WO2017008578A1

WO2017008578A1 - Data check method and device in network function virtualization framework

Info

Publication number: WO2017008578A1
Application number: PCT/CN2016/083009
Authority: WO
Inventors: 王骅
Original assignee: 华为技术有限公司
Priority date: 2015-07-15
Filing date: 2016-05-23
Publication date: 2017-01-19
Also published as: CN105119736A; CN105119736B

Abstract

Embodiments of the present invention relates to a data check method and device in a network function virtualization (NFV) framework. The device comprises: a determination module configured to determine a data check description file of a query object, the data check description file comprising an identifier of the query object, a target unit where the query object is located, a query script and a parsing script, wherein the target unit belongs to an NFV framework, the query script is used to check the query object, and the parsing script is used to parse a check result of the query object; a check module configured to determine, according to the data check description file determined by the determination module, real-time configuration information of the query object in the target unit; and a processing module configured to determine a data check result of the query object in the target unit to be abnormal if the real-time configuration information determined by the check module is inconsistent with initial configuration information. The data check method and device in an NFV framework in the embodiments of the present invention can reduce service loss.

Description

网络功能虚拟化架构中数据检查的方法和装置Method and device for data checking in network function virtualization architecture

本申请要求于2015年7月15日提交中国专利局、申请号为201510418248.4、发明名称为“网络功能虚拟化架构中数据检查的方法和装置”的中国专利申请的优先权，其全部内容通过引用结合在本申请中。The present application claims priority to Chinese Patent Application No. 201510418248.4, entitled "Method and Apparatus for Data Inspection in Network Function Virtualization Architecture", filed on July 15, 2015, the entire contents of which are incorporated by reference. Combined in this application.

技术领域Technical field

本发明涉及通信领域，尤其涉及网络功能虚拟化架构中数据检查的方法和装置。The present invention relates to the field of communications, and in particular, to a method and apparatus for data inspection in a network function virtualization architecture.

背景技术Background technique

网络功能虚拟化(Network Function Virtualization，简称“NFV”)通过使用x86等通用性硬件以及虚拟化技术，使网络设备功能不再依赖于专用硬件，资源可以充分灵活共享，实现新业务的快速开发和部署，并基于实际业务需求进行自动部署、弹性伸缩、故障隔离和自愈等。Network Function Virtualization ("NFV") enables network device functions to be no longer dependent on dedicated hardware by using general-purpose hardware such as x86 and virtualization technology. Resources can be fully flexibly shared to enable rapid development of new services. Deploy and automate deployment, elastic scaling, fault isolation, and self-healing based on actual business needs.

2012年起，欧洲电信标准化协会(ETSI)(European Telecommunications Standards Institute)成立了NFV工作组，其所指定的NFV架构和基本流程已经被业界作为标准，在各个电信云化项目中进行了实施。Since 2012, the European Telecommunications Standards Institute (ETSI) has established the NFV working group, and its designated NFV architecture and basic processes have been adopted by the industry as standards and implemented in various telecom cloud projects.

在NFV架构中，NFV基础设施(NFVI，包括硬件和虚拟化平台)和虚拟化网络功能软件(VNF)间是分层解耦的，每一层都有自己的配置和维护界面和权限管理体系，都可以独立的修改自己的对象属性。在一般虚拟数据中心的建设流程中，先用硬件管理软件对硬件进行初始配置，包括服务器主机启动方式、交换网板的网络设置和冗余方式等，然后用虚拟化平台管理软件(VIM)对云平台的基础能力进行配置，包括虚拟数据中心的设置、虚拟网络的配置、虚拟存储的配置等，最后部署VNF时，VNF虚拟机(VM)的属性，由VNF通过模板自动配置或者创建VM时人工配置的方式设置到虚拟化平台。In the NFV architecture, NFV infrastructure (NFVI, including hardware and virtualization platforms) and virtualized network function software (VNF) are hierarchically decoupled. Each layer has its own configuration and maintenance interface and rights management system. , you can modify your own object properties independently. In the general virtual data center construction process, the hardware management software is used to initially configure the hardware, including the server host startup mode, the network configuration and redundancy mode of the switching network board, and then use the virtualization platform management software (VIM) pair. The basic capabilities of the cloud platform are configured, including the settings of the virtual data center, the configuration of the virtual network, and the configuration of the virtual storage. When the VNF is deployed, the attributes of the VNF virtual machine (VM) are automatically configured by the VNF or created by the VM. Manually configured to the virtualization platform.

但NFV架构中，NFVI中的虚拟化平台、硬件和VNF间配置和维护界面相互独立，可以由不同部门的人员负责维护，权限管理相互独立，缺乏相关的数据关联性校验机制，在某些工程活动(增加新的VNF、网络改造、云资源池扩容、硬件扩容、硬件更换、***故障恢复等)中，或者误操作，某层数据被改动后不会通知上下层，存在影响VNF服务的风险，或者存在某些故障发生后因为数据改动导致可靠性措施失效，从而影响VNF服务的隐患。However, in the NFV architecture, the virtualization platform, hardware and VNF configuration and maintenance interfaces in NFVI are independent of each other, and can be maintained by personnel of different departments. The rights management is independent of each other, and there is no relevant data correlation verification mechanism. In the engineering activities (adding new VNF, network transformation, cloud resource pool expansion, hardware expansion, hardware replacement, system failure recovery, etc.), or misoperation, a layer of data is changed and will not notify the upper and lower layers, and there is an impact on the VNF service. Risk, or the failure of reliability measures due to data changes after some faults occur, thus affecting the hidden dangers of VNF services.

发明内容Summary of the invention

本发明提供了一种网络功能虚拟化架构数据检查的方法和装置，能够减少业务损失。The invention provides a method and device for checking network data virtualization architecture data, which can reduce service loss.

第一方面，提供了一种网络功能虚拟化架构中数据检查的装置，该装置包括：确定模块，用于确定查询对象的数据检查描述文件，该数据检查描述文件包括该查询对象的标识、该查询对象所在的目标单元、查询脚本和解析脚本，其中，该目标单元属于该NFV架构，该查询脚本用于检查该查询对象，该解析脚本用于解析该查询对象的检查结果；检查模块，用于根据该确定模块确定的该数据检查描述文件，确定该目标单元中该查询对象的实时配置信息；处理模块，用于当该检查模块确定的实时配置信息与初始配置信息不一致时，确定该查询对象在该目标单元中的数据检查结果异常。The first aspect provides a device for checking data in a network function virtualization architecture, where the device includes: a determining module, configured to determine a data check description file of the query object, where the data check description file includes an identifier of the query object, Querying a target unit, a query script, and a parsing script, where the target unit belongs to the NFV architecture, the query The script is used to check the query object, and the parsing script is configured to parse the check result of the query object; the check module is configured to determine, according to the data check description file determined by the determining module, real-time configuration information of the query object in the target unit. And a processing module, configured to determine that the data check result of the query object in the target unit is abnormal when the real-time configuration information determined by the check module is inconsistent with the initial configuration information.

结合第一方面，在第一方面的一种实现方式中，该确定模块具体用于：In combination with the first aspect, in an implementation manner of the first aspect, the determining module is specifically configured to:

根据该NFV架构中的虚拟化网络功能软件的描述文件VNFD，确定查询对象的数据检查描述文件。The data check description file of the query object is determined according to the description file VNFD of the virtualized network function software in the NFV architecture.

结合第一方面及其上述实现方式，在第一方面的另一种实现方式中，该数据检查描述文件位于该VNFD中。In conjunction with the first aspect and the above implementation thereof, in another implementation of the first aspect, the data check description file is located in the VNFD.

结合第一方面及其上述实现方式，在第一方面的另一种实现方式中，该VNFD包括虚拟部署单元，该虚拟部署单元包括检查参数信息，该检查参数信息用于指示该数据检查描述文件。In conjunction with the first aspect and the foregoing implementation manner, in another implementation manner of the first aspect, the VNFD includes a virtual deployment unit, where the virtual deployment unit includes check parameter information, where the check parameter information is used to indicate the data check description file. .

结合第一方面及其上述实现方式，在第一方面的另一种实现方式中，该检查模块具体用于：根据该数据检查描述文件，周期性确定该目标单元中该查询对象的该实时配置信息。In combination with the first aspect and the foregoing implementation manner, in another implementation manner of the first aspect, the checking module is specifically configured to periodically determine the real-time configuration of the query object in the target unit according to the data check description file. information.

结合第一方面及其上述实现方式，在第一方面的另一种实现方式中，该处理模块还用于：当该实时配置信息和该初始配置信息不一致时，生成检查报告，该检查报告用于指示数据检查结果异常。In combination with the first aspect and the foregoing implementation manner, in another implementation manner of the first aspect, the processing module is further configured to: when the real-time configuration information and the initial configuration information are inconsistent, generate an inspection report, where the inspection report is used The result of the data check is abnormal.

结合第一方面及其上述实现方式，在第一方面的另一种实现方式中，该检查模块还用于：根据该数据检查描述文件中的该查询脚本，确定该目标单元中该查询对象的该实时配置信息。In combination with the first aspect and the foregoing implementation manner, in another implementation manner of the first aspect, the checking module is further configured to: determine, according to the query script in the data check description file, the query object in the target unit This real-time configuration information.

第二方面，提供了一种网络功能虚拟化架构中数据检查的方法，该方法包括：确定查询对象的数据检查描述文件，该数据检查描述文件包括该查询对象的标识、该查询对象所在的目标单元、查询脚本和解析脚本，其中，该目标单元属于该NFV架构，该查询脚本用于检查该查询对象，该解析脚本用于解析该查询对象的检查结果；根据该数据检查描述文件，确定该目标单元中该查询对象的实时配置信息；当该实时配置信息和初始配置信息不一致时，确定该查询对象在该目标单元中的数据检查结果异常。In a second aspect, a method for data checking in a network function virtualization architecture is provided, the method comprising: determining a data check description file of a query object, where the data check description file includes an identifier of the query object, and a target of the query object a unit, a query script, and a parsing script, wherein the target unit belongs to the NFV schema, the query script is configured to check the query object, and the parsing script is configured to parse the check result of the query object; and according to the data check description file, determine the Real-time configuration information of the query object in the target unit; when the real-time configuration information and the initial configuration information are inconsistent, it is determined that the data check result of the query object in the target unit is abnormal.

结合第二方面，在第二方面的一种实现方式中，该确定查询对象的数据检查描述文件，包括：根据该NFV架构中的虚拟化网络功能软件的描述文件VNFD，确定查询对象的数据检查描述文件。With reference to the second aspect, in an implementation manner of the second aspect, the determining a data check description file of the query object includes: determining a data check of the query object according to the description file VNFD of the virtualized network function software in the NFV architecture Description file.

结合第二方面及其上述实现方式，在第二方面的另一种实现方式中，该数据检查描述文件位于该VNFD中。In conjunction with the second aspect and the above implementation thereof, in another implementation of the second aspect, the data check description file is located in the VNFD.

结合第二方面及其上述实现方式，在第二方面的另一种实现方式中，该VNFD包括虚拟部署单元，该虚拟部署单元包括检查参数信息，该检查参数信息用于指示该数据检查描述文件。With reference to the second aspect and the foregoing implementation manner, in another implementation manner of the second aspect, the VNFD includes a virtual deployment unit, where the virtual deployment unit includes check parameter information, where the check parameter information is used to indicate the data check description file. .

结合第二方面及其上述实现方式，在第二方面的另一种实现方式中，该根据该数据检查描述文件，确定该目标单元中该查询对象的实时配置信息，包括：根据该数据检查描述文件，周期性确定该目标单元中该查询对象的该实时配置信息。 With reference to the second aspect and the foregoing implementation manner, in another implementation manner of the second aspect, determining the real-time configuration information of the query object in the target unit according to the data check description file, including: checking the description according to the data a file that periodically determines the real-time configuration information of the query object in the target unit.

结合第二方面及其上述实现方式，在第二方面的另一种实现方式中，该当该实时配置信息和初始配置信息不一致时，确定该查询对象在该目标单元中的数据检查结果异常，包括：当该实时配置信息和该初始配置信息不一致时，生成检查报告，该检查报告用于指示数据检查结果异常。With reference to the second aspect and the foregoing implementation manner, in another implementation manner of the second aspect, when the real-time configuration information and the initial configuration information are inconsistent, determining that the data check result of the query object in the target unit is abnormal, including When the real-time configuration information is inconsistent with the initial configuration information, an inspection report is generated, which is used to indicate that the data inspection result is abnormal.

结合第二方面及其上述实现方式，在第二方面的另一种实现方式中，该根据该数据检查描述文件，确定该目标单元中该查询对象的实时配置信息，包括：根据该数据检查描述文件中的该查询脚本，确定该目标单元中该查询对象的该实时配置信息。With reference to the second aspect and the foregoing implementation manner, in another implementation manner of the second aspect, determining the real-time configuration information of the query object in the target unit according to the data check description file, including: checking the description according to the data The query script in the file determines the real-time configuration information of the query object in the target unit.

基于上述技术方案，本发明实施例的网络功能虚拟化架构中数据检查的方法和装置，根据NFV架构中的VNFD，确定查询对象的数据检查描述文件，该数据检查描述文件包括查询对象的标识、查询对象所在的NFV架构中的目标单元、用于检查查询对象的查询脚本和解析查询对象的检查结果的解析脚本，根据该数据检查描述文件，确定目标单元中的查询对象的实时配置信息，当实时配置信息和初始配置信息不一致时，确定数据检查结果异常，可以避免因为数据改动导致可靠性措施失效，从而能够在NFVI或者VNF任何一方发生变化时，及时向***管理员提供告警和报告，提前发现***隐患，或者在发生故障时，用该功能排查是否NFVI的虚拟资源能力和VNF的虚拟资源需求不匹配导致的问题，提高问题定位效率，减少业务损失。Based on the foregoing technical solution, the method and apparatus for data checking in the network function virtualization architecture of the embodiment of the present invention determines a data check description file of the query object according to the VNFD in the NFV architecture, where the data check description file includes an identifier of the query object, A target unit in the NFV architecture in which the query object is located, a query script for checking the query object, and a parsing script for parsing the check result of the query object, and checking the description file according to the data to determine real-time configuration information of the query object in the target unit, when When the real-time configuration information and the initial configuration information are inconsistent, it is determined that the data check result is abnormal, and the reliability measure may be avoided due to the data modification, so that the alarm can be provided to the system administrator in time when the NFVI or VNF changes. If the system is hidden, or if the fault occurs, use this function to check whether the virtual resource capability of the NFVI and the virtual resource requirement of the VNF do not match, which improves the problem location efficiency and reduces service loss.

附图说明DRAWINGS

为了更清楚地说明本发明实施例的技术方案，下面将对本发明实施例中所需要使用的附图作简单地介绍，显而易见地，下面所描述的附图仅仅是本发明的一些实施例，对于本领域普通技术人员来讲，在不付出创造性劳动的前提下，还可以根据这些附图获得其他的附图。In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings to be used in the embodiments of the present invention will be briefly described below. It is obvious that the drawings described below are only some embodiments of the present invention, Those skilled in the art can also obtain other drawings based on these drawings without paying any creative work.

图1是根据本发明实施例的数据检查的方法的网络功能虚拟化NFV架构的示意性架构图。1 is a schematic architectural diagram of a network function virtualization NFV architecture of a method of data inspection according to an embodiment of the present invention.

图2是根据本发明实施例的NFV架构中数据检查的装置的示意性框图。2 is a schematic block diagram of an apparatus for data checking in an NFV architecture in accordance with an embodiment of the present invention.

图3是根据本发明实施例的NFV架构中数据检查的装置的另一示意性框图。3 is another schematic block diagram of an apparatus for data checking in an NFV architecture in accordance with an embodiment of the present invention.

图4是根据本发明实施例的NFV架构中数据检查的方法的示意性流程图。4 is a schematic flow chart of a method for data checking in an NFV architecture according to an embodiment of the present invention.

图5是根据本发明实施例的NFV架构中数据检查的装置的再一示意性框图。FIG. 5 is still another schematic block diagram of an apparatus for data checking in an NFV architecture according to an embodiment of the present invention.

具体实施方式detailed description

下面将结合本发明实施例中的附图，对本发明实施例中的技术方案进行清楚、完整地描述，显然，所描述的实施例是本发明的一部分实施例，而不是全部实施例。基于本发明中的实施例，本领域普通技术人员在没有做出创造性劳动的前提下所获得的所有其他实施例，都应属于本发明保护的范围。The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are a part of the embodiments of the present invention, but not all embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts shall fall within the scope of the present invention.

本发明的技术方案，该网络功能虚拟化架构可以通过各种通信***与用户设备之间传输业务报文，从而为用户设备提供服务，作为上述通信***，可以列举例如：全球移动通讯***(GSM，Global System of Mobile communication)，码分多址(CDMA，Code Division Multiple Access)***，宽带码分多址(WCDMA，Wideband Code Division Multiple Access Wireless)，通用分组无线业务(GPRS，General Packet Radio Service)，长期演进(LTE，Long Term Evolution)等。According to the technical solution of the present invention, the network function virtualization architecture can provide service services for the user equipment by transmitting service packets between the various communication systems and the user equipment. As the communication system, for example, a global mobile communication system (GSM) , Global System of Mobile communication), Code Division Multiple Access (CDMA, Code Division Multiple) Access) system, Wideband Code Division Multiple Access (WCDMA), General Packet Radio Service (GPRS), Long Term Evolution (LTE), and the like.

用户设备(UE，User Equipment)，也可称之为移动终端(Mobile Terminal)、移动用户设备等，可以经无线接入网(例如，RAN，Radio Access Network)与一个或多个核心网进行通信，用户设备可以是移动终端，如移动电话(或称为“蜂窝”电话)和具有移动终端的计算机，例如，可以是便携式、袖珍式、手持式、计算机内置的或者车载的移动装置，它们与无线接入网交换语言和/或数据。A User Equipment (UE), which may also be called a Mobile Terminal, a mobile user equipment, or the like, may communicate with one or more core networks via a radio access network (eg, RAN, Radio Access Network). The user equipment may be a mobile terminal, such as a mobile phone (or "cellular" phone) and a computer with a mobile terminal, for example, a portable, pocket, handheld, computer built-in or in-vehicle mobile device, The wireless access network exchanges languages and/or data.

下面，首先对本发明实施例的网络功能虚拟化***进行说明。Hereinafter, a network function virtualization system according to an embodiment of the present invention will be described first.

图1示出了适用本发明实施例的数据检查的方法的网络功能虚拟化NFV架构100的示意性架构图，该NFV架构可以通过多种网络实现，例如数据中心网络、服务提供者网络、或者局域网(LAN，Local Area Network)。如图1所示，该NFV架构100可以包括：1 shows a schematic architectural diagram of a network function virtualization NFV architecture 100 that is applicable to a method of data inspection in accordance with an embodiment of the present invention, which may be implemented over a variety of networks, such as a data center network, a service provider network, or Local area network (LAN). As shown in FIG. 1, the NFV architecture 100 can include:

管理和编制***(MANO，Management and Orchestration System)128，MANO, Management and Orchestration System 128,

基础设施(NFVI，NFV Infrastructure)130，Infrastructure (NFVI, NFV Infrastructure) 130,

多个虚拟网络功能(VNF)108，Multiple virtual network functions (VNF) 108,

多个网元管理***(EMS，Element Management System)122，Multiple Element Management System (EMS) 122,

服务、虚拟网络功能和基础设施描述(Service VNF and Infrastructure Description)***126，Service, Virtual Network Function and Infrastructure Description (Service VNF and Infrastructure Description) system 126,

一个或多个运营支撑***/业务支撑***(OSS/BSS，Operation Support System/Business Support System)124。One or more Operation Support System/Business Support System (OSS/BSS).

其中，MANO 128可以包括编制器(Orchestrator)102、一个或多个VNF管理器(VNF Manager)104，以及一个或多个虚拟化基础设施管理器(Virtualized Infrastructure Manager)106。The MANO 128 may include an Orchestrator 102, one or more VNF Managers 104, and one or more Virtualized Infrastructure Managers 106.

NFVI 130可以包括计算硬件112、存储硬件114、网络硬件116组成的硬件资源层、虚拟化层、以及虚拟计算110(例如，虚拟机)、虚拟存储118和虚拟网络120组成的虚拟资源层。其中，计算硬件112可以为专用的处理器或通用的用于提供处理和计算功能的处理器。存储硬件114用于提供存储能力，该存储能力可以是存储硬件114本身提供的(例如一台服务器的本地内存)，也可以通过网络提供(例如服务器通过网络连接一个网络存储设备)。网络硬件116可以是交换机、路由器和/或其他网络设备，网络硬件116用于实现多个设备之间的通信，多个设备之间通过无线或有线连接。NFVI130中的虚拟化层用于抽象硬件资源层的硬件资源，将VNF108和硬件资源所属的物理层解耦，向VNF提供虚拟资源。The NFVI 130 may include a computing hardware 112, storage hardware 114, a hardware resource layer composed of network hardware 116, a virtualization layer, and a virtual resource layer composed of virtual computing 110 (eg, virtual machine), virtual storage 118, and virtual network 120. The computing hardware 112 can be a dedicated processor or a general purpose processor for providing processing and computing functions. The storage hardware 114 is configured to provide storage capabilities, which may be provided by the storage hardware 114 itself (eg, a server's local memory), or may be provided over a network (eg, the server connects to a network storage device over a network). Network hardware 116 may be a switch, router, and/or other network device, and network hardware 116 is used to enable communication between multiple devices, with wireless or wired connections between multiple devices. The virtualization layer in NFVI130 is used to abstract the hardware resources of the hardware resource layer, decouple the VNF 108 from the physical layer to which the hardware resources belong, and provide virtual resources to the VNF.

如图1所示，虚拟资源可以包括虚拟计算110、虚拟存储118和虚拟网络120。虚拟计算110、虚拟存储118可以以虚拟机或其他虚拟容器的形式向VNF108提供虚拟资源，例如一个或多个VNF108可以部署在一台虚拟机上。虚拟化层通过抽象网络硬件116形成虚拟网络120。虚拟网络120，例如虚拟交换机(例如，Vswitches)，用于实现多个虚拟机之间，或多个承载VNF的其他类型的虚拟容器之间的通信。网络硬件的虚拟化可以通过虚拟LAN(VLAN，Vritual LAN)、虚拟专用局域网业务(VPLS，Virtual Private LAN Service)、虚拟可扩展局域网(VxLAN，Virtual eXtensible Local Area Network)或通用路由封装网络虚拟化(NVGRE，Nerwork Virtualizat ion using Generic Routing Encapsulation)等技术实现。As shown in FIG. 1, virtual resources may include virtual computing 110, virtual storage 118, and virtual network 120. Virtual computing 110, virtual storage 118 may provide virtual resources to VNF 108 in the form of virtual machines or other virtual containers, such as one or more VNFs 108 may be deployed on a virtual machine. The virtualization layer forms a virtual network 120 through abstract network hardware 116. A virtual network 120, such as a virtual switch (eg, Vswitches), is used to implement multiple virtual machines, or multiple Communication between other types of virtual containers carrying VNF. Virtualization of network hardware can be virtualized by virtual LAN (VLAN, Virtual Private LAN), Virtual Private LAN Service (VLSLAN), Virtual eXtensible Local Area Network (VxLAN), or general routing encapsulation network ( NVGRE, Nerwork Virtualizat ion using Generic Routing Encapsulation) and other technical implementations.

OSS/BSS124主要面向电信运营商，提供综合的网络管理和业务运营功能，包括网络管理(例如故障监控、网络信息收集等)、计费管理以及客户服务管理等。Service VNF and Infrastructure Descript ion***126在ETSI GS NFV 002 v1.1.1标准中有详细介绍，本发明实施例在此不再赘述。OSS/BSS124 is mainly for telecom operators, providing comprehensive network management and service operation functions, including network management (such as fault monitoring, network information collection, etc.), billing management, and customer service management. The Service VNF and Infrastructure Description System 126 is described in detail in the ETSI GS NFV 002 v1.1.1 standard, and details are not described herein again.

MANO 128可以用于实现VNF 108和NFVI 130的监控和管理。编制器102可以与一个或多个VNF管理器104通信以实现与资源相关的请求、发送配置信息给VNF管理器104、以及收集VNF 108的状态信息。另外，编制器102还可以与虚拟化基础设施管理器106进行通信以实现资源分配，和/或实现虚拟化硬件资源的配置信息和状态信息的预留和交换。VNF管理器104可以用于管理一个或多个VNF 108，执行各种管理功能，例如初始化、更新、查询、和/或终止VNF 108。虚拟化基础设施管理器106可以用于控制和管理VNF108和计算硬件112、存储硬件114、网络硬件116、虚拟计算110、虚拟存储118、虚拟网络120的交互。例如，虚拟化基础设施管理器106可以用于执行资源向VNF 108的分配操作。VNF管理器104和虚拟化基础设施管理器106可以互相通信以交换虚拟化硬件资源配置和状态信息。 MANO 128 can be used to monitor and manage VNF 108 and NFVI 130. The compiler 102 can communicate with one or more VNF managers 104 to implement resource related requests, send configuration information to the VNF manager 104, and collect status information for the VNF 108. In addition, the compiler 102 can also communicate with the virtualization infrastructure manager 106 to enable resource allocation, and/or to implement provisioning and exchange of configuration information and status information for virtualized hardware resources. The VNF manager 104 can be used to manage one or more VNFs 108, performing various management functions, such as initializing, updating, querying, and/or terminating the VNF 108. The virtualization infrastructure manager 106 can be used to control and manage the interaction of the VNF 108 and computing hardware 112, storage hardware 114, network hardware 116, virtual computing 110, virtual storage 118, virtual network 120. For example, the virtualization infrastructure manager 106 can be used to perform resource allocation operations to the VNF 108. The VNF manager 104 and the virtualization infrastructure manager 106 can communicate with each other to exchange virtualized hardware resource configuration and status information.

NFVI 130包含硬件和软件，二者共同建立虚拟化环境以部署、管理和执行VNF108。换句话说，硬件资源层和虚拟资源层用于向VNF108提供虚拟资源，例如虚拟机和/或其他形式的虚拟容器。 NFVI 130 includes both hardware and software that together create a virtualized environment to deploy, manage, and execute VNF 108. In other words, the hardware resource layer and the virtual resource layer are used to provide virtual resources, such as virtual machines and/or other forms of virtual containers, to the VNF 108.

图2示出了根据本发明实施例的网络功能虚拟化NFV架构数据检查的装置200的示意性框图，该装置200可以作为一个独立的工具使用，也可以将该装置中的各部分模块集成在NFV架构的软件***中，例如VNF管理器(VNFM)104或NFV编制器(NFVO)102等，本发明并不限于此。如图2所示，该装置200包括：2 is a schematic block diagram of an apparatus 200 for network function virtualization NFV architecture data inspection according to an embodiment of the present invention. The apparatus 200 can be used as a stand-alone tool, or various modules in the apparatus can be integrated in In the software system of the NFV architecture, such as the VNF Manager (VNFM) 104 or the NFV Compiler (NFVO) 102, etc., the present invention is not limited thereto. As shown in FIG. 2, the apparatus 200 includes:

确定模块210，用于确定查询对象的数据检查描述文件，该数据检查描述文件包括该查询对象的标识、该查询对象所在的目标单元、查询脚本和解析脚本，其中，该目标单元属于该NFV架构，该查询脚本用于检查该查询对象，该解析脚本用于解析该查询对象的检查结果；The determining module 210 is configured to determine a data check description file of the query object, where the data check description file includes an identifier of the query object, a target unit where the query object is located, a query script, and a parsing script, wherein the target unit belongs to the NFV architecture The query script is used to check the query object, and the parsing script is used to parse the check result of the query object;

检查模块220，用于根据该确定模块确定的该数据检查描述文件，确定该目标单元中该查询对象的实时配置信息；The checking module 220 is configured to determine real-time configuration information of the query object in the target unit according to the data check description file determined by the determining module;

处理模块230，用于当该检查模块确定的实时配置信息与初始配置信息不一致时，确定该查询对象在该目标单元中的数据检查结果异常。The processing module 230 is configured to determine that the data check result of the query object in the target unit is abnormal when the real-time configuration information determined by the check module is inconsistent with the initial configuration information.

因此，本发明实施例的网络功能虚拟化架构中数据检查的装置，确定查询对象的数据检查描述文件，该数据检查描述文件包括查询对象的标识、查询对象所在的NFV架构中的目标单元、用于检查查询对象的查询脚本和解析查询对象的检查结果的解析脚本，根据该数据检查描述文件，确定目标单元中的查询对象的实时配置信息，当实时配置信息与初始配置信息不一致时，确定数据检查结果异常，从而能够在NFVI或者VNF任何一方发生变化时，及时向***管理员提供告警和报告，提前发现***隐患，或者在发生故障时，用该功能排查是否NFVI的虚拟资源能力和VNF的虚拟资源需求不匹配导致的问题，提高问题定位效率，减少业务损失。Therefore, the device for checking data in the network function virtualization architecture of the embodiment of the present invention determines a data check description file of the query object, where the data check description file includes an identifier of the query object, a target unit in the NFV architecture where the query object is located, and a query script for checking the query script of the query object and parsing the check result of the query object, according to the data check Check the description file to determine the real-time configuration information of the query object in the target unit. When the real-time configuration information is inconsistent with the initial configuration information, determine that the data check result is abnormal, so that the system administrator can be timely when the NFVI or VNF changes. Provide alarms and reports to detect system hazards in advance, or use this function to check whether the virtual resource capabilities of NFVI and the virtual resource requirements of VNF do not match each other during faults, improve problem location efficiency, and reduce business losses.

在本发明实施例中，该数据检查装置的确定模块210确定查询对象的数据检查描述文件，该数据检查描述文件包括该查询对象的标识、该查询对象所在的目标单元、查询脚本和解析脚本。具体地，确定模块210可以在NFV架构中的虚拟化网络功能软件的描述文件VNFD中描述的VNF属性中确定部分或全部属性作为查询对象，也可以由确定模块210通过采集数据确定查询对象，本发明并不限于此。可选地，可以通过用户设置具体哪些属性作为查询对象，例如可以将CPU类型，或者内存类型作为查询对象，本发明并不限于此。针对每一个或每一类查询对象，确定目标单元，即数据检查针对该目标单元中的查询对象进行查询；确定查询脚本，该查询脚本为用于检查该查询对象使用的脚本；确定解析脚本，该解析脚本为用于对数据检查的结果进行解析。In the embodiment of the present invention, the determining module 210 of the data checking apparatus determines a data check description file of the query object, where the data check description file includes an identifier of the query object, a target unit where the query object is located, a query script, and a parsing script. Specifically, the determining module 210 may determine some or all of the attributes in the VNF attributes described in the description file VNFD of the virtualized network function software in the NFV architecture as the query object, or may determine the query object by collecting the data by the determining module 210. The invention is not limited to this. Optionally, specific attributes may be set by the user as the query object, for example, the CPU type or the memory type may be used as the query object, and the present invention is not limited thereto. Determining a target unit for each or each type of query object, that is, the data check queries the query object in the target unit; determining a query script, the query script is a script used to check the query object; determining a parsing script, The parsing script is used to parse the result of the data check.

在本发明实施例中，根据该NFV架构的VNFD，由确定模块210确定的查询对象、目标单元、查询脚本和解析脚本，生成查询对象的数据检查描述文件(Data Checking Descriptor，简称“DCD”)，该DCD包括用于指示该查询对象的查询对象的标识、目标单元、查询脚本和解析脚本。例如，假设查询对象设置为中央处理器(CPU)类型、虚拟化CPU(Virtualization CPU，简称VCPU)频率、内存类型和HA转换，查询对象均为VIM，查询脚本使用虚拟机(VM)名称作为参数，则对于每个查询对象的DCD分别如表1所示：In the embodiment of the present invention, according to the VNFD of the NFV architecture, the query object, the target unit, the query script, and the parsing script determined by the determining module 210 generate a Data Checking Descriptor ("DCD") for the query object. The DCD includes an identifier, a target unit, a query script, and a parsing script for indicating a query object of the query object. For example, suppose the query object is set to the central processing unit (CPU) type, virtualization CPU (VCPU) frequency, memory type, and HA conversion. The query object is VIM, and the query script uses the virtual machine (VM) name as a parameter. , the DCD for each query object is shown in Table 1:

表1Table 1

可选地，在本发明实施例中，可以通过VNFD索引该DCD。具体地，可以在VNFD中的虚拟部署单元(Virtual Deployment Unit，简称“VDU”)增加检查参数，该检查参数用于指示该DCD，根据检查参数索引到DCD中的标识及需要的相关参数。例如，如表2所示，按照DCD中定义的查询对象，例如表1所示的检查对象为CPU类型和内存类型，即Check_CPU_Type和Check_Memroy_Type，检查脚本输入的参数都是为vc_id，即VNFC(VNF Component，VNF部件)的ID，也就是VM的名称，检查参数可以表示如表2所示，但本发明并不限于此。Optionally, in the embodiment of the present invention, the DCD can be indexed by VNFD. Specifically, the virtual deployment unit (VDU) in the VNFD may be added with a check parameter, which is used to indicate the DCD, and the identifier in the DCD and the required related parameters are indexed according to the check parameter. For example, as shown in Table 2, according to the query object defined in the DCD, for example, the check object shown in Table 1 is the CPU type and the memory type, that is, Check_CPU_Type and Check_Memroy_Type, and the parameters input by the check script are all vc_id, that is, VNFC (VNF). Component, VNF Department The ID of the piece, that is, the name of the VM, the check parameter can be expressed as shown in Table 2, but the present invention is not limited thereto.

表2Table 2

在本发明实施例中，根据确定模块210确定的该数据检查描述文件，由检查模块220确定该目标单元中该查询对象的实时配置信息。可选地，检查模块220确定的实时配置信息也包括确定初始配置信息，或者也可以称为基线配置信息，例如，在某个被认为是NFV架构完全配置正确的时刻，可以启动第一次数据查询，获得第一次检查的实时配置信息，并可以把该查询得到的结果作为查询对象的初始配置信息，本发明并不限于此。可选地，某个被认为是NFV架构完全配置正确的时刻，可以为***正常提供业务的某个时刻，也可以为验收后的某个时刻，本发明并不限于此。In the embodiment of the present invention, according to the data check description file determined by the determining module 210, the real-time configuration information of the query object in the target unit is determined by the checking module 220. Optionally, the real-time configuration information determined by the checking module 220 also includes determining initial configuration information, or may also be referred to as baseline configuration information. For example, when a certain NFV architecture is completely configured correctly, the first data may be started. The query obtains the real-time configuration information of the first check, and can obtain the result obtained by the query as the initial configuration information of the query object, and the present invention is not limited thereto. Optionally, a moment that is considered to be completely configured correctly by the NFV architecture may be a certain moment when the system normally provides services, or may be a certain moment after the acceptance, and the present invention is not limited thereto.

可选地，检查模块220确定实时配置信息可以每次确定单个查询对象的实时配置信息，也可以同时对多个检查对象确定实时配置信息，本发明并不限于此。Optionally, the checking module 220 determines that the real-time configuration information may determine real-time configuration information of a single query object each time, and may also determine real-time configuration information for multiple check objects at the same time, and the present invention is not limited thereto.

可选地，在本发明实施例中，如果初始配置信息被更改且被认为更改是必须的、正确的，可以针对被修改配置的若干个查询对象进行再一次实时查询和存储，所查询到的结果作为查询对象的新的初始配置信息，即初始配置信息可以进行更新，但本发明并不限于此。具体地，可以周期性更新该初始配置信息，例如，每隔半天，将检查模块220确定的实时配置信息确定为初始配置信息，并更新原有的初始配置信息；或者可以随时更新初始配置信息，将特定的某次确定的实时配置信息确定为初始配置信息，本发明并不限于此。Optionally, in the embodiment of the present invention, if the initial configuration information is changed and it is considered that the change is necessary and correct, the real-time query and storage may be performed for the plurality of query objects of the modified configuration, and the queried As a result, the new initial configuration information as the query object, that is, the initial configuration information can be updated, but the present invention is not limited thereto. Specifically, the initial configuration information may be periodically updated. For example, every half day, the real-time configuration information determined by the checking module 220 is determined as initial configuration information, and the original initial configuration information is updated; or the initial configuration information may be updated at any time. The specific certain determined real-time configuration information is determined as the initial configuration information, and the present invention is not limited thereto.

在本发明实施例中，检查模块220确定实时配置信息，该实时配置信息可以为初始配置信息，可以根据查询对象的DCD向目标单元发送构造的具体查询脚本，根据目标单元响应的查询结果，确定初始配置信息和实时配置信息。例如，对于表1中查询对象为CPU类型和内存类型的两个例子，使用Get CPU type和Get memory type对VIM进行查询，假设VM名称为“vm1”，则构造出的查询脚本可以为：Get CPU type:VM＝”vm1”和Get memory type:VM＝”vm1”。VIM根据该查询脚本而返回的结果中包含CPU type和Memory type字段，例如可以为CPU type＝”CPU_type_A”和Memory type＝”DDR_4”，则”CPU_type_A”和”DDR_4”分别作为vm1的实时配置信息并存储该实时配置信息，例如可以存储到数据库模块。如果该次检查为第一次检查，则可以将检查结果作为初始配置信息。In the embodiment of the present invention, the checking module 220 determines real-time configuration information, which may be initial configuration information, may send a specific query script constructed according to the DCD of the query object to the target unit, and determine according to the query result of the target unit response. Initial configuration information and real-time configuration information. For example, for the two examples in Table 1, the query object is the CPU type and the memory type, use the Get CPU type and the Get memory type to query the VIM. If the VM name is "vm1", the constructed query script can be: Get CPU type: VM = "vm1" and Get memory type: VM = "vm1". The result returned by VIM according to the query script includes the CPU type and Memory type fields, for example, CPU type=”CPU_type_A” and Memory type=”DDR_4”, and “CPU_type_A” and “DDR_4” respectively serve as real-time configuration information of vm1. And storing the real-time configuration information, for example, can be stored in a database module. If the check is the first check, the check result can be used as the initial configuration information.

可选地，作为一个实施例，对于上述检查模块220确定的实时配置信息，可以将其作为初始配置信息，而将之后的检查作为与初始配置信息对比的实施配置信息，可选地，可以周期性地确定实时配置信息，也可以随时由用户触发确定实时配置信息，例如，同样地，可以使用Get CPU type和Get memory type对VIM进行查询，假设VM名称为“vm1”，则构造出的查询脚本为：Get CPU type:VM＝”vm1”和Get memory type:VM＝”vm1”。VIM返回的结果中包含CPU type和Memory type字段，比如CPU type＝”CPU_type_B”和Memory type＝”DDR_4”，则”CPU_type_B”和”DDR_4”为实时配置信息。Optionally, as an embodiment, the real-time configuration information determined by the foregoing checking module 220 may be used as initial configuration information, and the subsequent check may be used as implementation configuration information compared with the initial configuration information, optionally, may be cycled. The real-time configuration information can be determined by the user, and the real-time configuration information can be determined by the user at any time. For example, the VIM can be queried by using the Get CPU type and the Get memory type, and the VM name is “vm1”, The query script is: Get CPU type: VM = "vm1" and Get memory type: VM = "vm1". The result returned by VIM includes CPU type and Memory type fields, such as CPU type=“CPU_type_B” and Memory type=”DDR_4”, then “CPU_type_B” and “DDR_4” are real-time configuration information.

在本发明实施例中，当检查模块220根据检查结果获得的该实时配置信息和初始配置信息不一致时，处理模块230确定该查询对象在该目标单元中的数据检查结果异常。将确定的实时配置信息和初始配置信息进行对比，当两者不相同时，确定检查结果为异常，可以认为目标单元的相关数据发生变化，可以通过发送用于指示检查结果异常的检查报告通知***管理员，例如，可以通过告警信息或者检查报告的方式通知***管理员异常信息或者检查结果。例如，根据上面的例子，确定的初始配置信息为“CPU_type_A”和”DDR_4”，实时配置信息为”CPU_type_B”和”DDR_4”，将初始配置信息和实时信息进行比较，发现CPU类型不同，则可以确定数据检查结果为异常，并可以通过告警信息或者检查报告的方式通知***管理员存在异常信息。又例如，检查模块220确定的实时配置信息和初始配置信息对比，检查到VIM中由于直接修改某个正在运行的VM的VCPU主频，如果这种修改会导致该VM无法获得足够的CPU处理能力，进而导致VNF无法正常提供业务服务，那么此时检查模块220确定的实时配置信息和初始配置信息会显示不一致，处理模块230将该检查结果反馈到***管理员处，管理员及时发现，则可以及时进行相应的修改，避免VNF无法正常提供业务服务。In the embodiment of the present invention, when the real-time configuration information obtained by the checking module 220 according to the check result is inconsistent with the initial configuration information, the processing module 230 determines that the data check result of the query object in the target unit is abnormal. The determined real-time configuration information is compared with the initial configuration information. When the two are different, the check result is determined to be abnormal, and the related data of the target unit may be changed, and the system may be notified by sending an inspection report indicating that the inspection result is abnormal. The administrator, for example, can notify the system administrator of abnormal information or check the result by means of alarm information or inspection report. For example, according to the above example, the initial configuration information determined is “CPU_type_A” and “DDR_4”, and the real-time configuration information is “CPU_type_B” and “DDR_4”, and the initial configuration information is compared with the real-time information, and it is found that the CPU type is different. The data check result is abnormal, and the system administrator may be notified of the abnormality by using the alarm information or the check report. For another example, the real-time configuration information determined by the checking module 220 is compared with the initial configuration information, and it is checked that the VCPU frequency of the running VM is directly modified in the VIM, and if the modification causes the VM to fail to obtain sufficient CPU processing capability. Therefore, the VNF cannot provide the service service normally. Then, the real-time configuration information and the initial configuration information determined by the check module 220 are inconsistent, and the processing module 230 feeds back the check result to the system administrator, and the administrator can find it in time. Make appropriate changes in time to prevent VNF from providing business services.

可选地，对数据检查可以为周期性检查或随机检查。周期性检查，可也为定时检查，例如可以设置一小时或若干小时进行一次检查，可以定时确定实时配置信息，将周期性确定实时配置信息与初始配置信息进行对比，从而实现周期性数据检查。周期性检查可以用于发现暂没有导致***的层间配置不一致、预防配置不一致而导致VNF服务异常。Alternatively, the data check can be a periodic check or a random check. The periodic check can also be a timed check. For example, it can be set to check for one hour or several hours. The real-time configuration information can be determined periodically, and the real-time configuration information can be periodically determined to be compared with the initial configuration information to implement periodic data check. The periodic check can be used to find that the inter-layer configuration of the system is inconsistent and prevent the configuration from being inconsistent and the VNF service is abnormal.

可选地，还可以随机检查，由用户随机触发检查，可以随时启动，随时获取实时配置信息，并与初始配置信息进行对比检查。随机检查可以用于在VNF服务出现异常时，立即检查是否由实时配置信息与配置数据信息不一致所导致的问题，能够提高问题定位的速度，减少业务损失。Optionally, the user may also randomly check, and the user randomly triggers the check, and can be started at any time to obtain real-time configuration information at any time, and compare and check with the initial configuration information. The random check can be used to immediately check whether the real-time configuration information is inconsistent with the configuration data information when the VNF service is abnormal, which can improve the speed of problem location and reduce service loss.

应理解，根据本发明实施例的网络功能虚拟化架构中数据检查的装置100可对应于执行本发明实施例中的方法300，并且网络功能虚拟化架构中数据检查的装置100中的各个模块的上述和其它操作和/或功能分别为了实现图4中的各个方法的相应流程，为了简洁，在此不再赘述。It should be understood that the apparatus 100 for data checking in the network function virtualization architecture according to the embodiment of the present invention may correspond to the method 300 in the embodiment of the present invention, and the modules in the apparatus 100 for data checking in the network function virtualization architecture. The above and other operations and/or functions are respectively implemented in order to implement the corresponding processes of the respective methods in FIG. 4, and are not described herein again for brevity.

因此，本发明实施例的网络功能虚拟化架构中数据检查的装置，确定查询对象的数据检查描述文件，该数据检查描述文件包括查询对象的标识、查询对象所在的NFV架构中的目标单元、用于检查查询对象的查询脚本和解析查询对象的检查结果的解析脚本，根据该数据检查描述文件，确定目标单元中的查询对象的实时配置信息，当实时配置信息与初始配置信息不一致时，确定数据检查结果异常，从而能够在NFVI或者VNF任何一方发生变化时，及时向***管理员提供告警和报告，提前发现***隐患，或者在发生故障时，用该功能排查是否NFVI的虚拟资源能力和VNF的虚拟资源需求不匹配导致的问题，提高问题定位效率，减少业务损失。可选地，作为一个实施例，图3示出了根据本发明实施例的NFV架构数据检查的装置的另一示意性框图，该装置300可以作为一个独立的工具使用。如图3所示，该装置300包括：描述文件读取模块310、脚本模块320、数据库模块330、配置对比模块340以及接口模块350，其中，接口模块350可以指多个接口模块，例如可以包括三个接口模块，分别为第一接口模块351、第二接口模块352和第三接口模块353。Therefore, the device for checking data in the network function virtualization architecture of the embodiment of the present invention determines a data check description file of the query object, where the data check description file includes an identifier of the query object, a target unit in the NFV architecture where the query object is located, and The query script for checking the query object and the parsing script for parsing the check result of the query object, according to the data check description file, determining the real-time configuration information of the query object in the target unit, and determining the data when the real-time configuration information is inconsistent with the initial configuration information. The check result is abnormal, so that when the NFVI or VNF changes, it can provide alarms and reports to the system administrator in time, discover the hidden dangers in advance, or use this function to check whether the NFVI is virtual. The problem caused by the mismatch between the resource requirements and the virtual resource requirements of the VNF improves the problem location efficiency and reduces business losses. Alternatively, as an embodiment, FIG. 3 illustrates another schematic block diagram of an apparatus for NFV architecture data inspection in accordance with an embodiment of the present invention, which apparatus 300 can be used as a stand-alone tool. As shown in FIG. 3, the apparatus 300 includes: a description file reading module 310, a script module 320, a database module 330, a configuration comparison module 340, and an interface module 350. The interface module 350 may refer to multiple interface modules, for example, may include The three interface modules are a first interface module 351, a second interface module 352, and a third interface module 353, respectively.

在本发明实施例中，该NFV架构数据检查的装置的描述文件读取模块310可以用于读取NFV架构中的VNFD中描述的VNF属性，并且由脚本模块320将其中部分或全部属性确定作为查询对象，即该脚本模块320可以对应与本发明实施例的NFV架构数据检查的装置200中的确定模块210。具体地，可以通过用户设置具体哪些属性作为查询对象，例如可以将CPU类型，或者内存类型作为查询对象，并且，针对每一个或每一类查询对象，脚本模块320确定目标单元，即数据检查针对该目标单元中的查询对象进行查询；确定查询脚本，该查询脚本为用于检查该查询对象使用的脚本；确定解析脚本，该解析脚本为用于对数据检查的结果进行解析。In the embodiment of the present invention, the profile reading module 310 of the device for checking the NFV architecture data may be configured to read the VNF attribute described in the VNFD in the NFV architecture, and the script module 320 determines some or all of the attributes as The query object, ie, the script module 320, may correspond to the determination module 210 in the device 200 of the NFV architecture data check of the embodiment of the present invention. Specifically, the user can set specific properties as the query object, for example, the CPU type or the memory type can be used as the query object, and for each or each type of query object, the script module 320 determines the target unit, that is, the data check is The query object in the target unit performs a query; determines a query script, which is a script used to check the query object; and determines a parsing script, which is used to parse the result of the data check.

在本发明实施例中，根据描述文件读取模块310读取的该NFV架构的VNFD，由脚本模块320确定的查询对象、目标单元、查询脚本和解析脚本，生成查询对象的DCD，该DCD包括用于指示该查询对象的查询对象的标识、目标单元、查询脚本和解析脚本。例如，假设查询对象设置为中央处理器(CPU)类型、虚拟化CPU频率、内存类型和HA转换，查询对象均为VIM，查询脚本使用虚拟机(VM)名称作为参数，则对于每个查询对象的DCD分别如表1所示。In the embodiment of the present invention, according to the VNFD of the NFV architecture read by the description file reading module 310, the query object, the target unit, the query script and the parsing script determined by the script module 320 generate a DCD of the query object, and the DCD includes An identifier, a target unit, a query script, and a parsing script for the query object that indicates the query object. For example, suppose the query object is set to the central processing unit (CPU) type, virtualized CPU frequency, memory type, and HA conversion, the query object is VIM, and the query script uses the virtual machine (VM) name as the parameter, then for each query object. The DCDs are shown in Table 1.

可选地，在本发明实施例中，可以通过VNFD索引该DCD。具体地，可以在VNFD中的VDU增加检查参数，该检查参数用于指示该DCD，根据检查参数索引到DCD中的标识及需要的相关参数。例如，如表2所示，按照DCD中定义的查询对象，例如表1所示的检查对象为CPU类型和内存类型，即Check_CPU_Type和Check_Memroy_Type，检查脚本输入的参数都是为vc_id，即VNFC的ID，也就是VM的名称，检查参数可以表示如表2所示，但本发明并不限于此。Optionally, in the embodiment of the present invention, the DCD can be indexed by VNFD. Specifically, a check parameter may be added to the VDU in the VNFD, the check parameter is used to indicate the DCD, and the identifier in the DCD and the required related parameters are indexed according to the check parameter. For example, as shown in Table 2, according to the query object defined in the DCD, for example, the check object shown in Table 1 is the CPU type and the memory type, that is, Check_CPU_Type and Check_Memroy_Type, and the parameters input by the check script are all vc_id, that is, the ID of the VNFC. That is, the name of the VM, and the check parameter can be expressed as shown in Table 2, but the present invention is not limited thereto.

可选地，脚本模块320确定的数据检查描述文件可以存储在数据库模块330中。Alternatively, the data check description file determined by the script module 320 may be stored in the database module 330.

在本发明实施例中，根据确定的查询对象，由脚本模块320确定实时配置信息，此时，该脚本模块320可以对应于本发明实施例的NFV架构数据检查的装置200中的检查模块220。具体地，在某个被认为是NFV架构完全配置正确的时刻，可以启动第一次数据查询，获得第一次检查的实时配置信息，并可以把该查询得到的结果作为查询对象的初始配置信息。脚本模块320将在数据库模块330中读取的查询脚本等信息，通过接口模块350向查询对象发送，例如，该使用Get CPU type和Get memory type对VIM进行查询，假设VM名称为“vm1”，则构造出的查询脚本为：Get CPU type:VM＝”vm1”和Get memory type:VM＝”vm1”。接口模块350中的第一接口模块351与VIM相连，第二接口模块352与硬件管理软件相连，第三接口模块352与VNFM相连，由于询对象为VIM时，可以通过第一接口模块351向VIM发送查询脚本。VIM返回的结果中包含CPU type和Memory type字段，比如CPU type＝”CPU_type_A”和Memory type＝”DDR_4”，通过第一接口模块351返回，则“CPU_type_A”和“DDR_4”分别作为vm1的初始配置存储入数据库模块330中。In the embodiment of the present invention, the real-time configuration information is determined by the script module 320 according to the determined query object. At this time, the script module 320 may correspond to the check module 220 in the device 200 for NFV architecture data check according to the embodiment of the present invention. Specifically, when a certain NFV architecture is completely configured correctly, the first data query can be started, the real-time configuration information of the first check is obtained, and the result obtained by the query can be used as the initial configuration information of the query object. . The script module 320 sends the information such as the query script read in the database module 330 to the query object through the interface module 350. For example, the VIM is queried using the Get CPU type and the Get memory type, and the VM name is assumed to be “vm1”. The query script constructed is: Get CPU type: VM = "vm1" and Get memory type: VM = "vm1". The first interface module 351 of the interface module 350 is connected to the VIM, the second interface module 352 is connected to the hardware management software, and the third interface module 352 is connected to the VNFM. When the object is VIM, the first interface module 351 can be used to VIM. Send check Ask the script. The result returned by the VIM includes a CPU type and a Memory type field, such as CPU type=“CPU_type_A” and Memory type=”DDR_4”, which are returned by the first interface module 351, and “CPU_type_A” and “DDR_4” are respectively used as initial configurations of vm1. It is stored in the database module 330.

在本发明实施例中，同样地，实时配置信息可以周期性的确定并存储至数据库模块330，或随时出发数据查询时，也可以将实时配置信息发送至数据库模块330中。例如，某一时刻，也使用Get CPU type和Get memory type对VIM进行查询，假设VM名称为“vm1”，则构造出的查询脚本为：Get CPU type:VM＝”vm1”和Get memory type:VM＝”vm1”。由于询对象为VIM，可以通过第一接口模块351，脚本模块330向VIM发送查询脚本。VIM返回的结果中包含CPU type和Memory type字段，比如CPU type＝”CPU_type_B”和Memory type＝”DDR_4”，则”CPU_type_B”和”DDR_4”为实时配置信息，可以将该实时配置信息保存到数据库模块330。In the embodiment of the present invention, the real-time configuration information may be periodically determined and stored in the database module 330, or the real-time configuration information may be sent to the database module 330 when the data query is started at any time. For example, at some point, the VIM is also queried using Get CPU type and Get memory type. If the VM name is "vm1", the query script constructed is: Get CPU type: VM = "vm1" and Get memory type: VM=”vm1”. Since the query object is a VIM, the script module 330 can send a query script to the VIM through the first interface module 351. The result returned by VIM includes CPU type and Memory type fields, such as CPU type=”CPU_type_B” and Memory type=”DDR_4”, then “CPU_type_B” and “DDR_4” are real-time configuration information, and the real-time configuration information can be saved to the database. Module 330.

在本发明实施例中，对于数据库模块330中保存的初始配置信息和实时配置信息，可以由配置对比模块340进行对比，此时，该配置对比模块340可以对应于本发明实施例的NFV架构数据检查的装置200中的处理模块230。当配置对比模块340根据检查结果获得的该实时配置信息和初始配置信息不一致时，确定该查询对象在该目标单元中的数据检查结果异常。配置对比模块340将确定的实时配置信息和初始配置信息进行对比，当两者不相同时，确定检查结果为异常，可以认为目标单元的相关数据发生变化，可以通过发送用于指示检查结果异常的检查报告通知***管理员，例如，可以通过告警信息或者检查报告的方式通知***管理员异常信息或者检查结果。例如，根据上面的例子，确定的初始配置信息为“CPU_type_A”和”DDR_4”，实时配置信息为”CPU_type_B”和”DDR_4”，将初始配置信息和实时信息进行比较，发现CPU类型不同，则可以确定数据检查结果为异常，并可以通过告警信息或者检查报告的方式通知***管理员存在异常信息。In the embodiment of the present invention, the initial configuration information and the real-time configuration information saved in the database module 330 may be compared by the configuration comparison module 340. In this case, the configuration comparison module 340 may correspond to the NFV architecture data of the embodiment of the present invention. The processing module 230 in the device 200 is inspected. When the real-time configuration information obtained by the configuration comparison module 340 according to the check result is inconsistent with the initial configuration information, it is determined that the data check result of the query object in the target unit is abnormal. The configuration comparison module 340 compares the determined real-time configuration information with the initial configuration information. When the two are different, the check result is determined to be abnormal, and the related data of the target unit may be changed, and may be sent to indicate that the check result is abnormal. The inspection report notifies the system administrator that, for example, the system administrator can notify the abnormal information or check the result by means of alarm information or inspection report. For example, according to the above example, the initial configuration information determined is “CPU_type_A” and “DDR_4”, and the real-time configuration information is “CPU_type_B” and “DDR_4”, and the initial configuration information is compared with the real-time information, and it is found that the CPU type is different. The data check result is abnormal, and the system administrator may be notified of the abnormality by using the alarm information or the check report.

应理解，根据本发明实施例的网络功能虚拟化架构中数据检查的装置200可对应于执行本发明实施例中的方法300，并且网络功能虚拟化架构中数据检查的装置300中的各个模块的上述和其它操作和/或功能分别为了实现图4中的各个方法的相应流程，为了简洁，在此不再赘述。It should be understood that the apparatus 200 for data checking in the network function virtualization architecture according to the embodiment of the present invention may correspond to the method 300 in the embodiment of the present invention, and the modules in the apparatus 300 for data checking in the network function virtualization architecture. The above and other operations and/or functions are respectively implemented in order to implement the corresponding processes of the respective methods in FIG. 4, and are not described herein again for brevity.

因此，本发明实施例的网络功能虚拟化架构中数据检查的装置，确定查询对象的数据检查描述文件，该数据检查描述文件包括查询对象的标识、查询对象所在的NFV架构中的目标单元、用于检查查询对象的查询脚本和解析查询对象的检查结果的解析脚本，根据该数据检查描述文件，确定目标单元中的查询对象的实时配置信息，当实时配置信息与初始配置信息不一致时，确定数据检查结果异常，从而能够在NFVI或者VNF任何一方发生变化时，及时向***管理员提供告警和报告，提前发现***隐患，或者在发生故障时，用该功能排查是否NFVI的虚拟资源能力和VNF的虚拟资源需求不匹配导致的问题，提高问题定位效率，减少业务损失。Therefore, the device for checking data in the network function virtualization architecture of the embodiment of the present invention determines a data check description file of the query object, where the data check description file includes an identifier of the query object, a target unit in the NFV architecture where the query object is located, and The query script for checking the query object and the parsing script for parsing the check result of the query object, according to the data check description file, determining the real-time configuration information of the query object in the target unit, and determining the data when the real-time configuration information is inconsistent with the initial configuration information. The inspection result is abnormal, so that when the NFVI or VNF changes, it can provide alarms and reports to the system administrator in time, discover the hidden dangers in advance, or use this function to check whether the virtual resource capability of NFVI and VNF are used in the event of a failure. The problems caused by the mismatch of virtual resource requirements improve the efficiency of problem location and reduce business losses.

图4示出了根据本发明实施例的网络功能虚拟化NFV架构数据检查的方法400的示意性流程图，该方法可以通过NFV架构数据检查装置执行，该装置可以独立作为一个工具，也可以集成在NFV架构的软件***中，例如VNF管理器(VNFM)104或NFV编制器(NFVO)102等，本发明并不限于此。如图4所示，该方法400包括：4 shows a schematic diagram of a method 400 of network function virtualization NFV architecture data inspection in accordance with an embodiment of the present invention. Flowchart, the method can be executed by an NFV architecture data checking device, which can be used as a tool independently or integrated in a software system of an NFV architecture, such as a VNF manager (VNFM) 104 or an NFV compiler (NFVO) 102, etc. The present invention is not limited to this. As shown in FIG. 4, the method 400 includes:

S410，确定查询对象的数据检查描述文件，该数据检查描述文件包括该查询对象的标识、该查询对象所在的目标单元、查询脚本和解析脚本，其中，该目标单元属于该NFV架构，该查询脚本用于检查该查询对象，该解析脚本用于解析该查询对象的检查结果；S410. Determine a data check description file of the query object, where the data check description file includes an identifier of the query object, a target unit where the query object is located, a query script, and a parsing script, where the target unit belongs to the NFV architecture, and the query script Used to check the query object, the parsing script is used to parse the check result of the query object;

S420，根据该数据检查描述文件，确定该目标单元中该查询对象的实时配置信息；S420. Check the description file according to the data, and determine real-time configuration information of the query object in the target unit.

S430，当该实时配置信息和初始配置信息不一致时，确定该查询对象在该目标单元中的数据检查结果异常。S430. When the real-time configuration information and the initial configuration information are inconsistent, determine that the data check result of the query object in the target unit is abnormal.

应理解，在本发明实施例中，目标单元属于该NFV架构，例如可以为该NFV架构中的VIM106，也可以为该NFV架构中的VNF 108，本发明并不限于此。It should be understood that, in the embodiment of the present invention, the target unit belongs to the NFV architecture, and may be, for example, the VIM 106 in the NFV architecture or the VNF 108 in the NFV architecture, and the present invention is not limited thereto.

因此，本发明实施例的网络功能虚拟化架构中数据检查的方法，确定查询对象的数据检查描述文件，该数据检查描述文件包括查询对象的标识、查询对象所在的NFV架构中的目标单元、用于检查查询对象的查询脚本和解析查询对象的检查结果的解析脚本，根据该数据检查描述文件，确定目标单元中的查询对象的实时配置信息，当实时配置信息和初始配置信息不一致时，确定数据检查结果异常，从而能够在NFVI或者VNF任何一方发生变化时，及时向***管理员提供告警和报告，提前发现***隐患，或者在发生故障时，用该功能排查是否NFVI的虚拟资源能力和VNF的虚拟资源需求不匹配导致的问题，提高问题定位效率，减少业务损失。Therefore, the method for data check in the network function virtualization architecture of the embodiment of the present invention determines a data check description file of the query object, where the data check description file includes an identifier of the query object, a target unit in the NFV architecture where the query object is located, and The query script for checking the query object and the parsing script for parsing the check result of the query object, according to the data check description file, determining the real-time configuration information of the query object in the target unit, and determining the data when the real-time configuration information and the initial configuration information are inconsistent The inspection result is abnormal, so that when the NFVI or VNF changes, it can provide alarms and reports to the system administrator in time, discover the hidden dangers in advance, or use this function to check whether the virtual resource capability of NFVI and VNF are used in the event of a failure. The problems caused by the mismatch of virtual resource requirements improve the efficiency of problem location and reduce business losses.

在S410中，确定查询对象的数据检查描述文件，该数据检查描述文件包括该查询对象的标识、该查询对象所在的目标单元、查询脚本和解析脚本。具体地，可以在NFV架构的VNFD中描述的VNF属性中确定部分或全部属性作为查询对象，也可以由确定模块210通过采集数据确定查询对象，本发明并不限于此。可选地，可以通过用户设置具体哪些属性作为查询对象，例如可以将CPU类型，或者内存类型作为查询对象，本发明并不限于此。针对每一个或每一类查询对象，确定目标单元，即数据检查针对该目标单元中的查询对象进行查询；确定查询脚本，该查询脚本为用于检查该查询对象使用的脚本；确定解析脚本，该解析脚本为用于对数据检查的结果进行解析。In S410, a data check description file of the query object is determined, the data check description file includes an identifier of the query object, a target unit where the query object is located, a query script, and a parsing script. Specifically, some or all of the attributes may be determined as the query object in the VNF attributes described in the VNFD of the NFV architecture, and the query object may be determined by the determining module 210 by collecting data, and the present invention is not limited thereto. Optionally, specific attributes may be set by the user as the query object, for example, the CPU type or the memory type may be used as the query object, and the present invention is not limited thereto. Determining a target unit for each or each type of query object, that is, the data check queries the query object in the target unit; determining a query script, the query script is a script used to check the query object; determining a parsing script, The parsing script is used to parse the result of the data check.

在本发明实施例中，根据该NFV架构的VNFD确定的查询对象、目标单元、查询脚本和解析脚本，生成查询对象的DCD，该DCD包括用于指示该查询对象的查询对象的标识、目标单元、查询脚本和解析脚本。例如，假设查询对象设置为CPU类型、虚拟化CPU频率、HA转换和内存类型，查询对象均为VIM，查询脚本使用虚拟机(VM)名称作为参数，则对于每个查询对象的DCD分别如表1所示。In the embodiment of the present invention, the DCD of the query object is generated according to the query object, the target unit, the query script, and the parsing script determined by the VNFD of the NFV architecture, and the DCD includes an identifier and a target unit of the query object for indicating the query object. , query scripts and parsing scripts. For example, suppose the query object is set to CPU type, virtualized CPU frequency, HA conversion and memory type, the query object is VIM, and the query script uses the virtual machine (VM) name as the parameter, then the DCD for each query object is as shown in the table. 1 is shown.

可选地，在本发明实施例中，可以通过VNFD索引该DCD。具体地，可以在VNFD中的虚拟部署单元(Virtual Deployment Unit，简称“VDU”)增加检查参数，该检查参数用于指示该DCD，根据检查参数索引到DCD中的标识及需要的相关参数。例如，如表2所示，按照DCD中定义的查询对象，例如表1所示的检查对象为CPU类型和内存类型，即Check_CPU_Type和Check_Memroy_Type，检查脚本输入的参数都是为vc_id(VNFC的ID，也就是VM的名称)，检查参数可以表示如表2所示，但本发明并不限于此。Optionally, in the embodiment of the present invention, the DCD can be indexed by VNFD. Specifically, a virtual deployment unit (VDU) in the VNFD may be added with a check parameter, where the check parameter is used to indicate The DCD indexes the identifiers in the DCD and related parameters as needed according to the inspection parameters. For example, as shown in Table 2, according to the query object defined in the DCD, for example, the check object shown in Table 1 is the CPU type and the memory type, that is, Check_CPU_Type and Check_Memroy_Type, and the parameters input by the check script are all vc_id (VNFC ID, That is, the name of the VM), the check parameter can be expressed as shown in Table 2, but the present invention is not limited thereto.

在S420中，根据该数据检查描述文件，确定该目标单元中该查询对象的实时配置信息，可选地，该实时配置信息可以包括初始配置信息，该初始配置信息或者也可以称为基线配置信息。具体地，在某个被认为是NFV架构完全配置正确的时刻，可以启动第一次数据查询，获得第一次检查的实时配置信息，并可以把查询得到的该结果作为查询对象的初始配置信息。可选地，某个被认为是NFV架构完全配置正确的时刻，可以为***正常提供业务的某个时刻，也可以为验收后的某个时刻，本发明并不限于此。In S420, the real-time configuration information of the query object in the target unit is determined according to the data check description file. Optionally, the real-time configuration information may include initial configuration information, which may also be referred to as baseline configuration information. . Specifically, when a certain NFV architecture is completely configured correctly, the first data query can be started, the real-time configuration information of the first check is obtained, and the result obtained by the query can be used as the initial configuration information of the query object. . Optionally, a moment that is considered to be completely configured correctly by the NFV architecture may be a certain moment when the system normally provides services, or may be a certain moment after the acceptance, and the present invention is not limited thereto.

可选地，确定实时配置信息可以每次确定单个查询对象的实时配置信息，也可以同时对多个检查对象确定实时配置信息，本发明并不限于此。Optionally, determining the real-time configuration information may determine real-time configuration information of a single query object each time, or may determine real-time configuration information for multiple check objects at the same time, and the present invention is not limited thereto.

可选地，在本发明实施例中，如果初始配置信息被更改且被认为更改是必须的、正确的，可以针对被修改配置的若干个查询对象进行再一次实时查询和存储，所查询到的结果作为查询对象的新的初始配置信息，即初始配置信息可以进行更新，但本发明并不限于此。具体地，可以周期性更新该初始配置信息，例如，每隔半天，将确定的实时配置信息确定为初始配置信息，并更新原有的初始配置信息；或者可以随时更新初始配置信息，将特定的某次确定的实时配置信息确定为初始配置信息，本发明并不限于此。Optionally, in the embodiment of the present invention, if the initial configuration information is changed and it is considered that the change is necessary and correct, the real-time query and storage may be performed for the plurality of query objects of the modified configuration, and the queried As a result, the new initial configuration information as the query object, that is, the initial configuration information can be updated, but the present invention is not limited thereto. Specifically, the initial configuration information may be periodically updated, for example, every half day, the determined real-time configuration information is determined as initial configuration information, and the original initial configuration information is updated; or the initial configuration information may be updated at any time to be specific. A certain determined real-time configuration information is determined as initial configuration information, and the present invention is not limited thereto.

在本发明实施例中，确定实时配置信息，该实时配置信息可以包括初始配置信息，可以根据查询对象的DCD向目标单元发送构造的具体查询脚本，根据目标单元响应的查询结果，确定初始配置信息和实时配置信息。例如，对于表1中查询对象为CPU类型和内存类型的例子，使用Get CPU type和Get memory type对VIM进行查询，假设VM名称为“vm1”，则构造出的查询脚本可以为：Get CPU type:VM＝”vm1”和Get memory type:VM＝”vm1”。VIM根据该查询脚本而返回的结果中包含CPU type和Memory type字段，例如可以为CPU type＝”CPU_type_A”和Memory type＝”DDR_4”，则”CPU_type_A”和”DDR_4”分别作为vm1的实时配置信息并存储该实时配置信息。如果该次检查为第一次检查，则可以将检查结果作为初始配置信息。In the embodiment of the present invention, the real-time configuration information is determined, and the real-time configuration information may include initial configuration information, and the specific query script constructed according to the DCD of the query object may be sent to the target unit, and the initial configuration information is determined according to the query result of the target unit response. And real-time configuration information. For example, for the example in Table 1, where the query object is a CPU type and a memory type, the VIM is queried using Get CPU type and Get memory type. If the VM name is "vm1", the constructed query script can be: Get CPU type :VM=”vm1” and Get memory type:VM=”vm1”. The result returned by VIM according to the query script includes the CPU type and Memory type fields, for example, CPU type=”CPU_type_A” and Memory type=”DDR_4”, and “CPU_type_A” and “DDR_4” respectively serve as real-time configuration information of vm1. And store the real-time configuration information. If the check is the first check, the check result can be used as the initial configuration information.

可选地，作为一个实施例，对于上述确定的实时配置信息，可以将其作为初始配置信息，而将之后的检查作为与初始配置信息对比的实施配置信息，可以周期性地确定实时配置信息，也可以随时由用户触发确定实时配置信息，例如，同样地，使用Get CPU type和Get memory type对VIM进行查询，假设VM名称为“vm1”，则构造出的查询脚本为：Get CPU type:VM＝”vm1”和Get memory type:VM＝”vm1”。VIM返回的结果中包含CPU type和Memory type字段，比如CPU type＝”CPU_type_B”和Memory type＝”DDR_4”，则”CPU_type_B”和”DDR_4”为实时配置信息。 Optionally, as an embodiment, the real-time configuration information that is determined may be used as initial configuration information, and the subsequent check is used as implementation configuration information that is compared with the initial configuration information, and the real-time configuration information may be periodically determined. The real-time configuration information can also be determined by the user at any time. For example, the VIM is queried using the Get CPU type and the Get memory type. If the VM name is "vm1", the query script constructed is: Get CPU type: VM. = "vm1" and Get memory type: VM = "vm1". The result returned by VIM includes CPU type and Memory type fields, such as CPU type=“CPU_type_B” and Memory type=”DDR_4”, then “CPU_type_B” and “DDR_4” are real-time configuration information.

在S430中，当该实时配置信息和初始配置信息不一致时，确定该查询对象在该目标单元中的数据检查结果异常。具体地，将确定的实时配置信息和初始配置信息进行对比，当两者不相同时，确定检查结果为异常，可以认为目标单元的相关数据发生变化，可以通过发送用于指示检查结果异常的检查报告通知***管理员，例如，可以通过告警信息或者检查报告的方式通知***管理员异常信息或者检查结果。例如，根据上面的例子，确定的初始配置信息为“CPU_type_A”和”DDR_4”，实时配置信息为”CPU_type_B”和”DDR_4”，将初始配置信息和实时信息进行比较，发现CPU类型不同，则可以确定数据检查结果为异常，并可以通过告警信息或者检查报告的方式通知***管理员存在异常信息。In S430, when the real-time configuration information and the initial configuration information are inconsistent, it is determined that the data check result of the query object in the target unit is abnormal. Specifically, the determined real-time configuration information is compared with the initial configuration information. When the two are different, the check result is determined to be abnormal, and the related data of the target unit may be changed, and the check for indicating the abnormality of the check result may be sent. The report notifies the system administrator that, for example, the system administrator can notify the abnormal information or check the result by means of alarm information or inspection report. For example, according to the above example, the initial configuration information determined is “CPU_type_A” and “DDR_4”, and the real-time configuration information is “CPU_type_B” and “DDR_4”, and the initial configuration information is compared with the real-time information, and it is found that the CPU type is different. The data check result is abnormal, and the system administrator may be notified of the abnormality by using the alarm information or the check report.

应理解，在本发明的各种实施例中，上述各过程的序号的大小并不意味着执行顺序的先后，各过程的执行顺序应以其功能和内在逻辑确定，而不应对本发明实施例的实施过程构成任何限定。It should be understood that, in various embodiments of the present invention, the size of the sequence numbers of the above processes does not mean the order of execution, and the order of execution of each process should be determined by its function and internal logic, and should not be taken to the embodiments of the present invention. The implementation process constitutes any limitation.

如图5所示，本发明实施例还提供了一种NFV架构数据检查的装置500，包括处理器510、存储器520和总线***530。其中，处理器510和存储器520通过总线***530相连，该存储器520用于存储指令，该处理器510用于执行该存储器520存储的指令。该存储器520存储程序代码，且处理器510可以调用存储器520中存储的程序代码执行以下操作：确定查询对象的数据检查描述文件，该数据检查描述文件包括该查询对象的标识、该查询对象所在的目标单元、查询脚本和解析脚本，其中，该目标单元属于该NFV架构，该查询脚本用于检查该查询对象，该解析脚本用于解析该查询对象的检查结果；根据该数据检查描述文件，确定该目标单元中该查询对象的实时配置信息；当该实时配置信息和初始配置信息不一致时，确定该查询对象在该目标单元中的数据检查结果异常。As shown in FIG. 5, an embodiment of the present invention further provides an apparatus 500 for NFV architecture data inspection, including a processor 510, a memory 520, and a bus system 530. The processor 510 and the memory 520 are connected by a bus system 530 for storing instructions for executing instructions stored by the memory 520. The memory 520 stores the program code, and the processor 510 can call the program code stored in the memory 520 to perform the following operations: determining a data check description file of the query object, the data check description file includes an identifier of the query object, and the query object is located a target unit, a query script, and a parsing script, wherein the target unit belongs to the NFV schema, the query script is configured to check the query object, and the parsing script is configured to parse the check result of the query object; check the description file according to the data, and determine Real-time configuration information of the query object in the target unit; when the real-time configuration information and the initial configuration information are inconsistent, determining that the data check result of the query object in the target unit is abnormal.

应理解，在本发明实施例中，该处理器510可以是中央处理单元(Central Processing Unit，简称为“CPU”)，该处理器510还可以是其他通用处理器、数字信号处理器(DSP)、专用集成电路(ASIC)、现成可编程门阵列(FPGA)或者其他可编程逻辑器件、分立门或者晶体管逻辑器件、分立硬件组件等。通用处理器可以是微处理器或者该处理器也可以是任何常规的处理器等。It should be understood that, in the embodiment of the present invention, the processor 510 may be a central processing unit ("CPU"), and the processor 510 may also be other general-purpose processors, digital signal processors (DSPs). , an application specific integrated circuit (ASIC), an off-the-shelf programmable gate array (FPGA) or other programmable logic device, discrete gate or transistor logic device, discrete hardware component, and the like. The general purpose processor may be a microprocessor or the processor or any conventional processor or the like.

该存储器520可以包括只读存储器和随机存取存储器，并向处理器510提供指令和数据。存储器520的一部分还可以包括非易失性随机存取存储器。例如，存储器520还可以存储设备类型的信息。The memory 520 can include read only memory and random access memory and provides instructions and data to the processor 510. A portion of the memory 520 may also include a non-volatile random access memory. For example, the memory 520 can also store information of the device type.

该总线***530除包括数据总线之外，还可以包括电源总线、控制总线和状态信号总线等。但是为了清楚说明起见，在图中将各种总线都标为总线***530。The bus system 530 may include a power bus, a control bus, a status signal bus, and the like in addition to the data bus. However, for clarity of description, various buses are labeled as bus system 530 in the figure.

在实现过程中，上述方法的各步骤可以通过处理器510中的硬件的集成逻辑电路或者软件形式的指令完成。结合本发明实施例所公开的方法的步骤可以直接体现为硬件处理器执行完成，或者用处理器中的硬件及软件模块组合执行完成。软件模块可以位于随机存储器，闪存、只读存储器，可编程只读存储器或者电可擦写可编程存储器、寄存器等本领域成熟的存储介质中。该存储介质位于存储器520，处理器510读取存储器520中的信息，结合其硬件完成上述方法的步骤。为避免重复，这里不再详细描述。In the implementation process, each step of the above method may be completed by an integrated logic circuit of hardware in the processor 510 or an instruction in a form of software. The steps of the method disclosed in the embodiments of the present invention may be directly implemented as a hardware processor, or may be performed by a combination of hardware and software modules in the processor. The software module can be located in a conventional storage medium such as random access memory, flash memory, read only memory, programmable read only memory or electrically erasable programmable memory, registers, and the like. The storage medium is located in the memory 520, and the processor 510 reads the information in the memory 520 and completes the steps of the above method in combination with its hardware. To avoid repetition, it will not be described in detail here.

可选地，作为一个实施例，处理器510可以调用存储器520中存储的程序代码执行以下操作：根据该NFV架构中的虚拟化网络功能软件的描述文件VNFD，确定查询对象的数据检查描述文件。Optionally, as an embodiment, the processor 510 may invoke the program code stored in the memory 520 to perform the following operations: determining a data check description file of the query object according to the description file VNFD of the virtualized network function software in the NFV architecture.

可选地，作为一个实施例，该数据检查描述文件位于该VNFD中。Optionally, as an embodiment, the data check description file is located in the VNFD.

可选地，作为一个实施例，该VNFD包括虚拟部署单元，该虚拟部署单元包括检查参数信息，该检查参数信息用于指示该数据检查描述文件。Optionally, as an embodiment, the VNFD includes a virtual deployment unit, where the virtual deployment unit includes check parameter information, where the check parameter information is used to indicate the data check description file.

可选地，作为一个实施例，处理器510可以调用存储器520中存储的程序代码执行以下操作：根据该数据检查描述文件，周期性确定该目标单元中该查询对象的该实时配置信息。 Optionally, as an embodiment, the processor 510 may invoke the program code stored in the memory 520 to perform an operation of periodically determining the real-time configuration information of the query object in the target unit according to the data check description file.

可选地，作为一个实施例，处理器510可以调用存储器520中存储的程序代码执行以下操作：当该实时配置信息和该初始配置信息不一致时，生成检查报告，该检查报告用于指示数据检查结果异常。Optionally, as an embodiment, the processor 510 may invoke the program code stored in the memory 520 to perform an operation of generating an inspection report indicating the data check when the real-time configuration information is inconsistent with the initial configuration information. The result is abnormal.

应理解，根据本发明实施例的网络功能虚拟化架构中数据检查的装置500可对应于本发明实施例中的网络功能虚拟化架构中数据检查的装置200，并可以对应于执行根据本发明实施例的方法400中的相应主体，并且网络功能虚拟化架构中数据检查的装置500中的各个模块的上述和其它操作和/或功能分别为了实现图4中的各个方法的相应流程，为了简洁，在此不再赘述。It should be understood that the apparatus 500 for data checking in the network function virtualization architecture according to the embodiment of the present invention may correspond to the apparatus 200 for data checking in the network function virtualization architecture in the embodiment of the present invention, and may correspond to performing the implementation according to the present invention. The above-described and other operations and/or functions of the respective modules in the method 500 of the data function virtualization architecture of the example 400 are respectively implemented in order to implement the respective processes of the respective methods in FIG. 4, for the sake of brevity, I will not repeat them here.

本领域普通技术人员可以意识到，结合本文中所公开的实施例描述的各示例的单元及算法步骤，能够以电子硬件、或者计算机软件和电子硬件的结合来实现。这些功能究竟以硬件还是软件方式来执行，取决于技术方案的特定应用和设计约束条件。专业技术人员可以对每个特定的应用来使用不同方法来实现所描述的功能，但是这种实现不应认为超出本发明的范围。Those of ordinary skill in the art will appreciate that the elements and algorithm steps of the various examples described in connection with the embodiments disclosed herein can be implemented in electronic hardware or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the solution. A person skilled in the art can use different methods for implementing the described functions for each particular application, but such implementation should not be considered to be beyond the scope of the present invention.

所属领域的技术人员可以清楚地了解到，为描述的方便和简洁，上述描述的***、装置和单元的具体工作过程，可以参考前述方法实施例中的对应过程，在此不再赘述。A person skilled in the art can clearly understand that for the convenience and brevity of the description, the specific working process of the system, the device and the unit described above can refer to the corresponding process in the foregoing method embodiment, and details are not described herein again.

在本申请所提供的几个实施例中，应该理解到，所揭露的***、装置和方法，可以通过其它的方式实现。例如，以上所描述的装置实施例仅仅是示意性的，例如，所述单元的划分，仅仅为一种逻辑功能划分，实际实现时可以有另外的划分方式，例如多个单元或组件可以结合或者可以集成到另一个***，或一些特征可以忽略，或不执行。另一点，所显示或讨论的相互之间的耦合或直接耦合或通信连接可以是通过一些接口，装置或单元的间接耦合或通信连接，可以是电性，机械或其它的形式。In the several embodiments provided by the present application, it should be understood that the disclosed systems, devices, and methods may be implemented in other manners. For example, the device embodiments described above are merely illustrative. For example, the division of the unit is only a logical function division. In actual implementation, there may be another division manner, for example, multiple units or components may be combined or Can be integrated into another system, or some features can be ignored or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed may be an indirect coupling or communication connection through some interface, device or unit, and may be in an electrical, mechanical or other form.

所述作为分离部件说明的单元可以是或者也可以不是物理上分开的，作为单元显示的部件可以是或者也可以不是物理单元，即可以位于一个地方，或者也可以分布到多个网络单元上。可以根据实际的需要选择其中的部分或者全部单元来实现本实施例方案的目的。The units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, may be located in one place, or may be distributed to multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of the embodiment.

另外，在本发明各个实施例中的各功能单元可以集成在一个处理单元中，也可以是各个单元单独物理存在，也可以两个或两个以上单元集成在一个单元中。 In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

所述功能如果以软件功能单元的形式实现并作为独立的产品销售或使用时，可以存储在一个计算机可读取存储介质中。基于这样的理解，本发明的技术方案本质上或者说对现有技术做出贡献的部分或者该技术方案的部分可以以软件产品的形式体现出来，该计算机软件产品存储在一个存储介质中，包括若干指令用以使得一台计算机设备(可以是个人计算机，服务器，或者网络设备等)执行本发明各个实施例所述方法的全部或部分步骤。而前述的存储介质包括：U盘、移动硬盘、只读存储器(ROM，Read-Only Memory)、随机存取存储器(RAM，Random Access Memory)、磁碟或者光盘等各种可以存储程序代码的介质。The functions may be stored in a computer readable storage medium if implemented in the form of a software functional unit and sold or used as a standalone product. Based on such understanding, the technical solution of the present invention, which is essential or contributes to the prior art, or a part of the technical solution, may be embodied in the form of a software product, which is stored in a storage medium, including The instructions are used to cause a computer device (which may be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods described in various embodiments of the present invention. The foregoing storage medium includes: a U disk, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk, and the like. .

以上所述，仅为本发明的具体实施方式，但本发明的保护范围并不局限于此，任何熟悉本技术领域的技术人员在本发明揭露的技术范围内，可轻易想到变化或替换，都应涵盖在本发明的保护范围之内。因此，本发明的保护范围应所述以权利要求的保护范围为准。 The above is only a specific embodiment of the present invention, but the scope of the present invention is not limited thereto, and any person skilled in the art can easily think of changes or substitutions within the technical scope of the present invention. It should be covered by the scope of the present invention. Therefore, the scope of the invention should be determined by the scope of the claims.

Claims

一种网络功能虚拟化NFV架构中数据检查的装置，其特征在于，所述装置包括：A device for virtualizing data in an NFV architecture, characterized in that the device comprises:

确定模块，用于确定查询对象的数据检查描述文件，所述数据检查描述文件包括所述查询对象的标识、所述查询对象所在的目标单元、查询脚本和解析脚本，其中，所述目标单元属于所述NFV架构，所述查询脚本用于检查所述查询对象，所述解析脚本用于解析所述查询对象的检查结果；a determining module, configured to determine a data check description file of the query object, where the data check description file includes an identifier of the query object, a target unit where the query object is located, a query script, and a parsing script, where the target unit belongs to The NFV framework, the query script is configured to check the query object, and the parsing script is configured to parse the check result of the query object;

检查模块，用于根据所述确定模块确定的所述数据检查描述文件，确定所述目标单元中所述查询对象的实时配置信息；An checking module, configured to determine real-time configuration information of the query object in the target unit according to the data check description file determined by the determining module;

处理模块，用于当所述检查模块确定的实时配置信息与初始配置信息不一致时，确定所述查询对象在所述目标单元中的数据检查结果异常。And a processing module, configured to determine that the data check result of the query object in the target unit is abnormal when the real-time configuration information determined by the check module is inconsistent with the initial configuration information.
根据权利要求1所述的装置，其特征在于，所述确定模块具体用于：The apparatus according to claim 1, wherein the determining module is specifically configured to:

根据所述NFV架构中的虚拟化网络功能软件的描述文件VNFD，确定查询对象的数据检查描述文件。Determining a data check description file of the query object according to the description file VNFD of the virtualized network function software in the NFV architecture.
根据权利要求2所述的装置，其特征在于，所述数据检查描述文件位于所述VNFD中。The apparatus of claim 2 wherein said data check description file is located in said VNFD.
根据权利要求3所述的装置，其特征在于，所述VNFD包括虚拟部署单元，所述虚拟部署单元包括检查参数信息，所述检查参数信息用于指示所述数据检查描述文件。The apparatus according to claim 3, wherein the VNFD comprises a virtual deployment unit, the virtual deployment unit includes check parameter information, and the check parameter information is used to indicate the data check description file.
根据权利要求1至4中任一项所述的装置，其特征在于，所述检查模块具体用于：The device according to any one of claims 1 to 4, wherein the inspection module is specifically configured to:

根据所述数据检查描述文件，周期性确定所述目标单元中所述查询对象的所述实时配置信息。And determining, according to the data check description file, the real-time configuration information of the query object in the target unit.
根据权利要求1至5中任一项所述的装置，其特征在于，所述处理模块还用于：The device according to any one of claims 1 to 5, wherein the processing module is further configured to:

当所述实时配置信息和所述初始配置信息不一致时，生成检查报告，所述检查报告用于指示数据检查结果异常。When the real-time configuration information and the initial configuration information are inconsistent, an inspection report is generated, where the inspection report is used to indicate that the data inspection result is abnormal.
根据权利要求1至6中任一项所述的装置，其特征在于，所述检查模块还用于：The device according to any one of claims 1 to 6, wherein the checking module is further configured to:

根据所述数据检查描述文件中的所述查询脚本，确定所述目标单元中所述查询对象的所述实时配置信息。Determining, according to the query script in the data check description file, the real-time configuration information of the query object in the target unit.
一种网络功能虚拟化NFV架构中数据检查的方法，其特征在于，所述方法包括：A method for virtualizing data in an NFV architecture by a network function, characterized in that the method comprises:

确定查询对象的数据检查描述文件，所述数据检查描述文件包括所述查询对象的标识、所述查询对象所在的目标单元、查询脚本和解析脚本，其中，所述目标单元属于所述NFV架构，所述查询脚本用于检查所述查询对象，所述解析脚本用于解析所述查询对象的检查结果；Determining a data check description file of the query object, where the data check description file includes an identifier of the query object, a target unit where the query object is located, a query script, and a parsing script, wherein the target unit belongs to the NFV architecture, The query script is configured to check the query object, and the parsing script is configured to parse the check result of the query object;

根据所述数据检查描述文件，确定所述目标单元中所述查询对象的实时配置信息；Determining real-time configuration information of the query object in the target unit according to the data check description file;

当所述实时配置信息和初始配置信息不一致时，确定所述查询对象在所述目标单元中的数据检查结果异常。When the real-time configuration information and the initial configuration information are inconsistent, it is determined that the data check result of the query object in the target unit is abnormal.
根据权利要求8所述的方法，其特征在于，所述确定查询对象的数据检查描述文件，包括：The method according to claim 8, wherein said determining a data check description file of the query object, include:

根据所述NFV架构中的虚拟化网络功能软件的描述文件VNFD，确定查询对象的数据检查描述文件。Determining a data check description file of the query object according to the description file VNFD of the virtualized network function software in the NFV architecture.
根据权利要求9所述的方法，其特征在于，所述数据检查描述文件位于所述VNFD中。The method of claim 9 wherein said data check description file is located in said VNFD.
根据权利要求10所述的方法，其特征在于，所述VNFD包括虚拟部署单元，所述虚拟部署单元包括检查参数信息，所述检查参数信息用于指示所述数据检查描述文件。The method according to claim 10, wherein the VNFD comprises a virtual deployment unit, the virtual deployment unit comprises check parameter information, and the check parameter information is used to indicate the data check description file.
根据权利要求8至11中任一项所述的方法，其特征在于，所述根据所述数据检查描述文件，确定所述目标单元中所述查询对象的实时配置信息，包括：The method according to any one of claims 8 to 11, wherein the determining the real-time configuration information of the query object in the target unit according to the data check description file comprises:

根据所述数据检查描述文件，周期性确定所述目标单元中所述查询对象的所述实时配置信息。And determining, according to the data check description file, the real-time configuration information of the query object in the target unit.
根据权利要求8至12中任一项所述的方法，其特征在于，所述当所述实时配置信息和初始配置信息不一致时，确定所述查询对象在所述目标单元中的数据检查结果异常，包括：The method according to any one of claims 8 to 12, wherein when the real-time configuration information and the initial configuration information are inconsistent, it is determined that the data check result of the query object in the target unit is abnormal. ,include:

当所述实时配置信息和所述初始配置信息不一致时，生成检查报告，所述检查报告用于指示数据检查结果异常。When the real-time configuration information and the initial configuration information are inconsistent, an inspection report is generated, where the inspection report is used to indicate that the data inspection result is abnormal.
根据权利要求8至13中任一项所述的方法，其特征在于，所述根据所述数据检查描述文件，确定所述目标单元中所述查询对象的实时配置信息，包括：The method according to any one of claims 8 to 13, wherein the determining the real-time configuration information of the query object in the target unit according to the data check description file comprises:

根据所述数据检查描述文件中的所述查询脚本，确定所述目标单元中所述查询对象的所述实时配置信息。 Determining, according to the query script in the data check description file, the real-time configuration information of the query object in the target unit.