the present disclosure, the function configuration instruction set includes a routing configuration instruction and an access information configuration instruction. The receiving unit 501 is further used to, after receiving the routing configuration instruction, use the business system to encapsulate the routing configuration instruction to obtain second encapsulated data that complies with a preset transmission protocol; transmit the second encapsulated data to the function support module of the host machine through a data channel, and use the function support module to configure the second route based on the second encapsulated data; after receiving the access information configuration instruction, use the business system to encapsulate the access information configuration instruction to obtain third encapsulated data that complies with a preset transmission protocol; transmit the third encapsulated data to the function support module of the host machine through the data channel, and use the function support module to configure the account and the password based on the third encapsulated data.

[0138] In the embodiment of the present disclosure, the device further includes a clearing unit. The receiving unit 501 is further used to receive a configuration clearing instruction from the network management platform, wherein the configuration clearing instruction is sent by the network management platform when the remote connection link is detected to be disconnected; and the clearing unit is used to clear the configuration information of the first route, the configuration information of the second route, the account number, and at least one of the password.

[0139] The host access device provided in the above-mentioned embodiment of the present disclosure and the host access method provided in the embodiment of the present disclosure are based on the same inventive concept and have the same beneficial effects as the method adopted, run or implemented by the application program stored therein.

[0140] like Figure 5B As shown, Figure 5B The illustrated host access device can be deployed in a network management platform to perform operations corresponding to the network management platform in any of the above embodiments, and the device includes:

[0141] A sending unit 511, configured to send an address configuration instruction set to the host machine through the service port in response to an access instruction input through a port of the service system;

[0142] A routing configuration unit 512, configured to, in response to receiving a bridge address from the host machine, configure a route from the network management platform to the host machine according to the bridge address to obtain a first route;

[0143] The sending unit 511 is further configured to send an access request to the host machine based on the first route, so that the host machine authorizes the network management platform to access.

[0144] In the embodiment of the present disclosure, the sending unit 511 is further used to send a function configuration instruction set to the host machine to instruct the host machine to configure a second route, account and password; the second route is the route from the host machine to the network management platform.

[0145] In the embodiment of the present disclosure, the sending unit 511 is further used to send an instruction to establish a remote connection to the host machine; establish a remote connection link with the host machine based on the first route and the second route; log in to the host machine using a login account and a login password through the remote connection link; after receiving the login information of the host machine, determine to access the host machine, the login information is sent after the host machine determines that the login account is consistent with the account, and the login password is consistent with the password.

[0146] In the embodiment of the present disclosure, the device further includes a connection detection unit. The connection detection unit is used to periodically detect the connection status of the remote connection link; the sending unit 511 is also used to send a configuration clearing instruction to the host machine if the remote connection link is disconnected, so as to instruct the host machine to clear the configuration information of the first route, the configuration information of the second route, the account number and the password.

[0147] The host access device provided in the above-mentioned embodiment of the present disclosure and the host access method provided in the embodiment of the present disclosure are based on the same inventive concept and have the same beneficial effects as the method adopted, run or implemented by the application program stored therein.

[0148] The present disclosure also provides an electronic device to perform a host machine access method. Figure 6 , which shows a schematic diagram of an electronic device provided by some embodiments of the present disclosure. It should be noted that the electronic device can be implemented as a host machine or a network management platform. Figure 6 As shown, the electronic device 6 includes: a processor 600, a memory 601, a bus 602 and a communication interface 603, wherein the processor 600, the communication interface 603 and the memory 601 are connected via the bus 602; the memory 601 stores a computer program that can be run on the processor 600, and when the processor 600 runs the computer program, the host machine access method provided in any of the aforementioned embodiments of the present disclosure is executed.

[0149] The memory 601 may include a high-speed random access memory (RAM), and may also include a non-volatile memory, such as at least one disk storage. The communication connection between the virtual devices of the system is realized through at least one communication interface 603 (which may be wired or wireless), and the Internet, wide area network, local area network, metropolitan area network, etc. may be used.

[0150] The bus 602 may be an ISA bus, a PCI bus, or an EISA bus, etc. The bus may be divided into an address bus, a data bus, a control bus, etc. The memory 601 is used to store programs, and the processor 600 executes the programs after receiving the execution instruction. The host access method disclosed in any implementation of the aforementioned embodiment of the present disclosure may be applied to the processor 600, or implemented by the processor 600.

[0151] The processor 600 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method can be completed by the hardware integrated logic circuit in the processor 600 or the instruction in the form of software. The above processor 600 can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components. The methods, steps and logic block diagrams disclosed in the embodiments of the present disclosure can be implemented or executed. The general-purpose processor can be a microprocessor or the processor can also be any conventional processor. The steps of the method disclosed in conjunction with the embodiments of the present disclosure can be directly embodied as a hardware decoding processor to be executed, or a combination of hardware and software modules in the decoding processor can be executed. The software module can be located in a mature storage medium in the field such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory or an electrically erasable programmable memory, a register, etc. The storage medium is located in the memory 601, and the processor 600 reads the information in the memory 601 and completes the steps of the above method in combination with its hardware.

[0152] The electronic device provided by the embodiment of the present disclosure and the host machine access method provided by the embodiment of the present disclosure are based on the same inventive concept and have the same beneficial effects as the methods adopted, run or implemented by them.

[0153] The present disclosure also provides a computer-readable storage medium corresponding to the host access method provided in the above embodiment. Figure 7 The computer-readable storage medium shown is a CD 30 on which a computer program (ie, a program product) is stored. When the computer program is run by a processor, the host machine access method provided by any of the aforementioned embodiments will be executed.

[0154] It should be noted that examples of the computer-readable storage medium may also include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other optical or magnetic storage media, which are not listed here one by one.

[0155] The computer-readable storage medium provided by the above-mentioned embodiments of the present disclosure and the host machine access method provided by the embodiments of the present disclosure are based on the same inventive concept and have the same beneficial effects as the methods adopted, run or implemented by the application programs stored therein.

[0156] Although the optional embodiments of the present application have been described, those skilled in the art, once informed of the basic creative concept, may make additional changes and modifications to these embodiments. Therefore, the appended claims are intended to be interpreted as including the preferred embodiment and all changes and modifications falling within the scope of the present application.

[0157] The specific implementation methods described above further illustrate the purpose, technical solutions and beneficial effects of the present application in detail. It should be understood that the above description is only the specific implementation method of the present application and is not intended to limit the scope of protection of the present application. Any modifications, equivalent substitutions, improvements, etc. made on the basis of the technical solutions of the present application should be included in the scope of protection of the present invention.

Claims

1. A host machine access method, characterized in that: Applied to a host machine, the host machine includes a virtual machine, a service system runs in the virtual machine, and the host machine is connected to a network management platform through a service port. The method includes: receiving an address configuration instruction set from the network management platform through the service port, wherein the address configuration instruction set is sent by the network management platform in response to an access instruction, and the access instruction is input to the network management platform through a port of the service system; Configure a routing node address according to the address configuration instruction set, wherein the routing node address includes a bridge address and a virtual machine interface address, and the bridge corresponding to the bridge address is used to connect the host machine and the virtual machine corresponding to the virtual machine interface address; Sending the bridge address to the network management platform, so that the network management platform configures a first route according to the bridge address, wherein the first route refers to a route from the network management platform to the host machine; The network management platform is connected to the host machine according to an access request, and the access request is sent by the network management platform based on the first route.

2. The method according to claim 1, characterized in that After sending the bridge address to the network management platform, the method further includes: Receiving a function configuration instruction set from the network management platform; In response to the function configuration instruction set, a second route, an account number and a password are configured, where the second route is a route from the host machine to the network management platform.

3. The method according to claim 2, characterized in that The step of connecting the network management platform to the host machine according to the access request includes: In response to an instruction to establish a remote connection, establishing a remote connection link with the network management platform based on the first route and the second route; Receiving a login instruction sent from the network management platform through the remote connection link, the login instruction including a login account and a login password; If it is determined that the login account is consistent with the account, and the login password is consistent with the password, the login information is sent to the network management platform through the remote connection link, so that the network management platform determines to access the host machine.

4. The method according to claim 1, characterized in that: The address configuration instruction set includes a first address configuration instruction, and the address configuration instruction set received from the network management platform through the service port includes: Receiving the first address configuration instruction via the business port using the business system; Configuring the routing node address according to the address configuration instruction set includes: The business system is utilized to respond to the first address configuration instruction to configure the virtual machine interface address for the management interface of the virtual machine.

5. The method according to claim 4, characterized in that The address configuration instruction set further includes a second address configuration instruction, and the address configuration instruction set received from the network management platform through the service port further includes: Receiving the second address configuration instruction by using the business system through the business port; Configuring the routing node address according to the address configuration instruction set also includes: Encapsulating the second address configuration instruction into first encapsulated data that complies with a preset transmission protocol; A function support module that transmits the first encapsulated data to the host machine through a data channel; The function support module is used to configure the bridge address based on the first encapsulation data.

6. The method according to claim 2, characterized in that The function configuration instruction set includes a routing configuration instruction and an access information configuration instruction, and the method further includes: After receiving the routing configuration instruction, encapsulating the routing configuration instruction using the service system to obtain second encapsulated data that complies with a preset transmission protocol; Transmitting the second encapsulated data to a function support module of the host machine through a data channel, and configuring the second route based on the second encapsulated data using the function support module; After receiving the access information configuration instruction, encapsulating the access information configuration instruction using the service system to obtain third encapsulated data that complies with a preset transmission protocol; The third encapsulated data is transmitted to the function support module of the host machine through the data channel, and the account and the password are configured based on the third encapsulated data by the function support module.

7. The method according to claim 3, characterized in that After the network management platform is connected to the host machine according to the access request, the method further includes: receiving a configuration clearing instruction from the network management platform, wherein the configuration clearing instruction is sent by the network management platform when detecting that the remote connection link is disconnected; Clear the configuration information of the first route, the configuration information of the second route, the account number, and at least one of the password.

8. A host machine access method, characterized in that: Applied to a network management platform, the network platform is connected to a host machine through a service port, the host machine includes a virtual machine, and a service system runs in the virtual machine. The method includes: In response to an access instruction input through a port of a service system, sending an address configuration instruction set to the host machine through the service port; In response to receiving the bridge address from the host machine, configuring a route from the network management platform to the host machine according to the bridge address to obtain a first route; An access request is sent to the host machine based on the first route, so that the host machine authorizes the network management platform to access.

9. The method according to claim 8, characterized in that In response to receiving the bridge address from the host machine, the method further includes: A function configuration instruction set is sent to the host machine to instruct the host machine to configure a second route, an account number and a password; the second route is a route from the host machine to the network management platform.

10. The method according to claim 9, characterized in that The accessing request to the host machine based on the first route includes: Sending an instruction to establish a remote connection to the host machine; Building a remote connection link with the host machine based on the first route and the second route; Log in to the host machine using a login account and a login password through the remote connection link; After receiving the login information of the host machine, it is determined to access the host machine, wherein the login information is sent after the host machine determines that the login account is consistent with the account, and the login password is consistent with the password.

11. The method according to claim 10, characterized in that After sending the access request to the host machine based on the first route, the method further includes: Periodically detecting the connection status of the remote connection link; If the remote connection link is in a disconnected state, a configuration clearing instruction is sent to the host machine to instruct the host machine to clear the configuration information of the first route, the configuration information of the second route, the account number and the password.

12. A host machine access system, characterized in that: The system includes a host machine and a network management platform connected through a service port of the host machine, the host machine includes a virtual machine, and a service system runs in the virtual machine; wherein, The network management platform is used to send an address configuration instruction set to the host machine through the service port in response to an access instruction input through a port of the service system; The host machine is used to configure a routing node address, wherein the routing node address includes a bridge address and a virtual machine interface address, and sends the bridge address to the network management platform, wherein the bridge corresponding to the bridge address is used to connect the virtual machine corresponding to the virtual machine interface address and the host machine; The network management platform is further used to configure a route from the network management platform to the host machine according to the bridge address to obtain a first route; and send an access request to the host machine based on the first route; The host machine is further used to connect the network management platform to the host machine according to the access request.

Images