Virtualized DBA management method and device for three-layer network

Abstract

The embodiment of the invention relates to the technical field of virtualized DBA management, and particularly discloses a virtualized DBA management method and device for a three-layer network. According to the embodiment of the invention, mapping between an access layer, a convergence layer and a core layer and virtual resources is constructed, and mapping positioning data is recorded; capturing related performance data of the access layer, the convergence layer and the core layer and the virtualized resources in real time; automatic fault diagnosis and fault self-healing processing are carried out; dynamic resource adjustment is carried out through the access layer, the convergence layer and the core layer; and performing security monitoring on the access layer, the convergence layer and the core layer, and constructing a security risk thermodynamic diagram. Mapping between an access layer, a convergence layer and a core layer and virtualized resources can be constructed, performance capture, automatic fault diagnosis and fault self-healing processing, dynamic resource adjustment and safety monitoring can be carried out, virtualized DBA management of a three-layer network is achieved, automatic processing of fault diagnosis and fault self-healing can be achieved, and the management efficiency of the three-layer network is improved. And effective safety risk monitoring and processing are carried out.

Description

TECHNICAL FIELD

[0001] The application belongs to the technical field of virtualized DBA management, and particularly relates to a virtualized DBA management method and device for a three-layer network. BACKGROUND

[0002] Virtualized DBA management is a method for centralized, automated and elastic management of a database environment by using virtualization technology (such as server virtualization, containerization and cloud platforms), and the core of the method is to abstract underlying hardware resources to realize rapid deployment, dynamic expansion and fault isolation of database instances, thereby improving operation and maintenance efficiency and resource utilization.

[0003] In the prior art, virtualized DBA management technology is usually simple, and cannot perform virtualized DBA management for a three-layer network according to an access layer, a convergence layer and a core layer. In addition, the automation capability is insufficient, and automatic fault diagnosis and fault self-healing processing cannot be realized. The capability for security management is also insufficient, and effective security risk monitoring and processing cannot be realized. SUMMARY

[0004] The purpose of the embodiments of the application is to provide a virtualized DBA management method and device for a three-layer network, and to solve the problems proposed in the background art.

[0005] To achieve the above purpose, the embodiments of the application provide the following technical solutions. A virtualized DBA management method for a three-layer network, and the method specifically includes the following steps. Mapping of an access layer, a convergence layer and a core layer and virtualized resources is constructed, and mapping positioning data is recorded; Real-time capture of related performance data of the access layer, the convergence layer and the core layer and the virtualized resources is performed; Automatic fault diagnosis and fault self-healing processing are performed according to the mapping positioning data and the related performance data; Business requirement information is received, and dynamic resource adjustment is performed through the access layer, the convergence layer and the core layer; The access layer, the convergence layer and the core layer are subjected to security monitoring, and a security risk heat map is constructed.

[0006] As a further limitation of the technical solutions of the embodiments of the application, the mapping of the access layer, the convergence layer and the core layer and the virtualized resources, and the recording of the mapping positioning data specifically include the following steps. Terminal access requirements are identified in the access layer, and corresponding virtualized access points are mapped; Virtualized convergence nodes are associated in the convergence layer; Database services are abstracted in the core layer, and virtualized core resource pools are mapped; The mapping positioning data is recorded.

[0007] As a further limitation of the technical scheme of the embodiment of the application, the real-time capturing of the performance data related to the virtualization resources of the access layer, the aggregation layer and the core layer specifically includes the following steps: Real-time capturing of the terminal access quantity and the bandwidth utilization rate of the access layer; Real-time capturing of the virtual network service of the aggregation layer; Real-time capturing of the response time and the transaction throughput of the core layer; Comprehensive the terminal access quantity, the bandwidth utilization rate, the virtual network service, the response time and the transaction throughput, the related performance data is obtained.

[0008] As a further limitation of the technical scheme of the embodiment of the application, the automatic fault diagnosis and fault self-healing processing according to the mapping positioning data and the related performance data specifically includes the following steps: According to the mapping positioning data and the related performance data, automatic fault diagnosis is performed to obtain a fault diagnosis result; According to the fault diagnosis result, connection retry is performed in the access layer; According to the fault diagnosis result, dynamic adjustment of the virtual network configuration is performed in the aggregation layer; According to the fault diagnosis result, data transfer is performed in the core layer.

[0009] As a further limitation of the technical scheme of the embodiment of the application, the receiving of the service requirement information and the dynamic resource adjustment through the access layer, the aggregation layer and the core layer specifically includes the following steps: Receiving of the service requirement information, resource adjustment planning is performed to generate adjustment planning data; According to the adjustment planning data, virtual ports are automatically expanded through the access layer; According to the adjustment planning data, the virtual network path is optimized through the aggregation layer; According to the adjustment planning data, the database instance scale is adjusted through the core layer, and data storage migration processing is performed.

[0010] As a further limitation of the technical scheme of the embodiment of the application, the security monitoring of the access layer, the aggregation layer and the core layer and the construction of the security risk heat map specifically includes the following steps: Abnormal access monitoring of the access layer is performed; Sensitive data isolation monitoring of the aggregation layer is performed; Database attack monitoring of the core layer is performed; Comprehensive security analysis is performed to construct a security risk heat map.

[0011] As a further limitation of the technical solutions of the embodiments of the present application, the expression of the security risk heat map is: ; wherein, represents the coordinates of the nodes in the network topology, is the security risk heat value at the node , represents the first class of risks, and there are class of risks, is the degree of the first class of risks, is the distance between the node and the first class of risks, is a preset risk diffusion coefficient.

[0012] A virtualized DBA management device for a three-layer network, the device comprising a virtualized resource mapping unit, a performance data capturing unit, a fault diagnosis processing unit, a dynamic resource adjusting unit, and a security monitoring processing unit, wherein: The virtualized resource mapping unit is configured to construct a mapping between the access layer, the aggregation layer, the core layer, and the virtualized resources, and record mapping positioning data. The performance data capturing unit is configured to capture real-time performance data related to the access layer, the aggregation layer, and the core layer and the virtualized resources. The fault diagnosis processing unit is configured to perform automated fault diagnosis and fault self-healing processing based on the mapping positioning data and the related performance data. The dynamic resource adjusting unit is configured to receive service demand information and perform dynamic resource adjustment through the access layer, the aggregation layer, and the core layer. The security monitoring processing unit is configured to perform security monitoring on the access layer, the aggregation layer, and the core layer, and construct a security risk heat map.

[0013] As a further limitation of the technical solutions of the embodiments of the present application, the dynamic resource adjusting unit specifically comprises: An adjustment planning module configured to receive service demand information, perform resource adjustment planning, and generate adjustment planning data. A port expansion module configured to automatically expand virtual ports through the access layer according to the adjustment planning data. A path optimization module configured to optimize virtual network paths through the aggregation layer according to the adjustment planning data. A database adjustment module configured to adjust the scale of database instances through the core layer according to the adjustment planning data, and perform data storage migration processing.

[0014] As a further limitation of the technical scheme of the embodiment of the application, the security monitoring processing unit specifically comprises: An abnormal access monitoring module for monitoring abnormal access of the access layer; An isolation monitoring module for monitoring isolation of sensitive data of the convergence layer; An attack monitoring module for monitoring attack of the database of the core layer; A security risk heat map construction module for performing comprehensive security analysis and constructing a security risk heat map.

[0015] Compared with the prior art, the application has the following beneficial effects: The embodiment of the application records mapping positioning data by constructing the mapping of the access layer, the convergence layer and the core layer and the virtualization resource; captures the related performance data of the access layer, the convergence layer and the core layer and the virtualization resource in real time; performs automatic fault diagnosis and fault self-healing processing; dynamically adjusts the resources through the access layer, the convergence layer and the core layer; monitors the security of the access layer, the convergence layer and the core layer, and constructs a security risk heat map. The mapping of the access layer, the convergence layer and the core layer and the virtualization resource can be constructed, the performance can be captured, the automatic fault diagnosis and fault self-healing processing can be performed, the dynamic resource adjustment can be performed and the security monitoring can be performed, the virtualization DBA management of the three-layer network is realized, the automatic processing of fault diagnosis and fault self-healing can be realized, and the effective security risk monitoring and processing can be performed. BRIEF DESCRIPTION OF DRAWINGS

[0016] In order to more clearly illustrate the technical solutions in the embodiments of the application, the following will briefly introduce the drawings needed to be used in the embodiments or the prior art description. Obviously, the drawings in the following description only some embodiments of the application.

[0017] Figure 1 A flow chart of the method provided by the embodiment of the application is shown.

[0018] Figure 2 A flow chart of recording mapping positioning data in the method provided by the embodiment of the application is shown.

[0019] Figure 3 A flow chart of capturing related performance data in the method provided by the embodiment of the application is shown.

[0020] Figure 4 A flow chart of performing automatic fault diagnosis and fault self-healing processing in the method provided by the embodiment of the application is shown.

[0021] Figure 5 A flow chart of performing dynamic resource adjustment in the method provided by the embodiment of the application is shown.

[0022] Figure 6A flow chart of the security monitoring process in the method provided by the embodiment of the application is shown.

[0023] Figure 7 An application architecture diagram of the device provided by the embodiment of the application is shown.

[0024] Figure 8 A structural block diagram of the dynamic resource adjustment unit in the device provided by the embodiment of the application is shown.

[0025] Figure 9 A structural block diagram of the security monitoring processing unit in the device provided by the embodiment of the application is shown. DETAILED DESCRIPTION

[0026] In order to make the objectives, technical solutions and advantages of the application clearer, the application is further described in detail below with reference to the drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the application and do not limit the application.

[0027] It can be understood that in the prior art, the virtualized DBA management technology is generally simple, and cannot perform virtualized DBA management of a three-layer network according to an access layer, an aggregation layer and a core layer, and lacks automation capability, cannot realize automatic fault diagnosis and fault self-healing processing, and lacks security management capability and cannot realize effective security risk monitoring and processing.

[0028] To solve the above problems, the embodiment of the application constructs a mapping of the access layer, the aggregation layer and the core layer and virtualized resources, records mapping positioning data, captures relevant performance data of the access layer, the aggregation layer and the core layer and the virtualized resources in real time, performs automatic fault diagnosis and fault self-healing processing according to the mapping positioning data and the relevant performance data, receives service requirement information, performs dynamic resource adjustment through the access layer, the aggregation layer and the core layer, performs security monitoring on the access layer, the aggregation layer and the core layer, and constructs a security risk heat map. The mapping of the access layer, the aggregation layer and the core layer and the virtualized resources can be constructed, performance capture, automatic fault diagnosis and fault self-healing processing, dynamic resource adjustment and security monitoring can be performed, virtualized DBA management of a three-layer network can be realized, automatic processing of fault diagnosis and fault self-healing can be realized, and effective security risk monitoring and processing can be performed.

[0029] Figure 1 A flow chart of the method provided by the embodiment of the application is shown.

[0030] Specifically, a virtualized DBA management method for a three-layer network includes the following steps. In step S101, a mapping of an access layer, an aggregation layer and a core layer and virtualized resources is constructed, and mapping positioning data is recorded.

[0031] In the embodiment of the present application, the terminal access demand of the client, the IoT device and the like is identified at the access layer, the corresponding virtualization access point is mapped according to the terminal access demand, the virtualization aggregation node is associated at the aggregation layer, the database service is abstracted at the core layer, and is mapped to the virtualization core resource pool such as vSAN and vStorage, so that the mapping with the virtualization resource is established at the access layer, the aggregation layer and the core layer, and the mapping positioning data is recorded.

[0032] Specifically, Figure 2 The flowchart of recording the mapping positioning data in the method provided by the embodiment of the present application is shown.

[0033] In the preferred embodiment provided by the present application, the mapping of the access layer, the aggregation layer and the core layer with the virtualization resource and the recording of the mapping positioning data specifically include the following steps: Step S1011, the terminal access demand is identified at the access layer, and the corresponding virtualization access point is mapped. Step S1012, the virtualization aggregation node is associated at the aggregation layer. Step S1013, the database service is abstracted at the core layer, and the virtualization core resource pool is mapped. Step S1014, the mapping positioning data is recorded.

[0034] Further, the virtualization DBA management method for the three-layer network further includes the following steps: Step S102, the related performance data of the access layer, the aggregation layer and the core layer with the virtualization resource is captured in real time.

[0035] In the embodiment of the present application, the terminal access quantity and the bandwidth utilization of the access layer are captured in real time, the virtual network service of the aggregation layer such as VLAN traffic and QoS violation is captured in real time, and the response time and the transaction throughput of the core layer are captured in real time, and then the terminal access quantity, the bandwidth utilization, the virtual network service, the response time and the transaction throughput are comprehensively arranged to obtain the related performance data.

[0036] Specifically, Figure 3 The flowchart of capturing the related performance data in the method provided by the embodiment of the present application is shown.

[0037] In the preferred embodiment provided by the present application, the related performance data of the access layer, the aggregation layer and the core layer with the virtualization resource is captured in real time, and the related performance data specifically includes the following steps: Step S1021, the terminal access quantity and the bandwidth utilization of the access layer are captured in real time. Step S1022, the virtual network service of the aggregation layer is captured in real time. Step S1023, capturing the response time and transaction throughput of the core layer in real time; Step S1024, obtaining the related performance data by comprehensively considering the terminal access quantity, the bandwidth utilization, the virtual network service, the response time and the transaction throughput.

[0038] Further, the virtualization DBA management method for the three-layer network further includes the following steps: Step S103, performing automatic fault diagnosis and fault self-healing processing according to the mapping positioning data and the related performance data.

[0039] In the embodiment of the present application, automatic fault diagnosis is performed according to the mapping positioning data and the related performance data, fault diagnosis results are obtained, connection retry is performed in the access layer according to the fault diagnosis results, virtual network configuration is dynamically adjusted in the aggregation layer (for example, V LAN is re-allocated), and data transfer is performed in the core layer (for example, master-slave conversion processing), so that automatic fault diagnosis and fault self-healing processing are realized.

[0040] Specifically, Figure 4 A flowchart of performing automatic fault diagnosis and fault self-healing processing in the method provided by the embodiment of the present application is shown.

[0041] In the preferred embodiment provided by the present application, the automatic fault diagnosis and fault self-healing processing according to the mapping positioning data and the related performance data specifically includes the following steps: Step S1031, performing automatic fault diagnosis according to the mapping positioning data and the related performance data, and obtaining fault diagnosis results; Step S1032, performing connection retry in the access layer according to the fault diagnosis results; Step S1033, dynamically adjusting virtual network configuration in the aggregation layer according to the fault diagnosis results; Step S1034, performing data transfer in the core layer according to the fault diagnosis results.

[0042] Further, the virtualization DBA management method for the three-layer network further includes the following steps: Step S104, receiving service requirement information and performing dynamic resource adjustment through the access layer, the aggregation layer and the core layer.

[0043] In this embodiment of the invention, by receiving business demand information, resource adjustment planning is performed according to the business demand information to generate adjustment planning data. Then, according to the adjustment planning data, virtual ports are automatically expanded through the access layer. According to the adjustment planning data, virtual network path optimization processing such as load balancing and QoS reconfiguration is performed through the aggregation layer. According to the adjustment planning data, the database instance size is adjusted through the core layer to expand CPU, memory, etc. At the same time, data storage migration processing is performed to migrate data to high-performance storage, realizing dynamic resource adjustment processing and continuously optimizing resource utilization.

[0044] Specifically, Figure 5 A flowchart illustrating dynamic resource adjustment in the method provided by an embodiment of the present invention is shown.

[0045] In a preferred embodiment provided by the present invention, the step of receiving service demand information and dynamically adjusting resources through the access layer, aggregation layer, and core layer specifically includes the following steps: Step S1041: Receive business requirement information, perform resource adjustment planning, and generate adjustment planning data; Step S1042: According to the adjusted planning data, the virtual ports are automatically expanded through the access layer; Step S1043: Optimize the virtual network path through the aggregation layer according to the adjusted planning data; Step S1044: According to the adjustment planning data, adjust the database instance size through the core layer and perform data storage migration processing.

[0046] Furthermore, the virtualization DBA management method for Layer 3 networks also includes the following steps: Step S105: Perform security monitoring on the access layer, aggregation layer and core layer, and construct a security risk heat map.

[0047] In this embodiment of the invention, abnormal access is monitored at the access layer to detect abnormal connection behavior, sensitive data is isolated and monitored at the aggregation layer to encrypt virtual network traffic and isolate sensitive data, and database attacks are monitored at the core layer by auditing database access logs to detect attacks such as SQL injection. By comprehensively monitoring the security of the access layer, aggregation layer, and core layer, a security risk heatmap is constructed. Specifically, the expression for the security risk heatmap is: ; in, Represents the coordinates of nodes in the network topology. For nodes The thermal value of the safety risk at the location Representing the Class of risks, total Class of risks, a degree of the first class risk, a node a distance from the first class risk, a preset risk diffusion coefficient.

[0048] Specifically, Figure 6 A flow chart of the security monitoring process in the method provided by the embodiment of the application is shown.

[0049] In the preferred embodiment provided by the application, the security monitoring of the access layer, the aggregation layer and the core layer and the construction of the security risk heat map specifically include the following steps: Step S1051, abnormal access monitoring of the access layer is performed; Step S1052, sensitive data isolation monitoring of the aggregation layer is performed; Step S1053, database attack monitoring of the core layer is performed; Step S1054, comprehensive security analysis is performed, and a security risk heat map is constructed.

[0050] Further, Figure 7 An application architecture diagram of the system provided by the embodiment of the application is shown.

[0051] In another preferred embodiment provided by the application, a virtualized DBA management device for a three-layer network includes: A virtualized resource mapping unit 101 is configured to construct a mapping between the access layer, the aggregation layer and the core layer and virtualized resources, and record mapping positioning data.

[0052] In the embodiment of the application, the virtualized resource mapping unit 101 identifies terminal access requirements of clients, IoT devices and the like in the access layer, maps corresponding virtualized access points according to the terminal access requirements, associates virtualized aggregation nodes in the aggregation layer, abstracts database services in the core layer, and maps to virtualized core resource pools such as vSAN and vStorage, so that the access layer, the aggregation layer and the core layer are mapped to virtualized resources, and mapping positioning data is recorded.

[0053] A performance data capturing unit 102 is configured to capture related performance data of the access layer, the aggregation layer and the core layer and virtualized resources in real time.

[0054] In the embodiment of the present application, the performance data capturing unit 102 captures the terminal access quantity and bandwidth utilization of the access layer in real time, captures the VLAN traffic, QoS violation and other virtual network services of the convergence layer in real time, and captures the response time and transaction throughput of the core layer in real time, and then the terminal access quantity, bandwidth utilization, virtual network service, response time and transaction throughput are comprehensively arranged to obtain the related performance data.

[0055] The fault diagnosis processing unit 103 is configured to perform automatic fault diagnosis and fault self-recovery processing according to the mapping positioning data and the related performance data.

[0056] In the embodiment of the present application, the fault diagnosis processing unit 103 performs automatic fault diagnosis according to the mapping positioning data and the related performance data, obtains fault diagnosis results, and performs connection retry in the access layer, dynamically adjusts the virtual network configuration (for example, reallocates VLAN) in the convergence layer, and performs data transfer (for example, master-slave conversion processing) in the core layer according to the fault diagnosis results, thereby realizing automatic fault diagnosis and fault self-recovery processing.

[0057] The dynamic resource adjustment unit 104 is configured to receive service demand information and perform dynamic resource adjustment through the access layer, the convergence layer and the core layer.

[0058] In the embodiment of the present application, the dynamic resource adjustment unit 104 receives service demand information, performs resource adjustment planning according to the service demand information, generates adjustment planning data, and then automatically expands virtual ports through the access layer according to the adjustment planning data, performs virtual network path optimization processing such as load balancing and QoS reconfiguration through the convergence layer according to the adjustment planning data, and adjusts the database instance size through the core layer according to the adjustment planning data to realize CPU, memory and other expansions, while performing data storage migration processing to migrate data to high-performance storage, thereby realizing dynamic resource adjustment processing and continuously optimizing resource utilization.

[0059] Specifically, Figure 8 The structure block diagram of the dynamic resource adjustment unit 104 in the device provided by the embodiment of the present application is shown.

[0060] In the preferred embodiment provided by the present application, the dynamic resource adjustment unit 104 specifically includes: The adjustment planning module 1041 is configured to receive service demand information, perform resource adjustment planning, and generate adjustment planning data; The port expansion module 1042 is configured to automatically expand virtual ports through the access layer according to the adjustment planning data; The path optimization module 1043 is configured to optimize the virtual network path through the convergence layer according to the adjustment planning data; The database adjustment module 1044 is used to adjust the database instance size through the core layer according to the adjustment plan data, and to perform data storage migration processing.

[0061] Furthermore, the virtualized DBA management device for Layer 3 networks also includes: The security monitoring and processing unit 105 is used to perform security monitoring on the access layer, aggregation layer and core layer, and to build a security risk heat map.

[0062] In this embodiment of the invention, the security monitoring and processing unit 105 monitors abnormal access behavior at the access layer, isolates sensitive data at the aggregation layer by encrypting virtual network traffic and isolating sensitive data, and monitors database attacks at the core layer by auditing database access logs to detect attacks such as SQL injection. By comprehensively monitoring the security of the access layer, aggregation layer, and core layer, a security risk heatmap is constructed. Specifically, the expression for the security risk heatmap is: ; in, Represents the coordinates of nodes in the network topology. For nodes The thermal value of the safety risk at the location Representing the Class of risks, total Class of risks, For the first The degree of risk, For nodes With the Distance of similar risks This is the preset risk diffusion coefficient.

[0063] Specifically, Figure 9 A structural block diagram of the safety monitoring and processing unit 105 in the device provided in an embodiment of the present invention is shown.

[0064] In a preferred embodiment provided by the present invention, the security monitoring and processing unit 105 specifically includes: The abnormal access monitoring module 1051 is used to monitor abnormal access at the access layer; The isolation monitoring module 1052 is used to isolate and monitor sensitive data in the aggregation layer. Attack monitoring module 1053 is used to monitor database attacks in the core layer; The security risk heatmap construction module 1054 is used to perform comprehensive security analysis and construct a security risk heatmap.

[0065] It should be understood that, although the steps in the flowcharts of the embodiments of the present application are shown in a certain order according to the arrows, the steps are not necessarily executed in the order of the arrows. Unless otherwise specified herein, the execution of the steps is not strictly limited in order, and the steps can be executed in other orders. Moreover, at least some of the steps in the embodiments can include a plurality of sub-steps or a plurality of stages, which are not necessarily executed at the same time, but can be executed at different times, and the execution order of the sub-steps or stages is not necessarily sequential, but can be round-robin or alternately executed with at least some of the other steps or sub-steps or stages of the other steps.

[0066] It can be understood by those skilled in the art that all or part of the processes in the above-mentioned embodiments can be completed by a computer program instructing related hardware, and the program can be stored in a non-volatile computer readable storage medium. When the program is executed, it can include the processes of the above-mentioned embodiments of the methods. Any reference to memory, storage, database or other medium used in the embodiments provided in the present application can include non-volatile and / or volatile memory. Non-volatile memory can include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM) or flash memory. Volatile memory can include random access memory (RAM) or external cache memory. As an illustration but not limitation, RAM is available in various forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDR SDRAM), enhanced SDRAM (ESDRAM), synchronous link (Synchlink) DRAM (SLDRAM), Rambus direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM), etc.

[0067] The technical features of the above-mentioned embodiments can be combined in any way. In order to make the description concise, all possible combinations of the technical features in the above-mentioned embodiments are not described, but as long as the combination of the technical features does not exist, it should be considered as the scope of the present application.

[0068] The above embodiments only express several implementation manners of the present application, which are described in a more specific and detailed manner, but should not be understood as a limitation on the patent scope of the present application. It should be noted that, for ordinary skilled persons in the art, several modifications and improvements can be made without departing from the concept of the present application, which are all within the protection scope of the present application. Therefore, the protection scope of the patent of the present application should be subject to the appended claims.

[0069] The above merely describes the preferred embodiments of the present application and should not be used to limit the present application. Any modification, equivalent replacement and improvement made within the spirit and principle of the present application should be included in the protection scope of the present application.

Claims

1. A virtualized DBA management method for three-layer networks, characterized in that, The method specifically includes the following steps: Construct a mapping between the access layer, aggregation layer, and core layer and virtualization resources, and record the mapping location data; Real-time capture of relevant performance data of the access layer, aggregation layer, and core layer and virtualization resources; Based on the mapping and positioning data and the relevant performance data, automated fault diagnosis and self-healing are performed. Receive business requirement information and dynamically adjust resources through the access layer, aggregation layer, and core layer; Security monitoring is performed on the access layer, aggregation layer, and core layer, and a security risk heat map is constructed.

2. The virtualization DBA management method for three-layer networks according to claim 1, characterized in that, The process of constructing the mapping between the access layer, aggregation layer, and core layer and virtualization resources, and recording the mapping location data, specifically includes the following steps: Identify terminal access requirements at the access layer and map the corresponding virtualized access points; Associate virtualized aggregation nodes at the aggregation layer; Abstract the database service at the core layer and map it to the virtualized core resource pool; Record mapping and positioning data.

3. The virtualization DBA management method for three-layer networks according to claim 1, characterized in that, The real-time capture of relevant performance data of the access layer, aggregation layer, and core layer with virtualization resources specifically includes the following steps: Real-time capture of terminal access quantity and bandwidth utilization at the access layer; Real-time capture of virtual network services at the aggregation layer; Real-time capture of core layer response time and transaction throughput; By combining the number of terminal accesses, the bandwidth utilization, the virtual network service, the response time, and the transaction throughput, relevant performance data is obtained.

4. The virtualization DBA management method for three-layer networks according to claim 1, characterized in that, The automated fault diagnosis and self-healing process based on the mapping location data and the relevant performance data specifically includes the following steps: Based on the mapping and positioning data and the relevant performance data, perform automated fault diagnosis and obtain fault diagnosis results; Based on the fault diagnosis results, a connection retry is performed at the access layer. Based on the fault diagnosis results, the virtual network configuration is dynamically adjusted at the aggregation layer; Based on the fault diagnosis results, data transfer is performed at the core layer.

5. The virtualization DBA management method for three-layer networks according to claim 1, characterized in that, The process of receiving service demand information and dynamically adjusting resources through the access layer, aggregation layer, and core layer specifically includes the following steps: Receive business requirements information, conduct resource adjustment and planning, and generate adjustment and planning data; According to the adjusted planning data, virtual ports are automatically expanded through the access layer; Based on the adjusted planning data, the virtual network path is optimized through the aggregation layer; According to the adjustment plan data, the database instance size is adjusted through the core layer, and data storage migration is performed.

6. The virtualization DBA management method for three-layer networks according to claim 1, characterized in that, The process of performing security monitoring on the access layer, aggregation layer, and core layer, and constructing a security risk heatmap, specifically includes the following steps: Perform abnormal access monitoring at the access layer; Sensitive data should be isolated and monitored at the aggregation layer. Perform database attack monitoring on the core layer; Conduct a comprehensive security analysis and construct a security risk heat map.

7. The virtualization DBA management method for three-layer networks according to claim 6, characterized in that, The expression for the safety risk heatmap is: ； in, Represents the coordinates of nodes in the network topology. For nodes The thermal value of the safety risk at the location Representing the Class of risks, total Class of risks, For the first The degree of risk, For nodes With the Distance of similar risks This is the preset risk diffusion coefficient.

8. A virtualized DBA management device for three-layer networks, characterized in that, The device includes a virtualization resource mapping unit, a performance data capture unit, a fault diagnosis and processing unit, a dynamic resource adjustment unit, and a security monitoring and processing unit, wherein: The virtualization resource mapping unit is used to construct the mapping between the access layer, aggregation layer, and core layer and virtualization resources, and to record the mapping location data; The performance data capture unit is used to capture relevant performance data of the access layer, aggregation layer, and core layer and virtualization resources in real time. The fault diagnosis and processing unit is used to perform automated fault diagnosis and fault self-healing processing based on the mapping and positioning data and the relevant performance data. The dynamic resource adjustment unit is used to receive business demand information and dynamically adjust resources through the access layer, aggregation layer, and core layer. The security monitoring and processing unit is used to perform security monitoring on the access layer, aggregation layer and core layer, and to build a security risk heat map.

9. The virtualized DBA management device for three-layer networks according to claim 8, characterized in that, The dynamic resource adjustment unit specifically includes: The adjustment planning module is used to receive business requirement information, perform resource adjustment planning, and generate adjustment planning data; The port expansion module is used to automatically expand virtual ports through the access layer according to the adjustment planning data. The path optimization module is used to optimize the virtual network path through the aggregation layer according to the adjustment planning data. The database adjustment module is used to adjust the database instance size through the core layer according to the adjustment plan data, and to perform data storage migration processing.

10. The virtualized DBA management device for three-layer networks according to claim 8, characterized in that, The security monitoring and processing unit specifically includes: The abnormal access monitoring module is used to monitor abnormal access at the access layer. The isolation monitoring module is used to isolate and monitor sensitive data at the aggregation layer. The attack monitoring module is used to monitor database attacks in the core layer. The security risk heatmap construction module is used to perform comprehensive security analysis and construct security risk heatmaps.

Images