A configuration method, deployment method, device, readable medium and program product of an application

Abstract

The present disclosure provides a configuration method of an application, comprising: obtaining a user intention, wherein the user intention comprises a target network scene required by the application and a resource intention thereof; generating a network design parameter according to the resource intention and a target scene template in a scene template library, wherein the target scene template corresponds to the target network scene in a one-to-one manner; and converting the network design parameter into a network configuration parameter according to the target scene template. The present disclosure also provides a deployment method, device, readable medium and program product of an application.

Description

Technical Field

[0001] This disclosure relates to the field of network technology, and in particular to an application configuration method, deployment method, device, readable medium, and program product. Background Technology

[0002] When a new application is launched or an existing application is changed, network device parameters need to be configured to achieve the intended application functions.

[0003] As applications grow larger and the network equipment resources required become more complex and diverse, existing application configuration methods generally suffer from problems such as long processing times and low accuracy of configuration results. Summary of the Invention

[0004] This disclosure provides a method for configuring and deploying an application, as well as devices, readable media, and program products.

[0005] In a first aspect, embodiments of this disclosure provide a method for configuring an application, including:

[0006] Obtain user intent, wherein the user intent includes the target network scenario and resource intent required by the application;

[0007] Network design parameters are generated based on the resource intent and the target scene template in the scene template library, wherein the target scene template corresponds one-to-one with the target network scene;

[0008] Based on the target scenario template, the network design parameters are converted into network configuration parameters.

[0009] Secondly, embodiments of this disclosure provide a method for deploying an application, including:

[0010] Network configuration parameters are obtained using the configuration method described in the first aspect.

[0011] The network configuration parameters are deployed to the network device to complete the application deployment.

[0012] Thirdly, embodiments of this disclosure provide an electronic device including a memory and a processor; the memory stores a computer program executable by the processor, and when the computer program is executed by the processor, it implements the configuration method of the application described in the first aspect or the deployment method of the application described in the second aspect.

[0013] Fourthly, embodiments of this disclosure provide a computer-readable medium having a computer program stored thereon, which, when executed by a processor, implements the configuration method of the application described in the first aspect or the deployment method of the application described in the second aspect.

[0014] Fifthly, embodiments of this disclosure provide a computer program product, which includes a computer program that, when executed by a processor, implements the configuration method of the application described in the first aspect or the deployment method of the application described in the second aspect.

[0015] The application configuration method in this embodiment generates network design parameters from user intent based on a target scenario template in a scenario template library, and then converts the network design parameters into network configuration parameters based on the target scenario template. This automates the entire process from user intent to application configuration result based on the target scenario template, thereby improving configuration efficiency and accuracy. Attached Figure Description

[0016] In the accompanying drawings of the embodiments disclosed herein:

[0017] Figure 1 A flowchart illustrating an application configuration method provided in this embodiment of the disclosure;

[0018] Figure 2 A flowchart illustrating another method for deploying an application provided in this embodiment of the disclosure;

[0019] Figure 3 This is a schematic diagram of the structure of an electronic device provided in an embodiment of the present disclosure;

[0020] Figure 4 A block diagram illustrating the composition of a computer-readable medium provided in this disclosure embodiment;

[0021] Figure 5 A block diagram of a computer program product provided in an embodiment of this disclosure;

[0022] Figure 6 This is a schematic diagram of the structure of another electronic device provided in an embodiment of this disclosure. Detailed Implementation

[0023] To enable those skilled in the art to better understand the technical solutions of this disclosure, the embodiments of this disclosure will be described in detail below with reference to the accompanying drawings.

[0024] The present disclosure will be described more fully below with reference to the accompanying drawings; however, the embodiments shown may be embodied in different forms, and the present disclosure should not be construed as limited to the embodiments set forth below. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will enable those skilled in the art to fully understand the scope of the disclosure.

[0025] The accompanying drawings of the embodiments disclosed herein are provided to further illustrate the embodiments of this disclosure and form part of the specification. They are used together with the detailed embodiments to explain this disclosure and do not constitute a limitation thereof. The above and other features and advantages will become more apparent to those skilled in the art from the description of the detailed embodiments with reference to the accompanying drawings.

[0026] This disclosure may be described with reference to plan and / or cross-sectional views using the ideal schematic diagrams of this disclosure. Therefore, the example illustrations may be modified according to manufacturing techniques and / or tolerances.

[0027] Where there is no conflict, the various embodiments of this disclosure and the features thereof in the embodiments may be combined with each other.

[0028] The terminology used in this disclosure is for the purpose of describing particular embodiments only and is not intended to limit the disclosure. The term "and / or" as used in this disclosure includes any and all combinations of one or more of the associated enumerated entries. The singular forms "a" and "the" as used in this disclosure are also intended to include the plural forms, unless the context clearly indicates otherwise. The terms "comprising," "made of," etc., as used in this disclosure specify the presence of the stated feature, integral, step, operation, element, and / or component, but do not exclude the presence or addition of one or more other features, integrals, steps, operations, elements, components, and / or groups thereof.

[0029] Unless otherwise specified, all terms used in this disclosure (including technical and scientific terms) have the same meaning as commonly understood by one of ordinary skill in the art. It will also be understood that terms such as those defined in commonly used dictionaries should be interpreted as having a meaning consistent with their meaning in the context of the relevant art and this disclosure, and will not be interpreted as having an idealized or overly formal meaning, unless expressly so defined in this disclosure.

[0030] This disclosure is not limited to the embodiments shown in the accompanying drawings, but includes modifications to the configuration based on the manufacturing process. Therefore, the areas illustrated in the drawings are schematic, and the shapes of the areas shown illustrate specific shapes of the areas of an element, but are not intended to be limiting.

[0031] New application launch scenario: If a new application needs to be deployed to meet the needs of new business operations, it is necessary to configure the full data of the entire application.

[0032] Modification scenarios for existing applications: If it is necessary to enhance the security of existing applications, expand the physical resources supporting the applications, or adjust the network interconnection methods of applications, changes can be made to existing applications, and some data of the applications can be configured as needed.

[0033] In some related technologies, application configuration is done manually. Specifically, the resources and technical requirements that the application depends on are converted into the resources and technical requirements of the network devices. The network management system is analyzed to determine the existing network topology and the technical parameters of the physical network already deployed, and the configuration parameters of the network devices are designed.

[0034] When configuring applications based on physical networks, it is necessary to comprehensively consider the network topology, resource status, routing technology, service technology, and control policy technology of both physical and virtual resources. This ensures that application components are reasonably distributed across virtual machines, run in secure network partitions, and that load balancing and anomaly protection mechanisms are in place to handle application traffic. Since application configurations reside on the underlying physical network, application operations personnel must master various key technologies within the physical network. They must also comprehensively analyze application configuration solutions based on deployed interfaces, IGP (Interior Gateway Protocol) routing protocols, BGP (Border Gateway Protocol) routing protocols, VXLAN (Virtual Extensible Local Area Network) tunnels, and MCLAG (Multi-Chassis Link Aggregation Group) technologies. Therefore, the accuracy of application configuration results largely depends on the experience of application operations personnel. Furthermore, as application scale increases, the required network equipment resources become more complex and diverse, the technical requirements for application deployment become more demanding, and the difficulty of parameter design increases, the skill requirements for application operations personnel also rise. Furthermore, because physical network data and application data are managed separately, application maintenance personnel may not be able to perceive changes in the physical network in a timely manner, leading to asynchrony between physical network data and application data, which in turn affects the accuracy of configuration results. In summary, because related technologies rely on manual application configuration, the configuration process is time-consuming and the accuracy of configuration results is low.

[0035] In a first aspect, embodiments of this disclosure provide a method for configuring an application applied to a server. The server can be deployed in a data center or in the cloud.

[0036] The configuration method of this embodiment is executed by a server, and the user terminal can access the server. The user terminal includes smart terminals such as computers, mobile phones, vehicle terminals, and smart displays.

[0037] Reference Figure 1 The configuration method for the application of this disclosure embodiment includes:

[0038] S11, Obtain user intent, wherein the user intent includes the target network scenario and its resource intent required by the application.

[0039] S12, generate network design parameters based on resource intent and target scene templates in the scene template library, wherein the target scene templates correspond one-to-one with the target network scene.

[0040] S13, based on the target scenario template, convert the network design parameters into network configuration parameters.

[0041] The target network scenario represents a specific network scenario for application deployment or change, such as data center application deployment / change, vBRAS (Virtual Broadband Remote Access Server) new metropolitan area network application deployment / change, and campus application deployment / change. The vBRAS new metropolitan area network application deployment / change includes two sub-scenarios: virtualized vUP (Virtual User Plane) and physical pUP (Physical User Plane). Resource intents include at least one of the following: security intent, service intent, network intent, and inter-service interconnection intent. The scenario template library includes at least one scenario template, with one scenario template corresponding to each network scenario. The target scenario template is the scenario template corresponding to the target network scenario.

[0042] In this embodiment, user intent is used to generate network design parameters based on target scenario templates, and then the network design parameters are converted into network configuration parameters. This achieves automated processing of the entire process from user intent to application configuration result, which can improve configuration efficiency and eliminate the impact of differences in human experience and human error on configuration results, thereby improving the accuracy of configuration results.

[0043] In some embodiments, obtaining user intent includes:

[0044] S11A1 outputs the user intent input interface, which includes scene template options and resource intent input items.

[0045] S11A2, obtain the scene template selected by the user through the scene template option, determine it as the target scene template, and obtain the resource intent entered by the user through the resource intent input item.

[0046] The scene template option displays at least one scene template. Since the user terminal can access the server, the user can select the desired scene template from the scene template option through the user terminal. The server then determines the scene template selected by the user as the target scene template. When the user selects a specific scene template, the user intent input interface displays the corresponding resource intent input items for the scene template. The user then inputs the corresponding resource intent data according to their needs.

[0047] As one embodiment of this disclosure, obtaining the target scenario template and resource intent selected by the user through a user intent input interface reduces the skill requirements of the user for application configuration tasks. Specifically, when the user selects the "Data Center Application Deployment" scenario template and configures the application in a green area manner, the resource intent input field requires the user to input all the data required for the configuration parameters. When the user selects the "Data Center Application Change" scenario template and configures the application in a brown area manner, the user can select an existing application for adjustment, and the resource intent input field requires the user to input only the parameters that can be adjusted. Alternatively, when the user selects the "Data Center Application Configuration" scenario template, the user needs to further select either the "Application Deployment" or "Application Change" mode.

[0048] In some embodiments, obtaining user intent includes:

[0049] S11B1, collects user intent described by voice;

[0050] S11B2 identifies the target network scene in the user's intent based on a natural language processing model, matches the target scene template from the scene template library according to the target network scene, and identifies the resource intent in the user's intent.

[0051] As one embodiment of this disclosure, the target network scene and resource intent are identified based on a natural language processing model, and the target scene template corresponding to the target network scene is matched. This has the ability to intelligently identify user intent, and compared with the method of inputting user intent through a user intent interface, it can further reduce the skill requirements of the user for application configuration tasks.

[0052] Taking data center application deployment / modification as an example, resource intent includes at least one of the following: security intent, service intent, network intent, and inter-service interconnection intent. Security intent includes at least one of the following: the number, type, IP address range, and network segment planning of security partitions. Service intent includes at least one of the following: the security partition to which each service belongs, the number of virtual machines, the physical server access location, and the range of IP addresses used. Network intent includes at least one of the following: whether each service is interconnected with an external network, the gateway address, and the gateway type. Inter-service interconnection intent includes at least one of the following: whether services are interconnected, the range of interconnected IP addresses, and whether they pass through a firewall.

[0053] Obtaining security intent includes: obtaining the number of security partitions entered by the user based on the security design requirements of each service in the application, the type of the security partitions (global or private), the range of IP addresses included in the security partitions, and the network segment planning for whether the security partition network segments can overlap.

[0054] Users can break down the functions involved in the application, with each function corresponding to a service, and each service can be designed with a separate Layer 2 network. The service intent to obtain includes: obtaining the security partition to which each service belongs, the number of virtual machines required to deploy each service, the physical server access location to which each service belongs, and the IP address range used by each service.

[0055] Obtaining network intent includes: obtaining the gateway address and gateway type set by the user for each service based on whether each service is interconnected with the external network in a north-south direction.

[0056] The intent to obtain inter-service interconnection includes: obtaining the range of IP addresses that can be interconnected for each service as needed, and whether the service needs to be processed by a firewall, based on whether the user needs to perform east-west interconnection for each service.

[0057] In some embodiments, generating network design parameters based on resource intent and target scene templates in a scene template library includes:

[0058] S12A1 generates an application configuration scheme based on the resource intent and the target scene template in the scene template library.

[0059] S12A2 generates network design parameters based on the application configuration scheme and target scenario template.

[0060] As one embodiment of this disclosure, an application configuration scheme is generated based on the resource intent and the target scene template, and then network design parameters are generated based on the application configuration scheme and the target scene template. Compared with the related technologies that use models to directly convert user intent into network configuration parameters, the related technologies have particularly high requirements for model accuracy. However, the method of gradually generating network design parameters from resource intent in this disclosure is conducive to obtaining more accurate application configuration results and reducing the accuracy requirements for scene templates.

[0061] In some embodiments, the target scene template includes a first generation rule.

[0062] The application configuration scheme is generated based on the resource intent and the target scenario template in the scenario template library, including:

[0063] S21, based on the first generation rule in the target scenario template, generate at least one application configuration scheme from the resource intent.

[0064] S22. Evaluate each application configuration scheme based on the scheme comparison algorithm and scheme evaluation dimensions, wherein the scheme evaluation dimensions include at least one of the following: security dimension and resource dimension.

[0065] S23. Select the optimal application configuration scheme based on the evaluation results.

[0066] The first generation rule includes the mapping relationship between resource intent and application configuration schemes. This mapping relationship can be one-to-one or one-to-many. The content of the first generation rule differs in different scenario templates and can be customized according to the specific network scenario. The scheme comparison algorithm includes any one of the following: Multi-Attribute Decision Analysis (MCDA), weighted method, performance evaluation index method, and artificial intelligence and machine learning algorithms. The scheme comparison algorithm and scheme evaluation dimensions can be preset or information carried in the user intent. If the scheme evaluation dimension includes a security dimension, then each application configuration scheme is evaluated based on the scheme comparison algorithm and the security dimension to obtain the evaluation results of each application configuration scheme. Based on the evaluation results, the application configuration scheme with the best security performance is selected.

[0067] As one embodiment of this disclosure, multiple application configuration schemes are generated based on the resource intent according to the scheme evaluation dimensions, and then multi-dimensional evaluation is performed. The optimal application configuration scheme is then selected from these multiple schemes. Compared to related technologies that directly generate only one application configuration result based on the user intent, this embodiment of the disclosure is beneficial in improving the accuracy of the application configuration results. Furthermore, automatically generating application configuration schemes based on the first generation rule in the scene template can improve the efficiency of application configuration and the accuracy of the configuration results.

[0068] Taking data center application deployment / modification as an example, based on the first generation rule in the target scenario template, at least one application configuration scheme is generated from the resource intent, including:

[0069] S21A1, parse the target scene template and initialize the data entry process.

[0070] S21A2 identifies security partition design requirements, security partition network segment planning, and security partition reuse methods based on the obtained security intent, and generates security partition instance data based on the first generation rule.

[0071] S21A3: Based on the obtained service intent, analyze the service distribution, resource requirements, and security design requirements related to the application, and generate application service instance data based on the first generation rule.

[0072] S21A4: Based on the obtained network intent, analyze the interconnection method between the application and the external network, and generate external network connection instance data based on the first generation rule.

[0073] S21A5: Based on the obtained inter-service interconnection intent, analyze the interconnection methods between different services within the application, and generate inter-service interconnection instance data based on the first generation rule.

[0074] S21A6: Based on security partition instance data, application service instance data, external network connection instance data, and inter-service interconnection instance data, automatically generate at least one application configuration scheme. Alternatively, based on the first generation rule, generate the association relationships between security partition instance data, application service instance data, external network connection instance data, and inter-service interconnection instance data to obtain at least one application configuration scheme.

[0075] The algorithm evaluates each application configuration scheme based on the scheme comparison algorithm and scheme evaluation dimensions, and selects the optimal application configuration scheme based on the evaluation results. This includes: parsing the scheme comparison algorithm and scheme evaluation dimensions defined in the target scenario template; passing at least one application configuration scheme as an input parameter to the scheme comparison algorithm so that the scheme comparison algorithm can give a superior or inferior evaluation result based on the evaluation dimensions of optimal resources or optimal security.

[0076] The server can prioritize and recommend the most secure application configuration based on the evaluation results, or users can choose the most secure application configuration themselves based on the evaluation results.

[0077] As one embodiment of this disclosure, the scene template includes scene metadata, a resource intent template, and an application configuration scheme template (data items, a first generation rule, and a scheme comparison rule). During the application configuration scheme generation stage, the application configuration scheme template content in the target scene template is parsed, and the resource intent data is converted into application configuration scheme data. The data structure of the application configuration scheme template is defined as SchemaTemplate. The resource intent data to be read is parsed from SchemaTemplate.DataItem, the first generation rule is parsed from SchemaTemplate.GenerateRule, and the scheme comparison rule is parsed from SchemaTemplate.CompareRule. After generating the application configuration scheme, the application configuration scheme result is output to the SchemaResult list.

[0078] As one embodiment of this disclosure, when the network scenario is the launch / change of a new type of metropolitan area network application using vBRAS, the generated application configuration scheme mainly focuses on how to define various application data and interconnection relationships at the granularity of vBRAS services, how to perform service aggregation based on vBRAS services, and how to evaluate the merits of the application configuration scheme based on the resource consumption of vBRAS services and the distribution of vBRAS service paths.

[0079] As one embodiment of this disclosure, when the network scenario is the launch / change of a park application, the generated application configuration scheme mainly focuses on how to define various application data and interconnection relationships at the granularity of fixed-line user internet access services, how to perform service aggregation based on fixed-line user internet access services, and how to evaluate the merits of the application configuration scheme based on the resource consumption and path distribution of fixed-line user internet access services.

[0080] In some embodiments, the target scene template includes a second generation rule.

[0081] The process of generating network design parameters based on the application configuration scheme and the target scenario template includes: generating network design parameters based on the second generation rule in the target scenario template.

[0082] The second generation rule includes the mapping relationship between application configuration schemes and network design parameters. The content of the second generation rule varies across different scenario templates and can be customized according to specific network scenarios. Based on the second generation rule in the scenario template, network design parameters are automatically generated from the application configuration scheme, improving the efficiency and accuracy of application configuration.

[0083] Taking the deployment / modification of data center applications as an example, network design parameters include at least one of the following: logical router parameters, logical switch parameters, logical port parameters, external network connection parameters, and virtual private cloud (VPC) interconnection parameters.

[0084] Based on the second generation rule in the target scenario template, the network design parameters generated by the application configuration scheme include at least one of the following:

[0085] S31 maps each security partition in the application configuration scheme to a logical router, extracts the type and IP address range of the security partition, and generates logical router parameters based on the second generation rule in the target scenario template to serve as the Layer 3 private network environment for each service to run.

[0086] The number of security partitions corresponds to the number of logical routers. A security partition is a logically defined area used to isolate the operating environment of different applications or services to ensure data security. Security partitions can be classified as high-level, medium-level, or low-level. Taking a mobile payment application as an example, if there are four security partitions, each mapped to a corresponding logical router for network isolation and traffic control, then there would be four logical routers.

[0087] S32 maps each service in the application configuration scheme to a logical switch and extracts the number of virtual machines, the physical server access location, and the range of IP addresses used. Based on the second generation rule in the target scenario template, it generates logical switch parameters and logical port parameters to serve as the Layer 2 private network environment for each service to run.

[0088] Each service has its own security partition. For example, a mobile payment application's services may include user payment request service, user authentication service, payment processing service, and notification service. Two security partitions may be classified as high-level (e.g., for processing user payment information), one as medium-level (e.g., for processing transaction records), and one as low-level (e.g., for advertising and user feedback).

[0089] S33 maps the network in the application configuration scheme to an external network connection, extracts the network's gateway address and gateway type, and generates external network connection parameters based on the second generation rule in the target scenario template, which serve as network data for the service to interface with the external network.

[0090] In this context, the external network connection of a mobile payment application refers to its connection with an external network (such as the internet). A mobile payment application may have an external network connection for secure connection with a payment processing platform (such as UnionPay).

[0091] S34 maps the service interconnection in the application configuration scheme to at least one virtual private cloud (VPC) interconnection, extracts the IP address range of the interconnection and whether it passes through a firewall, and generates VPC interconnection parameters based on the second generation rule in the target scenario template as network data for service interconnection.

[0092] Inter-service interconnection in mobile payment applications refers to the network connection and communication between different services within the application. Inter-service interconnection ensures that various modules can smoothly transmit data and coordinate their execution. For example, the interconnection between the user authentication service and the payment processing service of a mobile payment application can be achieved through a dedicated VPC interconnection to ensure that data is not interfered with or attacked by external factors during transmission.

[0093] As one embodiment of this disclosure, the scene template further includes a design data template (containing data items and a second generation rule). During the network design parameter generation stage, the design data template content in the target scene template is parsed, and the application configuration scheme data is transformed into network design parameters. The data structure of the design data template is defined as DesignTemplate. The required network design parameters are parsed from DesignTemplate.DataItem, the association between the network design parameters and the application configuration scheme data is determined, and the second generation rule is parsed from DesignTemplate.DesignRule. After generating the network design parameters, the network design parameters are output to the DesignResult list.

[0094] In some embodiments, the target scene template includes conversion rules.

[0095] Based on the target scenario template, the network design parameters are converted into network configuration parameters, including: converting the network design parameters into network configuration parameters according to the conversion rules in the target scenario template.

[0096] The conversion rules include the mapping relationship between network design parameters and network configuration parameters. The content of the conversion rules varies across different scenario templates and can be customized according to specific network scenarios. Based on the conversion rules in the scenario templates, network design parameters are automatically converted into network configuration parameters, improving the efficiency and accuracy of application configuration.

[0097] Taking the deployment / modification of data center applications as an example, network configuration parameters include at least one of the following: Virtual Router and Forwarder (VRF) configuration parameters, Virtual Private LAN Service (VPLS) configuration parameters, Security Group (SG) interface configuration parameters, Static Route configuration parameters, Access Control List (ACL), Community String, and Routing Policy.

[0098] Based on the conversion rules in the target scenario template, the network design parameters are converted into network configuration parameters, including at least one of the following:

[0099] S41, according to the conversion rules in the target scenario template, converts the logical router parameters into VRF configuration parameters as configuration data for the Layer 3 private network.

[0100] As one embodiment of this disclosure, each logical router is mapped to VRF configuration data on multiple devices, and parameters such as the name, subnet, and destination network segment of the logical router are extracted. Combined with the conversion rules and default values ​​in the target scenario template, the logical router parameters are converted into VRF configuration parameters.

[0101] S42, according to the conversion rules in the target scenario template, converts the logical switch parameters and logical port parameters into VPLS configuration parameters and SG interface configuration parameters, so as to serve as the configuration data for the Layer 2 private network.

[0102] As one embodiment of this disclosure, each logical switch is mapped to a VPLS instance on multiple devices, and each logical port is mapped to an SG interface on multiple devices. Parameters such as name, VLAN, and subnet are extracted from the logical switch, and parameters such as interface name and VLAN are extracted from the logical port. Combined with the conversion rules and default values ​​in the target scenario template, the data of the logical switch and logical port are converted into VPLS and SG interface configuration parameters.

[0103] S43, according to the conversion rules in the target scenario template, converts the external network connection parameters into static route configuration parameters, which are used as routing interconnection configuration data between the internal hosts of the VRF and the external servers of the data center.

[0104] As one embodiment of this disclosure, an external network connection is mapped to static routing configuration data on multiple devices, and parameters such as destination IP, next hop, and gateway in the external network connection are extracted. Combined with the conversion rules and default values ​​in the target scenario template, the external network connection is converted into static routing parameters.

[0105] S44, based on the conversion rules in the target scenario template, converts the VPC interconnect parameters into ACLs, community strings, or routing policies to serve as configuration data for interconnection capabilities between different VRFs or different VPLSs.

[0106] As one embodiment of this disclosure, the configuration parameters of the VPC interconnection, such as ACLs, community strings, and routing policies of multiple devices, are mapped to the VPC interconnection. The source IP, destination IP, and whether it passes through a firewall are extracted from the VPC interconnection. Combined with the conversion rules and default values ​​in the target scenario template, the VPC interconnection parameters are converted into routing policies.

[0107] As one embodiment of this disclosure, the scene template further includes a configuration data template (containing data items and conversion rules). During the network configuration parameter generation stage, the content of the configuration data template in the scene template is parsed, and the network design parameters are converted into network configuration parameters. The data structure of the configuration data template is defined as ConfigTemplate. The required network configuration parameters, the relationship between network configuration parameters and network design parameters, and the conversion rules are parsed from ConfigTemplate.DesignRule. After the network configuration parameter generation is completed, the network configuration parameter generation result is output to the ConfigResult list.

[0108] As one embodiment of this disclosure, when the network scenario is the online / changed application of vBRAS in a new metropolitan area network, the network configuration parameters include vBRAS user online protocol data, user online pool backup group data, user online interface data, CGN (Carrier Grade NAT) data, etc.

[0109] As one embodiment of this disclosure, the network scenario is when a park application is launched / changed, and the network configuration parameters include user network access policy data, user traffic characteristic data, etc.

[0110] In some embodiments, after generating network design parameters based on resource intent and target scenario template, and before converting the network design parameters into network configuration parameters based on the target scenario template, the application configuration method further includes:

[0111] S51 performs resource utilization simulation and / or connectivity simulation of network design parameters.

[0112] S52, adjust the network design parameters based on the simulation results.

[0113] As one embodiment of this disclosure, the scenario template also includes a simulation template (data items, simulation rules). The simulation method includes: analyzing, based on network design parameters, how many resources the application will generate, including VPCs, logical switches, logical routers, logical ports, etc., and whether it will exceed the total resource limits on the relevant network devices; and further simulating whether the connectivity of the network configuration data to be generated by the application is normal. Adjusting the network design parameters based on the simulation results can further improve the accuracy of the application configuration results.

[0114] The resource occupancy simulation includes: calculating the number of logical resource instances generated by network design parameters, analyzing the number of associated physical resources according to simulation rules, assessing whether it exceeds the logical resource management load of the entire network and whether it exceeds the logical and physical resource management load of a single device, and providing table and graphical analysis results.

[0115] The connectivity simulation includes analyzing service connectivity and virtual machine address connectivity based on north-south network data and east-west interconnection data in the network design parameters, as well as physical links, Layer 3 protocol links, BGP routes, IGP routes, and other data from the existing network, and providing tabular and graphical analysis results.

[0116] As one embodiment of this disclosure, the simulation of the network scenario as a vBRAS novel metropolitan area network includes resource occupancy simulation, connectivity simulation, fault simulation, and survivability analysis.

[0117] As one embodiment of this disclosure, the simulation of the network scenario as a park includes resource occupancy simulation and connectivity simulation.

[0118] In some embodiments, before obtaining the user intent, the application configuration method further includes: receiving at least one scene template, obtaining a scene template library, wherein the scene templates in the scene template library correspond one-to-one with network scenes.

[0119] The scenario templates can be preset templates for typical network scenarios, or they can be customized and imported by the user based on the characteristics of a specific network scenario. Each scenario template includes all key information generated by the application configuration parameters under the current network scenario, and supports both deployment and modification modes.

[0120] As one embodiment of this disclosure, a preset scenario template library supports the generation of application configuration parameters for different network scenarios, which can significantly improve configuration efficiency and the accuracy of configuration results. It should be noted that this embodiment does not control the registration configuration content, mapping relationships (such as the first generation rule and the second generation rule), configuration order content, configuration-related mapping relationships (such as conversion rules), and configuration order of each scenario template, achieving a general capability decoupled from specific network scenarios. During execution, the data items and their order in the scenario template file are dynamically parsed to orchestrate and call the interfaces of each software module.

[0121] The application configuration method of this disclosure automatically generates application configuration schemes by receiving network scenario data and resource intent input by the user, and provides evaluation results of the advantages and disadvantages of different application configuration schemes; it automatically generates network design parameters based on the application configuration schemes and outputs simulation results for the network design parameters; and it automatically generates configuration parameters on network devices based on the network design parameters. It possesses the ability to intelligently recognize user intents and automatically generate application configuration schemes, the ability to analyze network resource or connectivity simulations based on application-related network design parameters, and the ability to intelligently generate application configuration parameters and automatically trigger one-click deployment. This achieves extremely simple application deployment / modification capabilities, solving the problems of high skill requirements, complex operations, and long time consumption in network application construction, and enabling rapid application deployment / modification under different network scenarios.

[0122] Secondly, embodiments of this disclosure provide an application deployment method applied to a server. The server can be deployed in a data center or in the cloud. The deployment method of this disclosure is executed by the server, which communicates with network devices.

[0123] In some related technologies, network configuration parameters are manually imported into the network management system, and then mapped to the network configuration script template by the network gateway system to complete the application deployment. This method suffers from low deployment efficiency.

[0124] Reference Figure 2 The deployment method of the application in this disclosure includes:

[0125] S101, network configuration parameters are obtained using the configuration method of the first aspect of the application.

[0126] S102 deploys network configuration parameters to network devices to complete application deployment.

[0127] As one embodiment of this disclosure, after obtaining the network configuration parameters, the southbound adapter of the interfacing network element deploys the network configuration parameters to the network device, enabling one-click application deployment with high deployment efficiency. The southbound adapter can be deployed in a server or other network devices.

[0128] In some embodiments, deploying network configuration parameters to a network device includes:

[0129] S101A1, confirm that the fiber optic link of the physical network and the physical equipment at both ends are in normal condition.

[0130] S101A2, deploy VPLS and SG interface configuration parameters.

[0131] S101A3, deploy VRF configuration parameters.

[0132] S101A4, deploy static route configuration parameters.

[0133] S101A5, Deploy routing policy configuration parameters.

[0134] In some embodiments, before deploying network configuration parameters to network devices, the application deployment method further includes: backing up data on network devices (i.e., network elements); and setting up a data rollback process.

[0135] As one embodiment of this disclosure, backing up data for network devices (i.e., network elements) improves robustness, prevents parameter changes after deployment failures, and ensures that no junk data exists on the network device due to abnormal reasons. After obtaining the application configuration parameters, during the deployment of the configuration parameters to the network device via the southbound adapter of the network element, if an anomaly occurs, the data already deployed to the network device can be rolled back through a data rollback process. Setting up a data rollback process during application deployment allows for rapid restoration to a previous stable state after an error is detected, thus avoiding network interruptions or performance degradation caused by configuration errors, thereby improving security. The data rollback process provides a fast recovery method, reducing the time required for troubleshooting. Integrating the rollback process into the deployment script facilitates automatic switching back to a historical version in case of configuration failure.

[0136] In some embodiments, setting up a data rollback process includes:

[0137] S201: For small-scale rollbacks, the rollback is performed in reverse order of the network configuration parameter distribution records associated with the current application, deleting each of the currently distributed routing policy classes, static routes, VRF, VPLS, and SG interface configuration parameters one by one. For large-scale data rollbacks, the backup files are directly used to replace the configuration parameters on the network devices.

[0138] S202. After successfully restoring the network device configuration parameters, restore the network management database data.

[0139] S203 If the above restoration steps also fail, a prompt will be given, requiring the user to manually restore according to the information in the restoration file.

[0140] In some embodiments, the application deployment method further includes: displaying the deployment progress in real time.

[0141] In some embodiments, the scenario template further includes a deployment template (containing data items, deployment rules, and rollback rules). The deployment method of this disclosure is also applicable to other types of networks besides communication networks, such as financial transaction networks, power generation networks, etc., and has general applicability.

[0142] Reference Figure 3 Thirdly, embodiments of this disclosure provide an electronic device 100, which includes a memory 120 and a processor 110; the memory 120 stores a computer program that can be executed by the processor 110, and when the computer program is executed by the processor 110, it implements the configuration method of the application described in the first aspect or the deployment method of the application described in the second aspect.

[0143] Reference Figure 4 Fourthly, embodiments of this disclosure provide a computer-readable medium having a computer program stored thereon, wherein the computer program, when executed by a processor, implements the configuration method of the application described in the first aspect or the deployment method of the application described in the second aspect.

[0144] Reference Figure 5 Fifthly, embodiments of this disclosure provide a computer program product, which includes a computer program that, when executed by a processor, implements the configuration method of the application described in the first aspect or the deployment method of the application described in the second aspect.

[0145] Example 1:

[0146] This disclosure embodiment can divide functional modules according to the above-described application deployment method embodiment. For example, each function can be divided into a separate functional module, or two or more functions can be integrated into one functional module. The integrated module can be implemented in hardware or software. It should be noted that the module division in this disclosure embodiment is illustrative and only represents one logical functional division; in actual implementation, there may be other division methods.

[0147] Reference Figure 6 This disclosure provides a schematic diagram of the structure of an electronic device 100, which is used to execute the deployment method of the application in the above method embodiments.

[0148] For example, electronic device 100 includes:

[0149] The application management module 300 provides user intent input and application deployment functions, and manages the application lifecycle.

[0150] The solution recommendation and evaluation module 301 is used to automatically generate multiple application configuration solutions based on user intent, evaluate their merits based on evaluation dimensions, and output recommended solutions.

[0151] The network design parameter management module 302 is used to generate corresponding network design parameters based on the recommended schemes output by the scheme recommendation and evaluation module 301.

[0152] The simulation module 303 is used to perform simulations based on the network design parameters output by the network design parameter management module 302 and output the simulation results.

[0153] The network configuration parameter management module 304 is used to convert the network design parameters output by the network design parameter management module 302 into network configuration parameters.

[0154] Application deployment module 305 is used to deploy network configuration parameters to network devices or to perform rollback in abnormal scenarios.

[0155] The data rollback module 306 is used to roll back the data that has already been distributed in the event of an anomaly during application deployment, ensuring that no residual data is generated.

[0156] As one embodiment of this disclosure, each electronic device deploying an application in a network scenario corresponds to a scenario template (application_model.json). This scenario template includes scenario metadata, a resource intent template, a solution template (data items, a first generation rule, and a comparison rule), a design data template (containing data items and a second generation rule), a simulation template (data items and simulation rules), a configuration data template (containing data items and conversion rules), and a deployment template (containing data items, deployment rules, and rollback rules). In the solution recommendation and evaluation module 301, used for generating and evaluating application configuration solutions, the solution template content in the scenario template is parsed, and the resource intent data is transformed into an application configuration solution. The data structure of the solution template is defined as SchemaTemplate. The required resource intent data is parsed from SchemaTemplate.DataItem, the first generation rule is parsed from SchemaTemplate.GenerateRule, and the comparison rule is parsed from SchemaTemplate.CompareRule. After the application configuration solution is generated, the solution result is output to the SchemaResult list.

[0157] In this embodiment, the first generation rule and comparison rule are based on the registration configuration in SchemaTemplate.

[0158] The first generation rule has three built-in rules: independent planning for security partitions of each level, merging planning for security partitions of the same level, and merging planning for security partitions of similar levels. When generating application configuration schemes, based on the above three rules and the resource intent data entered by the user, three different application configuration schemes are output to meet the application configuration scheme generation requirements under different demands such as resource sensitivity or security sensitivity.

[0159] In this embodiment, the comparison rules in the scheme template include three rules: optimal resource, optimal security, and balanced resource and security. When comparing and evaluating schemes, the advantages and disadvantages of the application configuration schemes generated in the previous step are calculated using multiple factors, and the evaluation results are output.

[0160] In the network design parameter management module 302, during the network design parameter generation stage, the design data template content in the scenario template is parsed, and the application configuration scheme is transformed into network design parameters. The data structure of the design data template is defined as DesignTemplate. The module parses which network design parameters need to be read and output from DesignTemplate.DataItem, the relationship between the network design parameters and the application configuration scheme, and the second generation rule from DesignTemplate.DesignRule. After completing the network design parameter generation, the network design parameter results are output to the DesignResult list.

[0161] The application management module 300 calls the interface ( / applicationManagement / apps / execDesign:) of the network design parameter management module 302 to trigger the network design parameter generation process. Upon receiving the request, the network design parameter management module 302 parses the scene template and calls each data item module according to the scene template definition. Each data item is registered in the scene template (application_model.json), and each data item defines an execution interface for generating its design data. The network design parameter management module 302 calls the interfaces of each data item sequentially according to the registration order in the scene template, and outputs DesignDatas after execution.

[0162] In the network configuration parameter management module 304, during the network configuration parameter generation stage, the configuration data template content in the scenario template is parsed, and the network design parameters are transformed into network configuration parameters. The data structure of the configuration data template is defined as ConfigTemplate. The module parses which network configuration parameters need to be read and output from ConfigTemplate.DataItem, the relationship between network configuration parameters and network design parameters, and the conversion rules from ConfigTemplate.DesignRule. After completing the network configuration parameter generation, the generated network configuration parameters are output to the ConfigResult list.

[0163] The application management module 300 calls the interface ( / applicationManagement / apps / execConfig:) of the network configuration parameter management module 304 to trigger the network configuration parameter generation process. Upon receiving the request, the network configuration parameter management module 304 parses the scene template and calls each data item module according to the scene template definition. Each data item is registered in the scene template (application_model.json), and each data item defines an execution interface for generating its configuration data. The network configuration parameter management module 304 calls the interfaces of each data item sequentially according to the registration order in the scene template, and outputs DesignDatas after execution.

[0164] Among them, the processor is a device with data processing capabilities, including but not limited to the central processing unit (CPU); the memory is a device with data storage capabilities, including but not limited to random access memory (RAM, more specifically SDRAM, DDR, etc.), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), and flash memory (FLASH); the I / O interface (read-write interface) is connected between the processor and the memory, enabling information exchange between the memory and the processor, including but not limited to the data bus (Bus).

[0165] Those skilled in the art will understand that all or some of the steps, systems, and devices disclosed above, as functional modules / units, can be implemented as software, firmware, hardware, or suitable combinations thereof.

[0166] In hardware implementations, the division between functional modules / units mentioned in the above description does not necessarily correspond to the division of physical components; for example, a physical component may have multiple functions, or a function or step may be executed by several physical components working together.

[0167] Some or all of the physical components may be implemented as software executed by a processor, such as a central processing unit (CPU), digital signal processor, or microprocessor, or as hardware, or as an integrated circuit, such as an application-specific integrated circuit (ASIC). Such software may be distributed on a computer-readable medium, which may include computer storage media (or non-transitory media) and communication media (or transient media). As is known to those skilled in the art, the term computer storage media includes volatile and non-volatile, removable and non-removable media implemented in any method or technique for storing information (such as computer-readable instructions, data structures, program modules, or other data). Computer storage media include, but are not limited to, random access memory (RAM, more specifically SDRAM, DDR, etc.), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory (FLASH) or other disk storage; read-only optical disc (CD-ROM), digital versatile disc (DVD) or other optical disc storage; magnetic cartridges, magnetic tapes, disk storage or other magnetic storage; and any other media that can be used to store desired information and can be accessed by a computer. Furthermore, as is known to those skilled in the art, communication media typically contain computer-readable instructions, data structures, program modules, or other data in modulated data signals such as carrier waves or other transmission mechanisms, and may include any information delivery medium.

[0168] This disclosure has disclosed exemplary embodiments, and although specific terminology has been used, it is for general illustrative purposes only and should not be construed as limiting. In some instances, it will be apparent to those skilled in the art that features, characteristics, and / or elements described in conjunction with particular embodiments may be used alone, or in combination with features, characteristics, and / or elements described in conjunction with other embodiments, unless otherwise expressly indicated. Therefore, those skilled in the art will understand that various changes in form and detail may be made without departing from the scope of this disclosure as set forth by the appended claims.

Claims

1. A method for configuring an application, comprising: Obtain user intent, wherein the user intent includes the target network scenario and resource intent required by the application; Network design parameters are generated based on the resource intent and the target scene template in the scene template library, wherein the target scene template corresponds one-to-one with the target network scene; Based on the target scenario template, the network design parameters are converted into network configuration parameters.

2. The method according to claim 1, wherein, The acquisition of user intent includes: Output a user intent input interface, wherein the user intent input interface includes scene template options and resource intent input items; The system retrieves the scene template selected by the user through the scene template option and identifies it as the target scene template. It also retrieves the resource intent entered by the user through the resource intent input field. Alternatively, collect user intent expressed through voice. The system identifies the target network scene in the user intent based on a natural language processing model, matches the target scene template from the scene template library based on the target network scene, and identifies the resource intent in the user intent.

3. The method according to claim 1, wherein, The network design parameters generated based on the resource intent and the target scene template in the scene template library include: An application configuration scheme is generated based on the resource intent and the target scene template in the scene template library; Network design parameters are generated based on the application configuration scheme and the target scenario template.

4. The method according to claim 3, wherein, The target scene template includes a first generation rule. The application configuration scheme is generated based on the resource intent and the target scene template in the scene template library, including: Based on the first generation rule in the target scenario template, at least one application configuration scheme is generated from the resource intent; Each application configuration scheme is evaluated based on a scheme comparison algorithm and scheme evaluation dimensions, wherein the scheme evaluation dimensions include at least one of the following: security dimension and resource dimension; The optimal application configuration scheme will be selected based on the evaluation results.

5. The method according to claim 3, wherein, The target scene template includes a second generation rule. The network design parameters generated based on the application configuration scheme and the target scenario template include: Based on the second generation rule in the target scenario template, network design parameters are generated for the application configuration scheme.

6. The method according to claim 1, wherein, The resource intent includes at least one of the following: security intent, service intent, network intent, and inter-service interconnection intent.

7. The method according to claim 1, wherein, The target scene template includes conversion rules. Based on the target scenario template, the network design parameters are converted into network configuration parameters, including: According to the conversion rules in the target scenario template, the network design parameters are converted into network configuration parameters.

8. The method according to claim 1, wherein, After generating network design parameters based on the resource intent and target scenario template, and before converting the network design parameters into network configuration parameters based on the target scenario template, the method further includes: Perform resource utilization simulation and / or connectivity simulation on the network design parameters; Adjust the network design parameters based on the simulation results.

9. The method according to claim 1, wherein, Before obtaining the user intent, the following is also included: Receive at least one scene template to obtain a scene template library, wherein the scene templates in the scene template library correspond one-to-one with the network scenes.

10. A method for deploying an application, comprising: Network configuration parameters are obtained using the configuration method of any one of claims 1-9; The network configuration parameters are deployed to the network device to complete the application deployment.

11. The method according to claim 10, wherein, Before deploying the network configuration parameters to the network device, the method further includes: Back up data for network devices; Set up a data rollback process.

12. An electronic device comprising a memory and a processor; the memory storing a computer program executable by the processor, wherein the computer program, when executed by the processor, implements a configuration method for the application according to any one of claims 1 to 9 or a deployment method for the application according to any one of claims 10 to 11.

13. A computer-readable medium having a computer program stored thereon, which, when executed by a processor, implements a configuration method for the application according to any one of claims 1 to 9 or a deployment method for the application according to any one of claims 10 to 11.

14. A computer program product comprising a computer program that, when executed by a processor, implements a configuration method for the application according to any one of claims 1 to 9 or a deployment method for the application according to any one of claims 10 to 11.

Images