CN1968283B - System and method for network management - Google Patents
System and method for network management Download PDFInfo
- Publication number
- CN1968283B CN1968283B CN2006100785820A CN200610078582A CN1968283B CN 1968283 B CN1968283 B CN 1968283B CN 2006100785820 A CN2006100785820 A CN 2006100785820A CN 200610078582 A CN200610078582 A CN 200610078582A CN 1968283 B CN1968283 B CN 1968283B
- Authority
- CN
- China
- Prior art keywords
- module
- layer module
- service
- network management
- server
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Expired - Fee Related
Links
Images
Landscapes
- Computer And Data Communications (AREA)
Abstract
本发明公开了一种网络管理系统,包括:用户终端,用于向核心功能模块发送业务请求,并接收核心功能模块返回的处理结果;核心功能模块,用于接收用户终端的业务请求,并接收被管网元上报的信息;被管网元,用于响应核心功能模块的业务请求,并向核心功能模块上报预定信息;所述的核心功能模块包括:Web服务层模块、业务管理层模块、业务处理层模块、数据存储层模块、接入层模块,所述的Web服务层模块、业务管理层模块、业务处理层模块、接入层模块采用分层管理。本发明还公开一种网络管理方法。根据本发明,通过采用分级管理,提高了管理系统的安全性、灵活性,并避免了管理系统的拥塞。
The invention discloses a network management system, comprising: a user terminal, used to send a service request to a core function module, and receive a processing result returned by the core function module; a core function module, used to receive the service request of the user terminal, and receive The information reported by the managed network element; the managed network element is used to respond to the service request of the core function module, and report the predetermined information to the core function module; the core function module includes: Web service layer module, business management module, The business processing layer module, the data storage layer module, and the access layer module, the Web service layer module, the business management layer module, the business processing layer module, and the access layer module adopt hierarchical management. The invention also discloses a network management method. According to the present invention, by adopting hierarchical management, the safety and flexibility of the management system are improved, and the congestion of the management system is avoided.
Description
技术领域technical field
本发明涉及一种通信技术,尤其涉及一种网络管理的系统和方法。 The present invention relates to a communication technology, in particular to a network management system and method. the
背景技术Background technique
随着现代计算机网络的发展,计算网络变得更加复杂,尤其目前通信数据网与计算机网络的融合,使得网络管理变得更加复杂。由于各种原因而导致的网络故障或失效会给人们的生活带来许多不便,因此保持网络的正常运行是至关重要的,这就要求对网络进行适当的管理。目前,计算机网络中用的最广泛的网络管理协议是简单网络管理协议(SNMP)。在这个协议中定义了一种管理者一代理的管理模型,管理者可以是PC或工作站等,一般位于网络的主干或接近主干的位置,它负责发出管理操作的指令,并接收来自代理的信息。代理是一个或多个运行于被管理设备内部的进程,它把来自于管理者的命令请求转换为本设备可识别的指令,完成管理命令或返回所要求的管理信息。现在网络管理系统的实现主要有两种方案,一种是传统的与平台相关的基于C/S(Client/Server,客户端/服务器)结构的集中式管理方案,另一种是跨平台的基于C/S结构的分布式管理方案。下面分别介绍这两种管理方案。 With the development of modern computer networks, computing networks have become more complex, especially the current integration of communication data networks and computer networks, making network management more complex. The failure or failure of the network due to various reasons will bring a lot of inconvenience to people's life, so it is very important to maintain the normal operation of the network, which requires proper management of the network. Currently, the most widely used network management protocol in computer networks is the Simple Network Management Protocol (SNMP). In this protocol, a manager-agent management model is defined. The manager can be a PC or a workstation, etc., and is generally located at or near the backbone of the network. It is responsible for issuing instructions for management operations and receiving information from agents. . An agent is one or more processes running inside the managed device, which converts the command request from the manager into an instruction recognizable by the device, completes the management command or returns the required management information. Now there are mainly two solutions for the realization of the network management system, one is the traditional platform-related centralized management solution based on the C/S (Client/Server, client/server) structure, and the other is the cross-platform based Distributed management scheme of C/S structure. The two management schemes are described below. the
一、与平台相关的管理方案 1. Management plan related to the platform
与平台相关的管理方案起始于网络发展的早期,那时的网络管理平台都是各个网络设备厂商专门开发的,一个网络中的设备大都由一个厂商提供,网络管理平台的实现侧重于性能和功能方面,它们大都使用C/C++编写,对平台的可移植性要求不高。这种网络管理一般采用C/S的集中管理方式,由服务器端完成全部的网络管理功能(如性能管理、配置管理、安全管理、故障管理等), 这些功能放在一个进程中,在进程内部采用多线程的方式进行处理。具体而言,如图1所示,用户终端通过服务器向被管网元中的代理发送管理消息,由被管理网元中的代理实施对被管网元的管理。熟悉网络管理技术的人员知道,这种结构很容易导致进程负荷大,极大地降低了网络管理系统的性能与稳定性。 Platform-related management solutions started in the early days of network development. At that time, network management platforms were specially developed by various network equipment manufacturers. Most of the equipment in a network was provided by one manufacturer. The implementation of network management platforms focused on performance and In terms of functions, most of them are written in C/C++ and do not require high platform portability. This kind of network management generally adopts the C/S centralized management method, and the server side completes all network management functions (such as performance management, configuration management, security management, fault management, etc.), these functions are placed in a process, inside the process It is processed in a multi-threaded manner. Specifically, as shown in FIG. 1 , the user terminal sends a management message to the agent in the managed network element through the server, and the agent in the managed network element implements the management of the managed network element. Those who are familiar with network management technology know that this structure can easily lead to a large process load, which greatly reduces the performance and stability of the network management system. the
具体而言,这种管理方案的缺点如下: Specifically, the disadvantages of this management scheme are as follows:
1)平台相关性。网络管理系统是与具体厂家的设备强相关的,也就是说每种厂家的网络管理系统只能管理自己厂家的通信设备。主要是不同平台上的图形显示技术和系统功能调用是互不兼容的,如果要跨平台实现的话,就必须开发两套不同的系统,这就提高了开发成本和周期。 1) Platform dependency. The network management system is strongly related to the equipment of a specific manufacturer, that is to say, the network management system of each manufacturer can only manage the communication equipment of its own manufacturer. The main reason is that the graphics display technology and system function calls on different platforms are incompatible with each other. If cross-platform implementation is required, two different systems must be developed, which increases the development cost and cycle time. the
2)性能低。这种方式将导致系统进程负荷过大,特别是当被管网元集中式向网络管理发送告警事件时或者网络管理集中式向被管网元进行数据采集时,由于需要占用大量的网络带宽、消耗网络资源等从而极大地降低了网络管理系统的性能,甚至引发系统崩溃。 2) Low performance. This method will lead to excessive system process load, especially when the managed network elements send alarm events to the network management in a centralized manner or when the network management centrally collects data from the managed network elements, due to the need to occupy a large amount of network bandwidth, It consumes network resources, etc., which greatly reduces the performance of the network management system, and even causes the system to crash. the
3)灵活性差。由于用户终端、服务器端都是硬编码的,每次有需求变更时,都必须重新修改代码、编译连接等过程才能实现需求变更,从而无法满足各种灵活性与个性化的需求。所述的灵活性包括界面的灵活定制、模块的灵活选择、组网方式的灵活性、监测对象和管理对象形式的多样性等。个性化即和用户所在行业的特殊应用有关,也和用户的使用习惯、管理方式等有关系。 3) Poor flexibility. Since the user terminal and the server are hard-coded, every time there is a change in demand, the code must be modified, compiled and connected to achieve the change in demand, which cannot meet various flexible and personalized needs. The flexibility mentioned includes flexible customization of interface, flexible selection of modules, flexibility of networking mode, diversity of forms of monitoring objects and management objects, and the like. Personalization is not only related to the special application of the user's industry, but also related to the user's usage habits and management methods. the
4)可靠性差。当服务器单点故障时,整个网络管理系统无法使用。 4) Poor reliability. When the server single point of failure, the entire network management system cannot be used. the
5)系统的安装与维护成本高。这种方式需要安装用户终端程序才能使用,并且如果用户想在多台机器上特别是在远程机器上进行网络管理时,必须同时安装多套用户终端软件。此外,当用户终端软件出现问题或者进行升级时,需要更新所有的用户终端软件,这给系统维护带来很大的开销。 5) The installation and maintenance costs of the system are high. This method requires the installation of a user terminal program before it can be used, and if the user wants to perform network management on multiple machines, especially on a remote machine, multiple sets of user terminal software must be installed at the same time. In addition, when the user terminal software has a problem or needs to be upgraded, all user terminal software needs to be updated, which brings a lot of overhead to system maintenance. the
6)满足不了用户终端跨平台的要求。一般来说,用户终端的操作系统是不同的,与此对应的用户终端程序也是不同的。但是,为每种操作系统设计一个用户终端程序也是不现实的。而要求客户放弃已有的操作系统来购买一种新 的操作系统会使客户付出很大的代价。 6) It cannot meet the cross-platform requirements of user terminals. Generally speaking, operating systems of user terminals are different, and corresponding user terminal programs are also different. However, it is also unrealistic to design a user terminal program for each operating system. Requiring customers to give up existing operating systems to buy a new operating system will make customers pay a lot. the
二、跨平台的管理方案 2. Cross-platform management plan
随着更多通信供应商的出现,通信网络中设备的来源趋向多样化;同时网络管理需求日趋复杂化以及CORBA(Common Object Request BrokerArchitecture,公共对象请求代理结构)技术的逐步成熟,产生了一种用CORBA技术实现的分布式网络管理系统。 With the emergence of more communication providers, the sources of equipment in the communication network tend to be diversified; at the same time, the network management requirements are becoming more and more complex and the CORBA (Common Object Request Broker Architecture, Common Object Request Broker Architecture) technology is gradually maturing, resulting in a A distributed network management system implemented with CORBA technology. the
如图2所示,相对于上述单一进程的网络管理结构,这种分布式网络管理系统仍然是C/S结构的,但服务器端按照功能划分为不同的CORBA对象来实现,这些CORBA对象可以分布在不同的服务器上运行。这种方案解决了分布式网络管理的问题,在一定程度上提高了网络性能,增强了灵活性,但就某一具体的管理功能点(如故障管理)而言,它仍然是传统的管理者-代理模式,如图3所示,即,管理者通过代理管理被管网元,这种管理模式仍然存在许多问题。具体而言,这种管理方案具有如下缺点: As shown in Figure 2, compared to the network management structure of the above-mentioned single process, this distributed network management system is still a C/S structure, but the server side is divided into different CORBA objects according to functions, and these CORBA objects can be distributed. run on a different server. This solution solves the problem of distributed network management, improves network performance and flexibility to a certain extent, but it is still a traditional manager in terms of a specific management function point (such as fault management). - Proxy mode, as shown in FIG. 3 , that is, the administrator manages the managed network elements through a proxy. There are still many problems in this management mode. Specifically, this management scheme has the following disadvantages:
1)性能低。这种方式下所有的管理任务都集中在管理者一端(服务器上的CORBA对象),仍然存在单点负荷过大,单点通讯瓶颈。特别是当被管网元集中式向网络管理发送告警事件时或者网络管理集中式从被管网元采集数据时,由于需要占用大量的网络带宽、消耗网络资源等,从而极大地降低了网络管理系统的性能。 1) Low performance. In this way, all management tasks are concentrated on the manager side (the CORBA object on the server), and there are still excessive single-point loads and single-point communication bottlenecks. Especially when the managed network elements centrally send alarm events to the network management or when the network management collects data from the managed network elements in a centralized manner, since a large amount of network bandwidth and network resources are required to be consumed, network management is greatly reduced. system performance. the
2)可靠性差。这种方式下没有一个很好的可靠性保证机制。当服务器端某具体CORBA对象运行失效或者故障时,其对应的服务功能无法提供。 2) Poor reliability. In this way, there is no good reliability guarantee mechanism. When a specific CORBA object on the server side fails or malfunctions, its corresponding service function cannot be provided. the
3)界面展示灵活性差。由于用户终端是硬编码的,每次有界面需求变更时都必须重新修改代码、编译连接等才能实现需求变更,从而无法满足各种灵活性与个性化的需求。这里灵活性主要是界面的灵活定制。 3) The interface display flexibility is poor. Since the user terminal is hard-coded, every time there is a change in interface requirements, it is necessary to re-modify the code, compile and connect, etc. to realize the change in requirements, which cannot meet various flexibility and individualization requirements. The flexibility here is mainly the flexible customization of the interface. the
4)系统的安装与维护成本高。这种方式需要安装用户终端程序才能使用,并且如果用户想在多台机器上特别是在远程机器上进行网络管理时,必须同时安装多套用户终端软件。此外,当用户终端软件出现问题或者进行升级时,需要更新所有的用户终端软件,这给系统维护带来很大的开销。 4) The installation and maintenance costs of the system are high. This method requires the installation of a user terminal program before it can be used, and if the user wants to perform network management on multiple machines, especially on a remote machine, multiple sets of user terminal software must be installed at the same time. In addition, when the user terminal software has a problem or needs to be upgraded, all user terminal software needs to be updated, which brings a lot of overhead to system maintenance. the
5)满足不了用户终端跨平台的要求。一般来说,用户终端的操作系统是不同的,与此对应的用户终端程序也是不同的。但是,为每种操作系统设计一个用户终端程序也是不现实的。而要求客户放弃已有的操作系统来购买一种新的操作系统会使客户付出很大的代价。 5) It cannot meet the cross-platform requirements of user terminals. Generally speaking, operating systems of user terminals are different, and corresponding user terminal programs are also different. However, it is also unrealistic to design a user terminal program for each operating system. Requiring customers to abandon the existing operating system to buy a new operating system will make customers pay a lot of money. the
发明内容Contents of the invention
本发明的目的是提供一种网络管理的系统和方法,其具有跨平台性、良好的开放性、可扩展、安全性,并且界面友好。 The purpose of the present invention is to provide a network management system and method, which has cross-platform, good openness, expandability, safety, and friendly interface. the
本发明公开了一种网络管理系统,包括: The invention discloses a network management system, including:
用户终端,用于向核心功能模块发送业务请求,并接收核心功能模块返回的处理结果; The user terminal is used to send business requests to the core function modules and receive the processing results returned by the core function modules;
核心功能模块,用于接收用户终端的业务请求,并接收被管网元上报的信息; The core function module is used to receive service requests from user terminals and receive information reported by managed network elements;
被管网元,用于响应核心功能模块的业务请求,并向核心功能模块上报预定信息; The managed network element is used to respond to the service request of the core function module and report the reservation information to the core function module;
所述的核心功能模块包括:Web服务层模块、业务管理层模块、业务处理层模块、接入层模块,所述的Web服务层模块、业务管理层模块、业务处理层模块、接入层模块采用分层管理,其中,所述接入层模块,用于通过局域网或者广域网直接与被管网元相连,并与业务处理层模块相连;数据存储层模块,用于与业务处理层模块相连,存储网络管理系统中的数据;业务处理层模块,与接入层模块、数据库存储层模块相连,并与业务管理层模块相连,用于接收来自业务管理层模块的命令并执行网络管理操作,把业务管理层模块对被管网元的命令下发给接入层模块,同时把接入层模块返回的信息发给业务管理层模块或数据存储层模块;业务管理层模块,与业务处理层模块和Web服务层模块相连,用于接收Web服务层模块的请求,并把所述请求转换为具体的网络管理命令下发到业务处理层模块处理,把业务处理层模块处理后的结果传向Web服务器层模块;Web服务层模块,与业务管理层模块相连,并与Web负载均衡服务器或者用户终端浏览器交互,用于接收用户终端的请求并把该请求发向业务管理层模块,并把业务管理层模块处理后的结果以网页的形式传向用户终端浏览器。 Described core function module comprises: Web service layer module, business management layer module, business processing layer module, access layer module, described Web service layer module, business management layer module, business processing layer module, access layer module Hierarchical management is adopted, wherein the access layer module is used to directly connect to the managed network element through a local area network or a wide area network, and is connected to the service processing layer module; the data storage layer module is used to connect to the service processing layer module, Store the data in the network management system; the business processing layer module is connected with the access layer module, the database storage layer module, and the business management layer module, and is used to receive commands from the business management layer module and perform network management operations. The service management layer module issues commands to the managed network elements to the access layer module, and at the same time sends the information returned by the access layer module to the service management layer module or the data storage layer module; the service management layer module and the service processing layer module Connected with the Web service layer module, it is used to receive the request of the Web service layer module, and convert the request into a specific network management command and issue it to the business processing layer module for processing, and transmit the processed result of the business processing layer module to the Web The server layer module; the Web service layer module is connected with the business management module and interacts with the Web load balancing server or the user terminal browser to receive the request of the user terminal and send the request to the business management module, and transfer the business The result processed by the management module is transmitted to the browser of the user terminal in the form of a web page. the
所述的系统还包括:配置文件,其与核心功能模块相连,包括分别用于描 述网络管理系统中系统的系统配置文件,用于描述网络管理系统中权限的权限配置文件和用于描述网络管理系统中界面格式的界面描述文件。 The system also includes: a configuration file, which is connected to the core function module, including a system configuration file used to describe the system in the network management system, a rights configuration file used to describe the rights in the network management system, and a rights configuration file used to describe the network management system. The interface description file of the interface format in the management system. the
所述的系统配置文件中设置有各层服务器所包括的功能对象名称,所述的业务请求包括网管操作信息。 The system configuration file is set with the names of functional objects included in the servers of each layer, and the service request includes network management operation information. the
所述的Web服务层模块包括至少一台Web服务器,其与业务管理层模块和用户终端相连,用于接收用户终端的业务请求,并根据系统配置文件判断业务请求是否由本层Web服务器处理,若是,则将处理结果返回给用户终端,否则,将接收的、可识别的业务请求发向业务管理层模块,同时把业务管理层模块返回的结果发给用户终端。 Described Web service layer module comprises at least one Web server, and it is connected with business management module and user terminal, is used for receiving the business request of user terminal, and judges whether business request is processed by this layer Web server according to system configuration file, if , the processing result is returned to the user terminal, otherwise, the received and identifiable service request is sent to the service management layer module, and the result returned by the service management layer module is sent to the user terminal. the
所述的业务管理层模块包括至少一台业务管理服务器,其与业务处理层模块和Web服务层模块相连,用于接收Web服务层模块的业务请求,并根据系统配置文件判断业务请求是否由本层业务管理服务器处理,若是,则将处理结果返回给Web用户终端,否则,将接收的、可识别的业务请求转换为具体的网络管理命令下发到业务处理层模块处理,所述的业务管理层模块还用于把业务处理层模块处理后的结果发给Web服务器层模块。 The business management layer module includes at least one business management server, which is connected with the business processing layer module and the Web service layer module, and is used to receive the business request of the Web service layer module, and judge whether the business request is issued by this layer according to the system configuration file. The business management server processes, if so, returns the processing result to the Web user terminal, otherwise, converts the received and identifiable business request into a specific network management command and sends it to the business processing layer module for processing, the business management layer The module is also used to send the result processed by the business processing layer module to the Web server layer module. the
所述的业务处理层模块包括至少一台业务处理服务器,其与接入层模块和业务管理层模块相连,用于接收来自业务管理层模块的网络管理命令,并根据系统配置文件判断业务请求是否由本层业务处理服务器处理,若是,则执行具体的网络管理操作,然后将处理结果返回给业务管理层模块,否则,将接收的、可识别的、业务管理层模块对被管网元的命令下发给接入层模块,所述的业务处理层模块还用于把接入层模块返回的信息发给业务管理层模块或数据存储层模块。 The business processing layer module includes at least one business processing server, which is connected with the access layer module and the business management layer module for receiving network management commands from the business management layer module, and judging whether the service request is based on the system configuration file It is processed by the service processing server of this layer. If yes, it executes the specific network management operation, and then returns the processing result to the service management layer module; The information is sent to the access layer module, and the service processing layer module is also used to send the information returned by the access layer module to the service management layer module or the data storage layer module. the
所述的接入层模块包括至少一台接入服务器,其与被管网元接续和业务处理层模块相连,用于将业务处理层的网络管理命令转换为被管网元能够识别的指令,并接收被管网元发来的预定信息,然后将这些信息转换为统一格式的信息。 The access layer module includes at least one access server, which is connected to the managed network element connection and the service processing layer module, and is used to convert the network management command of the service processing layer into an instruction that can be recognized by the managed network element, And receive the predetermined information sent by the managed network element, and then convert the information into information in a unified format. the
所述的Web层服务模块还包括:负载均衡服务器,其与用户终端和Web服务器相连,用于接收用户终端的业务请求,并根据负荷分担原则将业务请求分配到Web服务器上。 The Web layer service module also includes: a load balancing server, which is connected to the user terminal and the Web server, and is used to receive the service request of the user terminal, and distribute the service request to the Web server according to the load sharing principle. the
所述的核心功能模块还包括: The core functional modules also include:
数据存储层模块,其与业务处理层模块相连,用于存储来自被管网元的预定信息。 The data storage layer module is connected with the service processing layer module and is used for storing predetermined information from the managed network elements. the
所述的系统还包括:命名服务模块,其与核心功能模块相连,用于为核心功能模块中的CORBA对象提供命名服务。 The system also includes: a naming service module, which is connected with the core function module and used for providing naming service for the CORBA objects in the core function module. the
所述的系统还包括:监控模块,其与核心功能模块相连,用于监控核心功能模块中各部分的运行状态,以根据监控的参数调整核心功能模块。 The system further includes: a monitoring module, which is connected to the core function module and used to monitor the operating status of each part of the core function module, so as to adjust the core function module according to the monitored parameters. the
所述的系统还包括:守护监听模块,其与配置文件相连,用于监控配置文件的变化,并将变化的配置文件更新到运行中的网管系统中的各个服务器中。 The system also includes: a guard monitoring module, which is connected with the configuration file, and is used for monitoring the change of the configuration file, and updating the changed configuration file to each server in the running network management system. the
在用户终端与Web服务层模块之间采用两者默认的接口,在Web服务层模块与业务管理层模块之间采用两者默认的接口、在业务管理层模块与业务处理层模块之间采用两者默认的接口、在业务处理层模块与数据存储层模块之间采用两者默认的接口、在业务处理层模块与接入层模块之间采用两者默认的接口,在接入层模块与被管网元之间采用两者默认的接口。 The default interface between the user terminal and the Web service layer module is used, the default interface between the Web service layer module and the business management layer module is used, and the two default interfaces are used between the business management layer module and the business processing layer module. the default interface between the business processing layer module and the data storage layer module, the default interface between the business processing layer module and the access layer module, and the connection between the access layer module and the The default interface between the two pipe network elements is used. the
本发明还公开了一种网络管理方法,包括: The invention also discloses a network management method, including:
A、用户终端向核心功能模块发送业务请求; A. The user terminal sends a service request to the core function module;
所述的核心功能模块包括:Web服务层模块、业务管理层模块、业务处理层模块、数据存储层模块、接入层模块;所述的Web服务层模块、业务管理层模块、业务处理层模块、接入层模块采用分层管理其中,所述接入层模块,用于通过局域网或者广域网直接与被管网元相连,并与业务处理层模块相连;数据存储层模块,用于与业务处理层模块相连,存储网络管理系统中的数据;业务处理层模块,与接入层模块、数据库存储层模块相连,并与业务管理层模块相连,用于接收来自业务管理层模块的命令并执行网络管理操作,把业务管理层模块对被管网元的命令下发给接入层模块,同时把接入层模块返回的信息发给业务管理层模块或数据存储层模块;业务管理层模块,与业务处理层模块和Web服务层模块相连,用于接收Web服务层模块的请求,并把所述请求转换为具体的网络管理命令下发到业务处理层模块处理,把业务处理层模块处理后的结果传向Web服务器层模块;Web服务层模块,与业务管理层模块相连,并与Web负载均衡服务器或者用户终端浏览器交互,用于接收用户终端的请求并把该请求发向业务管理层模块,并把业务管理层模块处理后的结果以网页的形式传向用户终端浏览器; The core functional modules include: Web service layer module, business management layer module, business processing layer module, data storage layer module, access layer module; described Web service layer module, business management layer module, business processing layer module . The access layer module adopts hierarchical management. The access layer module is used to directly connect with the managed network element through a local area network or a wide area network, and is connected to the service processing layer module; the data storage layer module is used to connect with the service processing layer module. layer module is connected to store data in the network management system; the business processing layer module is connected to the access layer module, the database storage layer module, and the business management layer module to receive commands from the business management layer module and execute the network Management operation, the command of the service management layer module to the managed network element is sent to the access layer module, and the information returned by the access layer module is sent to the service management layer module or the data storage layer module; the service management layer module communicates with the The business processing layer module is connected with the Web service layer module, and is used to receive the request of the Web service layer module, and convert the request into a specific network management command and send it to the business processing layer module for processing. The result is transmitted to the Web server layer module; the Web service layer module is connected to the business management module and interacts with the Web load balancing server or the user terminal browser to receive the request of the user terminal and send the request to the business management module , and transmit the result processed by the business management module to the user terminal browser in the form of a web page;
B、核心功能模块根据系统配置文件和用户终端的业务请求获得被管网元的信息; B. The core function module obtains the information of the managed network element according to the system configuration file and the service request of the user terminal;
C、核心功能模块将获得的被管网元的信息逐层返回用户终端。 C. The core function module returns the obtained managed network element information to the user terminal layer by layer. the
所述的步骤A还包括:在用户终端与Web服务层模块之间采用两者默认的 接口,在Web服务层模块与业务管理层模块之间采用两者默认的接口、在业务管理层模块与业务处理层模块之间采用两者默认的接口、在业务处理层模块与数据存储层模块之间采用两者默认的接口、在业务处理层模块与接入层模块之间采用两者默认的接口,在接入层模块与被管网元之间采用两者默认的接口。 Described step A also comprises: adopt both default interface between user terminal and Web service layer module, adopt both default interface between Web service layer module and business management module, between business management module and business management module The default interface between the business processing layer modules, the default interface between the business processing layer module and the data storage layer module, and the default interface between the business processing layer module and the access layer module , use the default interface between the access layer module and the managed network element. the
所述的核心功能模块还包括负载均衡服务器,所述的步骤A具体包括: The core function module also includes a load balancing server, and the step A specifically includes:
用户终端向负载均衡服务器发送业务请求; The user terminal sends a service request to the load balancing server;
负载均衡服务器根据负荷分担原则将业务请求分配到Web服务器上。 The load balancing server distributes business requests to web servers according to the load sharing principle. the
所述的步骤B还包括: Described step B also includes:
核心功能模块将来自被管网元的信息存储在数据存储层模块。 The core function module stores the information from the managed network elements in the data storage layer module. the
所述的系统配置文件中设置有各层服务器所包括的功能对象名称,所述的业务请求包括网管操作信息。 The system configuration file is set with the names of functional objects included in the servers of each layer, and the service request includes network management operation information. the
所述的步骤B具体包括: Described step B specifically comprises:
B1、Web服务层模块根据系统配置文件判断业务请求是否由本层的服务器处理,若是,则本层服务器对业务请求进行处理,并将处理结果发送给用户终端,然后结束本过程,否则,将业务请求发给业务管理模块; B1. The Web service layer module judges whether the business request is processed by the server of this layer according to the system configuration file. Send the request to the business management module;
B2、业务管理模块根据系统配置文件判断业务请求是否由本层的业务管理服务器处理,若是,则本层的业务管理服务器对业务请求进行处理,并将处理结果发给Web服务层模块,否则,将业务请求发给业务处理模块; B2. The business management module judges whether the business request is processed by the business management server of this layer according to the system configuration file. If so, the business management server of this layer processes the business request and sends the processing result to the Web service layer module. The business request is sent to the business processing module;
B3、业务处理模块根据系统配置文件判断业务请求是否由本层的业务处理服务器处理,若是,则本层的业务处理服务器对业务请求进行处理,并将处理结果发给业务管理模块,否则,将业务请求发给接入层模块; B3. The business processing module judges whether the business request is processed by the business processing server of this layer according to the system configuration file. If so, the business processing server of this layer processes the business request and sends the processing result to the business management module. The request is sent to the access layer module;
B4、接入层模块将业务请求转换为被管网元能够识别的格式,并将业务请求发给被管网元。 B4. The access layer module converts the service request into a format that the managed network element can recognize, and sends the service request to the managed network element. the
根据本发明,本发明具有如下有益效果: According to the present invention, the present invention has following beneficial effect:
(1)跨平台性。由于这种网络管理系统是基于CORBA技术,开发出的系统具有真正的跨平台性。用户终端直接采用标准的浏览器,对用户终端的运行平台没有任何限制。 (1) Cross-platform. Because this network management system is based on CORBA technology, the developed system is truly cross-platform. The user terminal directly adopts a standard browser, and there is no restriction on the operating platform of the user terminal. the
(2)高可扩展性。可以实现系统在硬件和软件两方面的无干扰升级。如果业务处理层模块或者业务管理层模块或者Web服务层模块负担过重,可以追加相应的处理服务器,系统能自动实现负荷分担,从而增强了整个网络管理系统的处理能力。如果有新的业务需求,只要开发符合CORBA规范的新业务处理对象就可通过配置文件方便地集成到现有的网络管理系统中。 (2) High scalability. It can realize non-disruptive upgrade of the system in both hardware and software. If the business processing layer module, business management layer module or Web service layer module is overloaded, corresponding processing servers can be added, and the system can automatically realize load sharing, thereby enhancing the processing capacity of the entire network management system. If there is a new business requirement, as long as the new business processing object conforming to the CORBA specification is developed, it can be easily integrated into the existing network management system through the configuration file. the
(3)高安全性。数据存储层只能由业务处理层进行访问,并且这里的访问必须经过安全认证,其它层不能访问,Web用户终端也不存在与数据存储层的逻辑关联,这样就避免了用户的非法访问。用户终端与Web服务层模块、Web服务层模块与业务管理层模块、业务管理层模块与业务处理层模块、业务处理层模块与数据存储层模块、业务处理层模块与接入层模块之间各自采用默认的接口,这样通过层层信息控制的方式,能有效防止来自网络上的恶意攻击与信息盗窃,有效保证网管系统的安全性。此外,系统通过权限配置文件对每个界面及其操作进行权限控制,这就限制了对系统功能模块的非法使用,从而保证了整个系统的安全。 (3) High security. The data storage layer can only be accessed by the business processing layer, and the access here must pass security authentication, other layers cannot be accessed, and there is no logical association between the Web user terminal and the data storage layer, thus avoiding illegal access by users. Between the user terminal and the Web service layer module, between the Web service layer module and the business management layer module, between the business management layer module and the business processing layer module, between the business processing layer module and the data storage layer module, between the business processing layer module and the access layer module By adopting the default interface, through layer-by-layer information control, it can effectively prevent malicious attacks and information theft from the network, and effectively ensure the security of the network management system. In addition, the system controls the authority of each interface and its operation through the authority configuration file, which restricts the illegal use of the system function modules, thus ensuring the security of the entire system. the
(4)高可靠性。本发明在核心功能模块采用的是多台服务器冗余机制,若其中一台服务器发生故障时,其余具有相同功能的服务器能即时替代工作,从而保证系统处理的不中断,避免了单点故障问题。此外,本网络管理系统中的监控模块能实时检测系统服务的状态并在服务发生异常时进行立即恢复。 (4) High reliability. The present invention adopts a multi-server redundancy mechanism in the core function module. If one of the servers fails, the remaining servers with the same function can immediately replace the work, thereby ensuring the uninterrupted processing of the system and avoiding the problem of single point failure. . In addition, the monitoring module in the network management system can detect the status of the system service in real time and restore it immediately when the service is abnormal. the
(5)高性能。本发明的网络管理系统采用的是多服务器的分布式结构以及负载均衡策略,通过这种技术,系统能动态分配各服务器之间的处理流量,实现共享和高效地利用资源,避免了单点性能瓶颈,提高了整个系统的处理能力。 (5) High performance. The network management system of the present invention adopts a multi-server distributed structure and a load balancing strategy. Through this technology, the system can dynamically distribute the processing flow among the servers, realize sharing and efficiently utilize resources, and avoid single-point performance Bottlenecks increase the processing power of the entire system. the
(6)易于升级与维护。用户终端仅需要浏览器,无需进行配置与升级。服务器端采用分布式组件结构与XML(the Extensible Markup Language,可扩充标记语言)文件进行网络管理系统中所有业务功能与界面定义。采用该结构,当网络管理需求变化时,只需要更改相应的业务组件与配置文件,无需对其他部分进行改动,无需对整个系统进行编译,无需重启系统,无需重新分发客户应用就可以实现已有业务的变更、新业务的添加和旧业务的抛弃,从而很容易地满足不同的网络管理变更需求。 (6) Easy to upgrade and maintain. The user terminal only needs a browser, and no configuration or upgrade is required. The server side adopts distributed component structure and XML (the Extensible Markup Language, Extensible Markup Language) files to define all business functions and interfaces in the network management system. With this structure, when the network management requirements change, only the corresponding business components and configuration files need to be changed, without changing other parts, compiling the entire system, restarting the system, or redistributing customer applications to realize existing Changes in services, addition of new services, and abandonment of old services can easily meet different network management change requirements. the
(7)界面友好性。用户终端界面是基于Web的,它比传统应用程序的网络管理界面更直接、更易于使用。此外,本发明可以为不同的用户配置不同的登陆、注销、成功或者失败等页面,从而满足不同用户的个性化需要,提高用户的使用满意度。 (7) Interface friendliness. The user terminal interface is web-based, which is more direct and easier to use than the web management interface of traditional applications. In addition, the present invention can configure different pages for different users, such as login, logout, success or failure, so as to meet the personalized needs of different users and improve user satisfaction. the
(8)方便性。所述网络管理系统是基于的Web的,可以允许网络管理人员使用任何一种Web浏览器,在网络任何节点上方便迅速地配置、控制以及存取等管理操作,改变了以往只能局限在网络管理工作站上进行网络管理的模式。 (8) Convenience. The network management system is based on the Web, which allows network managers to use any kind of Web browser to conveniently and quickly configure, control, access and other management operations on any node in the network, changing the past that can only be limited to the network Mode for network administration on the management station. the
(9)降低网络管理的成本。浏览器操作与Web页面对网络管理用户来说是非常熟悉的,这将大大降低用户培训的费用,同时又促进了更多的用户去利用网络管理系统来管理网络,降低网络运营维护成本。另外,由于网络管理核心计算与存储都在Web服务器、业务管理服务器、业务处理服务器、数据存储服务器上,Web浏览器只需要拥有适量空间的一般机器,从而使客户在简单便宜的客户机上就能管理网络。 (9) Reduce the cost of network management. Browser operations and web pages are very familiar to network management users, which will greatly reduce the cost of user training, and at the same time promote more users to use the network management system to manage the network, reducing network operation and maintenance costs. In addition, since the core computing and storage of network management are all on the Web server, business management server, business processing server, and data storage server, the Web browser only needs a general machine with an appropriate amount of space, so that customers can use it on a simple and cheap client computer. Manage the network. the
(10)降低开发费用。本发明中界面表示逻辑与网络计算的逻辑是分离开来的,这样负责界面开发的人员不需要掌握网络管理复杂逻辑便可完成页面开发工作,使得前台开发人员与后台开发人员的工作完全分离,从而保证了高效率与低成本的开发。 (10) Reduce development costs. In the present invention, the logic of interface representation is separated from the logic of network computing, so that the personnel in charge of interface development can complete the page development work without mastering the complex logic of network management, so that the work of front-end developers and background developers is completely separated. Thus ensuring high efficiency and low cost development. the
附图说明Description of drawings
图1示出了基于C/S结构的集中式管理方案; Fig. 1 shows the centralized management scheme based on C/S structure;
图2示出了基于C/S结构的跨平台分布式管理方案; Fig. 2 shows the cross-platform distributed management scheme based on C/S structure;
图3示出了管理者-代理的结构示意图; Fig. 3 shows the structural diagram of manager-agent;
图4示出了本发明网管系统功能模块的结构图; Fig. 4 has shown the structural diagram of network management system functional module of the present invention;
图5示出了本发明网络管理系统的物理连接图; Fig. 5 shows the physical connection diagram of the network management system of the present invention;
图6示出了本发明网管系统中监控模块的位置; Fig. 6 shows the position of monitoring module in the network management system of the present invention;
图7示出了本发明网管系统的启动流程; Fig. 7 has shown the startup process of network management system of the present invention;
图8示出了本发明网管系统的停止流程; Fig. 8 has shown the stopping process of network management system of the present invention;
图9示出了本发明网管系统的业务处理流程。 Fig. 9 shows the service processing flow of the network management system of the present invention. the
具体实施方式Detailed ways
为了便于本领域一般技术人员理解和实现本发明,现结合附图描绘本发明的实施例。 In order to make it easier for those skilled in the art to understand and realize the present invention, the embodiments of the present invention are described in conjunction with the accompanying drawings. the
本发明公开了一种网络管理系统。所述的网络管理系统是一种基于Web的跨平台的分布式多层网络管理系统,参见图4,从逻辑功能上讲,本发明的网络管理系统包括用户终端、核心功能模块、命名服务模块、监控模块、守护监听模块、配置文件和被管网元。参见图5,从物理结构上讲,本发明的网络管理系统包括被管网元、若干接入服务器、若干数据存储服务器、若干业务处理服务器、若干业务管理服务器、若干Web服务器、一台负载均衡服务器、用户终端和它们之间的传输线路。 The invention discloses a network management system. Described network management system is a kind of cross-platform distributed multi-layer network management system based on Web, referring to Fig. 4, from the logical function, network management system of the present invention comprises user terminal, core function module, naming service module , monitoring module, guard monitoring module, configuration files and managed network elements. Referring to Fig. 5, in terms of physical structure, the network management system of the present invention includes managed network elements, several access servers, several data storage servers, several service processing servers, several service management servers, several Web servers, a load balancing Servers, user terminals and transmission lines between them. the
所述的用户终端用于向核心功能模块发送业务请求,并接收核心功能模块返回的处理结果。所述的核心功能模块是整个网管系统的核心处理器,负责网络管理中所需的各种功能,如网管系统中的配置管理、性能管理、告警管理等功能。该模块具体包括5个子模块:接入层模块、数据存储层模块、业务处理层模块、业务管理层模块、Web服务层模块。所述的命名服务模块可基于CORBA提供的标准提供命名服务,为核心功能模块中的CORBA对象提供命名服务功能,通过命名服务模块,可以根据对象名称检索到相应的对象引用,从而实现对CORBA对象的透明访问。所述的监控模块为核心功能模块提供监控功能,以便保证网管系统能长期稳定地运行,切实保证网管系统的可靠性,例如,采用时间轮询的方式监控核心功能模块中各个服务器上的进程是否处于正常运行状态。具体而言,监控模块若发现被监控的进程处于正常运行状态就自动进入下一个轮询期;若检测到被监控的进程退出了就重新启动它。在重启了一定的次数后被监控进程仍然退出,这时可能是操作系统出了问题,不能简单地重复启动要监控的进程,因此,需要重新启动操作系统,以便使操作系统中的环境参数等重新初始化,然后再运行被监控的进程。所述的守护监听模块用来监听网管系统中配置文件的变化,同时将这些变化动态刷新到运行中的网管系统中,从而实现网管功能的热插拔。所述的配置文件是XML格式的,它描述 了网管系统中的部署结构及其关联关系。通过对配置文件的动态定制与更新,可以实现网络管理功能的灵活扩充与删减。配置文件是网管系统正常运行的信息源。所述的被管网元用于响应核心功能模块的业务请求,并向核心功能模块上报预定信息。 The user terminal is used to send a service request to the core function module and receive the processing result returned by the core function module. The core function module is the core processor of the entire network management system, responsible for various functions required in network management, such as configuration management, performance management, alarm management and other functions in the network management system. This module specifically includes five sub-modules: access layer module, data storage layer module, business processing layer module, business management layer module, and Web service layer module. Described naming service module can provide naming service based on the standard that CORBA provides, provides naming service function for the CORBA object in core function module, by naming service module, can retrieve corresponding object reference according to object name, thereby realizes to CORBA object transparent access. The monitoring module provides monitoring functions for the core function modules, so as to ensure that the network management system can run stably for a long time, and effectively ensure the reliability of the network management system. in normal operating condition. Specifically, if the monitoring module finds that the monitored process is in a normal running state, it will automatically enter the next polling period; if it detects that the monitored process has exited, it will be restarted. After restarting a certain number of times, the monitored process still exits. At this time, there may be a problem with the operating system, and the process to be monitored cannot be simply restarted. Therefore, the operating system needs to be restarted so that the environment parameters in the operating system, etc. Reinitialize before running the monitored process. The guard monitoring module is used to monitor the changes of the configuration files in the network management system, and dynamically refresh these changes to the running network management system, thereby realizing hot swapping of network management functions. The configuration file is in XML format, which describes the deployment structure and its association in the network management system. Through the dynamic customization and updating of configuration files, the flexible expansion and deletion of network management functions can be realized. The configuration file is the information source for the normal operation of the network management system. The managed network element is used to respond to the service request of the core function module, and report predetermined information to the core function module. the
所述的业务请求包括用户名、密码和登录号以及诸如查询网元运行状态的网管操作信息。所述的网管操作信息包括命令和参数,所述的命令为核心功能模块的子模块名称+功能对象名称+功能对象的方法或属性。当功能对象名称在本发明的网络管理系统中唯一时,可以省略核心功能模块的子模块名称,如功能对象为FORM,属性为Title,则命令可为:FORM.Title=“You Are Good”。 The service request includes user name, password and login number, and network management operation information such as querying the running status of network elements. The network management operation information includes commands and parameters, and the commands are sub-module names of core function modules + function object names + methods or attributes of function objects. When the function object name is unique in the network management system of the present invention, the submodule name of the core function module can be omitted, as the function object is FORM, and the attribute is Title, then the command can be: FORM.Title="You Are Good". the
所述的核心功能模块包括:接入层模块,它通过局域网或者广域网直接与被管网元相连,并与业务处理层模块相连,网络管理系统发往被管网元的命令(如获取网元运行状态的命令、启动网元的命令等)和被管网元返回给网络管理系统的信息(所述的信息为上述命令执行的结果,如‘网元运行正常’、‘网元启动成功’),都要经过接入层模块;数据存储层模块,与业务处理层模块相连,主要负责网络管理系统中数据的永久性存储;业务处理层模块,其与接入层模块、数据库存储层模块相连,并与业务管理层模块相连,用于接收来自业务管理层模块的命令并执行具体的网络管理操作,把业务管理层模块对被管网元的命令下发给接入层模块,同时把接入层模块返回的信息发给业务管理层模块或数据存储层模块;业务管理层模块,其与业务处理层模块和Web服务层模块相连,用于接收Web服务层模块的请求,并把这些请求转换为具体的网络管理命令下发到业务处理层模块处理,把业务处理层模块处理后的结果传向Web服务器层模块;Web服务层模块,其与业务管理层模块相连,并与Web负载均衡服务器或者用户终端浏览器交互,用于接收用户终端的请求并把这些请求发向业务管理层模块,同时把业务管理层模块处理后的结果以网页的形式传向用户终端浏览器,Web服务层模块可以与多台用户终端浏览器相连。 Described core function module comprises: access layer module, it directly links to each other with managed network element by local area network or wide area network, and links to each other with business processing layer module, and network management system sends to the command of managed network element (as obtaining network element Commands for running status, commands for starting network elements, etc.) and information returned to the network management system by managed network elements (the information is the result of the execution of the above commands, such as 'the network element is running normally', 'the network element is started successfully' ), must go through the access layer module; the data storage layer module is connected with the business processing layer module, and is mainly responsible for the permanent storage of data in the network management system; the business processing layer module, which is connected with the access layer module and the database storage layer module It is connected to the service management layer module and is used to receive commands from the service management layer module and perform specific network management operations. The information returned by the access layer module is sent to the business management layer module or the data storage layer module; the business management layer module is connected with the business processing layer module and the Web service layer module to receive requests from the Web service layer module and transfer these The request is converted into a specific network management command and sent to the business processing layer module for processing, and the result processed by the business processing layer module is transmitted to the Web server layer module; the Web service layer module is connected to the business management layer module and connected to the Web load The balance server or user terminal browser interaction is used to receive requests from user terminals and send these requests to the business management module, and at the same time transmit the processed results of the business management module to the user terminal browser in the form of web pages. The layer module can be connected with multiple user terminal browsers. the
在上述的核心功能模块中,采用了分层管理的模块,即,用户终端的请求 在经过负载均衡服务器、Web服务层模块、业务管理层模块、业务处理层模块、接入层模块或数据存储层模块时,只能依次经过,不可以跨跃其中的某一模块,但可以在Web服务层模块、业务管理层模块、业务处理层模块、数据存储层模块经处理后结束,然后将处理结果以与用户终端请求传送来时相反的顺序沿原路返回,最后返回用户终端。 In the above-mentioned core function modules, hierarchical management modules are adopted, that is, the request of the user terminal passes through the load balancing server, the Web service layer module, the business management layer module, the business processing layer module, the access layer module or the data storage module. layer modules, they can only pass through them sequentially, and cannot skip a certain module, but they can end after the processing of the Web service layer module, business management layer module, business processing layer module, and data storage layer module, and then the processing results Return along the original path in the reverse order of the request from the user terminal, and finally return to the user terminal. the
所述的接入层模块由一台或多台接入服务器组成,每一台接入服务器与业务处理层的一台或多台业务处理服务器相连接。每台物理接入服务器中有位于其前端、通过局域网或广域网直接与各被管网元接续的适配器。这里的适配器对应一个CORBA对象,它随着所在物理机器的启动而启动。所述的适配器用于将各种被管网元的不同通信协议转换为统一格式的网络管理信息,所述的统一格式可以自行定义,或采用现有的通信协议。例如,彩信中心网元通过SNMP协议向接入服务器上报预定信息,接入服务器的适配器将SNMP协议格式的预定信息转换为本网管系统的内部协议支持的统一格式的预定信息;WAP网关网元通过CMIP(Common Management Information Protocol,通用管理信息协议)协议向接入服务器上报预定信息,接入服务器的适配器将CMIP协议格式的预定信息转换为本网管系统的内部协议支持的统一格式的预定信息,然后接入服务器将本网管系统的内部协议统一格式的预定信息发给业务处理层模块;同时把业务处理层模块发来的统一格式的网络管理命令转换为被管网元可以识别的协议,起到协议适配转换的作用。 The access layer module is composed of one or more access servers, and each access server is connected to one or more service processing servers in the service processing layer. Each physical access server has an adapter located at its front end and directly connected to each managed network element through a LAN or a WAN. The adapter here corresponds to a CORBA object, which starts with the start of the physical machine where it resides. The adapter is used to convert different communication protocols of various managed network elements into network management information in a unified format, and the unified format can be defined by itself, or an existing communication protocol can be used. For example, the MMS center network element reports the reservation information to the access server through the SNMP protocol, and the adapter of the access server converts the reservation information in the SNMP protocol format into the reservation information in a uniform format supported by the internal protocol of the network management system; the WAP gateway network element passes CMIP (Common Management Information Protocol, Common Management Information Protocol) protocol reports reservation information to the access server, and the adapter of the access server converts the reservation information of the CMIP protocol format into the reservation information of the unified format supported by the internal protocol of the network management system, and then The access server sends predetermined information of the unified format of the internal protocol of the network management system to the service processing layer module; at the same time, it converts the unified format of the network management command sent by the service processing layer module into a protocol that can be recognized by the managed network element, which plays a role The role of protocol adaptation conversion. the
所述的数据存储层模块由一台或者多台数据库服务器组成,每一台数据库服务器与业务处理层模块中的所有业务处理服务器相连接。每一台数据库服务器上安装有数据库管理系统与网络管理数据库。所述的数据存储层模块用于存储来自被管网元的预定信息,包括:性能信息、配置信息、计费信息、安全信息、告警信息。 The data storage layer module is composed of one or more database servers, and each database server is connected to all business processing servers in the business processing layer module. A database management system and a network management database are installed on each database server. The data storage layer module is used to store predetermined information from managed network elements, including: performance information, configuration information, billing information, security information, and alarm information. the
所述的业务处理层模块由一台或多台业务处理服务器组成,每一台业务处理服务器与业务管理层的一台或多台业务管理服务器相连接。这里每台业务处 理服务器都具备等价的地位或功能,都可以单独对外提供服务而无须其它服务器的辅助。每一台业务处理服务器由任务解析模块、命令下发模块、数据打包模块、数据库访问模块以及多种执行网络管理具体操作的功能模块组成。每个模块都是一个CORBA对象。所述的任务解析模块负责解析来自任务管理层模块的请求并将这些请求分配给具体的功能模块执行;所述的命令下发模块把各功能模块执行后的统一格式的网管命令下发给接入层模块;所述的数据打包模块负责把功能模块处理后的结果打包为标准的数据格式并返回给业务管理层模块;所述的数据库访问模块负责提供标准的数据库操作如数据库连接、查询、更新等;所述的功能模块用于完成网络管理所需的网络管理操作功能,如安全管理功能、配置管理功能、故障管理等。 The business processing layer module is composed of one or more business processing servers, and each business processing server is connected with one or more business management servers of the business management layer. Each business processing server here has an equivalent status or function, and can provide external services independently without the assistance of other servers. Each business processing server is composed of a task analysis module, a command delivery module, a data packaging module, a database access module and various functional modules for performing specific operations of network management. Each module is a CORBA object. The task parsing module is responsible for parsing requests from the task management module and assigning these requests to specific functional modules for execution; the command sending module sends the unified format network management commands after each functional module is executed to the receiver. Into the layer module; the data packaging module is responsible for packaging the result after the functional module processing into a standard data format and returns to the business management module; the database access module is responsible for providing standard database operations such as database connection, query, Update, etc.; the functional modules are used to complete the network management operation functions required by network management, such as security management functions, configuration management functions, fault management and so on. the
所述的网络管理操作功能包括:故障管理,用于对被管网元故障的检测、快速定位、隔离故障点并进行修复等功能,同时能将故障以及处理结果及时通知有关用户;配置管理,用于组织被管网络运转所需要的资源和数据,保证网络的基本配置,监控运行的配置和按照具体情况改变配置,设置系统参数,收集并存储各参数,报告与基本配置值的偏差,起动和关闭网元等;计费管理,用于依据网管用户设定的收费标准对业务用户使用的各种资源计费并开出收费通知;性能管理,用于测量被管网络及各种网元的性能指标,如吞吐量、服务质量、服务等级、时延特性等,测量一般是连续进行的,并在异常或性能恶化情况下输出统计分析报告,同时通知有关用户;安全管理,用于保证被管网络正常运行,信息不被外界窃取和破坏,包括对收、发方的合法身份的验证以及访问控制、网内加密等。 The network management operation functions include: fault management, which is used to detect the fault of the managed network element, quickly locate, isolate the fault point and perform repairs, etc., and can notify relevant users of the fault and the processing result in time; configuration management, It is used to organize the resources and data required for the operation of the managed network, ensure the basic configuration of the network, monitor the configuration of the operation and change the configuration according to the specific situation, set the system parameters, collect and store each parameter, report the deviation from the basic configuration value, start and shutting down network elements, etc.; billing management, used to charge various resources used by business users according to the charging standards set by network management users and issue charging notices; performance management, used to measure the managed network and various network elements Performance indicators, such as throughput, service quality, service level, delay characteristics, etc., are generally measured continuously, and statistical analysis reports are output in case of abnormality or performance deterioration, and relevant users are notified at the same time; security management is used to ensure The managed network operates normally, and the information is not stolen or destroyed by the outside world, including verification of the legal identity of the receiver and sender, access control, and network encryption. the
所述的业务管理层模块由一台或多台业务管理服务器组成,这里每台业务服务器都具备等价的地位与功能,都可以单独对外提供服务而无须其它服务器的辅助。每一台业务管理服务器与业务处理层的一台或多台业务处理服务器相连接。 The business management layer module is composed of one or more business management servers, where each business server has equivalent status and functions, and can provide external services independently without the assistance of other servers. Each business management server is connected with one or more business processing servers in the business processing layer. the
所述的业务管理层模块负责把网络管理任务分发给业务处理层模块,并控 制业务处理层模块、Web服务层模块的运转。在每一台业务管理服务器上有一个任务解析模块、任务分发模块、数据打包模块、命令控制模块,每一个模块就是一个CORBA对象。这些模块随着所在物理机器的启动而启动。所述的任务解析模块负责把来自Web服务层模块的业务请求进行分析、识别后把合法的请求转换为标准的CORBA调用请求转给任务分发模块;所述的任务分发模块负责把来自任务解析模块的CORBA请求分发到业务处理层模块;所述的数据打包模块负责把来自业务处理层的处理结果打包成Web服务层模块能够识别的标准数据格式;所述的命令控制模块负责发起业务管理层模块中各个功能模块的启动、停止以及查询状态命令,负责发起业务处理层模块中各个功能模块的启动、停止以及查询状态命令,负责发起Web服务层模块中Web服务模块、Web负载均衡服务的启动、停止以及查询状态命令,负责发起接入层模块中适配器的启动、停止以及查询状态命令,并把这些命令传送到不同的物理机器上执行。 The business management layer module is responsible for distributing network management tasks to the business processing layer module, and controls the operation of the business processing layer module and the Web service layer module. There is a task analysis module, a task distribution module, a data packaging module, and a command control module on each business management server, and each module is a CORBA object. These modules are started when the physical machine on which they are located is started. Described task parsing module is responsible for analyzing the business request from Web service layer module, after identifying, legal request is converted into standard CORBA call request and transferred to task distribution module; The CORBA request is distributed to the business processing layer module; the data packaging module is responsible for packaging the processing results from the business processing layer into a standard data format that the Web service layer module can recognize; the command control module is responsible for initiating the business management layer module It is responsible for initiating the start, stop and query status commands of each functional module in the business processing layer module, and is responsible for initiating the startup of the Web service module and Web load balancing service in the Web service layer module The stop and query status commands are responsible for initiating the start, stop and query status commands of the adapters in the access layer module, and sending these commands to different physical machines for execution. the
所述的Web服务层模块由一台或多台Web服务器组成,每一台Web服务器与一台或多台业务管理服务器相连接。这里每台Web业务服务器都具备等价的地位与功能,都可以单独对外提供服务而无须其它服务器的辅助。 The Web service layer module is composed of one or more Web servers, and each Web server is connected with one or more business management servers. Here, each web service server has equivalent status and functions, and can provide external services independently without the assistance of other servers. the
所述的每台Web服务器包括Web服务模块、界面表示框架模块、界面插件模块与任务分发模块。所述的Web服务模块主要提供HTTP和CORBA服务,为界面表示框架模块、界面插件模块提供Web运行环境,它随着所在的物理机器的启动而启动。所述的界面表示框架模块提供界面表示平台,用于容纳、管理、控制界面插件模块。所述的界面插件模块完成网络管理中基本功能界面表示功能,这些插件模块可以是配置管理界面模块、安全管理界面模块、故障管理界面模块、性能管理界面模块或者计费管理界面模块,也可以是用户自定义的界面展示模块。所有的界面插件模块的物理载体为包含HTML、JSP、Java类、XML文件等在内的网页文件包,这些文件包提供独立的、统一的主调界面接口。这里的任务分发模块负责把来自Web服务模块的CORBA请求分发到业务管理 层模块,具体是选择最闲的一台业务管理服务器作为目标机器。 Each of the Web servers includes a Web service module, an interface display frame module, an interface plug-in module and a task distribution module. The Web service module mainly provides HTTP and CORBA services, and provides a Web operating environment for the interface representation framework module and the interface plug-in module, and it starts with the startup of the physical machine where it is located. The interface presentation framework module provides an interface presentation platform for accommodating, managing and controlling interface plug-in modules. The interface plug-in module completes the basic functional interface representation function in network management, and these plug-in modules can be configuration management interface modules, security management interface modules, fault management interface modules, performance management interface modules or billing management interface modules, or can be User-defined interface display module. The physical carrier of all interface plug-in modules is a web page file package including HTML, JSP, Java class, XML file, etc. These file packages provide an independent and unified main interface interface. The task distribution module here is responsible for distributing the CORBA request from the Web service module to the business management layer module, specifically selecting the most idle business management server as the target machine. the
所述的Web服务层模块还设置有一台负载均衡服务器。这里的负载均衡服务器是Web服务层模块的控制与分发器,所有用户的Web请求都首先到此服务器,然后由此服务器根据各个Web服务器的繁忙程度将请求分配到某个实际的Web服务器中,对外公开的域名与IP地址都是这个服务器的。这里说明的是,在网络管理用户不多的情况下,这台负载均衡器可以省去,在这种情况下,负载均衡器的功能就集成到某个实际的Web服务器中,这时用户直接与Web服务器进行交互。 The Web service layer module is also provided with a load balancing server. The load balancing server here is the control and distributor of the Web service layer module. All user Web requests go to this server first, and then the server distributes the requests to an actual Web server according to the busyness of each Web server. The public domain name and IP address belong to this server. What is explained here is that this load balancer can be omitted when there are not many network management users. In this case, the function of the load balancer is integrated into an actual web server. At this time, users directly Interact with the web server. the
参见图4,所述的网络管理系统还设置有监控其各服务器进程的监控模块,以便保证网络管理系统长期稳定地运行。图6是该监控模块的详细结构图。 Referring to Fig. 4, the network management system is also provided with a monitoring module for monitoring the process of each server, so as to ensure the long-term stable operation of the network management system. Fig. 6 is a detailed structural diagram of the monitoring module. the
参见图6,所述的监控模块包括:独立设置、与接入服务器连接并监控其进程的接入服务器监控模块;独立设置、与数据库服务器连接并监控其进程的数据库服务器监控模块;独立设置、与业务处理服务器连接并监控其进程的业务处理服务器监控模块;独立设置、与业务管理服务器连接并监控其进程的业务管理服务器监控模块;独立设置、与Web服务器连接并监控其进程的Web服务器监控模块;独立设置、与负载均衡服务器连接并监控其进程的负载均衡服务器监控模块。 Referring to Figure 6, the monitoring module includes: an access server monitoring module that is independently set, connected with the access server and monitors its process; a database server monitoring module that is independently set, connected with the database server and monitors its process; independently set, The business processing server monitoring module is connected with the business processing server and monitors its process; the business management server monitoring module is set independently, connected with the business management server and monitors its process; the Web server monitor is set independently, connected with the Web server and monitors its process Module; a load balancing server monitoring module that is set independently, connects to the load balancing server and monitors its process. the
所述的监控模块和被监控的服务器之间的关系是监控者与被监控者的关系,两者之间的通信是采用操作系统提供的进程间通信机制来实现的。 The relationship between the monitoring module and the monitored server is the relationship between the monitor and the monitored, and the communication between the two is realized by using the inter-process communication mechanism provided by the operating system. the
参见图4,所述的网络管理系统中还包括用于存储所有对象名称及其对象引用的命名服务模块。该命名服务模块是基于CORBA提供的标准命名服务,它以目录结构的形式存储了所有注册在该网络管理系统中的CORBA对象的对象名称和其对象引用。通过命名服务模块,可以根据对象名称检索到相应的对象引用,从而实现对CORBA对象的透明访问。 Referring to Fig. 4, the network management system further includes a naming service module for storing all object names and their object references. The naming service module is based on the standard naming service provided by CORBA. It stores the object names and object references of all CORBA objects registered in the network management system in the form of directory structure. Through the naming service module, the corresponding object reference can be retrieved according to the object name, so as to realize the transparent access to the CORBA object. the
所述的配置文件包括系统配置文件、界面描述文件和权限配置文件。 The configuration files include system configuration files, interface description files and authority configuration files. the
所述的Web服务层模块、业务管理层模块、业务处理层模块、数据存储层 模块、接入层模块的信息都配置在一个集中的系统配置文件中。其中采用分级的方式进行配置,第一级是上述5个模块的配置项,对于这些模块而言,它的配置信息主要有模块名称、模块层次及其各个模块包含的所有物理服务器的信息,这项配置信息就决定了该层模块将运行在多少个物理服务器上。第二级是物理服务器的配置信息,它包括物理服务器的名称、IP地址及其所包括的功能模块信息,物理服务器的配置信息决定了该服务器将实现什么样的功能。第三级为功能模块的配置信息,它包括功能模块的名称、类型、与其他功能模块的接口信息、启动参数、停止参数以及该功能模块所包括的操作信息,功能模块的配置信息决定了该功能模块具体执行的操作以及与其他模块的关系。第四级为操作的配置信息,它包括操作的名称、标识、调用参数、是否需要下一层功能模块的处理标识等。操作的配置信息决定了业务请求的处理流程。 The information of described Web service layer module, business management layer module, business processing layer module, data storage layer module, access layer module is all configured in a centralized system configuration file. The configuration is carried out in a hierarchical manner. The first level is the configuration items of the above five modules. For these modules, its configuration information mainly includes the module name, module level and information about all physical servers contained in each module. The item configuration information determines how many physical servers the layer module will run on. The second level is the configuration information of the physical server, which includes the name of the physical server, the IP address and the information of the functional modules it includes. The configuration information of the physical server determines what kind of function the server will realize. The third level is the configuration information of the function module, which includes the name and type of the function module, interface information with other function modules, start parameters, stop parameters and the operation information included in the function module. The configuration information of the function module determines the function module. The specific operations performed by the function module and the relationship with other modules. The fourth level is the configuration information of the operation, which includes the operation name, identification, call parameters, whether the processing identification of the next layer of functional modules is required, etc. The configuration information of the operation determines the processing flow of the business request. the
为了完成网管系统的启动和停止,所述的系统配置文件中还设置有系统初始化时各模块的启动顺序以及系统停止时各个模块的停止顺序。 In order to complete the start and stop of the network management system, the system configuration file also sets the start sequence of each module when the system is initialized and the stop sequence of each module when the system stops. the
通过所述的系统配置文件,可以解决现有网管系统不能实现动态配置、功能模块不能任意拆卸与组合等问题,从而实现网管系统的灵活配置、功能模块的任意组合与拆卸,进而提高网管系统的客户化支撑能力。 Through the system configuration file, it can solve the problems that the existing network management system cannot realize dynamic configuration, and the function modules cannot be disassembled and combined arbitrarily, so as to realize the flexible configuration of the network management system and the arbitrary combination and disassembly of the function modules, thereby improving the efficiency of the network management system. Customized support capability. the
所述的界面插件模块的配置信息按功能类型设置在界面描述文件(XML格式的)中。每一功能界面类别被分配相应的界面表示区间(如一个整数区间),其中的任一个具体的界面对应整数区间中具体的一个整数,该整数可起到界面插件标识(界面插件ID)的作用,在该界面表示区间可有多个整数,每一整数对应着一种功能界面。如将配置管理功能界面定义为[1000..1999],将性能管理界面定位为[2000..2999]等。通过这个界面描述文件,对所有确定的界面进行定义与描述,同时为将来可能增加的新界面预留处理接口。这里的界面描述文件,第一级为界面类型的配置信息,包括界面类型以及对应的整数范围,第二级为具体的界面信息,包括具体的界面ID、访问参数、对应的后台功能模块等信息,第三级为具体的操作信息,包括具体的触发事件、调用参数、对应的后台功能 对象等信息。 The configuration information of the interface plug-in module is set in the interface description file (in XML format) according to the function type. Each functional interface category is assigned a corresponding interface representation interval (such as an integer interval), any specific interface in which corresponds to a specific integer in the integer interval, and this integer can serve as an interface plug-in identifier (interface plug-in ID) , there can be multiple integers in the interface representation interval, and each integer corresponds to a functional interface. For example, the configuration management function interface is defined as [1000..1999], the performance management interface is positioned as [2000..2999], etc. Through this interface description file, define and describe all determined interfaces, and reserve processing interfaces for new interfaces that may be added in the future. In the interface description file here, the first level is the configuration information of the interface type, including the interface type and the corresponding integer range, and the second level is the specific interface information, including the specific interface ID, access parameters, corresponding background function modules and other information , the third level is specific operation information, including specific trigger events, call parameters, corresponding background function objects and other information. the
网络管理用户与所拥有操作权限的配置信息都设置在权限配置文件中。所述的权限配置文件是分级的文件,所述的配置文件第一级为用户信息,包括用户名称、用户标识号等,第二级为所拥有的界面信息,包括界面ID等,第三级为所拥有的操作信息,包括操作名称、标识等。 The configuration information of network management users and their operating rights are all set in the rights configuration file. The authority configuration file is a graded file. The first level of the configuration file is user information, including user name, user identification number, etc., the second level is the owned interface information, including interface ID, etc., and the third level is user information. It is the owned operation information, including operation name, ID, etc. the
对系统配置文件、界面描述文件以及权限配置文件还设置有守护监听模块。所述的守护监听模块负责监听各个配置文件的变化(如系统配置文件中增删物理服务器或者功能模块等),并将变化后的配置文件解析读出到内存对象中。当网络管理系统的各个模块相对空闲时,守护监听模块就把这些配置变化动态更新到相关模块的物理服务器上,这期间不需要重启任何服务器,从而实现网络管理功能的热插拔。 There are also guard monitoring modules for system configuration files, interface description files and authority configuration files. The guard monitoring module is responsible for monitoring the changes of each configuration file (such as adding or deleting physical servers or functional modules in the system configuration file), and parsing and reading the changed configuration file into the memory object. When each module of the network management system is relatively idle, the guard monitoring module will dynamically update these configuration changes to the physical server of the relevant module. During this period, there is no need to restart any server, so as to realize the hot swap of network management functions. the
参见图7,下面描述本发明的网络管理系统的启动过程。 Referring to Fig. 7, the following describes the startup process of the network management system of the present invention. the
步骤701、启动命名服务模块。
步骤702、启动业务管理层模块所在的任意一台业务管理服务器,并按照启动顺序依次启动这台服务器上的各个功能模块。
步骤703、业务管理服务器中的命令控制模块从配置文件中读取业务处理层对应的物理服务器信息以及业务处理层各个功能模块的启动顺序。
步骤704、根据步骤703中获取的物理服务器信息选取一个业务处理服务器,根据业务处理层中各个模块的启动顺序依次启动这些功能模块。重复这个步骤,直到所有业务处理服务器全部启动完成。
步骤705、业务管理服务器中的命令控制模块从配置文件中读取数据存储层对应的数据库服务器信息以及该层各个功能模块的启动顺序。
步骤706、根据步骤705获取的物理服务器信息选取一个数据库服务器,根据该层中各个模块的启动顺序依次启动这些功能模块。重复这个步骤,直到所有数据库服务器全部启动完成。
步骤707、业务管理服务器中的命令控制模块从配置文件中读取接入层对 应的接入服务器信息以及该层各个功能模块的启动顺序。
步骤708、根据步骤707获取的物理服务器信息选取一个接入服务器,根据该层中各个模块的启动顺序依次启动这些功能模块。重复这个步骤,直到所有接入服务器全部启动完成。
步骤709、业务管理服务器中的命令控制模块从配置文件中读取Web服务层对应的Web服务器信息以及该服务器各个功能模块的启动顺序。
步骤710、根据步骤709获取的物理服务器信息选取一个Web服务器,根据该服务器中各个模块的启动顺序依次启动这些功能模块。重复这个步骤,直到所有Web服务器全部启动完成。
步骤711、启动Web服务层的负载均衡服务器。
步骤712、判断是否还有其它业务管理服务器没有启动,若有,执行步骤713,否则,执行步骤714。
步骤713、选择业务管理层的一台其他业务管理服务器,然后启动该台业务管理服务器,并返回步骤712。
步骤714、依次启动各个监控模块。
步骤715、启动守护监听模块。
参见图8、下面描述本发明的网络管理系统的停止过程。 Referring to Fig. 8, the following describes the stopping process of the network management system of the present invention. the
步骤801、停止监听守护模块。
步骤802、依次停止各个监控模块。
步骤803、停止Web服务层模块的负载均衡服务器。
步骤804、由命令控制模块读取Web服务层各功能模块的停止顺序。
步骤805、依次停止Web服务层模块的各个Web服务器。在每个服务器上按照相应服务器上各个功能模块的停止顺序进行停止。
步骤806、由命令控制模块读取业务处理层各功能模块的停止顺序。 Step 806: The command control module reads the stop sequence of each functional module of the service processing layer. the
步骤807、依次停止业务处理层模块的各个业务处理服务器。在每个服务器上按照相应服务器上各个功能模块的停止顺序进行停止。
步骤808、由命令控制模块读取数据存储层各功能模块的停止顺序。
步骤809、依次停止数据存储层模块的各个数据库服务器。在每个服务器上按照相应服务器上各个功能模块的停止顺序进行停止。
步骤810、由命令控制模块读取接入层各功能模块的停止顺序。
步骤811、依次停止接入层模块的各个接入服务器。在每个服务器上按照相应服务器上各个功能模块的停止顺序进行停止。
步骤812、由命令控制模块读取业务管理层各个业务管理服务器的停止顺序。
步骤813、依次停止业务管理层模块的各个业务管理服务器。在每个服务器上按照相应服务器上各个功能模块的停止顺序进行停止。
步骤814、停止命名服务模块。
参见图9,下面详细描述本发明的网络管理系统中业务请求处理过程。 Referring to Fig. 9, the following describes the service request processing process in the network management system of the present invention in detail. the
步骤901、用户终端发出Web页面业务请求到负载均衡服务器。
步骤902、负载均衡服务器判断业务请求是否合法,若是,执行步骤904,否则,执行步骤903。
所述的业务请求包括用户名、密码和登录号以及网管操作信息如查询网元的运行状态,所述的网管操作信息包括命令和参数,所述的命令为核心功能模块的子模块名称+功能对象名称+功能对象的方法或属性。当功能对象名称在本发明的网络管理系统中唯一时,可以省略核心功能模块的子模块名称,如功能对象为FORM,属性为Title,则命令可为:FORM.Title=“You Are Good”。当用户名、密码和登录号与负载均衡服务器上保存的用户名、密码和登录号相对应时,则表示本次请求合法,否则表明本次请求不合法。 The service request includes user name, password and login number and network management operation information such as querying the running status of network elements. The network management operation information includes commands and parameters, and the described commands are the submodule name+function of the core function module Object name + method or property of the function object. When the function object name is unique in the network management system of the present invention, the submodule name of the core function module can be omitted, as the function object is FORM, and the attribute is Title, then the command can be: FORM.Title="You Are Good". When the user name, password and login number correspond to the user name, password and login number saved on the load balancing server, it means that the request is legal; otherwise, it means that the request is illegal. the
步骤903、负载均衡服务器向用户终端返回错误信息,然后执行步骤930:结束本过程。
步骤904、根据负荷分担原则选择一台最闲的可用的Web服务器并将业务请求分配到选择的Web服务器上执行。
步骤905、Web服务器接收并分析业务请求,确定业务请求是否合法,若合法,则根据系统配置文件判断自身是否可以完成业务请求,若可以完成,则执行步骤906,否则,则执行步骤907。若不合法,可直接丢弃业务请求,并向用户终端返回错误信息。
步骤906、对于静态页面(html或者htm格式的文件),Web服务器直接把所请求的文件传给用户终端浏览器,由浏览器解释执行并把最终结果展示给用户。对于动态页面(jsp格式的文件),Web服务器据请求信息找到相应的文件并执行该文件对应的Java类。然后将结果(HTML或者XML格式的)以HTTP的形式回送给用户终端浏览器。
步骤907、由任务分发模块选择一台最闲的业务管理服务器,并把请求发送给所选择的业务管理服务器。
步骤908、业务管理服务器接收并解析来自Web服务器的请求,并根据系统配置文件判断本身是否可以完成业务请求,若是,则执行步骤909,否则,执行步骤910。
步骤909、业务管理服务器对业务请求进行处理,如,检查请求的参数类型、格式、内容是否正确。如果非法直接返回错误信息给Web服务器,如果合法则按请求执行相应的操作如查询系统中各个模块的运行状态、查询系统中权限配置信息等,并把处理结果打包为标准的数据格式返回给Web服务器,然后执行步骤906。
步骤910、选择业务处理模块中一个最闲的业务处理服务器,并把业务请求转换为标准的CORBA请求发给选择的业务处理器。
步骤911、业务处理器接收并解析来自业务管理服务器的业务请求,并根据系统配置文件判断本身或者与数据库服务层模块交互是否可以完成业务,若是,执行步骤912,否则,执行步骤913。
步骤912、业务处理服务器将处理后的结果或者与数据库服务层模块交互的结果打包后发给业务管理服务器,然后执行步骤909。
步骤913、选择接入层模块中一个最闲的接入服务器,并把业务请求发给选择的接入服务器。 Step 913: Select the most idle access server in the access layer module, and send the service request to the selected access server. the
步骤914、接入服务器接收并解析来自业务处理服务器的业务请求,把业务请求转换为被管网元所能识别的协议格式并下发到相应的被管网元上去。
步骤915、被管网元接收并解析来自接入服务器的业务请求,并对业务请求进行处理(如,执行来自接入服务器所请求的命令,或者查询网元自身的运行状态、重启等)。
步骤916、被管网元将处理的结果回送到接入层模块的接入服务器。
步骤917、接入层模块的接入服务器把被管网元返回的信息转换为网络管理系统能够处理的标准数据格式,然后将其返回给业务处理层模块的业务处理器,接着执行步骤912,直至将被管网元返回的结果发送到用户终端为止。
步骤930、结束本过程。
根据本发明,在用户终端与Web服务层模块之间除了采用标准的HTTP协议外还采用两者默认的CORBA接口,在Web服务层模块与业务管理层模块之间采用两者默认的接口、在业务管理层模块与业务处理层模块之间采用两者默认的接口、在业务处理层模块与数据存储层模块之间采用两者默认的接口、在业务处理层模块与接入层模块之间采用两者默认的接口,在接入层模块与被管网元之间采用两者默认的接口。上述各层之间默认的接口可以相同,也可以不同,原则上只要两层之间能够互相识别即可,两层之间默认的接口还可以随时变化。这样,只有通过正常渠道的信息流,才能被接受,然后进行处理,从而防止了如黑客等非法驻留程序的攻击,提高了系统的安全性。 According to the present invention, in addition to adopting the standard HTTP protocol between the user terminal and the Web service layer module, the default CORBA interface of both is adopted, and the default interface of both is adopted between the Web service layer module and the business management module. The default interface between the business management layer module and the business processing layer module is used, the default interface is used between the business processing layer module and the data storage layer module, and the default interface is used between the business processing layer module and the access layer module. The default interface of the two is used between the access layer module and the managed network element. The default interfaces between the above layers can be the same or different. In principle, as long as the two layers can recognize each other, the default interfaces between the two layers can also be changed at any time. In this way, only the information flow through normal channels can be accepted and processed, thus preventing the attacks of illegal resident programs such as hackers and improving the security of the system. the
因此,根据本发明,从基本的框架体系方面,本发明提供了一种通用的、开放的、可扩展的框架体系。其次,为了向用户提供最大的选择范围,本发明是在基于开放标准(CORBA)的框架的基础上设计的,具有平台无关性,如既支持Unix操作系统,又支持Windows、Linux操作系统。同时,接入层模块中的适配器可以支持基于标准的网络管理协议,如SNMP和CMIP,也能支持 TCP/IP协议族及其它的一些专用网络协议。 Therefore, according to the present invention, from the aspect of the basic framework system, the present invention provides a general, open and extensible framework system. Secondly, in order to provide users with the largest range of choices, the present invention is designed on the basis of an open standard (CORBA) framework, and has platform independence, such as not only supporting Unix operating systems, but also supporting Windows and Linux operating systems. At the same time, the adapter in the access layer module can support standard-based network management protocols, such as SNMP and CMIP, as well as TCP/IP protocol family and some other dedicated network protocols. the
具体地,本发明具有如下有益效果: Specifically, the present invention has the following beneficial effects:
(1)跨平台性。由于这种网络管理系统是基于CORBA规范的,开发出的系统具有真正的跨平台性。用户终端直接采用标准的浏览器,对用户终端的运行平台没有任何限制。 (1) Cross-platform. Because this network management system is based on the CORBA specification, the developed system is truly cross-platform. The user terminal directly adopts a standard browser, and there is no restriction on the operating platform of the user terminal. the
(2)高可扩展性。可以实现系统在硬件和软件两方面的无干扰升级。如果业务处理层模块或者业务管理层模块或者Web服务层模块负担过重,可以追加相应的处理服务器,系统能自动实现负荷分担,从而增强了整个网络管理系统的处理能力。如果有新的业务需求,只要开发符合CORBA规范的新业务处理对象就可通过配置文件方便地集成到现有的网络管理系统中。 (2) High scalability. It can realize non-disruptive upgrade of the system in both hardware and software. If the business processing layer module, business management layer module or Web service layer module is overloaded, corresponding processing servers can be added, and the system can automatically realize load sharing, thereby enhancing the processing capacity of the entire network management system. If there is a new business requirement, as long as the new business processing object conforming to the CORBA specification is developed, it can be easily integrated into the existing network management system through the configuration file. the
(3)高安全性。数据存储层只能由业务处理层进行访问,并且这里的访问必须经过安全认证的,其它层不能访问,Web用户终端也不存在与数据存储层的逻辑关联,这样就避免了用户的非法访问。用户终端与Web服务层模块、Web服务层模块与业务管理层模块、业务管理层模块与业务处理层模块、业务处理层模块与数据存储层模块、业务处理层模块与接入层模块之间各自采用默认的接口,这样通过层层信息控制的方式,能有效防止来自网络上的恶意攻击与信息盗窃,有效保证网管系统的安全性。 (3) High security. The data storage layer can only be accessed by the business processing layer, and the access here must be authenticated, other layers cannot be accessed, and there is no logical association between the Web user terminal and the data storage layer, thus avoiding illegal access by users. Between the user terminal and the Web service layer module, between the Web service layer module and the business management layer module, between the business management layer module and the business processing layer module, between the business processing layer module and the data storage layer module, between the business processing layer module and the access layer module By adopting the default interface, through layer-by-layer information control, it can effectively prevent malicious attacks and information theft from the network, and effectively ensure the security of the network management system. the
此外,系统通过权限配置文件对每个界面及其操作进行授权,这就限制了对系统功能模块的非法使用,从而保证了整个系统的安全。 In addition, the system authorizes each interface and its operation through the authority configuration file, which restricts the illegal use of system function modules, thus ensuring the security of the entire system. the
(4)高可靠性。本发明在核心功能模块采用的是多台服务器冗余机制,若其中一台服务器发生故障时,其余具有相同功能的服务器能即时替代工作,从而保证系统处理的不中断,避免了单点故障问题。此外,本网络管理系统中的监控模块能实时检测系统服务的状态并在服务发生异常时进行立即恢复。 (4) High reliability. The present invention adopts a multi-server redundancy mechanism in the core function module. If one of the servers fails, the remaining servers with the same function can immediately replace the work, thereby ensuring the uninterrupted processing of the system and avoiding the problem of single point failure. . In addition, the monitoring module in the network management system can detect the status of the system service in real time and restore it immediately when the service is abnormal. the
(5)高性能。本发明的网络管理系统采用的是多服务器的分布式结构以及负载均衡策略,通过这种技术,系统能动态分配各服务器之间的处理流量,实现共享和高效地利用资源,避免了单点性能瓶颈,提高了整个系统的处理能 力。 (5) High performance. The network management system of the present invention adopts a multi-server distributed structure and a load balancing strategy. Through this technology, the system can dynamically distribute the processing flow among the servers, realize sharing and efficiently utilize resources, and avoid single-point performance Bottlenecks improve the processing power of the entire system. the
(6)易于升级与维护。用户终端仅需要浏览器,无需进行配置与升级。服务器端采用分布式组件结构与XML文件进行网络管理系统中所有业务功能与界面定义。采用该结构,当网络管理需求变化时,只需要更改相应的业务组件与配置文件,无需对其他部分进行改动,无需对整个系统进行编译,无需重启系统,无需重新分发客户应用就可以实现已有业务的变更、新业务的添加和旧业务的抛弃,从而很容易地满足不同的网络管理变更需求。 (6) Easy to upgrade and maintain. The user terminal only needs a browser, and no configuration or upgrade is required. The server side uses distributed component structure and XML files to define all business functions and interfaces in the network management system. With this structure, when the network management requirements change, only the corresponding business components and configuration files need to be changed, without changing other parts, compiling the entire system, restarting the system, or redistributing customer applications to realize existing Changes in services, addition of new services, and abandonment of old services can easily meet different network management change requirements. the
(7)界面友好性。用户终端界面是基于Web的,它比传统应用程序的网络管理界面更直接、更易于使用。此外,本发明可以为不同的用户配置不同的登陆、注销、成功或者失败等页面,从而满足不同用户的个性化需要,提高用户的使用满意度。 (7) Interface friendliness. The user terminal interface is web-based, which is more direct and easier to use than the web management interface of traditional applications. In addition, the present invention can configure different pages for different users, such as login, logout, success or failure, so as to meet the personalized needs of different users and improve user satisfaction. the
(8)方便性。所述网络管理系统是基于的Web的,可以允许网络管理人员使用任何一种Web浏览器,在网络任何节点上方便迅速地配置、控制以及存取等管理操作,改变了以往只能局限在网络管理工作站上进行网络管理的模式。 (8) Convenience. The network management system is based on the Web, which allows network managers to use any kind of Web browser to conveniently and quickly configure, control, access and other management operations on any node in the network, changing the past that can only be limited to the network Mode for network administration on the management station. the
(9)降低网络管理的成本。浏览器操作与Web页面对网络管理用户来说是非常熟悉的,这将大大降低用户培训的费用,同时又促进了更多的用户去利用网络管理系统来管理网络,降低网络运维成本。另外,由于网络管理核心计算与存储都在Web服务器、业务管理服务器、业务处理服务器、数据存储服务器上,Web浏览器只需要拥有适量空间的一般机器,从而使客户在简单便宜的客户机上就能管理网络。 (9) Reduce the cost of network management. Browser operations and web pages are very familiar to network management users, which will greatly reduce the cost of user training, and at the same time promote more users to use the network management system to manage the network and reduce network operation and maintenance costs. In addition, since the core computing and storage of network management are all on the Web server, business management server, business processing server, and data storage server, the Web browser only needs a general machine with an appropriate amount of space, so that customers can use it on a simple and cheap client computer. Manage the network. the
(10)降低开发费用。本发明中界面表示逻辑与网络计算的逻辑是分离开来的,这样负责界面开发的人员不需要掌握网络管理复杂逻辑便可完成页面开发工作,使得前台开发人员与后台开发人员的工作完全分离,从而保证了高效率与低成本的开发。 (10) Reduce development costs. In the present invention, the logic of interface representation is separated from the logic of network computing, so that the personnel in charge of interface development can complete the page development work without mastering the complex logic of network management, so that the work of front-end developers and background developers is completely separated. Thus ensuring high efficiency and low cost development. the
虽然通过实施例描绘了本发明,但本领域普通技术人员知道,在不脱离本发明的精神和实质的情况下,就可使本发明有许多变形和变化,本发明的范围由所附的权利要求来限定。 Although the present invention has been described by the embodiments, those of ordinary skill in the art know that, without departing from the spirit and essence of the present invention, the present invention can have many modifications and variations, and the scope of the present invention is defined by the appended rights Requirements to limit. the
Claims (19)
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN2006100785820A CN1968283B (en) | 2006-05-12 | 2006-05-12 | System and method for network management |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN2006100785820A CN1968283B (en) | 2006-05-12 | 2006-05-12 | System and method for network management |
Publications (2)
Publication Number | Publication Date |
---|---|
CN1968283A CN1968283A (en) | 2007-05-23 |
CN1968283B true CN1968283B (en) | 2010-12-08 |
Family
ID=38076817
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN2006100785820A Expired - Fee Related CN1968283B (en) | 2006-05-12 | 2006-05-12 | System and method for network management |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN1968283B (en) |
Families Citing this family (22)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN101938367B (en) * | 2009-06-29 | 2013-08-21 | 中兴通讯股份有限公司 | Method and system for enabling comprehensive network management system to realize performance access of lower network management system in telecommunication network |
CN101645022B (en) * | 2009-08-28 | 2013-07-10 | 曙光信息产业(北京)有限公司 | Work scheduling management system and method for a plurality of colonies |
CN101834756A (en) * | 2010-04-07 | 2010-09-15 | 山东高效能服务器和存储研究院 | A state monitoring system for load balancing equipment |
CN101902364A (en) * | 2010-08-26 | 2010-12-01 | 中兴通讯股份有限公司 | System and method for reporting integrated network management data |
CN102316160B (en) * | 2011-06-14 | 2013-09-18 | 贵阳朗玛信息技术股份有限公司 | Website system and communication method thereof |
CN103036694A (en) * | 2011-09-29 | 2013-04-10 | 中兴通讯股份有限公司 | Service distribution method and device of distributed network |
CN103209090A (en) * | 2012-01-17 | 2013-07-17 | 中兴通讯股份有限公司 | Remote network management system and business operation method thereof |
CN104423944B (en) * | 2013-08-29 | 2018-05-18 | 中国银联股份有限公司 | A kind of software application system |
CN104660435A (en) * | 2013-11-25 | 2015-05-27 | 中国电信股份有限公司 | Transactional network management engine for intelligent pipeline and network management transaction processing method of transactional network management engine |
CN104717192B (en) * | 2013-12-16 | 2018-05-18 | 腾讯科技(深圳)有限公司 | Legality identification method and intermediate server |
CN104009866B (en) * | 2014-05-09 | 2018-04-17 | 烽火通信科技股份有限公司 | WEB network management systems Modular implement method and device based on RIA |
CN103986605B (en) * | 2014-05-23 | 2017-11-14 | 新华三技术有限公司 | NM server, processing server, network management system and corresponding method |
CN104168314A (en) * | 2014-08-07 | 2014-11-26 | 深圳市东信时代信息技术有限公司 | Website background framework and website background framework performance improvement method |
CN105591778A (en) * | 2014-10-23 | 2016-05-18 | 上海天脉聚源文化传媒有限公司 | Method and system for updating configuration file in distributed system |
CN104270472B (en) * | 2014-10-24 | 2017-11-07 | 杭州高达软件系统股份有限公司 | A kind of remote service calling method, apparatus and system |
CN105577446B (en) * | 2015-12-30 | 2019-02-05 | 邦彦技术股份有限公司 | Lightweight embedded network management system and method |
CN106936660B (en) * | 2015-12-31 | 2020-02-14 | 华为软件技术有限公司 | Data acquisition method and device |
CN106657232A (en) * | 2016-09-29 | 2017-05-10 | 山东浪潮商用系统有限公司 | Distributed server configuration and service method thereof |
CN109067858A (en) * | 2018-07-20 | 2018-12-21 | 安居慧云(厦门)科技有限公司 | A kind of distributed information storage method based on block chain technology |
CN111526052B (en) * | 2020-04-17 | 2023-04-07 | 中移(杭州)信息技术有限公司 | Network element instruction management method, device, network equipment and storage medium |
CN112583922B (en) * | 2020-12-16 | 2022-09-20 | 罗普特科技集团股份有限公司 | Intelligent scheduling system for video monitoring service |
CN113138893A (en) * | 2021-03-26 | 2021-07-20 | 河北航天信息技术有限公司 | Method for solving problem of Java Web application report 500Internal Error |
Citations (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN1635740A (en) * | 2003-12-26 | 2005-07-06 | 华为技术有限公司 | Application of distributed network management system and method |
CN1735032A (en) * | 2004-08-13 | 2006-02-15 | 华为技术有限公司 | A Network Management Method Supporting Distributed Management Information Tree |
-
2006
- 2006-05-12 CN CN2006100785820A patent/CN1968283B/en not_active Expired - Fee Related
Patent Citations (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN1635740A (en) * | 2003-12-26 | 2005-07-06 | 华为技术有限公司 | Application of distributed network management system and method |
CN1735032A (en) * | 2004-08-13 | 2006-02-15 | 华为技术有限公司 | A Network Management Method Supporting Distributed Management Information Tree |
Also Published As
Publication number | Publication date |
---|---|
CN1968283A (en) | 2007-05-23 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN1968283B (en) | System and method for network management | |
US20240297833A1 (en) | System and method for providing a service management engine for use with a cloud computing environment | |
TWI224899B (en) | Dynamic binding and fail-over of comparable web service instances in a services grid | |
EP1864432B1 (en) | Centralised management for a set of network nodes | |
US8631424B2 (en) | Method and system of mapping at least one web service to at least one OSGi service and exposing at least one local service as at least one web service | |
US7188163B2 (en) | Dynamic reconfiguration of applications on a server | |
US6950874B2 (en) | Method and system for management of resource leases in an application framework system | |
US7805533B2 (en) | Methods and media for a protocol abstraction layer for information handling systems | |
US7209945B2 (en) | Application services gateway | |
US20020087734A1 (en) | System and method for managing dependencies in a component-based system | |
US20080140760A1 (en) | Service-oriented architecture system and methods supporting dynamic service provider versioning | |
US20080140759A1 (en) | Dynamic service-oriented architecture system configuration and proxy object generation server architecture and methods | |
WO2014039858A1 (en) | System and method for service definition packages for use with a cloud computing environment | |
WO2014039889A1 (en) | System and method for orchestration of services for use with a cloud computing environment | |
WO2014039896A1 (en) | System and method for dynamic modification of service definition packages with a cloud computing environment | |
JP2009545025A (en) | Method and system for identifying inventory of computer assets on a network and performing inventory management | |
CN116633775B (en) | Container communication method and system of multi-container network interface | |
US7191232B2 (en) | Extendable provisioning mechanism for a service gateway | |
US8224945B2 (en) | Memory management system and method for open platform | |
US20030055877A1 (en) | Remote client manager that facilitates an extendible, modular application server system distributed via an electronic data network and method of distributing same | |
JP2004519168A (en) | Integrated communication server and method | |
US20020069257A1 (en) | Provisioning mechanism for a service gateway | |
US20050246343A1 (en) | Network management system permitting remote management of systems by users with limited skills | |
WO2012119340A1 (en) | Method and apparatus for implementing north interface | |
CN101499032B (en) | Memory management system and method for open platform |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
C06 | Publication | ||
PB01 | Publication | ||
C10 | Entry into substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
C14 | Grant of patent or utility model | ||
GR01 | Patent grant | ||
C17 | Cessation of patent right | ||
CF01 | Termination of patent right due to non-payment of annual fee |
Granted publication date: 20101208 Termination date: 20130512 |