The more examples of isomery redundancy Snmp agreements realize system and its implementationTechnical field
The invention belongs to the Snmp protocol realization technical fields in network communication technology, more particularly to a kind of isomery redundancyThe more examples of Snmp agreements realize system and its implementation.
Background technology
Core component of the router as network infrastructure, the security situation of its own are increasingly serious.And SnmpImportant component of the agreement as router administration plane realizes the configuration management, inquiry and alarm announcement function of router,Its security situation also allows of no optimist.Snmp agreements mainly face the attack from loophole or back door.Conventional router passes through repairingSnmp protocol bugs increase attack of the additional security mechanism reply based on known bugs or back door, to unknown loophole or afterDoor is helpless, and mainly conventional method can not be fully solved fundamentally there is no the static characteristic for changing Snmp agreementsThe fragile sex chromosome mosaicism of Snmp agreements and Mib information.
Invention content
To overcome deficiency of the prior art, the present invention provide a kind of more examples of isomery redundancy Snmp agreements realize system andIts implementation, solving single Snmp Failure Of Protocols in router of the prior art causes router administration plane to be asked extremelyTopic, is effectively ensured network communication normal operation.
According to designing scheme provided by the present invention, a kind of more examples of isomery redundancy Snmp agreements realize system, comprisingSnmp agent units, Snmp agreements perform module, dynamic dispatching unit, wherein, Snmp agent units are responsible for receiving from netThe Snmp agreement requests of tube terminal, and request message duplication is distributed to Snmp agreements and performs module;Snmp agreements perform bodyModule is handled according to Snmp agreement request types, handling result is sent to dynamic dispatching unit, Snmp agreements perform bodyModule includes N number of isomery Snmp agreements run parallel and performs body unit;Dynamic dispatching unit safeguards that isomery Snmp agreements performBody unit is selected more preferable mechanisms to all Snmp agreements execution body unit operation result foundations and is arbitrated, from isomery SnmpAgreement performs the normal Snmp agreements of one operating status of selection in body unit and performs woker marks in body unit juxtaposition, will be secondaryCut out result and be transmitted to route control unit or data forwarding unit accordingly according to Snmp agreement requests type, wherein, N be more than2 integer.
Above-mentioned, the Snmp agreement requests type of webmaster terminal includes Snmpset message, Snmpget message.
Above-mentioned, it is specifically as follows comprising content to select more preferable mechanisms:Multiple isomery Snmp agreements run parallel perform bodyIn unit, if the operation result that more than two Snmp agreements perform body unit is identical, by the most operation knot of same numberFruit is as arbitration result, if the operation result that each Snmp agreements perform body unit is different, by the Snmp of highest priorityAgreement performs the operation result of body unit as arbitration result.
A kind of more example implementation methods of isomery redundancy Snmp agreements, it is real based on the above-mentioned more examples of isomery redundancy Snmp agreementsExisting system, specifically comprises the following steps:
Step 1, Snmp agent units receive webmaster terminal Snmp request commands, respectively with multiple isomeries run parallelSnmp agreements perform body unit and establish internal Snmp session connections, replicate Snmp request commands and pass through internal Snmp session connectionsIt is distributed to each Snmp agreements and performs body unit, Snmp request commands include Snmpset orders, Snmpget orders;
Step 2, each Snmp agreements perform body unit and receive carries out operation after Snmp request commands respectively, and by operationAs a result it is advertised to dynamic dispatching unit;
Step 3, dynamic dispatching unit perform body unit operation result according to each Snmp agreement and carry out maintenance management simultaneouslyIt is arbitrated according to more preferable mechanisms are selected, is performed from isomery Snmp agreements and a normal Snmp of operating status is selected in body unitAgreement performs woker marks in body unit juxtaposition, and arbitration result is transmitted to routing accordingly according to Snmp agreement requests typeControl unit or data forwarding unit.
Above-mentioned implementation method, step 2 specifically include following content:It is received when Snmp agreements perform body unitDuring Snmpset orders, configuration data is obtained, and configuration data is notified to dynamic dispatching unit;When Snmp agreements perform body listWhen member receives Snmpget orders, the variate-value to be inquired is obtained, and query result is notified to dynamic dispatching unit.
Above-mentioned implementation method, dynamic dispatching unit performs body unit operation knot according to each Snmp agreement in step 3Fruit carries out maintenance management and is arbitrated according to more preferable mechanisms are selected, specifically comprising following content:Dynamic dispatching unit foundationSnmp agreements perform the configuration data of body unit notification or query result carries out maintenance management, multiple isomery Snmp run parallelAgreement is performed in body unit, if the operation result that more than two Snmp agreements perform body unit is identical, by same number mostMore operation results are as arbitration result, if the operation result that each Snmp agreements perform body unit is different, by priorityHighest Snmp agreements perform the operation result of body unit as arbitration result.
Above-mentioned implementation method, dynamic dispatching unit performs body unit operation knot according to each Snmp agreement in step 3Fruit carries out maintenance management and is arbitrated according to more preferable mechanisms are selected, also comprising following content:In arbitrated procedure is carried out, if hairSome existing Snmp agreement performs body unit operation irregularity, and the Snmp agreements of the operation irregularity are performed body unit by dynamic dispatching unitWorking condition is cut out, and is reset so that Snmp agreements perform body unit and are restored to normal original state;Dynamic dispatching unitMonitoring Snmp agreements perform body unit state in real time, when monitoring that Snmp agreements perform body unit failure or the company of mistake, pass through bandThe Snmp agreements are performed body unit place machine and restarted by outer tunnel so that Snmp agreements perform body unit and are restored to normal initial shapeState.
Beneficial effects of the present invention:
1st, of the invention since multiple parallel isomery Snmp agreements perform body units, this isomerism determines different SnmpAgreement, which performs body unit, will not have identical loophole or back door, greatly reduce multiple Snmp agreements and perform body unit by sameWhen paralysis is caused by attack or causes random possibility, therefore under conditions of some Snmp agreement performs body unit failure or failure,Other Snmp agreements perform body unit and remain to effectively work, and system remains able to the configuration for having Snmp agreements, looks into as a wholeAlarm announcement function is inquired about, fault-tolerant ability is strong.
2nd, Snmp agencies, dynamic dispatching unit and each Snmp agreements in the present invention perform body unit and may operate in clothesIt is engaged on device or on virtual machine, installation and deployment are fairly simple;Snmp agreements perform body unit number and are no less than 3, can be according to realityBorder application environment demand and cost needs determine to perform body unit, Snmp agreements execution body unit number using how many a Snmp agreementsWhen amount increases, equipment and maintenance cost will not be dramatically increased, deployment is flexible.
Description of the drawings:
Fig. 1 is the systematic schematic diagram of the present invention;
Fig. 2 is the method flow schematic diagram of the present invention.
Specific embodiment:
The present invention is described in further detail with technical solution below in conjunction with the accompanying drawings, and it is detailed to pass through preferred embodimentDescribe bright embodiments of the present invention in detail, but embodiments of the present invention are not limited to this.
Embodiment one, shown in Figure 1, a kind of more examples of isomery redundancy Snmp agreements realize system, a kind of isomery redundancyThe more examples of Snmp agreements realize system, and module, dynamic dispatching unit are performed comprising Snmp agent units, Snmp agreements, wherein,Snmp agent units are responsible for receiving the Snmp agreement requests from webmaster terminal, and request message duplication is distributed to Snmp associationsView performs module;Snmp agreements perform module, are handled according to Snmp agreement request types, handling result is sent toDynamic dispatching unit, Snmp agreements perform module and include N number of isomery Snmp agreements execution body unit run parallel;Dynamic is adjustedUnit is spent, safeguards that isomery Snmp agreements perform body unit, it is more according to selecting that body unit operation result is performed to all Snmp agreementsPreferable mechanism is arbitrated, and performing the normal Snmp agreements of one operating status of selection in body unit from isomery Snmp agreements performsWoker is identified in body unit juxtaposition, and arbitration result is transmitted to route control unit accordingly according to Snmp agreement request typesOr data forwarding unit, wherein, N is the integer more than 2.
Snmp agent units of the present invention, Snmp agreements perform body unit, dynamic dispatching unit is all run on the server, moreA parallel isomery Snmp agreements perform body unit and are distributed on different servers or different virtual machines, each unit module itBetween interconnected by interchanger, used since multiple parallel isomery Snmp agreements perform body units by different developersWhat no language or translation and compiling environment were developed, it is identical that this isomerism determines that different Snmp agreements execution body units will not haveLoophole or back door, greatly reduce multiple Snmp agreements and perform body units by causing paralysis by attack simultaneously or cause random possibilityProperty, therefore under conditions of some Snmp agreement performs body unit failure or failure, other Snmp agreements perform body unit stillIt can effectively work, system remains able to the configuration for having Snmp agreements, inquiry and alarm announcement function, fault-tolerant ability as a wholeBy force.
Embodiment two, it is essentially identical with embodiment one, the difference lies in:The Snmp agreement request type packets of webmaster terminalInclude Snmpset message, Snmpget message.
It is specifically as follows comprising content to select more preferable mechanisms:Multiple isomery Snmp agreements run parallel are performed in body unit,If the operation result that more than two Snmp agreements perform body unit is identical, using the most operation result of same number as secondaryIt cuts out as a result, if the operation result of each Snmp agreements execution body unit is different, by the Snmp agreements execution of highest priorityThe operation result of body unit is as arbitration result.
Embodiment three, a kind of shown in Figure 2, more example implementation methods of isomery redundancy Snmp agreements, based on embodiment oneThe more examples of the isomery redundancy Snmp agreements realize system, specifically comprise the following steps:
Step 1, Snmp agent units receive webmaster terminal Snmp request commands, respectively with multiple isomeries run parallelSnmp agreements perform body unit and establish internal Snmp session connections, replicate Snmp request commands and pass through internal Snmp session connectionsIt is distributed to each Snmp agreements and performs body unit, Snmp request commands include Snmpset orders, Snmpget orders;
Step 2, each Snmp agreements perform body unit and receive carries out operation after Snmp request commands respectively, and by operationAs a result it is advertised to dynamic dispatching unit;
Step 3, dynamic dispatching unit perform body unit operation result according to each Snmp agreement and carry out maintenance management simultaneouslyIt is arbitrated according to more preferable mechanisms are selected, is performed from isomery Snmp agreements and a normal Snmp of operating status is selected in body unitAgreement performs woker marks in body unit juxtaposition, and arbitration result is transmitted to routing accordingly according to Snmp agreement requests typeControl unit or data forwarding unit.
Example IV, a kind of shown in Figure 2, more example implementation methods of isomery redundancy Snmp agreements, based on embodiment oneThe more examples of the isomery redundancy Snmp agreements realize system, specifically comprising following content:
First, Snmp agent units receive webmaster terminal Snmp request commands, respectively with multiple isomeries run parallelSnmp agreements perform body unit and establish internal Snmp session connections, replicate Snmp request commands and pass through internal Snmp session connectionsIt is distributed to each Snmp agreements and performs body unit, Snmp request commands include Snmpset orders, Snmpget orders.
Secondly, each Snmp agreements perform body unit and receive carries out operation after Snmp request commands respectively, and by operationAs a result dynamic dispatching unit is advertised to, when Snmp agreements, which perform body unit, receives Snmpset orders, obtains configuration data,And configuration data is notified to dynamic dispatching unit;When Snmp agreements, which perform body unit, receives Snmpget orders, obtaining willThe variate-value of inquiry, and query result is notified to dynamic dispatching unit.
Then, dynamic dispatching unit according to each Snmp agreement perform body unit operation result carry out maintenance management and byIt is arbitrated according to more preferable mechanisms are selected, the normal Snmp associations of one operating status of selection in body unit is performed from isomery Snmp agreementsView performs woker marks in body unit juxtaposition, and arbitration result is transmitted to routing control accordingly according to Snmp agreement requests typeUnit or data forwarding unit processed.Dynamic dispatching unit performs the configuration data of body unit notification or inquiry knot according to Snmp agreementsFruit carries out maintenance management, and multiple isomery Snmp agreements run parallel are performed in body unit, if more than two Snmp agreements are heldThe operation result of row body unit is identical, then using the most operation result of same number as arbitration result, if each Snmp agreementsThe operation result for performing body unit is different, then the Snmp agreements of highest priority is performed the operation result of body unit as secondaryCut out result.In arbitrated procedure is carried out, if finding, some Snmp agreement performs body unit operation irregularity, and dynamic dispatching unit shouldThe Snmp agreements of operation irregularity perform body unit and cut out working condition, and reset so that it is extensive that Snmp agreements perform body unitNormal original state is arrived again;Dynamic dispatching unit monitors Snmp agreements and performs body unit state in real time, is monitoring Snmp agreementsWhen performing body unit failure or the company of mistake, which is performed by body unit place machine by out-band channel and is restarted so that Snmp is assistedView performs body unit and is restored to normal original state.
The present invention while multiple isomery Snmp agreements are run parallel perform body units, it is how excellent by selecting by dynamic dispatching unitThe operation result of the multiple Snmp protocol instances execution units of mechanism ruling is selected, the configuration result of arbitration is exported and is put down to route testThe query result of arbitration is fed back to webmaster terminal by face and data plane, and installation and deployment are simple, and deployment is flexible, fault-tolerant abilityBy force.
The present invention is not limited to above-mentioned specific embodiment, and those skilled in the art can also make a variety of variations accordingly, butIt is any all to cover within the scope of the claims with equivalent or similar variation of the invention.