CN113364631B - Network topology management method, device, equipment and computer storage medium - Google Patents

Network topology management method, device, equipment and computer storage medium Download PDF

Info

Publication number
CN113364631B
CN113364631B CN202110666753.6A CN202110666753A CN113364631B CN 113364631 B CN113364631 B CN 113364631B CN 202110666753 A CN202110666753 A CN 202110666753A CN 113364631 B CN113364631 B CN 113364631B
Authority
CN
China
Prior art keywords
network
node
nodes
model
preset
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN202110666753.6A
Other languages
Chinese (zh)
Other versions
CN113364631A (en
Inventor
赖特
杨旭荣
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Sangfor Technologies Co Ltd
Original Assignee
Sangfor Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Sangfor Technologies Co Ltd filed Critical Sangfor Technologies Co Ltd
Priority to CN202110666753.6A priority Critical patent/CN113364631B/en
Publication of CN113364631A publication Critical patent/CN113364631A/en
Application granted granted Critical
Publication of CN113364631B publication Critical patent/CN113364631B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/12Discovery or management of network topologies
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/14Network analysis or design
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/14Network analysis or design
    • H04L41/145Network analysis or design involving simulating, designing, planning or modelling of a network
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/22Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks comprising specially adapted graphical user interfaces [GUI]

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Human Computer Interaction (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The embodiment of the application discloses a network topology management method, a device, equipment and a computer storage medium, wherein the method comprises the following steps: responding to a logged administrator account, and displaying a first display model of the network topology, wherein the first display model comprises topology connection information of a backbone network, the backbone network at least comprises network groups, and each node in the same network group is the same in type and is externally connected with the same node; responding to a first trigger operation on the first display model, and displaying a second display model, wherein the second display model comprises topological connection information of the backbone network and physical connection information of nodes in the network group selected by the first trigger operation; and responding to a second trigger operation of the second display model, and displaying a third display model, wherein the third display model comprises node information of the node selected by the second trigger operation.

Description

Network topology management method, device, equipment and computer storage medium
Technical Field
The embodiment of the application relates to the technical field of internet services, in particular to but not limited to a network topology management method, a device, equipment and a computer storage medium.
Background
The existing cloud platform topological graph has the problems that the scenes of large-scale tenants, operation and maintenance tenant internal networks and operation and maintenance requirements of the networks among the tenants are difficult to manage and meet.
Disclosure of Invention
In view of this, embodiments of the present application provide a method, an apparatus, a device, and a computer storage medium for managing a network topology.
The technical scheme of the embodiment of the application is realized as follows:
in a first aspect, an embodiment of the present application provides a method for managing a network topology, where the method includes: responding to a logged administrator account, and displaying a first display model of the network topology, wherein the first display model comprises topology connection information of a backbone network, the backbone network at least comprises network groups, and each node in the same network group is of the same type and is externally connected with the same node; responding to a first trigger operation of the first display model, and displaying a second display model, wherein the second display model comprises topological wiring information of the backbone network and physical wiring information of nodes in a network group selected by the first trigger operation; in response to a second trigger operation on the second display model, displaying a third display model, wherein the third display model comprises node information of a node selected by the second trigger operation, and the node information of the node comprises at least one of the following: the uplink and downlink flow of the node, the flow velocity of the node, the packet velocity of the node and the detection information of the node.
In a second aspect, an embodiment of the present application provides a network topology management method, where the method includes: aiming at the cloud platform network, respectively displaying by adopting a display model with a top-bottom hierarchical relationship: topology connection information of a backbone network in the cloud platform network, physical connection information of a tenant network in the cloud platform network, and node information of nodes in the backbone network or the tenant network; and switching from displaying the upper layer model to displaying the lower layer model of the upper layer model when the upper layer model in the display models with the upper and lower hierarchical relations receives a trigger operation.
In a third aspect, an embodiment of the present application provides a network topology management apparatus, where the apparatus includes: the first display module is used for responding to a logged-in administrator account and displaying a first display model of the network topology, wherein the first display model comprises topology connection information of a backbone network, the backbone network at least comprises network groups, the types of nodes in the same network group are the same, and the nodes in the network groups are externally connected with the same node; a second display module, configured to display a second display model in response to a first trigger operation on the first display model, where the second display model includes topology connection information of the backbone network and physical connection information of nodes in a network group selected by the first trigger operation; a third display module, configured to display a third display model in response to a second trigger operation on the second display model, where the third display model includes node information of a node selected by the second trigger operation, and the node information of the node includes at least one of: the uplink and downlink flow of the node, the flow velocity of the node, the packet velocity of the node and the detection information of the node.
In a fourth aspect, an embodiment of the present application provides a network topology management apparatus, where the apparatus includes: a fifth display module, configured to respectively display, by using a display model with an upper hierarchical relationship and a lower hierarchical relationship, for the cloud platform network: topology connection information of a backbone network in the cloud platform network, physical connection information of a tenant network in the cloud platform network, and node information of nodes in the backbone network or the tenant network; and the switching module is used for switching from displaying the upper model to displaying the lower model of the upper model under the condition that the upper model in the display models with the upper and lower hierarchical relations receives a trigger operation.
In a fifth aspect, an embodiment of the present application provides an electronic device, including a memory and a processor, where the memory stores a computer program that is executable on the processor, and the processor implements the above method when executing the program.
In a sixth aspect, embodiments of the present application provide a computer storage medium storing executable instructions for causing a processor to implement the above method when executed.
In the embodiment of the application, the first display model of the network topology is displayed in response to the login administrator account, an integral visual angle is provided for an administrator, the connection of the backbone network of the administrator can be seen, the flow of each link is included, and the virtual network equipment of the administrator belongs to. Therefore, the technical scheme provided by the embodiment of the application solves the problem that in the prior art, too many display tenants cause page jamming.
In the embodiment of the application, a second display model is displayed in response to a first trigger operation on a first display model, wherein the second display model comprises topological connection information of a backbone network and physical connection information of nodes in a network group selected by the first trigger operation. Therefore, an administrator can see the internal network of the tenant, and the relationship between the internal network of the tenant and the backbone network is clearer; the administrator can connect the devices among different tenant networks, so that the flow can be taken on a special line, and the speed is higher; details of the internal network of the tenant can be known, the trend of the internal flow of the network can be clearly seen, and the problem positioning by an administrator is facilitated; and only the designated network node and the administrator node of the operation and maintenance are displayed, the tenant network problem is more concentrated and solved in the operation and maintenance mode, and redundant nodes are shielded.
In this embodiment of the application, in response to a second trigger operation on the second display model, a third display model is displayed, where the third display model includes node information of a node selected by the second trigger operation, and the node information of the node includes at least one of: the uplink and downlink flow of the node, the flow rate of the node, the packet speed of the node and the detection information of the node. Thus, the device to be detected can be quickly detected, and details of the device can be entered.
Drawings
Fig. 1A is a schematic view of an implementation flow of a network topology management method according to an embodiment of the present application;
fig. 1B is a display interface of a first display model according to an embodiment of the present application;
fig. 1C is a display interface of a second display model according to an embodiment of the present disclosure;
fig. 1D is an operation and maintenance mode risk prompt interface provided in the embodiment of the present application;
fig. 1E is an operation and maintenance tenant sub-page of a second display model according to the embodiment of the present application;
fig. 1F is a search tenant page provided in an embodiment of the present application;
fig. 1G is a display interface of a fourth display model according to the embodiment of the present application;
fig. 1H is a display page of detail information of a trigger device according to an embodiment of the present application;
fig. 1I is a display page of details of a device provided in an embodiment of the present application;
fig. 1J is a display interface for network connectivity detection provided in an embodiment of the present application;
fig. 1K is a display interface for analyzing a network data packet according to an embodiment of the present application;
fig. 1L is a display interface for performing a connection operation between two nodes according to an embodiment of the present disclosure;
fig. 1M is a topology diagram of a node 200 before improvement provided by an embodiment of the present application;
fig. 1N is a topology diagram of an improved 1000 node provided by an embodiment of the present application;
fig. 2 is a flowchart illustrating an implementation of a method for partitioning network groups according to an embodiment;
fig. 3 is a schematic flow chart illustrating an implementation process of a network topology management method according to an embodiment of the present application;
fig. 4A is a schematic flowchart of a grouping method for preset nodes according to an embodiment of the present disclosure;
fig. 4B is a schematic display diagram of a virtual machine group according to an embodiment of the present disclosure;
fig. 4C is a schematic display diagram of a tenant group according to an embodiment of the present application;
fig. 5A is a schematic structural diagram of a network topology management apparatus according to an embodiment of the present application;
fig. 5B is a schematic structural diagram of a network topology management apparatus according to an embodiment of the present application;
fig. 6 is a hardware entity diagram of an electronic device according to an embodiment of the present disclosure.
Detailed Description
In order to make the objects, technical solutions and advantages of the embodiments of the present application clearer, specific technical solutions of the present invention will be described in further detail below with reference to the accompanying drawings in the embodiments of the present application. The following examples are intended to illustrate the present application, but are not intended to limit the scope of the present application.
In the following description, reference is made to "some embodiments" which describe a subset of all possible embodiments, but it is understood that "some embodiments" may be the same subset or different subsets of all possible embodiments, and may be combined with each other without conflict.
In the following description, references to the terms "first \ second \ third" are only to distinguish similar objects and do not denote a particular order, but rather the terms "first \ second \ third" are used to interchange specific orders or sequences, where appropriate, so as to enable the embodiments of the application described herein to be practiced in other than the order shown or described herein.
Unless defined otherwise, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this application belongs. The terminology used herein is for the purpose of describing embodiments of the present application only and is not intended to be limiting of the application.
Before further detailed description of the embodiments of the present application, terms and expressions referred to in the embodiments of the present application will be described, and the terms and expressions referred to in the embodiments of the present application will be used for the following explanation.
Private network on public Cloud (VPC): generally speaking, the method is a user-definable network, a user can deploy cloud service resources such as a cloud host, load balancing, a database, non-relational database fast storage and the like in the private network, and simply speaking, the user can continue to provide cloud services on the cloud service resources. The network segments can be freely divided, and a routing strategy can be formulated. The private network can be configured with a public network gateway to access the Internet, and meanwhile, the public network or private line access is supported to be configured to build a hybrid cloud, network logic isolation is achieved among the private networks, and the virtual network environment of configuration and strategy can be managed.
Hyper Converged Infrastructure (Hyper Converged Infrastructure, HCI): the method is characterized in that resources and technologies such as computing, network, storage and server virtualization are provided in the same set of unit equipment, and elements such as backup software, snapshot technology, repeated data deletion and online data compression are included, and multiple sets of unit equipment can be aggregated through the network, so that modularized seamless transverse expansion is realized, and a uniform resource pool is formed.
A tenant: for better understanding, the tenant may also call a customer. On the cloud platform, an administrator can allocate computing, storage and network resources of the cluster to a plurality of tenants, and data and networks between each tenant are isolated. The administrator can uniformly add and delete tenants, and flexibly operate and maintain the resources of the tenants. The tenant can manage own network equipment in own network, apply for calculation, storage and network resources to an administrator as required, and deploy own services. Resources within each tenant are completely isolated. The multi-tenant has the advantages that the utilization rate of resources can be maximized, and the operation and maintenance servers are unified. The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application.
The User Interface (UI) refers to the overall design of human-computer interaction, operation logic and beautiful Interface of software.
The identification number (ID) is an abbreviation of various proprietary words such as an identification number of an identification card, an account number, a unique code, a proprietary number, industrial design, national abbreviation, legal vocabulary, a general account, a decoder, a software company and the like.
It should be understood that some of the embodiments described herein are only for explaining the technical solutions of the present application, and are not intended to limit the technical scope of the present application.
As shown in fig. 1A, a method for managing a network topology provided in an embodiment of the present application includes:
step S101, responding to a logged-in administrator account, and displaying a first display model of the network topology, wherein the first display model comprises topology connection information of a backbone network, the backbone network at least comprises network groups, the types of nodes in the same network group are the same, and the nodes in the network groups are externally connected with the same node;
in some embodiments, the user may log into the network topology using the administrator account and display the first display model of the network topology on the display interface. For example, as shown in fig. 1B, the first display model includes a backbone network 101, a fast search device 102, and an open tenant operation and maintenance mode 103, where the backbone network 101 enclosed by a dashed line includes tenant groups (network groups) 1012 and connection traffic 1011, and the topology connection information includes connection traffic 1011. Each node in the same network group 1012 has the same type, and each node in the network group is externally connected to the same node.
In some embodiments, under the top-level management model, in the node processing process, the external connection of each node may be recorded, and after the traversal is completed, all nodes having the same external connection may be grouped. When the connection line of the node is changed, the database can be informed to be updated, and when the topological graph is refreshed next time, the calculation can be carried out again, and the nodes which are externally connected with the same node can be grouped and rendered.
The first display model (top management model) has the following features:
(1) The integrity is good, the whole network condition is in a list, and the flow of each link is clear;
(2) The speed is high, and redundant nodes are few. The number of devices of the backbone network is not too many, the virtual machines and the tenants which are connected with the same outside are grouped, so that the number of nodes at the view angle of an administrator is not too many, the rendering speed is enhanced, and the visibility is high.
For example, the effect of the first display model (top management model):
(1) Grouping optimization, the front end greatly reduces rendering time, as shown in table 1 below:
1000 node 5000 node 10000 node
Before improvement 2s 10s Page jamming
After improvement 100ms 150ms 200ms
TABLE 1
As can be seen from table 1, 1000 nodes need to be rendered for 2 seconds(s) before improvement, and only 100 milliseconds (ms) after improvement; the 5000 nodes need to be rendered for 10 seconds before improvement, and only need to be rendered for 150 milliseconds after improvement; 10000 nodes are blocked before improvement and cannot be displayed normally, and 10000 nodes only need to be rendered in 200 milliseconds after improvement. Therefore, a large number of free tenants and tenants with the same external connection are grouped, page blocking can be caused in the prior art, only a little computing time is added in the implementation provided by the application, and the effect of shortening the rendering time can be achieved.
(2) For example, fig. 1M is a topology diagram of 200 nodes before improvement provided by the embodiment of the present application, and fig. 1N is a topology diagram of 1000 nodes after improvement provided by the embodiment of the present application, which is better than that of fig. 1M and fig. 1N, it can be seen that the experience of the topology diagram after improvement is obviously better.
Step S102, responding to a first trigger operation of the first display model, and displaying a second display model, wherein the second display model comprises topological connection information of the backbone network and physical connection information of nodes in a network group selected by the first trigger operation;
in some embodiments, a key corresponding to the first trigger operation may be set on the first display model to implement switching to the second display model. Here, the second display model may also be referred to as an operation and maintenance model, and when operation and maintenance needs to be performed on the internal network of the multiple tenants, the operation and maintenance model may be selected to be entered. For example, as shown in fig. 1B, the user may output an Internet Protocol (IP) address of a tenant to be maintained in the display portion of the tenant operation and maintenance starting mode 103, and then click a button for starting the tenant operation and maintenance mode to implement switching to the operation and maintenance model.
In some embodiments, as shown in fig. 1C, the selected tenant sub-page of the second display model includes a to-be-selected tenant network 1031 and a selected tenant network 1032, where the to-be-selected tenant network 1031 displays all tenant identities in the tenant group and identities of networks included by the tenant in a list, and a check box for determining whether to select the network is set before the identity of each network. In response to the user checking out the network, the selected network identification and the tenant identification to which the network belongs are displayed in the selected network tenant 1032. In the operation and maintenance mode, if all nodes in the tenant network are displayed, the number of nodes on the topological graph is too many (tens of thousands or more nodes are available for large-scale full selection, and a background has a large pressure), and the problem of topology blockage can be solved, the maximum number of networks for simultaneous operation and maintenance can be limited, for example, 5 nodes can be defaulted, and the limited number of networks can also be modified by modifying the configuration file.
Because the default of the virtual machine group and the tenant group in the prior art is contracted, when the network group is checked, the network is necessarily operated, the front end of the system modifies the default behavior of the group (the default is opened) and does not support contraction, so that the network needing operation and maintenance can be positioned at the first time after the operation and maintenance mode is opened. The network group is not contracted due to the fact that the topological graph is refreshed, and the operation and maintenance model is more concentrated on solving the problem of the tenant network.
Under the condition that the tenant network is selected, the determination button can be triggered to switch to the operation and maintenance mode risk prompting interface shown in fig. 1D, as shown in fig. 1D, a user needs to input a password to confirm to enter the operation and maintenance model, and when the operation and maintenance mode risk prompting interface is achieved, the user can click the determination button after completing password input. Therefore, the system can determine whether the user has the authority to enter the operation and maintenance model according to the verification result of the user account and the password, and switches to the operation and maintenance mode, wherein the verification can be completed by using the input password, and the operation and maintenance operation of the user can be prompted on a page to possibly influence a tenant network, wherein the prompting content can be 'modification of a connection line of a VPC network, and node configuration can possibly cause abnormity of the VPC network', so that the user cannot randomly enter the operation and maintenance mode to operate.
Under the condition that the permission verification is determined to be passed, the system switches to an operation and maintenance tenant sub-page of the second display model shown in fig. 1E, wherein the operation and maintenance tenant sub-page comprises the main network 101 and the selected tenant network 104, so that an original network of a tenant can be displayed, and connection editing can be performed on nodes in the displayed network, wherein the selected tenant network 104 comprises networks of different tenants.
The second display model (operation and maintenance model) has the following characteristics:
(1) An administrator can see the internal network of the tenant without entering a fourth model (a sub-layer grouping model), and the relationship between the internal network of the tenant and the backbone network is clearer;
(2) An administrator may connect devices between different tenant networks. For example, a user needs to get through virtual machine networks of different tenants, and can connect different network devices under a transport and maintenance model to enable traffic to go on a 'private line', so that the speed is higher;
(3) The administrator can know the details of the tenant's internal network. For example, details in the VPC network are difficult to locate in the prior art when a fault occurs in the VPC network, and the method provided by the embodiment of the application can clearly see the trend of the flow in the network only by opening the operation and maintenance model, so that the problem locating by an administrator is more convenient;
(4) The operation and maintenance mode shields tenant nodes, and only the designated network nodes and the administrator nodes of the operation and maintenance are displayed, so that the operation and maintenance mode can be more dedicated to solving the network problem of the tenant and shielding redundant nodes.
Step S103, in response to a second trigger operation on the second display model, displaying a third display model, where the third display model includes node information of a node selected by the second trigger operation, and the node information of the node includes at least one of: the uplink and downlink flow of the node, the flow velocity of the node, the packet velocity of the node and the detection information of the node.
In some embodiments, the second trigger operation may be clicking on a retrieved node, entering a detection model or an analysis model.
In some embodiments, the third display model may be a detection model and/or an analysis model for viewing the device details, wherein the detection model is used for displaying the detection information of the node, and the analysis model is used for displaying the uplink and downlink traffic of the node, the flow rate of the node, and the packet speed of the node.
The third display model (detection model and/or analysis model) has the following characteristics:
(1) Detailed information for individual devices is clear;
(2) Historical flow and trend of the equipment can be clearly checked, for example, network failure at a certain time can be checked, and a historical flow trend graph of the equipment can be checked to be accurate to a certain time point;
(3) After the device is selected, a connectivity detection function and a packet capture analysis function can be performed on the designated device, that is, a packet capture can be provided for the designated device for analyzing the traffic condition.
In the embodiment of the application, the first display model of the network topology is displayed in response to the login administrator account, an integral visual angle is provided for an administrator, the connection of the backbone network of the administrator can be seen, the flow of each link is included, and the virtual network equipment of the administrator belongs to. The problem of prior art show that the tenant is too much, lead to the page to block is solved.
In the embodiment of the application, a second display model is displayed in response to a first trigger operation on a first display model, wherein the second display model comprises topological connection information of a backbone network and physical connection information of nodes in a network group selected by the first trigger operation. Therefore, an administrator can see the internal network of the tenant, and the relationship between the internal network of the tenant and the backbone network is clearer; an administrator (a top-level administrator or other administrators) can connect devices among different tenant networks, so that traffic can go on a 'private line', and the speed is higher; details of the internal network of the tenant can be known, the trend of the internal flow of the network can be clearly seen, and the problem positioning by an administrator is facilitated; and only the designated network node and the administrator node of the operation and maintenance are displayed, the tenant network problem is more concentrated and solved in the operation and maintenance mode, and redundant nodes are shielded.
In this embodiment of the application, in response to a second trigger operation on the second display model, a third display model is displayed, where the third display model includes node information of a node selected by the second trigger operation, and the node information of the node includes at least one of: the uplink and downlink flow of the node, the flow velocity of the node, the packet velocity of the node and the detection information of the node. In this way, the device to be tested can be quickly tested and details of the device entered.
The embodiment of the application provides a network topology management method, which comprises the following steps:
step S111, responding to a logged-in administrator account, and displaying a first display model of the network topology, wherein the first display model comprises topology connection information of a backbone network, the backbone network at least comprises network groups, the types of nodes in the same network group are the same, and the nodes in the network groups are externally connected with the same node;
in some embodiments, the topology connection information of the backbone network comprises: the flow of each link in the backbone network and the nodes of each link comprise a switch, a router, a physical outlet, a network function virtualization device, the network group and an external network of the network group.
As shown in fig. 1B, the portion of the display backbone network 101 may display wire traffic (traffic for links) 1011 on each link, the nodes for each link including tenant packets (network groups) 1012, the outbound networks for the network groups, switches, routers, physical egress, network function virtualization devices.
In some embodiments, significant attention is required to the preservation, presentation, and alerting of traffic. Therefore, the flow of the key service can be added to the key attention list, the page can display the flow information of the link in real time, the connectivity detection is carried out periodically, and the alarm notification is carried out when the network is abnormal.
In some embodiments, the traffic method for obtaining the link is as follows:
recording all flow information, quickly searching through corresponding functions (from _ dev _ id and to _ dev _ id), inquiring all flows once in the process of traversing the connecting lines, respectively using the corresponding functions as keys for storage, finding the connecting lines by using the corresponding functions under the condition of traversing each connecting line, and adding flow speed information of uplink and downlink flows to a link after finding.
Step S112, in response to a first trigger operation on the first display model, displaying a second display model, where the second display model includes topology connection information of the backbone network and physical connection information of a node in a network group selected by the first trigger operation;
in some embodiments, an identification of a network group selected by the first trigger operation is obtained; determining a node set corresponding to the selected network group identifier; and generating physical connection information of the nodes in the selected network group based on the connection information of each node in the node set. For example, as shown in fig. 1C, a user may check out a network group to be maintained in the tenant network 1031 to be selected, and then may see the selected network group in the tenant network 1032 that has been selected. In this way, the system first obtains the identifier of the selected network group, then determines the node set corresponding to the identifier of the network group, and finally generates the physical connection information of the nodes in the network group in the selected tenant network 104 as shown in fig. 1E based on the connection information of each node.
In some embodiments, the system adds attribute information of a network identifier for a node within the network, the network identifier being used to locate a unique tenant network; and recording nodes belonging to the same tenant identification and network identification in a network group. For example, in the database, a network ID attribute is added to each node, and a unique tenant network can be located through the network ID. After the UI selects a network of a specified tenant, the request can be accompanied by a list of network IDs (multiple networks can be viewed at the same time). When searching for nodes in the background, filtering can be performed according to the network ID, and nodes belonging to the same tenant ID and the same network ID are recorded in one group. This group type is defined as "net _ group", an original grouping function that can be multiplexed.
Step S113, under the condition that the administrator accounts are used for logging in and the connection line editing operation between at least two nodes is detected on the second display model, responding to the connection line editing operation; the at least two nodes are one of: nodes in the same network group, nodes in different network groups, and nodes between a network group and a backbone network;
in some embodiments, when the user logs in using the administrator account, a connection editing operation may be performed on at least two nodes on the second display model, where the at least two nodes are one of: nodes in the same network group, nodes in different network groups, and nodes between a network group and a backbone network. In this way, devices between different tenant networks can be connected. For example, a user needs to get through the virtual machine networks of different tenants, and can connect different network devices under the second display model to make traffic flow "private", which is faster.
In some embodiments, the administrator itself has the authority to operate the tenant node, that is, the tenant node addition, deletion, and modification are supported, but because the operations are mainly for configuration, connection, and the like in the operation and maintenance model, the deletion operation is limited, the node deletion operation in the "net _ group" is grayed by the front end, for example, the node in the classical network can be deleted in the sub-layer model, the node in the VPC network should not be deleted, otherwise, the VPC network may constitute a destructive operation, and the user is not expected to directly delete the node in the VPC network. As shown in fig. 1L, the user may directly connect to the two nodes in block 115 to perform a connection operation, that is, connect the switch of tenant a and the router of tenant B, so as to open the two networks in the tenant. In the prior art, the background command line needs to be removed, and the device IDs need to be found for connecting, which obviously makes the operation in the prior art more complicated.
Step S114, in response to a second trigger operation on the second display model, displaying a third display model, where the third display model includes node information of a node selected by the second trigger operation, and the node information of the node includes at least one of: the uplink and downlink flow of the node, the flow velocity of the node, the packet velocity of the node and the detection information of the node.
In some embodiments, when the cloud platform manages the devices of the underlying platform, all the node IDs and the wire IDs of the topology map are decoupled from the real node IDs and the real wire IDs, and mapping of the node IDs, the wire IDs and the real IDs is recorded exclusively through a table. The operation of the nodes is called by an Application Programming Interface (API) Interface, and when the device of the third-party platform needs to be managed by using the topology map, the cloud platform topology map can be uniformly managed by only providing the nodes (switches, routers and virtual machines) and the added/deleted modified API of the connection lines by the third-party device.
In the embodiment of the present application, the topology connection information of the backbone network includes: the flow of each link in the backbone network and the nodes of each link comprise a switch, a router, a physical outlet, a network function virtualization device, the network group and an external network of the network group. Thus, the user can acquire the topology connection information based on the backbone network.
In the embodiment of the application, under the condition of logging in with the administrator account, a function of performing connection line editing operation on at least two nodes on the second display model by a user can be provided. Therefore, when a user needs to get through the virtual machine networks of different tenants, the virtual machine networks can be edited under the operation and maintenance model to be connected with different network devices, so that the traffic can be taken along a special line, and the speed is higher.
In the embodiment of the application, a completely open topological graph thought is provided, the topological graph is completely decoupled from a bottom platform, and the problem that in the prior art, the topological graph of the platform can only manage equipment of a manufacturer, is strongly coupled with the equipment of the manufacturer, and is difficult to dock with a third-party platform is solved.
The embodiment of the application provides a network topology management method, which comprises the following steps:
step S121, traversing preset nodes in a network to obtain attribute information of the preset nodes; the attribute information of the preset node comprises the type of the preset node and the connection information of the preset node; the preset node comprises a tenant or a virtual machine;
the preset node may be a node set before the tenant is grouped, and in the case of setting the preset node, the type and connection information of the preset node need to be obtained, where the type of the preset node includes the tenant or the virtual machine, and the connection information is connection information of the preset node to another node.
In some embodiments, since the first display model shows the backbone network 101 after tenant grouping, the system needs to preset nodes first and acquire attribute information of the preset nodes.
Step S122, based on the type of the preset node and the connection information of the preset node, under the condition that each preset node of the same preset type is externally connected with the same other nodes, each preset node of the same preset type is divided into the same network group;
in some embodiments, when the preset node is a tenant, the tenants externally connected to the same other nodes may be divided into the same network group; when the preset node is a virtual machine, the virtual machines externally connected to the same other nodes may be divided into the same network group.
Step S123, responding to a login administrator account, and displaying a first display model of the network topology, wherein the first display model comprises topology connection information of a backbone network, the backbone network at least comprises network groups, the types of all nodes in the same network group are the same, and all nodes in the network group are externally connected with the same node;
step S124, in response to a first trigger operation on the first display model, displaying a second display model, where the second display model includes topology connection information of the backbone network and physical connection information of a node in a network group selected by the first trigger operation;
step S125, in response to a second trigger operation on the second display model, displaying a third display model, where the third display model includes node information of a node selected by the second trigger operation, and the node information of the node includes at least one of: the uplink and downlink flow of the node, the flow rate of the node, the packet speed of the node and the detection information of the node.
Step S126, responding to a third trigger operation of the first display model, or responding to a logged tenant account, and displaying a fourth display model; the fourth display model includes physical connection information of nodes in the network group selected by the second trigger operation, or physical connection information of nodes in the network group corresponding to the tenant account.
In some embodiments, a control capable of triggering the third triggering operation may be set on the first display model, or the user logs in using the tenant account may display a fourth display model, where the fourth display model may be a sub-layer grouping model.
For example, in a case where a user logs in a first display model using an administrator account, the user may output a resource name to be displayed on the quick search device 102 as shown in fig. 1F, may input a name of a tenant group, and trigger a third trigger operation to display a fourth display model as shown in fig. 1G, including basic information 105 and a network topology 106, where the basic information 105 may show network information of the tenant in a form of a list, such as a network name and a network exit, and the network topology 106 is used to show the network information of the tenant in a form of a topology.
In the case that the user logs in using the tenant account, the system may display physical connection information of nodes within a network group corresponding to the tenant account.
The fourth display model (sub-layer grouping model) has the following characteristics:
(1) The safety isolation is high, the tenant can only use the exit equipment created by the administrator to the external exit network, and the behavior of the tenant in the unauthorized mode can not occur;
(2) The management of a single tenant network is easy, when an administrator or a tenant maintains network equipment in the network, only the equipment in the network is seen, and the problem of system blocking is avoided because the number of network nodes in one tenant is limited;
(3) Inside the tenant, the virtual machines connected to the outside can be grouped. Therefore, the fourth display model only has the virtual machine and does not have the tenant node, so that the internal network of the tenant is simpler.
In the embodiment of the application, the preset nodes in the network can be traversed to obtain the types and the connection information of the preset nodes, and the preset nodes are grouped. In this way, preset nodes of the same type, which are externally connected with the same other nodes, can be divided into the same network group.
In this embodiment of the application, a fourth display model may be displayed in response to a third trigger operation of the first display model or in response to a logged tenant account, where the fourth display model includes physical connection information of nodes in a selected network group or physical connection information of nodes in a network group corresponding to the tenant account. In this way, an administrator can establish external export equipment for a tenant, and the tenant can set up network equipment in the own network at will, but the external network can only be connected with the export equipment. The network topology graph entered by the logged-in tenant account is the tenant network, and the tenant can see the physical connection information of the nodes in the network group corresponding to the tenant account.
In the network topology management method provided by the embodiment of the present application, under the condition of logging in with a tenant account, the method further includes:
step S131, under the condition that the operation aiming at the nodes in the network is detected, acquiring the target tenant identification of the operated nodes;
in some embodiments, a user may log in the system using a tenant account, and the system needs to acquire a target tenant identity corresponding to an operating node when the tenant account operates the network node.
And S132, processing the operation of the tenant on the nodes in the network under the condition that the target tenant identification of the operated node is matched with the tenant account.
In the embodiment of the application, the system performs strict authority verification on the operation of the tenant, and solves the problem of override, namely, the tenant account can only edit a target tenant matched with the tenant account.
The first to third display models have a hierarchical relationship from top to bottom, and an embodiment of the present application provides a method for switching between different models, where the method includes one of:
step S141, responding to a second trigger operation of the fourth display model, and displaying a third display model;
in some embodiments, the second trigger operation may be to determine a device that needs to be analyzed and/or detected on the display interface of the fourth display model to display the third display model.
And step S142, responding to a second trigger operation on the first display model, and displaying a third display model.
In some embodiments, the second triggering operation may be determining a device requiring analysis and/or detection on the display interface of the first display model to display the third display model.
In some embodiments, the first to third display models have a top-to-bottom hierarchical relationship; and the fourth display model and the second display model belong to the same hierarchical model. For example, the system may default to display the first display model, and switch the first trigger operation that can be obtained on the first display model to the second display model, or switch the third trigger operation to the fourth display model, and switch the second trigger operation to the third display model when the second display model or the fourth display model obtains the second trigger operation.
In some embodiments, the following switching patterns may be used:
a top-level management model < = sublayer grouping model;
a top-level management model < = operation and maintenance model;
a top-level management model, a sublayer grouping model and an operation and maintenance model = = > analysis model;
analytical model = = > detection model.
Where "< = = >" represents a mutual switching, and "= >" represents a unidirectional switching.
In some embodiments, when the user frequently enters a certain mode, the system may save for user behavior, providing a shortcut that the user may enter directly into the specified model. And the specified models can be collected and sorted, so that the user can quickly enter the specified models by utilizing the collection list, and the workload of switching between the models is reduced. The corresponding technology is realized as follows:
(1) The left side of any display model can provide shortcuts, the network models which are most frequently accessed by users except for the top management model are stored (when each network model is accessed, the system can record the IP of the current user, record the number of times of requests and store the habits of the current user), the system can display the network 5 before ranking on the left side, and the user can click the left side to directly access the designated network, so that the time for the user to switch the network is reduced.
(2) The user can select collection after entering the network model, the left side is also provided with a collection list, the user can quickly enter the appointed network by using the collection list, the collection sequence can be modified, and the time for switching the network by the user is reduced.
In the embodiment of the application, different models are hierarchical, and the models can be switched. Therefore, the user can switch to use different models according to different requirements.
The third display model comprises a first submodel and a second submodel, and the embodiment of the application provides an operation method of the third display model, which comprises the following steps:
step S151, responding to a first sub-operation of the third display model, and displaying a first sub-model, wherein the first sub-model is used for displaying the uplink and downlink flow, the flow rate and the packet speed of the node selected by the first sub-operation;
in some embodiments, the first sub-model may also be referred to as an analysis model, which is available to both administrators and users, and may be used to perform device searches over any network, quickly locate the device to be analyzed, and enter details of the device. The information such as the uplink and downlink flow, the flow speed, the packet speed and the like of each network port of the current equipment can be seen under the analysis model. The trend graph of the device traffic, the traffic analysis graph, and the condition of the intercepted and passed packets can be seen.
In some embodiments, the device to be analyzed may be quickly located using a quick search device 102 as shown in FIG. 1B. Clicking on the device to be analyzed may present fig. 1H, and the user clicking on the detail information control 107 may present details of the display device shown in fig. 1I. FIG. 1I provides a display page of device details including a run state 108 and a basic information and hardware configuration 109, where the run state 108 includes CPU usage, memory usage, and disk usage; the basic information and hardware configuration 109 includes basic information and hardware configuration information of the device.
The first submodel (analytical model) has the following characteristics:
(1) The detailed information for the individual devices is clear;
(2) The historical flow and trend of the equipment can be clearly checked, for example, the network failure at a certain time, and the historical flow trend graph of the equipment can be checked, so that the historical flow and the trend graph can be accurate to a certain time point.
Technical implementation of the first submodel:
the database of the system can store detail information (name, description, operation position, various configurations and flow trend) for single equipment, the detail page can show the details, and the inquiry only needs to be carried out on the single equipment, so that the speed can be high, and the detail can be sufficient.
And S152, responding to a second sub-operation of the first sub-model, and displaying a second sub-model, wherein the second sub-model is used for displaying the detection information of the node selected by the second sub-operation.
In some embodiments, the second sub-model may also be referred to as a detection model, which may be switched in by the analysis model, which is a real-time detection of the device. Including high-level functions such as connectivity probing, packet capture analysis, etc. The packet capturing analysis is a packet capturing tool, can capture packets of equipment, and is used for troubleshooting network faults and analyzing flow; the connectivity detection can be used for specifying a source IP and a destination IP, or specifying a device, performing connectivity detection, and detecting whether normal communication is performed between the two devices, and a communication path, which is used for analyzing traffic trends.
For example, fig. 1J may be utilized to perform connectivity probing on a device. As shown in fig. 1J, the display interface of the network connectivity probe includes a test object 110 and a result 111, and the user may select the test object 110, click the start test control, and the system may display the corresponding connectivity probe result on the result 111.
The device may be analyzed for packet capture using fig. 1K. As shown in fig. 1K, the display interface for network packet analysis includes a designated portal 112, a condition 113 and a file size 114, where the designated portal 112 can provide a user to input a network for network packet analysis; condition 113 may provide a condition for user input to perform network packet analysis; file size 114 may provide the file size of the user output bale catch.
The second submodel (detection model) has the following characteristics:
(1) After the equipment to be detected is selected, some high-level functions are gradually opened for the equipment, for example, a function of detecting connectivity for the specified equipment can determine what path the equipment goes from one end of the network to the other end; the packet capturing and analyzing function can provide a packet capturing for the specified equipment and is used for analyzing the traffic condition;
(2) The subsequent detection model can also perform some advanced functions aiming at the equipment and jump by using the detail page.
An embodiment of the present application provides a method for dividing network groups, as shown in fig. 2, the method includes:
step S201, obtaining a plug-in of the preset node, wherein the plug-in is used for defining a grouping algorithm of the preset node;
in some embodiments, each device type of the network topology has a corresponding characteristic, a plug-in can be defined for all device types, the plug-in is used for defining a grouping algorithm of the preset node, all plug-ins inherit the base class, a grouping generation process is provided in a process of generating the topology graph, a system can obtain a grouping generation method in the plug-in, and if the plug-in of one device type defines the grouping method, the nodes of the type can be grouped.
Step S202, based on the grouping algorithm and the connection information of the preset nodes, under the condition that the preset nodes of the same preset type are externally connected with the same other nodes, the preset nodes of the same preset type are divided into the same network group.
In the embodiment of the application, the preset nodes of the same preset type are divided into the same network group by using the plug-in of the preset nodes, wherein the plug-in is used for defining the grouping algorithm of the preset nodes.
The step S202 "dividing each preset node of the same preset type into the same network group when determining that each preset node of the same preset type is externally connected to the same other node based on the grouping algorithm and the connection information of the preset nodes" includes the following steps:
step S2021, obtaining connection information of the preset node, where the connection information includes internal connection information in a network group to which the preset node belongs and external connection information outside the network group to which the preset node belongs;
in some embodiments, connection information of a preset node may be determined, a tenant node is actually a concept abstracted by a cloud platform, nodes belonging to a tenant may be hidden, and only one tenant icon is displayed by a top management model. When each node of the tenant is traversed, the connection condition of the preset node can be recorded, and if the connected node is an outdoor node, the connection can be recorded and is considered as an external connection of the tenant; if the equipment of the tenant connected by the connecting line is directly hidden.
Step S2022, determining the other nodes connected to the preset node based on the external connection information;
step S2023, recording the mapping relation between the other nodes and the preset node;
in some embodiments, the mapping relationship between the other nodes and the preset node is recorded, where the structure of the record of the mapping relationship may be a dictionary, the key is an identifier of the other node (there are multiple peer devices, and the identifiers may be concatenated), the value is a list, and the value of the list is an identifier of the preset node itself.
Step S2024, based on the mapping relationship, dividing the at least two preset nodes externally connected to the same other nodes into the same network group.
In some embodiments, when all preset nodes are traversed, a dictionary for recording connection conditions may be obtained, and when the length of the list is greater than 2, multiple devices are considered to be connected to the same node, which is considered to be a network group.
In the embodiment of the application, at least two preset nodes which are externally connected with the same other nodes can be divided into the same network group by using the acquired external connection information of the preset nodes.
As shown in fig. 3, a method for managing a network topology provided in an embodiment of the present application includes:
step S301, aiming at the cloud platform network, respectively displaying by adopting a display model with a top-bottom hierarchical relationship: topology connection information of a backbone network in the cloud platform network, physical connection information of a tenant network in the cloud platform network, and node information of nodes in the backbone network or the tenant network;
step S302, when an upper layer model in the display models with the upper and lower hierarchical relationships receives a trigger operation, switching from displaying the upper layer model to displaying a lower layer model of the upper layer model.
In the embodiment of the application, the cloud platform network is respectively displayed by adopting a display model with an upper hierarchical relation and a lower hierarchical relation. Therefore, the problem that in the prior art, due to the fact that too many nodes need to be displayed, pages are directly clamped is solved, a large number of free tenants and tenants which are connected with the same external connection are grouped, a little of computing time is increased, no pressure is generated in rendering, grouping optimization is achieved, and the topological graph experience is greatly improved.
In the embodiment of the application, under the condition that an upper layer model in a display model with a top-bottom hierarchical relationship receives a trigger operation, the upper layer model is switched to the lower layer model of the upper layer model, so that multiple layered models are provided on a network topological graph, switching and restoring among the models are provided, the requirements of a management network and an operation and maintenance network of a client are met, and the user can switch different models according to actual requirements to realize corresponding operation functions.
Fig. 4A is a schematic flowchart of a grouping method for preset nodes according to an embodiment of the present application, and as shown in fig. 4A, the method includes:
step S401, start;
step S402, obtaining the device type needing grouping;
step S403, obtaining plug-ins of each equipment type, wherein the plug-ins define how each type is grouped, and each type inherits a base class in a unified manner;
step S4031, when each node is traversed, the external connection line of the node is taken out, the ID of the opposite end equipment of the connection line is taken as a key, the key exists in a dictionary, the value of the dictionary is a list, and each node is an element of the list;
the cloud platform topological graph has various types of nodes, such as: the virtual machine, the switch, the router, the physical egress, network Function Virtualization (NFV), the tenant, the Network egress, and the like, may traverse all nodes and extract the device type when generating a Network topology.
Each device type has corresponding characteristics, a plug-in is defined for all the device types, all the plug-ins inherit the base class, a grouping generation method in the plug-ins can be obtained in the process of generating the topological graph, and if the plug-ins of one device type define the grouping method, the nodes of the type can be grouped.
The system can directly judge the external connection of the nodes, the nodes are actually a concept abstracted by the cloud platform, the nodes belonging to the tenants can be hidden, and the top management model only displays a tenant icon. When traversing each node of the tenant, the connection condition of the node can be recorded, if the node is connected outside the tenant (if the device of the tenant connected by the connection is directly hidden), the connection can be recorded, the node is regarded as the external connection of the tenant, and the ID of the opposite end is recorded (the recorded structure is a dictionary, the key is the ID of the opposite end device (a plurality of opposite end devices can be spliced), the value is a list, and the value of the list is the ID of the node)
Step S4032, after traversing all nodes, obtaining the external connection grouping of all nodes, traversing the dictionary, determining that the grouping is a grouping when the length of the list in the value is more than 2, and collecting the grouped information to return to the UI;
and when all nodes are traversed, acquiring a dictionary for recording connection conditions, and when the length of the list is greater than 2, considering that a plurality of devices are connected to the same node, considering that the device is a packet, and returning the packet condition to the UI.
In step S4033, after the UI acquires the grouping information, the nodes in the grouping are rendered and rendered into one group.
The return to UI structure is as follows:
Figure BDA0003117725520000221
in some embodiments, the packet types include a Virtual machine packet (vm _ group), a tenant packet (tenant _ group), and IDs in the packet are all node IDs in a node structure, and the UI renders the node IDs into one group, which is shown in fig. 4B and 4C, where, as shown in fig. 4B, the display diagram for completing the Virtual machine packet includes a physical egress 1, a router 1, a switch 1, a Trunk _ all, a yh-GR, and a Virtual Desktop (VDI), where yh-GR is a Virtual machine packet. As shown in fig. 4C, the display diagram of the completed tenant group includes Trunk _ allxx, amp-pub-Trunk-202, ad-create-test2 and the tenant group, where Trunk _ allxx, amp-pub-Trunk-202 and Ad-create-test2 are all port groups of physical outlets.
S404, generating a grouped data structure according to a grouping algorithm defined in the plug-in;
step S405, the UI renders according to the returned grouping data structure;
and step S406, ending.
In the embodiment of the application, the plug-in defines how each type is grouped, and the plug-in can be used for completing grouping of different types of nodes.
Based on the foregoing embodiments, an embodiment of the present application provides a network topology management apparatus, where the apparatus includes modules, each module includes sub-modules, each sub-module includes a unit, and the sub-modules may be implemented by a processor in an electronic device; of course, the implementation can also be realized through a specific logic circuit; in implementation, the processor may be a Central Processing Unit (CPU), a Microprocessor (MPU), a Digital Signal Processor (DSP), a Field Programmable Gate Array (FPGA), or the like.
Fig. 5A is a schematic structural diagram of a network topology management apparatus according to an embodiment of the present application, and as shown in fig. 5A, the apparatus 500 includes:
a first display module 501, configured to display a first display model of the network topology in response to a logged-in administrator account, where the first display model includes topology connection information of a backbone network, the backbone network at least includes network groups, and nodes in the same network group are of the same type and are connected to the same node;
a second display module 502, configured to display a second display model in response to a first trigger operation on the first display model, where the second display model includes topology connection information of the backbone network and physical connection information of nodes in a network group selected by the first trigger operation;
a third display module 503, configured to display a third display model in response to a second trigger operation on the second display model, where the third display model includes node information of a node selected by the second trigger operation, and the node information of the node includes at least one of: the uplink and downlink flow of the node, the flow rate of the node, the packet speed of the node and the detection information of the node.
In some embodiments, in the case of logging in with the administrator account, the apparatus further comprises: the connection line editing module is used for responding to the connection line editing operation when the connection line editing operation between at least two nodes is detected on the second display model; the at least two nodes are one of: nodes in the same network group, nodes in different network groups, and nodes between a network group and a backbone network.
In some embodiments, the apparatus further includes a fourth display module, configured to display a fourth display model in response to a third trigger operation of the first display model or in response to a logged-in tenant account; the fourth display model includes physical connection information of nodes in the network group selected by the second trigger operation, or physical connection information of nodes in the network group corresponding to the tenant account.
In some embodiments, in the case of logging in with the tenant account, the apparatus further comprises: an obtaining module, configured to obtain a target tenant identity of an operated node when detecting that the node in the network is operated; and the processing module is used for processing the operation of the tenant on the node in the network under the condition of verifying that the target tenant identification of the operated node is matched with the tenant account.
In some embodiments, the first to third display models have a top-to-bottom hierarchical relationship; the third display module 503 is further configured to display a third display model in response to a second trigger operation on the fourth display model; and responding to a second trigger operation of the first display model, and displaying a third display model.
In some embodiments, the first to third display models have a top-to-bottom hierarchical relationship; and the fourth display model and the second display model belong to the same hierarchical model.
In some embodiments, the third display model comprises a first submodel and a second submodel; the third display module comprises a first display sub-module and a second display sub-module, wherein the first display sub-module is used for responding to a first sub-operation of the third display module and displaying a first sub-model, and the first sub-model is used for displaying uplink and downlink flow, flow rate and packet speed of a node selected by the first sub-operation; and the second display sub-module is used for responding to a second sub-operation of the first sub-model and displaying a second sub-model, and the second sub-model is used for displaying the detection information of the node selected by the second sub-operation.
In some embodiments, the topology connection information of the backbone network comprises: the flow of each link in the backbone network and the nodes of each link comprise a switch, a router, a physical outlet, a network function virtualization device, the network group and an external network of the network group.
In some embodiments, the apparatus further includes a traversing module and a dividing module, wherein the determining module is configured to traverse a preset node in a network to obtain attribute information of the preset node; the attribute information of the preset node comprises the type of the preset node and the connection information of the preset node; the preset node comprises a tenant or a virtual machine; and the dividing module is used for dividing each preset node of the same preset type into the same network group under the condition that each preset node of the same preset type is determined to be externally connected with the same other nodes based on the type of the preset node and the connection information of the preset node.
In some embodiments, the partitioning module includes an obtaining sub-module and a partitioning sub-module, where the obtaining sub-module is configured to obtain a plug-in of the preset node, where the plug-in is configured to define a grouping algorithm of the preset node; the dividing submodule is configured to divide the preset nodes of the same preset type into the same network group when determining that the preset nodes of the same preset type are externally connected with the same other nodes based on the grouping algorithm and the connection information of the preset nodes.
In some embodiments, the partitioning sub-module includes an obtaining unit, a determining unit, a recording unit, and a partitioning unit, where the obtaining unit is configured to obtain connection information of the preset node, where the connection information includes internal connection information in a network group to which the preset node belongs and external connection information outside the network group to which the preset node belongs; a determining unit, configured to determine the other nodes connected to the preset node based on the external connection information; the recording unit is used for recording the mapping relation between the other nodes and the preset node; and the dividing unit is used for dividing the at least two preset nodes which are externally connected with the same other nodes into the same network group based on the mapping relation.
Fig. 5B is a schematic structural diagram of a network topology management apparatus provided in an embodiment of the present application, and as shown in fig. 5B, the apparatus 510 includes:
the fifth display module 511, aiming at the cloud platform network, respectively displays the following by using a display model with a top-bottom hierarchical relationship: topology connection information of a backbone network in the cloud platform network, physical connection information of a tenant network in the cloud platform network, and node information of nodes in the backbone network or the tenant network;
a switching module 512, configured to switch from displaying the upper layer model to displaying the lower layer model of the upper layer model when the upper layer model in the display models having the upper and lower hierarchical relationships receives a trigger operation.
The above description of the apparatus embodiments, similar to the above description of the method embodiments, has similar beneficial effects as the method embodiments. For technical details not disclosed in the embodiments of the apparatus of the present application, reference is made to the description of the embodiments of the method of the present application for understanding.
It should be noted that, in the embodiment of the present application, if the network topology management method is implemented in the form of a software functional module and is sold or used as a standalone product, the network topology management method may also be stored in a computer readable storage medium. Based on such understanding, the technical solutions of the embodiments of the present application may be embodied in the form of a software product, which is stored in a storage medium and includes instructions for causing an electronic device (which may be a mobile phone, a tablet computer, a notebook computer, a desktop computer, etc.) to execute all or part of the methods described in the embodiments of the present application. And the aforementioned storage medium includes: various media capable of storing program codes, such as a usb disk, a removable hard disk, a Read Only Memory (ROM), a magnetic disk, or an optical disk. Thus, embodiments of the present application are not limited to any specific combination of hardware and software.
Correspondingly, the present application provides a computer readable storage medium, on which a computer program is stored, which when executed by a processor implements the steps in the network topology management method provided in the above embodiments.
Correspondingly, an embodiment of the present application provides an electronic device, and fig. 6 is a schematic diagram of a hardware entity of the electronic device provided in the embodiment of the present application, as shown in fig. 6, the hardware entity of the device 600 includes: comprising a memory 601 and a processor 602, said memory 601 storing a computer program operable on said processor 602, said processor 602 implementing the steps in the network topology management method provided in the above embodiments when executing said program.
The Memory 601 is configured to store instructions and applications executable by the processor 602, and may also buffer data (e.g., image data, audio data, voice communication data, and video communication data) to be processed or already processed by the processor 602 and modules in the electronic device 600, and may be implemented by a FLASH Memory (FLASH) or a Random Access Memory (RAM).
Here, it should be noted that: the above description of the storage medium and device embodiments is similar to the description of the method embodiments above, with similar advantageous effects as the method embodiments. For technical details not disclosed in the embodiments of the storage medium and apparatus of the present application, reference is made to the description of the embodiments of the method of the present application for understanding.
It should be appreciated that reference throughout this specification to "one embodiment" or "an embodiment" means that a particular feature, structure or characteristic described in connection with the embodiment is included in at least one embodiment of the present application. Thus, the appearances of the phrases "in one embodiment" or "in an embodiment" in various places throughout this specification are not necessarily all referring to the same embodiment. Furthermore, the particular features, structures, or characteristics may be combined in any suitable manner in one or more embodiments. It should be understood that, in the various embodiments of the present application, the sequence numbers of the above-mentioned processes do not mean the execution sequence, and the execution sequence of each process should be determined by its function and inherent logic, and should not constitute any limitation to the implementation process of the embodiments of the present application. The above-mentioned serial numbers of the embodiments of the present application are merely for description and do not represent the merits of the embodiments.
It should be noted that, in this document, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising one of 8230, and" comprising 8230does not exclude the presence of additional like elements in a process, method, article, or apparatus comprising the element.
In the several embodiments provided in the present application, it should be understood that the disclosed apparatus and method may be implemented in other ways. The above-described device embodiments are merely illustrative, for example, the division of the unit is only one logical function division, and there may be other division ways in actual implementation, such as: multiple units or components may be combined, or may be integrated into another system, or some features may be omitted, or not implemented. In addition, the coupling, direct coupling or communication connection between the components shown or discussed may be through some interfaces, and the indirect coupling or communication connection between the devices or units may be electrical, mechanical or other forms.
The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units; can be located in one place or distributed on a plurality of network units; some or all of the units can be selected according to actual needs to achieve the purpose of the solution of the embodiment.
In addition, all functional units in the embodiments of the present application may be integrated into one processing unit, or each unit may be separately regarded as one unit, or two or more units may be integrated into one unit; the integrated unit can be realized in a form of hardware, or in a form of hardware plus a software functional unit.
Those of ordinary skill in the art will understand that: all or part of the steps for realizing the method embodiments can be completed by hardware related to program instructions, the program can be stored in a computer readable storage medium, and the program executes the steps comprising the method embodiments when executed; and the aforementioned storage medium includes: various media that can store program codes, such as a removable Memory device, a Read Only Memory (ROM), a magnetic disk, or an optical disk.
Alternatively, the integrated units described above in the present application may be stored in a computer-readable storage medium if they are implemented in the form of software functional modules and sold or used as independent products. Based on such understanding, the technical solutions of the embodiments of the present application may be embodied in the form of a software product, which is stored in a storage medium and includes instructions for causing an electronic device (which may be a mobile phone, a tablet computer, a notebook computer, a desktop computer, etc.) to execute all or part of the methods described in the embodiments of the present application. And the aforementioned storage medium includes: a removable storage device, a ROM, a magnetic or optical disk, or other various media that can store program code.
The methods disclosed in the several method embodiments provided in the present application may be combined arbitrarily without conflict to arrive at new method embodiments.
Features disclosed in several of the product embodiments provided in the present application may be combined in any combination to yield new product embodiments without conflict.
The features disclosed in the several method or apparatus embodiments provided in the present application may be combined arbitrarily, without conflict, to arrive at new method embodiments or apparatus embodiments.
The above description is only for the embodiments of the present application, but the scope of the present application is not limited thereto, and any person skilled in the art can easily conceive of changes or substitutions within the technical scope of the present application, and shall be covered by the scope of the present application. Therefore, the protection scope of the present application shall be subject to the protection scope of the claims.

Claims (16)

1. A method of network management, the method comprising:
responding to a logged administrator account, and displaying a first display model of the network topology, wherein the first display model comprises topology connection information of a backbone network, the backbone network at least comprises network groups, and each node in the same network group is the same in type and is externally connected with the same node;
responding to a first trigger operation of the first display model, and displaying a second display model, wherein the second display model comprises topological wiring information of the backbone network and physical wiring information of nodes in a network group selected by the first trigger operation;
in response to a second trigger operation on the second display model, displaying a third display model, wherein the third display model comprises node information of a node selected by the second trigger operation, and the node information of the node comprises at least one of the following: the uplink and downlink flow of the node, the flow rate of the node, the packet speed of the node and the detection information of the node.
2. The method of claim 1, wherein upon logging in with the administrator account, the method further comprises:
under the condition that the connection line editing operation between at least two nodes is detected on the second display model, response processing is carried out on the connection line editing operation;
the at least two nodes are one of: nodes in the same network group, nodes in different network groups, and nodes between a network group and a backbone network.
3. The method of claim 1, wherein the method further comprises one of:
responding to a third trigger operation of the first display model, or responding to a logged-in tenant account, and displaying a fourth display model; wherein the content of the first and second substances,
the fourth display model includes physical connection information of nodes in the network group selected by the second trigger operation, or physical connection information of nodes in the network group corresponding to the tenant account.
4. The method of claim 3, wherein upon logging in with the tenant account, the method further comprises:
under the condition that operation aiming at the nodes in the network is detected, acquiring target tenant identification of the operated nodes;
and under the condition that the target tenant identification of the operated node is matched with the tenant account, processing the operation of the tenant on the node in the network.
5. The method of claim 3, wherein the first to third display models have a hierarchical relationship from top to bottom; the method further comprises one of:
displaying a third display model in response to a second trigger operation on the fourth display model;
and responding to a second trigger operation of the first display model, and displaying a third display model.
6. The method of claim 5, wherein the first to third display models have a hierarchical relationship from top to bottom; and the fourth display model and the second display model belong to the same hierarchical model.
7. The method of any of claims 1 to 6, wherein the third display model comprises a first sub-model and a second sub-model;
responding to a first sub-operation of the third display model, and displaying a first sub-model, wherein the first sub-model is used for displaying the uplink and downlink flow, the flow rate and the packet speed of the node selected by the first sub-operation;
and responding to a second sub-operation of the first sub-model, and displaying a second sub-model, wherein the second sub-model is used for displaying the detection information of the node selected by the second sub-operation.
8. The method according to any of claims 1 to 6, wherein the topology connection information of the backbone network comprises: the flow of each link in the backbone network and the nodes of each link comprise a switch, a router, a physical outlet, a network function virtualization device, the network group and an external network of the network group.
9. The method of any of claims 1 to 6, further comprising:
traversing preset nodes in a network to obtain attribute information of the preset nodes; the attribute information of the preset node comprises the type of the preset node and the connection information of the preset node; the preset node comprises a tenant or a virtual machine;
and based on the type of the preset node and the connection information of the preset node, under the condition that the preset nodes of the same preset type are externally connected with other same nodes, dividing the preset nodes of the same preset type into the same network group.
10. The method according to claim 9, wherein the dividing the preset nodes of the same preset type into the same network group when determining that the preset nodes of the same preset type are externally connected to the same other nodes based on the type of the preset node and the connection information of the preset node comprises:
acquiring a plug-in of the preset node, wherein the plug-in is used for defining a grouping algorithm of the preset node;
and on the basis of the grouping algorithm and the connection information of the preset nodes, under the condition that the preset nodes of the same preset type are externally connected with other same nodes, the preset nodes of the same preset type are divided into the same network group.
11. The method according to claim 10, wherein the dividing the preset nodes of the same preset type into the same network group when determining that the preset nodes of the same preset type are externally connected to the same other nodes based on the grouping algorithm and the connection information of the preset nodes comprises:
obtaining connection information of the preset node, wherein the connection information comprises internal connection information in a network group to which the preset node belongs and external connection information outside the network group to which the preset node belongs;
determining the other nodes connected with the preset node based on the external connection information;
recording the mapping relation between the other nodes and the preset node;
and based on the mapping relation, dividing the at least two preset nodes externally connected with the same other nodes into the same network group.
12. A method of network management, the method comprising:
aiming at the cloud platform network, respectively displaying by adopting a display model with an upper hierarchical relation and a lower hierarchical relation: topology connection information of a backbone network in the cloud platform network, physical connection information of a tenant network in the cloud platform network, and node information of nodes in the backbone network or the tenant network;
and switching from displaying the upper layer model to displaying the lower layer model of the upper layer model when the upper layer model in the display models with the upper and lower hierarchical relations receives a trigger operation.
13. A network management apparatus comprising:
the first display module is used for responding to a logged-in administrator account and displaying a first display model of the network topology, wherein the first display model comprises topology connection information of a backbone network, the backbone network at least comprises network groups, the types of nodes in the same network group are the same, and the nodes in the network groups are externally connected with the same node;
a second display module, configured to display a second display model in response to a first trigger operation on the first display model, where the second display model includes topology connection information of the backbone network and physical connection information of nodes in a network group selected by the first trigger operation;
a third display module, configured to display a third display model in response to a second trigger operation on the second display model, where the third display model includes node information of a node selected by the second trigger operation, and the node information of the node includes at least one of: the uplink and downlink flow of the node, the flow rate of the node, the packet speed of the node and the detection information of the node.
14. A network management apparatus comprising:
a fifth display module, configured to respectively display, by using a display model with an upper hierarchical relationship and a lower hierarchical relationship, for the cloud platform network: topology connection information of a backbone network in the cloud platform network, physical connection information of a tenant network in the cloud platform network, and node information of nodes in the backbone network or the tenant network;
and the switching module is used for switching from displaying the upper model to displaying the lower model of the upper model under the condition that the upper model in the display models with the upper and lower hierarchical relations receives a triggering operation.
15. An electronic device comprising a memory and a processor, the memory storing a computer program operable on the processor, wherein the processor implements the steps of the method of any one of claims 1 to 11 or 12 when executing the program.
16. A computer storage medium having stored thereon executable instructions for causing a processor to perform the steps of the method of any one of claims 1 to 11 or 12 when executed.
CN202110666753.6A 2021-06-16 2021-06-16 Network topology management method, device, equipment and computer storage medium Active CN113364631B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202110666753.6A CN113364631B (en) 2021-06-16 2021-06-16 Network topology management method, device, equipment and computer storage medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202110666753.6A CN113364631B (en) 2021-06-16 2021-06-16 Network topology management method, device, equipment and computer storage medium

Publications (2)

Publication Number Publication Date
CN113364631A CN113364631A (en) 2021-09-07
CN113364631B true CN113364631B (en) 2022-11-22

Family

ID=77534684

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202110666753.6A Active CN113364631B (en) 2021-06-16 2021-06-16 Network topology management method, device, equipment and computer storage medium

Country Status (1)

Country Link
CN (1) CN113364631B (en)

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114430364A (en) * 2022-01-21 2022-05-03 京东科技信息技术有限公司 Information display method and device, electronic equipment and computer readable medium
CN115022185B (en) * 2022-06-21 2023-09-26 浪潮通信信息***有限公司 Topological graph display method and device

Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105227373A (en) * 2015-10-22 2016-01-06 上海斐讯数据通信技术有限公司 Based on multi-layer topology discovery system for networks and the method for cloud controller

Family Cites Families (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102281154B (en) * 2011-07-12 2013-12-11 广东宜通世纪科技股份有限公司 Display method and system of network topology graphing
JP5941703B2 (en) * 2012-02-27 2016-06-29 株式会社日立製作所 Management server and management method
CN110213107B (en) * 2019-06-11 2022-04-01 广东电网有限责任公司 Automatic layout method, device and equipment for network topological graph
CN111934922B (en) * 2020-07-29 2023-07-14 深信服科技股份有限公司 Method, device, equipment and storage medium for constructing network topology

Patent Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105227373A (en) * 2015-10-22 2016-01-06 上海斐讯数据通信技术有限公司 Based on multi-layer topology discovery system for networks and the method for cloud controller

Also Published As

Publication number Publication date
CN113364631A (en) 2021-09-07

Similar Documents

Publication Publication Date Title
US10540264B2 (en) Computerized method and end-to-end “Pilot as a service” system for controlling start-up/enterprise interactions
US11196839B1 (en) System and method for classifying API requests in API processing systems using a tree configuration
US20190141063A1 (en) Systems and methods for computer environment situational awareness
US20180124094A1 (en) Methods and systems for ranking, filtering and patching detected vulnerabilities in a networked system
US20170123880A1 (en) Service metric analysis from structured logging schema of usage data
US10778645B2 (en) Firewall configuration manager
US11665183B2 (en) Secure incident investigation event capture
CN113364631B (en) Network topology management method, device, equipment and computer storage medium
CN111934922B (en) Method, device, equipment and storage medium for constructing network topology
WO2018081743A1 (en) Systems and methods for multi-tier cache visual system and visual modes
US20200092168A1 (en) Production software application performance and resiliency testing
US20130086434A1 (en) Configuration fault localization in shared resource environments
US11481478B2 (en) Anomalous user session detector
US20240012828A1 (en) Systems and methods for context development
WO2022042126A1 (en) Fault localization for cloud-native applications
Park et al. A study on cloud forensics and challenges in SaaS application environment
CN114175067A (en) Incident survey workspace generation and survey control
US8984157B2 (en) Network analysis in a file transfer system
CN115658794A (en) Data query method and device, computer equipment and storage medium
US8677184B2 (en) System, method, and computer program product for gathering device information to enable identification of potential risks in a network environment
Sangpetch et al. VDEP: VM dependency discovery in multi-tier Cloud applications
US20230350900A1 (en) Observation stream engine in a security management system
Tabiban Provenance Analysis in Virtualized Environments
CN113986725A (en) Reconstruction system detection method, device and storage medium
CN115756931A (en) Method and device for determining equipment fault reason, storage medium and electronic equipment

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant