Full-link analysis display method and device based on routing configuration, medium and equipment

Abstract

The invention discloses a full-link analysis display method and device based on routing configuration, a medium and equipment. The method comprises the following steps: collecting and extracting equipment routing data; confirming the type of equipment routing data, and executing data cleaning processing according to the type of the equipment routing data; path acquisition is carried out based on the routing configuration information of the target assets, and three groups of network incoming link diagrams are respectively obtained; and sequentially splicing the Internet network inbound link diagram, the internal network inbound link diagram and the cluster network inbound link diagram to generate a hierarchical whole network link topological diagram, and performing front-end link display on the whole network link topological diagram. Visualization of various assets and internet access links in a virtualized network is realized, and in an actual application scene, problems can be quickly found based on the topological graph of the whole network links according to association of the collected equipment routing data and the security events, the influence range is positioned, and the security response efficiency is improved.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of Internet, and particularly relates to a full-link analysis display method and device based on route configuration, a medium and equipment. BACKGROUND

[0002] The network link mapping scheme in the current market is mostly from the perspective of physical devices and lines, that is, a network topology diagram is drawn by analyzing network device routes and physical line connections. It focuses on the connection status of the underlying infrastructure of the data center. However, with the continuous development of virtualization technologies such as cloud computing, virtual networks, and containerization, the actual business network is becoming more and more flexible and abstract, which leads to the fact that the traditional network link mapping product cannot display the logical link of access and the physical location of the related service.

[0003] At the same time, the frequency and intensity of attacks from the Internet are increasing day by day. Once a security event occurs, it is necessary to quickly locate the path from the attack source to the target service in order to block and protect it in a targeted manner.

[0004] Therefore, there is an urgent need for a link mapping and asset positioning and display method suitable for a virtualized network environment. SUMMARY

[0005] In view of the above problems, the present application is proposed in order to provide a full-link analysis display method and device based on route configuration, which overcomes the above problems or at least partially solves the above problems.

[0006] Other characteristics and advantages of the present application will become apparent from the following detailed description, or will be learned by practice of the present application.

[0007] According to a first aspect of the embodiments of the present application, a full-link analysis display method based on route configuration is provided, which comprises:

[0008] Based on the interface configuration information of all target assets, device route data is collected and extracted, and the device route data includes device basic information and route configuration information;

[0009] The type of the device route data is confirmed, and data cleaning processing is respectively performed according to the type of the device route data;

[0010] Collect paths based on the routing configuration information of the target asset, draw a topology graph of network links hop by hop according to a network level where the target asset is located, link each node in the network links with corresponding device basic information, and respectively obtain three groups of network inbound link graphs, including an Internet network inbound link graph, an internal network inbound link graph, and a cluster network inbound link graph.

[0011] After sequentially splicing the Internet network inbound link graph, the internal network inbound link graph, and the cluster network inbound link graph, a hierarchical full network link topology graph is generated, and a front-end link is displayed on the full network link topology graph.

[0012] In some embodiments of the present application, the type of device routing data is confirmed, and data cleaning processing is respectively performed according to the type of device routing data.

[0013] Based on the collection interface of the device routing data, the type of the device routing data is confirmed.

[0014] According to the type of the device routing data, corresponding data cleaning processing is performed, and feature information is respectively extracted from the device routing data.

[0015] According to the type of the device routing data, the extracted feature information is generated as structured data in a predetermined format for classified storage.

[0016] In some embodiments of the present application, the feature information is respectively extracted from the device routing data, including:

[0017] Information extraction is performed on the device routing data to obtain key fields.

[0018] After the key fields are respectively subjected to deduplication processing and format unification processing, the feature information is obtained.

[0019] In some embodiments of the present application, the Internet network inbound link graph, the internal network inbound link graph, and the cluster network inbound link graph are sequentially spliced, including:

[0020] The network target of the Internet network inbound link graph is spliced as the network starting point of the internal network inbound link graph.

[0021] And the network target of the internal network inbound link graph is spliced as the network starting point of the cluster network inbound link graph.

[0022] According to a second aspect of an embodiment of the present application, a device for full link analysis and display based on routing configuration is provided, including:

[0023] The data collection module is configured to collect and extract device routing data based on interface configuration information of all target assets, wherein the device routing data comprises device basic information and routing configuration information.

[0024] The data cleaning module is configured to confirm the type of the device routing data and perform data cleaning processing according to the type of the device routing data.

[0025] The data processing module is configured to collect paths based on the routing configuration information of the target assets, draw a topology graph of network links hop by hop according to a network level where the target assets are located, link each node in the network links with corresponding device basic information, and obtain three groups of network inbound link graphs, including an Internet network inbound link graph, an internal network inbound link graph and a cluster network inbound link graph.

[0026] The data display module is configured to generate a hierarchical full network link topology graph by sequentially splicing the Internet network inbound link graph, the internal network inbound link graph and the cluster network inbound link graph, and display front-end links of the full network link topology graph.

[0027] In some embodiments of the present application, the data cleaning module confirms the type of the device routing data and performs data cleaning processing according to the type of the device routing data, which comprises:

[0028] Confirming the type of the device routing data based on a collection interface of the device routing data;

[0029] Performing corresponding data cleaning processing according to the type of the device routing data, and extracting feature information from the device routing data;

[0030] Generating structured data in a predetermined format according to the type of the device routing data, and classifying and storing the feature information.

[0031] In some embodiments of the present application, the data cleaning module extracts feature information from the device routing data, which comprises:

[0032] Extracting information from the device routing data to obtain key fields;

[0033] Performing de-duplication processing and format unification processing on the key fields to obtain the feature information.

[0034] In some embodiments of the present application, the data display module sequentially splices the Internet network inbound link graph, the internal network inbound link graph and the cluster network inbound link graph, which comprises:

[0035] splicing the network destination of the internet network inbound link graph as the network origin of the internal network inbound link graph;

[0036] and splicing the network destination of the internal network inbound link graph as the network origin of the cluster network inbound link graph.

[0037] According to a third aspect of the embodiments of the present application, a computer readable storage medium is provided, the computer readable storage medium stores computer program instructions, the computer program instructions are loaded and executed by a processor to implement the operations performed by the method according to any one of the above.

[0038] According to a fourth aspect of the embodiments of the present application, an electronic device is provided, comprising a processor and a memory, the memory stores computer program instructions capable of being executed by the processor, and the processor executes the computer program instructions to implement the instructions of the method according to any one of the above.

[0039] The technical solutions provided in the embodiments of the present application have at least the following technical effects or advantages:

[0040] The method, device, medium and equipment for full link analysis and display based on routing configuration provided by the embodiments of the present application can realize the visualization of various assets and internet access links under the virtualization network by collecting device routing data, splicing the topology graphs of the internet network inbound link graph, the internal network inbound link graph and the cluster network inbound link graph to obtain the topology graph of the full network link, and linking each node in the network link with the corresponding device basic information. In actual application scenarios, the device routing data collected can be associated with security events, the topology graph of the full network link can be used to quickly find problems and locate the impact range, and the security response efficiency can be improved.

[0041] The above description is only a summary of the technical solutions of the present application. In order to more clearly understand the technical means of the present application, the embodiments of the present application can be implemented according to the content of the specification, and in order to make the above and other purposes, features and advantages of the present application more obvious and easy to understand, the specific embodiments of the present application are described below. BRIEF DESCRIPTION OF DRAWINGS

[0042] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings needed in the embodiments will be briefly introduced below. Obviously, the drawings in the following description are only some embodiments of the present application, and other drawings can be obtained by those skilled in the art without creative labor.

[0043] Figure 1A flowchart of a full-link analysis display method based on routing configuration provided by an embodiment of the present application is shown in the figure.

[0044] Figure 2 A reference diagram of interface configuration information of a target asset in an embodiment of the present application is shown in the figure.

[0045] Figure 3 A reference diagram of key fields extracted by an embodiment of the present application is shown in the figure.

[0046] Figure 4 A reference diagram of an Internet network inbound link graph principle is shown in the figure.

[0047] Figure 5 A reference diagram of an internal network inbound link graph principle is shown in the figure.

[0048] Figure 6 A reference diagram of a cluster network inbound link graph principle is shown in the figure.

[0049] Figure 7 A reference diagram of a full-network link topology graph principle is shown in the figure.

[0050] Figure 8 A reference diagram of each forwarding node in a full-network link topology graph is shown in the figure.

[0051] Figure 9 A reference diagram of a data interface corresponding to a node is shown in the figure.

[0052] Figure 10 A principle structure diagram of a full-link analysis display device based on routing configuration provided by an embodiment of the present application is shown in the figure. DETAILED DESCRIPTION

[0053] Exemplary embodiments of the present disclosure will be described in greater detail below with reference to the accompanying drawings.

[0054] Various structural diagrams according to embodiments of the present disclosure are shown in the accompanying drawings. These diagrams are not drawn to scale, in which certain details are exaggerated for the purpose of clarity, and certain details can be omitted. The shapes of various regions, layers shown in the figures, and their relative sizes and positional relationships may deviate in actuality due to manufacturing tolerances or technical limitations, and regions / layers with different shapes, sizes, relative positions can be additionally designed by those skilled in the art according to actual needs.

[0055] In the context of the present disclosure, when one layer / element is referred to as being located "on" another layer / element, the layer / element can be directly on the other layer / element, or there can be an intervening layer / element. In addition, if one layer / element is located "on" another layer / element in one orientation, the layer / element can be located "under" the other layer / element when the orientation is reversed. In the context of the present disclosure, similar or identical components can be denoted by the same or similar reference numerals.

[0056] In order to better understand the above technical solutions, the above technical solutions will be described in detail below in combination with specific embodiments. It should be understood that the embodiments of the present disclosure and the specific features in the embodiments are detailed descriptions of the technical solutions of the present disclosure, and not limitations of the technical solutions of the present disclosure. In the case of no conflict, the technical features in the embodiments of the present disclosure and the embodiments can be combined with each other.

[0057] Figure 1 is a flow diagram of a full-link analysis display method based on route configuration provided by an embodiment of the present disclosure, as shown in Figure 1 The full-link analysis display method based on route configuration includes the following steps:

[0058] S1, based on the interface configuration information of all target assets, collecting and extracting device route data, the device route data including device basic information and route configuration information;

[0059] In the embodiment of the present disclosure, the target assets include cloud platforms and virtualized gateway, agent and container cluster, etc. The cloud platform includes various cloud environments and various cloud products running in the cloud environment. For example, the cloud environment can be an existing cloud such as Tencent Cloud, Ali Cloud, and Huawei Cloud. The cloud product can be cloud analysis, ddos high defense package, CDN product, load balancing LB, cloud server, private network VPC, subnet, etc. Referring to Figure 2 As shown in the reference diagram of the interface configuration information of the target assets in the embodiment of the present disclosure.

[0060] The embodiment of the present disclosure can manage resources of various target assets through a resource management system. The interface configuration information can be used to interface various target assets to collect and extract device route data. Since the resource management system can realize centralized management of various target assets, it can cope with the addition and offline of target assets, so as to ensure that the collection of device route data can cover complete and effective data. The resource management system is, for example, a conventional cloud asset management system, as long as it can realize the corresponding resource management function, and the embodiment of the present disclosure has no limitation on this.

[0061] The embodiment of the present application needs to verify whether the predetermined security credential is installed before collecting and extracting the device routing data, and collects and extracts the device routing data based on the interface configuration information of all target assets after confirming that the security credential is installed.

[0062] In other embodiments of the present application, the target assets are also subjected to security credential management, which ensures the security of resource access credentials and facilitates the replacement of credentials according to their life cycle.

[0063] In the embodiment of the present application, the device basic information includes but is not limited to device code, device name, host name, brand name, device type, environment information, etc., and the routing configuration information includes but is not limited to device code, device type, routing name, source IP, target IP, protocol, listening port, backend port, domain name, source, etc.

[0064] S2, confirming the type of device routing data, and performing data cleaning processing according to the type of device routing data;

[0065] The embodiment of the present application confirms the type of device routing data, and performs data cleaning processing according to the type of device routing data, including: confirming the type of device routing data based on the collection interface of the device routing data; performing corresponding data cleaning processing according to the type of device routing data, extracting feature information from the device routing data; and generating structured data in a predetermined format according to the type of device routing data, and storing the extracted feature information.

[0066] Since the collected device routing data can be divided into device basic information and routing configuration information, the data cleaning of different types of device routing data is also different. The routing configuration information is used to extract the routing path to form a network link, and the device basic information is the basic data of each device in the network link, so that the user can intuitively obtain the basic data of each node or asset when checking the network link.

[0067] Referring to Figure 3 FIG. 1 is a reference diagram of the key fields extracted by the embodiment of the present application, wherein the embodiment of the present application extracts feature information from the device routing data, including: extracting information from the device routing data to obtain key fields; and performing de-duplication processing and format unification processing on the key fields to obtain the feature information.

[0068] Specifically, the embodiment of the present application extracts the obtained device routing data through information extraction to extract key fields, and the key fields extracted are different for device basic information and routing configuration information during data cleaning.

[0069] For example, when the device routing data is device basic information, the key fields obtained by the information extraction of the embodiment of the present application include but are not limited to device code, device name, host name, brand name, device type, environment information, environment code, function area, source, etc.

[0070] For example, when the device routing data is routing configuration information, the key fields obtained by the information extraction of the embodiment of the present application include but are not limited to device code, device type, routing name, source IP, target IP, protocol, listening port, backend port, domain name, source, etc.

[0071] After the key fields are extracted, since the obtained key fields may have problems such as repetition, missing or format inconsistency, the embodiment of the present application will respectively perform deduplication processing and format unification processing on the key fields to obtain the feature information, which is a set of all the key fields.

[0072] After obtaining the feature information, in order to facilitate data storage and later management, the embodiment of the present application generates structured data according to a predetermined format to classify and store the feature information, and the storage object may be, for example, a Mysql database or other same type of database. According to the selected database, the corresponding storage format can also be adaptively adjusted, and the embodiment of the present application has no limitation on this.

[0073] S3, based on the routing configuration information of the target asset, collecting path information, according to the network level where the target asset is located, drawing a topology graph of network links hop by hop, linking each node in the network link with the corresponding device basic information, and respectively obtaining three groups of network inbound link graphs, including an Internet network inbound link graph, an internal network inbound link graph and a cluster network inbound link graph;

[0074] In the embodiment of the present application, the network level where the target asset is located can be divided into three categories, namely the Internet, the internal network and the cluster network. Therefore, the embodiment of the present application collects path information of the target asset, draws a topology graph of network links hop by hop according to the network level where the target asset is located, and finally obtains three groups of network inbound link graphs, namely the Internet network inbound link graph, the internal network inbound link graph and the cluster network inbound link graph.

[0075] The embodiment of the present application can draw a virtual network link graph hop by hop through the configuration data of "next hop" in the network component routing.

[0076] In the embodiment of the present application, the elements in all networks are abstractly divided into network origins, links and network targets according to the positions of the links, and specifically:

[0077] For the Internet network inbound link diagram, refer to Figure 4 , which is a principle reference diagram of the Internet network inbound link diagram. The constituent components of the Internet network inbound link diagram include but are not limited to DNS (source), CDN, DDOS (link) and edge acceleration. Different domain names have different selected components, and the origin passes through the Internet DNS resolution and finally points to the Internet entrance (Internet SLB) of each computer room in the intranet.

[0078] For the internal network inbound link diagram, refer to Figure 5 , which is a principle reference diagram of the internal network inbound link diagram. The constituent components of the internal network inbound link diagram include but are not limited to computer room and public network LB / EIP (source), gateway and proxy (link), intranet cluster or CVM LB / EIP, etc., which can be distinguished according to different clusters (target). It should be noted that in the internal network inbound link diagram, due to the high complexity of the intranet level, based on the actual application requirements, multiple network origins or network targets can be defined in the internal network inbound link diagram according to the positions of the paths. If a certain network target is also the network origin of another link, the corresponding link will be spliced.

[0079] For the cluster network inbound link diagram, refer to Figure 6 , which is a principle reference diagram of the cluster network inbound link diagram. The constituent components of the cluster network inbound link diagram include but are not limited to cluster SLB, APISIX proxy, ingress, POD, service, etc.

[0080] S4, after splicing the Internet network inbound link diagram, the internal network inbound link diagram and the cluster network inbound link diagram in turn, a hierarchical full network link topology diagram is generated, and the full network link topology diagram is displayed in front of the link.

[0081] Refer to Figure 7 , which is a principle diagram of the full network link topology diagram. After drawing the link diagrams corresponding to the Internet network inbound link diagram, the internal network inbound link diagram and the cluster network inbound link diagram respectively, the embodiment of the present application splices the Internet network inbound link diagram, the internal network inbound link diagram and the cluster network inbound link diagram in turn, including: splicing the network target of the Internet network inbound link diagram as the network origin of the internal network inbound link diagram; and splicing the network target of the internal network inbound link diagram as the network origin of the cluster network inbound link diagram.

[0082] After obtaining the full network link topology graph of the hierarchy, the embodiment of the application performs front-end link display on the full network link topology, and the full network link is directly associated from an Internet domain name to the last subsystem. A user can see each forwarding node on the link through the full network link. Referring to FIG. 6, a reference diagram of each forwarding node in the full network link topology is shown; meanwhile, for each node in the full network link, each node corresponding data interface can be accessed by clicking the node, and the data interface displays the device basic information corresponding to the node. Referring to FIG. 7, a reference diagram of the data interface corresponding to the node is shown. Figure 8 Figure 9

[0083] The full link analysis display method based on routing configuration provided by the embodiment of the application can realize the visualization of various assets and Internet access links under the virtualization network by collecting device routing data, drawing the topology of the Internet network inbound link graph, the internal network inbound link graph and the cluster network inbound link graph, splicing the topology of the full network link, and linking each node in the network link with the corresponding device basic information. In the actual application scenario, the device routing data and security events can be associated according to the collected device routing data, the problem can be quickly found based on the topology of the full network link, the influence range can be located, and the security response efficiency can be improved.

[0084] On the basis of the above embodiment, as an implementation of the above-mentioned method, the application provides an embodiment of a device for full link analysis display based on routing configuration. The device embodiment corresponds to the method embodiment shown in FIG. 6, and the device can be specifically applied to various electronic devices. Referring to FIG. 8, the device for full link analysis display based on routing configuration includes: Figure 1 Figure 1 Figure 10

[0085] A data collection module 100 is configured to collect and extract device routing data based on the interface configuration information of all target assets, and the device routing data includes device basic information and routing configuration information.

[0086] A data cleaning module 200 is configured to confirm the type of the device routing data, and perform data cleaning processing according to the type of the device routing data.

[0087] ​​​​​The data processing module 300 is configured to perform path collection based on the routing configuration information of the target asset, draw a topology graph of network links hop by hop according to a network level where the target asset is located, link each node in the network links with corresponding device basic information, and obtain three groups of network inbound link graphs, including an Internet network inbound link graph, an internal network inbound link graph, and a cluster network inbound link graph.

[0088] The data display module 400 is configured to splice the Internet network inbound link graph, the internal network inbound link graph, and the cluster network inbound link graph in sequence to generate a hierarchical full network link topology graph, and perform front-end link display on the full network link topology graph.

[0089] In the embodiment of the present application, the data cleaning module 200 confirms the type of device routing data, and performs data cleaning processing according to the type of device routing data, which includes:

[0090] Based on the collection interface of the device routing data, the type of the device routing data is confirmed;

[0091] According to the type of the device routing data, corresponding data cleaning processing is performed, and feature information is extracted from the device routing data;

[0092] According to the type of the device routing data, the extracted feature information is generated as structured data in a predetermined format for classified storage.

[0093] In the embodiment of the present application, the data cleaning module 200 extracts feature information from the device routing data, which includes:

[0094] Information extraction is performed on the device routing data to obtain key fields;

[0095] After the key fields are respectively subjected to deduplication processing and format unification processing, the feature information is obtained.

[0096] In the embodiment of the present application, the data display module 400 splices the Internet network inbound link graph, the internal network inbound link graph, and the cluster network inbound link graph in sequence, which includes:

[0097] The network target of the Internet network inbound link graph is spliced as a network starting point of the internal network inbound link graph;

[0098] And the network target of the internal network inbound link graph is spliced as a network starting point of the cluster network inbound link graph.

[0099] The device for displaying full-link analysis based on routing configuration provided by the embodiment of the present application can execute the method for displaying full-link analysis based on routing configuration provided by the above-mentioned embodiment, and has the corresponding functional steps and beneficial effects of the method for displaying full-link analysis based on routing configuration provided by the above-mentioned embodiment. For details, please refer to the above-mentioned embodiment of the method for displaying full-link analysis based on routing configuration. The embodiment of the present application will not be described here again.

[0100] The electronic device can include a processor and a memory, wherein the processor and the memory can be connected through a bus or other manners. The processor can be a central processing unit (CPU). The processor can also be other general-purpose processors, digital signal processors (DSP), application specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, or combinations thereof. The memory, as a non-transitory computer-readable storage medium, can be used to store non-transitory software programs, non-transitory computer-executable programs and modules, such as program instructions / modules corresponding to the method for displaying full-link analysis based on routing configuration in the embodiment of the present application. The processor executes various functional applications and data processing of the processor by running the non-transitory software programs, instructions and modules stored in the memory, that is, implements the method for displaying full-link analysis based on routing configuration in the above-mentioned method embodiment.

[0101] The memory can include a program storage area and a data storage area, where the program storage area can store an operating system, application programs required by at least one function, and the like, and the data storage area can store data created by the processor and the like. In addition, the memory can include a high-speed random access memory, and can also include a non-transitory memory, such as at least one magnetic disk storage device, a flash memory device, or other non-transitory solid-state memory device. The one or more modules are stored in the memory and, when executed by the processor, perform the full-link analysis and display method based on routing configuration as in the above method embodiments. The above electronic device specific details can be understood as corresponding to the relevant description and effects in the above method embodiments, which will not be described here. Those skilled in the art can understand that all or part of the processes in the above embodiments can be completed by a computer program instructing related hardware, and the program can be stored in a computer-readable storage medium. When the program is executed, it can include the processes of the above embodiments. The storage medium can be a read-only memory (ROM), a random access memory (RAM), a flash memory, a hard disk drive (HDD) or a solid-state drive (SSD), etc. The storage medium can also include a combination of the above types of memories.

[0102] In the description provided herein, numerous specific details are set forth. However, it is understood that embodiments of the application can be practiced without these specific details. In some instances, well-known methods, structures and techniques have not been described in detail in order to not obscure the understanding of this description.

[0103] Similarly, it is to be understood that the embodiments of the present application can be used in the exact form disclosed herein, or with minor modifications, and the present disclosure is not limited to the exact form disclosed herein. It is also to be understood that the features of the various aspects of the present disclosure can be combined, exchanged, or removed, and the present disclosure encompasses all such possibilities.

[0104] It should be noted that the above-mentioned embodiments illustrate rather than limit the application, and that one skilled in the art will be able to design many alternative embodiments without departing from the scope of the appended claims.

Claims

1. A method for end-to-end analysis and display based on routing configuration, characterized in that, The method for displaying end-to-end analysis based on routing configuration includes: Based on the interface configuration information of all target assets, device routing data is collected and extracted. The device routing data includes basic device information and routing configuration information. Confirm the type of device routing data, and perform data cleaning processing according to the type of device routing data; Based on the routing configuration information of the target asset, path collection is performed. According to the network layer where the target asset is located, the topology diagram of the network link is drawn hop by hop. Each node in the network link is linked with the corresponding basic information of the device to obtain three sets of network inbound link diagrams, including Internet network inbound link diagram, internal network inbound link diagram and cluster network inbound link diagram. By sequentially splicing together the Internet network inbound link diagram, the internal network inbound link diagram, and the cluster network inbound link diagram, a hierarchical full network link topology diagram is generated, and the front-end link display is performed on the full network link topology diagram.

2. The end-to-end analysis and display method based on route configuration according to claim 1, characterized in that, The process of confirming the type of device routing data and performing data cleaning processing according to the type of device routing data includes: Based on the acquisition interface of the device routing data, confirm the type of the device routing data; Perform corresponding data cleaning processing according to the type of the device routing data, and extract feature information from the device routing data respectively; Based on the type of the device routing data, the extracted feature information is generated into structured data according to a predetermined format and then categorized and stored.

3. The end-to-end analysis and display method based on route configuration according to claim 2, characterized in that, The extraction of feature information from the device routing data includes: Information is extracted from the device routing data to obtain key fields; The feature information is obtained by performing deduplication and format unification on the key fields respectively.

4. The end-to-end analysis and display method based on route configuration according to claim 1, characterized in that, The step of sequentially concatenating the Internet network inbound link diagram, the internal network inbound link diagram, and the cluster network inbound link diagram includes: The network target of the Internet network inbound link graph is used as the network starting point of the internal network inbound link graph for splicing. And the network target of the internal network inbound link graph is used as the network starting point of the cluster network inbound link graph for splicing.

5. A full-link analysis and display device based on routing configuration, characterized in that, The route configuration-based end-link analysis and display device includes: The data acquisition module is used to collect and extract device routing data based on the interface configuration information of all target assets. The device routing data includes basic device information and routing configuration information. The data cleaning module is used to identify the type of device routing data and perform data cleaning processing according to the type of device routing data. The data processing module is used to collect paths based on the routing configuration information of the target asset, draw a network link topology map hop by hop according to the network layer where the target asset is located, link each node in the network link with the corresponding device basic information, and obtain three sets of network inbound link maps, including Internet network inbound link map, internal network inbound link map and cluster network inbound link map. The data display module is used to sequentially splice together the Internet network inbound link diagram, the internal network inbound link diagram, and the cluster network inbound link diagram to generate a hierarchical full network link topology diagram, and to display the full network link topology diagram from the front end.

6. The end-to-end analysis and display device based on route configuration according to claim 5, characterized in that, The data cleaning module confirms the type of device routing data and performs data cleaning processing according to the type of device routing data, including: Based on the acquisition interface of the device routing data, confirm the type of the device routing data; Perform corresponding data cleaning processing according to the type of the device routing data, and extract feature information from the device routing data respectively; Based on the type of the device routing data, the extracted feature information is generated into structured data according to a predetermined format and then categorized and stored.

7. The end-to-end analysis and display device based on route configuration according to claim 6, characterized in that, The data cleaning module extracts feature information from the device routing data, including: Information is extracted from the device routing data to obtain key fields; The feature information is obtained by performing deduplication and format unification on the key fields respectively.

8. The end-to-end analysis and display device based on route configuration according to claim 5, characterized in that, The data display module sequentially stitches together the Internet network inbound link diagram, the internal network inbound link diagram, and the cluster network inbound link diagram, including: The network target of the Internet network inbound link graph is used as the network starting point of the internal network inbound link graph for splicing. And the network target of the internal network inbound link graph is used as the network starting point of the cluster network inbound link graph for splicing.

9. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer program instructions that are loaded and executed by a processor to perform the operations described in any one of claims 1-7.

10. An electronic device comprising a processor and a memory, characterized in that, The memory stores computer program instructions that can be executed by the processor, and when the processor executes the computer program instructions, it implements the instructions of the method as described in any one of claims 1-7.

Images