CN112291094A - Container network management method, device, equipment and storage medium - Google Patents

Abstract

The invention relates to the technical field of big data, and discloses a container network management method, a device, equipment and a storage medium, which are used for improving the migration efficiency of application micro-services from a virtual machine to a container. The container network management method comprises the following steps: acquiring a target operation option and a to-be-processed container set from an operation container network interface request; when the target operation option is a read information item, returning container network interface version information to the terminal; when the target operation option is an insertion information item, adding network configuration information to the container set to be processed according to the application type information of the container set to be processed, the target internet interconnection protocol address and a preset host virtual bridge; and when the target operation option is the deletion information item, cleaning the network configuration information corresponding to the container set to be processed according to the application type information of the container set. In addition, the invention also relates to a block chain technology, and the network configuration information can be stored in the block chain nodes.

Description

Container network management method, device, equipment and storage medium

Technical Field

The present invention relates to the field of resource allocation in big data technology, and in particular, to a method, an apparatus, a device, and a storage medium for managing a container network.

Background

The open-source network plug-in products based on the container arrangement tool kubernets (k8s) are very numerous and are generally designed and realized by adopting a three-layer network model, wherein the three-layer network model relates to a node network plane, a container set pod network plane and a cluster network plane. The virtual machine network mode corresponding to the kernel-based virtual machine kvm is in a virtual bridge mode, and the virtual machine and the host machine belong to the same network plane.

In the prior art, in migrating an application micro-service deployed on a virtual machine to kubernets, a service code and a network connection generally need to be modified, which results in low migration efficiency of the application micro-service, and network communication between the application deployed on the virtual machine and the application micro-service deployed on a K8S cluster is affected by network connection modification, which results in poor compatibility of network intercommunication.

Disclosure of Invention

The invention mainly aims to solve the problems of low migration efficiency and poor compatibility of network intercommunication in the existing method for migrating application micro-services in a virtual machine to a container arrangement tool.

In order to achieve the above object, a first aspect of the present invention provides a container network management method, including: receiving an operation container network interface request sent by a terminal, and acquiring a target operation option and a to-be-processed container set from the operation container network interface request, wherein the target operation option is a read information item, an insert information item or a delete information item, and the to-be-processed container set comprises at least one container with deployed business application microservices; when the target operation option is the read information item, acquiring container network interface version information and returning the container network interface version information to the terminal, wherein the container network interface version information is used for indicating whether the to-be-processed container set completes configuration information updating; when the target operation option is the insertion information item, acquiring application type information and a target internet interconnection protocol address of a container set to be processed, and adding network configuration information to the container set to be processed according to the application type information, the target internet interconnection protocol address and a preset host machine virtual network bridge, wherein the preset host machine virtual network bridge is used for indicating that a preset host machine and a preset virtual machine are communicated by using a network card of the virtual network bridge in advance; and when the target operation option is the deletion information item, acquiring the application type information and the corresponding network configuration information of the container set to be processed, and cleaning the network configuration information corresponding to the container set to be processed according to the application type information.

Optionally, in a first implementation manner of the first aspect of the present invention, the receiving an operation container network interface request sent by a terminal, and acquiring a target operation option and a to-be-processed container set from the operation container network interface request, where the target operation option is a read information item, an insert information item, or a delete information item, and the to-be-processed container set includes at least one container in which a business application microservice is deployed, including: receiving an operation container network interface request sent by a terminal, and performing parameter analysis on the operation container network interface request to obtain an operation option to be verified and a container set to be processed, wherein the container set to be processed comprises at least one container with deployed business application micro-services, and the business application micro-services are medical application micro-services; acquiring preset operation option configuration information, and judging whether the preset operation option configuration information contains the operation option to be verified; if the operation option to be verified does not exist in the preset operation option configuration information, generating prompt information and returning the prompt information to the terminal, wherein the prompt information is used for indicating that the network interface request of the operation container is abnormal; if the operation option to be verified exists in the preset operation option configuration information, setting the operation option to be verified as a target operation option, wherein the target operation option is a read information item, an insert information item or a delete information item.

Optionally, in a second implementation manner of the first aspect of the present invention, when the target operation option is the read information item, obtaining container network interface version information, and returning the container network interface version information to the terminal, where the container network interface version information is used to indicate whether the to-be-processed container set has completed updating the configuration information, and the method includes: when the target operation option is the read information item, generating an information query statement; executing the information query statement, and querying container network interface version information from a preset database, wherein the container network interface version information is used for indicating whether the to-be-processed container set completes configuration information updating; and carrying out data encapsulation on the version information of the container network interface according to a preset data format to obtain response data, and sending the response data to the terminal.

Optionally, in a third implementation manner of the first aspect of the present invention, when the target operation option is the insertion information item, obtaining application type information and a target internet interconnection protocol address of a set of containers to be processed, and adding network configuration information to the set of containers to be processed according to the application type information, the target internet interconnection protocol address, and a preset host virtual bridge, where the preset host virtual bridge is configured to instruct a preset host and a preset virtual machine to communicate with each other by using a network card of the virtual bridge in advance, where the method includes: when the target operation option is the insertion information item, acquiring application type information of a container set to be processed, and judging whether the application type information is stateful application or stateless application; if the application type information is stateful application, reading an idle internet protocol address from a preset internet protocol address configuration table; if the application type information is stateless application, acquiring an allocated internet protocol address; setting the idle internet interconnection protocol address or the allocated internet interconnection protocol address as a target internet interconnection protocol address, and adding network configuration information to the container set to be processed according to the target internet interconnection protocol address and a preset host machine virtual network bridge, wherein the preset host machine virtual network bridge is used for indicating that a preset host machine and a preset virtual machine are communicated by using a network card of the virtual network bridge in advance.

Optionally, in a fourth implementation manner of the first aspect of the present invention, the setting the idle ip address or the allocated ip address as a target ip address, and adding network configuration information to the set of containers to be processed according to the target ip address and a preset host virtual bridge, where the preset host virtual bridge is configured to instruct a preset host and a preset virtual machine to communicate with each other by using a network card of the virtual bridge, includes: setting the idle internet protocol address or the allocated internet protocol address as a target internet protocol address, and allocating a corresponding medium access control address to the target internet protocol address; setting a virtual equipment interface for the container set to be processed, and respectively connecting the virtual equipment interface with a preset host machine virtual bridge and the container set to be processed; and setting a corresponding media access control address, the target internet interconnection protocol address and preset routing information for the container set to be processed, wherein the preset host machine virtual network bridge is used for indicating that the preset host machine and the preset virtual machine are communicated by using a network card of the virtual network bridge in advance.

Optionally, in a fifth implementation manner of the first aspect of the present invention, when the target operation option is the deletion information item, acquiring application type information and corresponding network configuration information of a to-be-processed container set, and cleaning the network configuration information corresponding to the to-be-processed container set according to the application type information, includes: when the target operation option is the deletion information item, acquiring application type information of a container set to be processed, and judging whether the application type information is stateful application; if the application type information is stateful application, deleting a preset virtual device interface and preset routing information corresponding to the to-be-processed container set; and if the application type information is not stateful application, cleaning a preset internet interconnection protocol address, a preset virtual device interface and preset routing information corresponding to the to-be-processed container set.

Optionally, in a sixth implementation manner of the first aspect of the present invention, when the target operation option is the deletion information item, acquiring application type information and corresponding network configuration information of a to-be-processed container set, and after clearing the network configuration information corresponding to the to-be-processed container set according to the application type information, the container network management method further includes: receiving an application micro-service deployment request, deploying the application micro-service in the preset virtual machine to a container set of a configured network according to the application micro-service deployment request to obtain a deployment result, and recording the deployment result; receiving a printing operation log request, and reading a data set to be printed from a preset log record data table according to the printing operation log request, wherein the data set to be printed comprises the deployment result, an operation result corresponding to the target operation option and a corresponding state code; and acquiring preset printing parameters, and calling preset printing equipment to print and output the data set to be printed according to the preset printing parameters.

A second aspect of the present invention provides a container network management apparatus, including: the system comprises an acquisition module, a storage module and a processing module, wherein the acquisition module is used for receiving an operation container network interface request sent by a terminal and acquiring a target operation option and a to-be-processed container set from the operation container network interface request, the target operation option is a read information item, an insert information item or a delete information item, and the to-be-processed container set comprises at least one container with deployed business application microservices; the query module is used for acquiring the version information of the container network interface and returning the version information of the container network interface to the terminal when the target operation option is the read information item, wherein the version information of the container network interface is used for indicating whether the to-be-processed container set completes the updating of the configuration information; the newly added module is used for acquiring application type information and a target internet interconnection protocol address of a container set to be processed when the target operation option is the insertion information item, and adding network configuration information to the container set to be processed according to the application type information, the target internet interconnection protocol address and a preset host machine virtual network bridge, wherein the preset host machine virtual network bridge is used for indicating that a preset host machine and a preset virtual machine are communicated by using a network card of the virtual network bridge in advance; and the cleaning module is used for acquiring the application type information and the corresponding network configuration information of the container set to be processed when the target operation option is the deletion information item, and cleaning the network configuration information corresponding to the container set to be processed according to the application type information.

Optionally, in a first implementation manner of the second aspect of the present invention, the obtaining module is specifically configured to: receiving an operation container network interface request sent by a terminal, and performing parameter analysis on the operation container network interface request to obtain an operation option to be verified and a container set to be processed, wherein the container set to be processed comprises at least one container with deployed business application micro-services, and the business application micro-services are medical application micro-services; acquiring preset operation option configuration information, and judging whether the preset operation option configuration information contains the operation option to be verified; if the operation option to be verified does not exist in the preset operation option configuration information, generating prompt information and returning the prompt information to the terminal, wherein the prompt information is used for indicating that the network interface request of the operation container is abnormal; if the operation option to be verified exists in the preset operation option configuration information, setting the operation option to be verified as a target operation option, wherein the target operation option is a read information item, an insert information item or a delete information item.

Optionally, in a second implementation manner of the second aspect of the present invention, the query module is specifically configured to: when the target operation option is the read information item, generating an information query statement; executing the information query statement, and querying container network interface version information from a preset database, wherein the container network interface version information is used for indicating whether the to-be-processed container set completes configuration information updating; and carrying out data encapsulation on the version information of the container network interface according to a preset data format to obtain response data, and sending the response data to the terminal.

Optionally, in a third implementation manner of the second aspect of the present invention, the newly-added module includes: the judging unit is used for acquiring the application type information of the container set to be processed and judging whether the application type information is stateful application or stateless application when the target operation option is the insertion information item; a reading unit, configured to read an idle ip address from a preset ip address configuration table if the application type information is a stateful application; an obtaining unit, configured to obtain an allocated internet protocol address if the application type information is a stateless application; and the adding unit is used for setting the idle internet interconnection protocol address or the allocated internet interconnection protocol address as a target internet interconnection protocol address, and adding network configuration information to the set of containers to be processed according to the target internet interconnection protocol address and a preset host machine virtual network bridge, wherein the preset host machine virtual network bridge is used for indicating that the preset host machine and the preset virtual machine are communicated by using a network card of the virtual network bridge in advance.

Optionally, in a fourth implementation manner of the second aspect of the present invention, the newly added unit is specifically configured to: setting the idle internet protocol address or the allocated internet protocol address as a target internet protocol address, and allocating a corresponding medium access control address to the target internet protocol address; setting a virtual equipment interface for the container set to be processed, and respectively connecting the virtual equipment interface with a preset host machine virtual bridge and the container set to be processed; and setting a corresponding media access control address, the target internet interconnection protocol address and preset routing information for the container set to be processed, wherein the preset host machine virtual network bridge is used for indicating that the preset host machine and the preset virtual machine are communicated by using a network card of the virtual network bridge in advance.

Optionally, in a fifth implementation manner of the second aspect of the present invention, the cleaning module is specifically configured to: when the target operation option is the deletion information item, acquiring application type information of a container set to be processed, and judging whether the application type information is stateful application; if the application type information is stateful application, deleting a preset virtual device interface and preset routing information corresponding to the to-be-processed container set; and if the application type information is not stateful application, cleaning a preset internet interconnection protocol address, a preset virtual device interface and preset routing information corresponding to the to-be-processed container set.

Optionally, in a sixth implementation manner of the second aspect of the present invention, the container network management apparatus further includes: the deployment module is used for receiving an application micro-service deployment request, deploying the application micro-service in the preset virtual machine to a container set of a configured network according to the application micro-service deployment request to obtain a deployment result, and recording the deployment result; a reading module, configured to read a to-be-printed data set from a preset log record data table according to the print operation log request, where the to-be-printed data set includes the deployment result, an operation result corresponding to the target operation option, and a corresponding status code; and the printing module is used for acquiring preset printing parameters and calling preset printing equipment to print and output the data set to be printed according to the preset printing parameters.

A third aspect of the present invention provides a container network management apparatus, including: a memory and at least one processor, the memory having instructions stored therein; the at least one processor invokes the instructions in the memory to cause the container network management device to perform the container network management method described above.

A fourth aspect of the present invention provides a computer-readable storage medium having stored therein instructions, which, when run on a computer, cause the computer to execute the above-described container network management method.

In the technical scheme provided by the invention, an operation container network interface request sent by a terminal is received, and a target operation option and a to-be-processed container set are obtained from the operation container network interface request, wherein the target operation option is an information item reading, an information item inserting or an information item deleting, and the to-be-processed container set comprises at least one container with deployed business application micro-services; when the target operation option is the read information item, acquiring container network interface version information and returning the container network interface version information to the terminal, wherein the container network interface version information is used for indicating whether the to-be-processed container set completes configuration information updating; when the target operation option is the insertion information item, acquiring application type information and a target internet interconnection protocol address of a container set to be processed, and adding network configuration information to the container set to be processed according to the application type information, the target internet interconnection protocol address and a preset host machine virtual network bridge, wherein the preset host machine virtual network bridge is used for indicating that a preset host machine and a preset virtual machine are communicated by using a network card of the virtual network bridge in advance; and when the target operation option is the deletion information item, acquiring the application type information and the corresponding network configuration information of the container set to be processed, and cleaning the network configuration information corresponding to the container set to be processed according to the application type information. In the embodiment of the invention, the checking version, the configuring of the network information and the deleting of the network information of the container set are realized through different operation options, and the preset virtual network bridge is adopted to determine that the virtual machine and the container set are simultaneously used in a common network segment in a mixed manner, so that the application micro-services deployed in the preset virtual network bridge can be communicated with each other, thereby ensuring that the service application micro-services are migrated from the virtual machine to the container under the condition that service codes are not required to be transformed, and improving the migration efficiency of the application micro-services and the compatibility of the network intercommunication.

Drawings

Fig. 1 is a schematic diagram of an embodiment of a container network management method according to an embodiment of the present invention;

fig. 2 is a schematic diagram of another embodiment of a container network management method according to an embodiment of the present invention;

fig. 3 is a schematic diagram of an embodiment of a container network management apparatus according to an embodiment of the present invention;

fig. 4 is a schematic diagram of another embodiment of a container network management apparatus according to an embodiment of the present invention;

fig. 5 is a schematic diagram of an embodiment of a container network management device in the embodiment of the present invention.

Detailed Description

The embodiment of the invention provides a container network management method, a device, equipment and a storage medium, which are used for realizing the checking version, the configuration of network information and the deletion of network information of a container set through different operation options, and determining that a virtual machine and the container set are simultaneously mixed with a public network segment by adopting a preset virtual network bridge, so that application micro-services deployed in the preset virtual network bridge can be communicated with each other.

The terms "first," "second," "third," "fourth," and the like in the description and in the claims, as well as in the drawings, if any, are used for distinguishing between similar elements and not necessarily for describing a particular sequential or chronological order. It will be appreciated that the data so used may be interchanged under appropriate circumstances such that the embodiments described herein may be practiced otherwise than as specifically illustrated or described herein. Furthermore, the terms "comprises," "comprising," or "having," and any variations thereof, are intended to cover non-exclusive inclusions, such that a process, method, system, article, or apparatus that comprises a list of steps or elements is not necessarily limited to those steps or elements expressly listed, but may include other steps or elements not expressly listed or inherent to such process, method, article, or apparatus.

For convenience of understanding, a specific flow of an embodiment of the present invention is described below, and referring to fig. 1, an embodiment of a container network management method according to an embodiment of the present invention includes:

101. receiving an operation container network interface request sent by a terminal, and acquiring a target operation option and a to-be-processed container set from the operation container network interface request, wherein the target operation option is an information item reading, an information item inserting or an information item deleting, and the to-be-processed container set comprises at least one container with deployed business application micro-services.

Wherein, a Container Network Interface (CNI) is suitable for a plug-in network of an application container of a linux operating system. It should be noted that a container is an independent unit having an independent linux network namespace, for example, a container created by a server through the container engine rkt or docker. The container has a corresponding linux network namespace, and the linux network is a set of entities that can be associated with each other, have respective independent and unique internet protocol, and may be a container, a physical machine, or other network device (such as a router), which is not limited herein. The container set to be processed is a pea pod and comprises at least one container, and each container is used for deploying at least one business application micro-service.

Specifically, the server receives an operation container network interface request sent by the terminal, analyzes the operation container network interface request to obtain a target operation option and a to-be-processed container set, compares the target operation option with a preset information item to obtain a comparison result, wherein the preset information item comprises a read information item, an insert information item or a delete information item, and the to-be-processed container set comprises at least one deployed business application microservice container; when the comparison result is logic true, the server executes thesteps 102, 103 or 104; and when the comparison result is not logical true, the server determines that the operation container network interface request sent by the terminal has an exception. The read information item, the insert information item, or the delete information item may be represented by get _ info, update _ info, and delete _ info, respectively, or may be represented by other character strings, which is not limited herein.

It is to be understood that the executing subject of the present invention may be a container network management apparatus, and may also be a terminal or a server, which is not limited herein. The embodiment of the present invention is described by taking a server as an execution subject.

102. And when the target operation option is a read information item, acquiring the version information of the container network interface, and returning the version information of the container network interface to the terminal, wherein the version information of the container network interface is used for indicating whether the updating of the configuration information of the container set to be processed is finished.

For example, when the read information item is verify or VER, the server determines the target operation option as the read information item. Further, when the server determines that the target operation option is the read information item, the server queries the version information of the container network interface from a preset database or a preset file, and sends the version information of the container network interface to the terminal. The terminal may be a container organization tool kubernets (k8s), or may be another container management tool, which is not limited herein.

It should be noted that the version information of the container network interface is a character string composed of numbers, letters or preset symbols (including down-line replacement), and when the updating of the network configuration information of the container set to be processed is not completed, the version information of the container network interface may be null; when the updating of the network configuration information of the set of containers to be processed is completed, the version information of the container network interface is not a preset target value, for example, the version information of the container network interface is pod _ ver _ 20200808125346.

103. And when the target operation option is an insertion information item, acquiring application type information and a target internet interconnection protocol address of the container set to be processed, and adding network configuration information to the container set to be processed according to the application type information, the target internet interconnection protocol address and a preset host machine virtual network bridge, wherein the preset host machine virtual network bridge is used for indicating that the preset host machine and the preset virtual machine are communicated by using a network card of the virtual network bridge in advance.

The server may use ADD to indicate the insertion information item, or ADD to indicate the insertion information item, which is not limited herein. The insertion information item is used for allocating an internet protocol address for the set of containers to be processed, and the internet protocol addresses of the containers in the set of containers to be processed are the same. The target ip address is preconfigured in the preset database or the preset configuration file, and further includes a use status of the target ip address and a port of the target ip address, which is not limited herein.

Specifically, when the target operation option is an insertion information item, the server acquires application type information and a target internet interconnection protocol address of a container set to be processed from a preset database, the server adds network configuration information to the container set to be processed by using the application type information and the target internet interconnection protocol address, and performs communication connection between the network configuration information and a preset host machine virtual bridge, wherein the preset host machine virtual bridge is used for indicating that a network card of the virtual bridge is used for communicating the preset host machine and the preset virtual machine in advance. It can be understood that the server realizes network communication between each container in the container set and the preset virtual machine through the preset host virtual bridge, and migration efficiency of the application microservice and compatibility of network intercommunication are improved.

104. And when the target operation option is the deletion information item, acquiring the application type information and the corresponding network configuration information of the container set to be processed, and cleaning the network configuration information corresponding to the container set to be processed according to the application type information.

For example, the target operation option is DELETE or DEL, and the server determines the target operation option to be a DELETE information item. Further, the server acquires application type information of the container set to be processed and corresponding network configuration information, wherein the corresponding network configuration information comprises a configured Internet Protocol (IP) address, and when the application type information is stateless application, the server deletes the network configuration information corresponding to the container set to be processed; if the application type information of the to-be-processed container set is stateful application, the server reserves a configured internet protocol address (target internet protocol address), so that when the to-be-processed container set applies for an IP address again, the server allocates the IP address again.

In the embodiment of the invention, the checking version, the configuring of the network information and the deleting of the network information of the container set are realized through different operation options, and the preset virtual network bridge is adopted to determine that the virtual machine and the container set are simultaneously used in a common network segment in a mixed manner, so that the application micro-services deployed in the preset virtual network bridge can be communicated with each other, thereby ensuring that the service application micro-services are migrated from the virtual machine to the container under the condition that service codes are not required to be transformed, and improving the migration efficiency of the application micro-services and the compatibility of the network intercommunication.

Referring to fig. 2, another embodiment of a container network management method according to the embodiment of the present invention includes:

201. receiving an operation container network interface request sent by a terminal, and acquiring a target operation option and a to-be-processed container set from the operation container network interface request, wherein the target operation option is an information item reading, an information item inserting or an information item deleting, and the to-be-processed container set comprises at least one container with deployed business application micro-services.

The to-be-processed container set comprises at least one container with deployed business application micro-services, the business application micro-services are medical application micro-services, the medical application micro-services are used for providing appointment registration services and check payment services for medical personnel, and can also provide health service consultation services and medical image viewing services, each service can be deployed in different containers, or does not belong to the same container set, and specific details are not limited herein.

Optionally, the server receives an operation container network interface request sent by the terminal, and the server performs parameter analysis on the operation container network interface request to obtain an operation option to be verified and a container set to be processed; the server acquires preset operation option configuration information and judges whether the preset operation option configuration information contains an operation option to be verified; if the preset operation option configuration information does not contain the operation option to be verified, the server generates prompt information and returns the prompt information to the terminal, wherein the prompt information is used for indicating that the network interface request of the operation container is abnormal; if the preset operation option configuration information contains the operation option to be verified, the server sets the operation option to be verified as a target operation option, wherein the target operation option is a read information item, an insert information item or a delete information item.

202. And when the target operation option is a read information item, acquiring the version information of the container network interface, and returning the version information of the container network interface to the terminal, wherein the version information of the container network interface is used for indicating whether the updating of the configuration information of the container set to be processed is finished.

And the container network interface version information is used for indicating whether the to-be-processed container set completes the updating of the configuration information. That is, the server can read the correct container network interface version information when the pending container set has completed the configuration information update. Optionally, when the target operation option is a read information item, the server generates an information query statement; the server executes the information query statement and queries the version information of the container network interface from a preset database; and the server performs data encapsulation on the version information of the network interface of the container according to a preset data format to obtain response data and sends the response data to the terminal. Further, the server may also return other information of the CNI plug-in to the terminal according to the actual service requirement, for example, the operation state of the CNI plug-in, which is not limited herein.

203. And when the target operation option is an insertion information item, acquiring application type information and a target internet interconnection protocol address of the container set to be processed, and adding network configuration information to the container set to be processed according to the application type information, the target internet interconnection protocol address and a preset host machine virtual network bridge, wherein the preset host machine virtual network bridge is used for indicating that the preset host machine and the preset virtual machine are communicated by using a network card of the virtual network bridge in advance.

It should be noted that the preset host virtual bridge can perform communication connection between the preset host and the preset virtual machine, so that the application microservices deployed in the preset virtual machine and the application microservices in the to-be-processed container set can communicate with each other, thereby migrating the service applications from the virtual machine to the container, and improving the migration efficiency of the application microservices and the compatibility of network intercommunication. Optionally, when the target operation option is an insertion information item, acquiring application type information of the container set to be processed, and determining whether the application type information is stateful application or stateless application; the stateful application generally refers to various applications with persistent storage requirements, for example, the in-memory database or the relational database is a stateful application, and is not limited herein. The stateless application corresponds to the stateful application, and the stateless application includes various page front ends, a main program httpd of the hypertext transfer protocol server, and a reverse proxy network server middleware, and is not limited herein. If the application type information is stateful application, the server reads an idle internet protocol address from a preset internet protocol address configuration table; if the application type information is stateless application, the server acquires the allocated internet interconnection protocol address; the server sets the idle internet interconnection protocol address or the distributed internet interconnection protocol address as a target internet interconnection protocol address, and adds network configuration information to the set of containers to be processed according to the target internet interconnection protocol address and a preset host machine virtual network bridge, wherein the preset host machine virtual network bridge is used for indicating that the preset host machine and the preset virtual machine are communicated by using a network card of the virtual network bridge in advance.

Further, firstly, the server sets corresponding media access control address, virtual network card pair and routing information for the container set to be processed according to the target internet interconnection protocol address. The server sets the idle internet protocol address or the allocated internet protocol address as a target internet protocol address, and allocates a corresponding medium access control address to the target internet protocol address. A Media Access Control (MAC) address, also called a MAC address or a hardware address, is used to define a location of a network device. The target internet protocol address and the medium access control address have an association relation, the target internet protocol address comprises four fields in decimal representation, and the medium access control address comprises six fields in hexadecimal representation. Specifically, the server converts the last three fields of the target internet interconnection protocol address into corresponding hexadecimal field data, sets the corresponding hexadecimal field data as the last three fields of the media access control address, and performs character string splicing on the preset first three fields and the last three fields of the media access control address to obtain the media access control address corresponding to the target internet interconnection protocol address. For example, the server sets 192.168.101.65 as a target internet protocol address, the server converts the last three fields of the target internet protocol address into corresponding hexadecimal field data A8:65:41, the server acquires the preset media access control address, the first three fields are 82: BE:2A, and then the server allocates 82: BE:2A: A8:65:41 (corresponding media access control address) to the target internet protocol address.

Then, the server sets a virtual device interface for the container set to be processed, and connects the virtual device interface with a preset host machine virtual bridge and the container set to be processed respectively; the server sets a corresponding media access control address, a target internet interconnection protocol address and preset routing information for the container set to be processed, and the preset host machine virtual network bridge is used for indicating that the preset host machine and the preset virtual machine are communicated by using a network card of the virtual network bridge in advance. It should be noted that, when the to-be-processed container set Pod creates a configuration network namespace in k8s, the server uses the virtual device interface pair veth _ pair; one end of the veth _ pair is added into a preset host virtual bridge under a preset host network name space, and the other end of the veth _ pair is added into a network name space of the container set pod to be processed and configured with network information. It will be appreciated that the pending container set pod requests a target internet protocol address assignment via the interface; corresponding to the virtual machine, the virtual machine installation system requests target internet interconnection protocol address allocation through the interface, so that the same-segment target internet interconnection protocol address allocation virtual machine and container are realized, and the reusability of the target internet interconnection protocol address is improved.

204. And when the target operation option is the deletion information item, acquiring the application type information and the corresponding network configuration information of the container set to be processed, and cleaning the network configuration information corresponding to the container set to be processed according to the application type information.

Optionally, when the target operation option is a delete information item, the server obtains application type information of the container set to be processed, and judges whether the application type information is a stateful application; if the application type information is stateful application, the server deletes a preset virtual device interface and preset routing information corresponding to the to-be-processed container set; it should be noted that, if the application type of the to-be-processed container set is a stateful application, the preset internet protocol address is reserved, and when the terminal applies for the internet protocol address next time, the server re-allocates the preset internet protocol address to the corresponding terminal, thereby improving the allocation efficiency of the internet protocol address. And if the application type information is not stateful application, the server clears the preset internet interconnection protocol address, the preset virtual equipment interface and the preset routing information corresponding to the container set to be processed. Further, the server may set a connection state of the preset virtual network card to be a closed state (e.g., down), and delete the preset virtual network card.

205. Receiving an application micro-service deployment request, deploying the application micro-service in a preset virtual machine to a container set of a configured network according to the application micro-service deployment request to obtain a deployment result, and recording the deployment result.

Specifically, a server receives a deployment application micro-service request; the server analyzes parameters of the application micro-service deployment request to obtain application micro-services to be deployed, wherein the application micro-services to be deployed are in running preset virtual machines; the server deploys the application micro-service to be deployed to a container set of a configured network, sets the running state of the application micro-service to be deployed in a preset virtual machine to be a stop state, sets the running state of the application micro-service in the container set of the configured network to be an open state, obtains a deployment result, and records the deployment result.

206. And receiving a printing operation log request, and reading a data set to be printed from a preset log record data table according to the printing operation log request, wherein the data set to be printed comprises a deployment result, an operation result corresponding to a target operation option and a corresponding state code.

It can be understood that, when the server manages the container network according to the target operation option, the server may further record an operation result and a corresponding status code corresponding to the target operation option, where the corresponding operation result includes an operation success and an operation failure, and the corresponding status code is used to indicate the operation success and the operation failure, for example, the server may identify the operation failure by 500, and the server may identify the operation success by 200, which is not limited herein. Specifically, the server receives a print operation log request; the server analyzes parameters of the printing operation log request to obtain a printing date range, and inquires a preset log record data table according to the printing date range to obtain a data set to be printed.

207. And acquiring preset printing parameters, and calling preset printing equipment to print and output the data set to be printed according to the preset printing parameters.

Specifically, the server sets a data set to be printed as a report file to be printed; the server acquires preset printing parameters from a preset database; the server sends the report file to be printed and the acquired preset printing parameters to preset printing equipment, so that the preset printing equipment prints and outputs the report file to be printed according to the preset printing parameters, and a user can conveniently check and analyze log record data.

In the embodiment of the invention, the checking version, the configuring of the network information and the deleting of the network information of the container set are realized through different operation options, and the preset virtual network bridge is adopted to determine that the virtual machine and the container set are simultaneously used in a common network segment in a mixed manner, so that the application micro-services deployed in the preset virtual network bridge can be communicated with each other, thereby ensuring that the service application micro-services are migrated from the virtual machine to the container under the condition that service codes are not required to be transformed, and improving the migration efficiency of the application micro-services and the compatibility of the network intercommunication.

With reference to fig. 3, the container network management apparatus in the embodiment of the present invention is described above, and an embodiment of the container network management apparatus in the embodiment of the present invention includes:

an obtainingmodule 301, configured to receive an operation container network interface request sent by a terminal, and obtain a target operation option and a to-be-processed container set from the operation container network interface request, where the target operation option is a read information item, an insert information item, or a delete information item, and the to-be-processed container set includes at least one container in which a business application microservice has been deployed;

thequery module 302 is configured to, when the target operation option is the read information item, obtain container network interface version information, and return the container network interface version information to the terminal, where the container network interface version information is used to indicate whether the configuration information update of the to-be-processed container set is completed;

the newly addingmodule 303 is configured to, when the target operation option is the insertion information item, obtain application type information and a target internet interconnection protocol address of the to-be-processed container set, and add network configuration information to the to-be-processed container set according to the application type information, the target internet interconnection protocol address, and a preset host virtual bridge, where the preset host virtual bridge is configured to instruct a preset host and a preset virtual machine to communicate with each other by using a network card of the virtual bridge;

and thecleaning module 304, when the target operation option is a delete information item, is configured to obtain application type information and corresponding network configuration information of the to-be-processed container set, and clean the network configuration information corresponding to the to-be-processed container set according to the application type information.

Further, the network configuration information is stored in the blockchain database, which is not limited herein.

In the embodiment of the invention, the checking version, the configuring of the network information and the deleting of the network information of the container set are realized through different operation options, and the preset virtual network bridge is adopted to determine that the virtual machine and the container set are simultaneously used in a common network segment in a mixed manner, so that the application micro-services deployed in the preset virtual network bridge can be communicated with each other, thereby ensuring that the service application micro-services are migrated from the virtual machine to the container under the condition that service codes are not required to be transformed, and improving the migration efficiency of the application micro-services and the compatibility of the network intercommunication.

Referring to fig. 4, another embodiment of a container network management apparatus according to the embodiment of the present invention includes:

an obtainingmodule 301, configured to receive an operation container network interface request sent by a terminal, and obtain a target operation option and a to-be-processed container set from the operation container network interface request, where the target operation option is a read information item, an insert information item, or a delete information item, and the to-be-processed container set includes at least one container in which a business application microservice has been deployed;

thequery module 302 is configured to, when the target operation option is the read information item, obtain container network interface version information, and return the container network interface version information to the terminal, where the container network interface version information is used to indicate whether the configuration information update of the to-be-processed container set is completed;

the newly addingmodule 303 is configured to, when the target operation option is the insertion information item, obtain application type information and a target internet interconnection protocol address of the to-be-processed container set, and add network configuration information to the to-be-processed container set according to the application type information, the target internet interconnection protocol address, and a preset host virtual bridge, where the preset host virtual bridge is configured to instruct a preset host and a preset virtual machine to communicate with each other by using a network card of the virtual bridge;

and thecleaning module 304, when the target operation option is a delete information item, is configured to obtain application type information and corresponding network configuration information of the to-be-processed container set, and clean the network configuration information corresponding to the to-be-processed container set according to the application type information.

Optionally, the obtainingmodule 301 may be further specifically configured to:

receiving an operation container network interface request sent by a terminal, and performing parameter analysis on the operation container network interface request to obtain an operation option to be verified and a container set to be processed, wherein the container set to be processed comprises at least one container with deployed business application micro-services, and the business application micro-services are medical application micro-services;

acquiring preset operation option configuration information, and judging whether the preset operation option configuration information contains an operation option to be verified;

if the preset operation option configuration information does not have the operation option to be verified, generating prompt information and returning the prompt information to the terminal, wherein the prompt information is used for indicating that the network interface request of the operation container has abnormality;

and if the preset operation option configuration information contains the operation option to be verified, setting the operation option to be verified as a target operation option, wherein the target operation option is a read information item, an insert information item or a delete information item.

Optionally, thequery module 302 may be further specifically configured to:

when the target operation option is a read information item, the server generates an information query statement;

executing an information query statement, and querying container network interface version information from a preset database, wherein the container network interface version information is used for indicating whether the to-be-processed container set completes configuration information updating;

and carrying out data encapsulation on the version information of the network interface of the container according to a preset data format to obtain response data, and sending the response data to the terminal.

Optionally, the addingmodule 303 further includes:

a determiningunit 3031, configured to, when the target operation option is an insertion information item, obtain application type information of the container set to be processed, and determine whether the application type information is a stateful application or a stateless application;

areading unit 3032, configured to read an idle ip address from a preset ip address configuration table if the application type information is a stateful application;

an obtainingunit 3033, configured to obtain an allocated internet protocol address if the application type information is a stateless application;

an addingunit 3034, configured to set an idle internet protocol address or an allocated internet protocol address as a target internet protocol address, and add network configuration information to the set of containers to be processed according to the target internet protocol address and a preset host virtual bridge, where the preset host virtual bridge is used to instruct the preset host and the preset virtual machine to communicate with each other by using a network card of the virtual bridge.

Optionally, the newly addedunit 3034 may be further specifically configured to:

setting an idle internet interconnection protocol address or an allocated internet interconnection protocol address as a target internet interconnection protocol address, and allocating a corresponding medium access control address to the target internet interconnection protocol address;

setting a virtual equipment interface for the container set to be processed, and respectively connecting the virtual equipment interface with a preset host machine virtual bridge and the container set to be processed;

and setting a corresponding media access control address, a target internet interconnection protocol address and preset routing information for the set of containers to be processed, wherein the preset host machine virtual network bridge is used for indicating that the preset host machine and the preset virtual machine are communicated by utilizing a network card of the virtual network bridge in advance.

Optionally, thecleaning module 304 may be further specifically configured to:

when the target operation option is a deletion information item, acquiring application type information of the container set to be processed, and judging whether the application type information is stateful application;

if the application type information is stateful application, deleting a preset virtual device interface and preset routing information corresponding to the to-be-processed container set;

and if the application type information is not stateful application, cleaning a preset internet interconnection protocol address, a preset virtual equipment interface and preset routing information corresponding to the to-be-processed container set.

Optionally, the container network management apparatus further includes:

thedeployment module 305 is configured to receive an application microservice deployment request, deploy an application microservice in a preset virtual machine to a container set of a configured network according to the application microservice deployment request, obtain a deployment result, and record the deployment result;

thereading module 306 is configured to receive a print operation log request, and read a to-be-printed data set from a preset log record data table according to the print operation log request, where the to-be-printed data set includes a deployment result, an operation result corresponding to a target operation option, and a corresponding status code;

and theprinting module 307 is configured to acquire preset printing parameters, and invoke a preset printing device to print and output the to-be-printed data set according to the preset printing parameters.

In the embodiment of the invention, the checking version, the configuring of the network information and the deleting of the network information of the container set are realized through different operation options, and the preset virtual network bridge is adopted to determine that the virtual machine and the container set are simultaneously used in a common network segment in a mixed manner, so that the application micro-services deployed in the preset virtual network bridge can be communicated with each other, thereby ensuring that the service application micro-services are migrated from the virtual machine to the container under the condition that service codes are not required to be transformed, and improving the migration efficiency of the application micro-services and the compatibility of the network intercommunication.

Fig. 3 and fig. 4 describe the container network management apparatus in the embodiment of the present invention in detail from the perspective of modularization, and the container network management device in the embodiment of the present invention is described in detail from the perspective of hardware processing.

Fig. 5 is a schematic structural diagram of a container network management device according to an embodiment of the present invention, where the containernetwork management device 500 may have a relatively large difference due to different configurations or performances, and may include one or more processors (CPUs) 510 (e.g., one or more processors) and amemory 520, and one or more storage media 530 (e.g., one or more mass storage devices) for storingapplications 533 ordata 532.Memory 520 andstorage media 530 may be, among other things, transient or persistent storage. The program stored in thestorage medium 530 may include one or more modules (not shown), each of which may include a series of instructions operating on the containernetwork management apparatus 500. Still further, theprocessor 510 may be configured to communicate with thestorage medium 530, and execute a series of instruction operations in thestorage medium 530 on the containernetwork management device 500.

The containernetwork management appliance 500 may also include one ormore power supplies 540, one or more wired or wireless network interfaces 550, one or more input-output interfaces 560, and/or one ormore operating systems 531, such as Windows Server, Mac OS X, Unix, Linux, FreeBSD, and the like. Those skilled in the art will appreciate that the container network management device configuration shown in fig. 5 does not constitute a limitation of the container network management device and may include more or fewer components than those shown, or some components may be combined, or a different arrangement of components.

The present invention also provides a computer-readable storage medium, which may be a non-volatile computer-readable storage medium, and which may also be a volatile computer-readable storage medium, having stored therein instructions, which, when run on a computer, cause the computer to perform the steps of the container network management method.

The present invention further provides a container network management device, where the container network management device includes a memory and a processor, where the memory stores instructions, and the instructions, when executed by the processor, cause the processor to execute the steps of the container network management method in the foregoing embodiments.

Further, the computer-readable storage medium may mainly include a storage program area and a storage data area, wherein the storage program area may store an operating system, an application program required for at least one function, and the like; the storage data area may store data created according to the use of the blockchain node, and the like.

The block chain is a novel application mode of computer technologies such as distributed data storage, point-to-point transmission, a consensus mechanism, an encryption algorithm and the like. A block chain (Blockchain), which is essentially a decentralized database, is a series of data blocks associated by using a cryptographic method, and each data block contains information of a batch of network transactions, so as to verify the validity (anti-counterfeiting) of the information and generate a next block. The blockchain may include a blockchain underlying platform, a platform product service layer, an application service layer, and the like.

It is clear to those skilled in the art that, for convenience and brevity of description, the specific working processes of the above-described systems, apparatuses and units may refer to the corresponding processes in the foregoing method embodiments, and are not described herein again.

The integrated unit, if implemented in the form of a software functional unit and sold or used as a stand-alone product, may be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present invention may be embodied in the form of a software product, which is stored in a storage medium and includes instructions for causing a computer device (which may be a personal computer, a server, or a network device) to execute all or part of the steps of the method according to the embodiments of the present invention. And the aforementioned storage medium includes: various media capable of storing program codes, such as a usb disk, a removable hard disk, a read-only memory (ROM), a Random Access Memory (RAM), a magnetic disk, or an optical disk.

The above-mentioned embodiments are only used for illustrating the technical solutions of the present invention, and not for limiting the same; although the present invention has been described in detail with reference to the foregoing embodiments, it will be understood by those of ordinary skill in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some technical features may be equivalently replaced; and such modifications or substitutions do not depart from the spirit and scope of the corresponding technical solutions of the embodiments of the present invention.

Claims (10)

1. A method for managing a container network, the method comprising:

receiving an operation container network interface request sent by a terminal, and acquiring a target operation option and a to-be-processed container set from the operation container network interface request, wherein the target operation option is a read information item, an insert information item or a delete information item, and the to-be-processed container set comprises at least one container with deployed business application microservices;

when the target operation option is the read information item, acquiring container network interface version information and returning the container network interface version information to the terminal, wherein the container network interface version information is used for indicating whether the to-be-processed container set completes configuration information updating;

when the target operation option is the insertion information item, acquiring application type information and a target internet interconnection protocol address of a container set to be processed, and adding network configuration information to the container set to be processed according to the application type information, the target internet interconnection protocol address and a preset host machine virtual network bridge, wherein the preset host machine virtual network bridge is used for indicating that a preset host machine and a preset virtual machine are communicated by using a network card of the virtual network bridge in advance;

and when the target operation option is the deletion information item, acquiring the application type information and the corresponding network configuration information of the container set to be processed, and cleaning the network configuration information corresponding to the container set to be processed according to the application type information.

2. The method according to claim 1, wherein the receiving terminal sends an operation container network interface request, and obtains a target operation option and a to-be-processed container set from the operation container network interface request, the target operation option is a read information item, an insert information item, or a delete information item, the to-be-processed container set includes at least one container in which a business application micro service has been deployed, and the method includes:

receiving an operation container network interface request sent by a terminal, and performing parameter analysis on the operation container network interface request to obtain an operation option to be verified and a container set to be processed, wherein the container set to be processed comprises at least one container with deployed business application micro-services, and the business application micro-services are medical application micro-services;

acquiring preset operation option configuration information, and judging whether the preset operation option configuration information contains the operation option to be verified;

if the operation option to be verified does not exist in the preset operation option configuration information, generating prompt information and returning the prompt information to the terminal, wherein the prompt information is used for indicating that the network interface request of the operation container is abnormal;

if the operation option to be verified exists in the preset operation option configuration information, setting the operation option to be verified as a target operation option, wherein the target operation option is a read information item, an insert information item or a delete information item.

3. The method according to claim 1, wherein when the target operation option is the read information item, acquiring container network interface version information and returning the container network interface version information to the terminal, where the container network interface version information is used to indicate whether the to-be-processed container set has completed updating the configuration information, and the method includes:

when the target operation option is the read information item, generating an information query statement;

executing the information query statement, and querying container network interface version information from a preset database, wherein the container network interface version information is used for indicating whether the to-be-processed container set completes configuration information updating;

and carrying out data encapsulation on the version information of the container network interface according to a preset data format to obtain response data, and sending the response data to the terminal.

4. The container network management method according to claim 1, wherein when the target operation option is the insertion information item, acquiring application type information and a target internet interconnection protocol address of a container set to be processed, and adding network configuration information to the container set to be processed according to the application type information, the target internet interconnection protocol address, and a preset host virtual bridge, where the preset host virtual bridge is configured to instruct a preset host and a preset virtual machine to communicate with each other by using a network card of the virtual bridge in advance, the method includes:

when the target operation option is the insertion information item, acquiring application type information of a container set to be processed, and judging whether the application type information is stateful application or stateless application;

if the application type information is stateful application, reading an idle internet protocol address from a preset internet protocol address configuration table;

if the application type information is stateless application, acquiring an allocated internet protocol address;

setting the idle internet interconnection protocol address or the allocated internet interconnection protocol address as a target internet interconnection protocol address, and adding network configuration information to the container set to be processed according to the target internet interconnection protocol address and a preset host machine virtual network bridge, wherein the preset host machine virtual network bridge is used for indicating that a preset host machine and a preset virtual machine are communicated by using a network card of the virtual network bridge in advance.

5. The container network management method according to claim 4, wherein the setting of the idle ip address or the allocated ip address as a target ip address adds network configuration information to the set of containers to be processed according to the target ip address and a preset host virtual bridge, where the preset host virtual bridge is used to instruct a preset host and a preset virtual machine to communicate using a network card of the virtual bridge, includes:

setting the idle internet protocol address or the allocated internet protocol address as a target internet protocol address, and allocating a corresponding medium access control address to the target internet protocol address;

setting a virtual equipment interface for the container set to be processed, and respectively connecting the virtual equipment interface with a preset host machine virtual bridge and the container set to be processed;

and setting a corresponding media access control address, the target internet interconnection protocol address and preset routing information for the container set to be processed, wherein the preset host machine virtual network bridge is used for indicating that the preset host machine and the preset virtual machine are communicated by using a network card of the virtual network bridge in advance.

6. The container network management method according to claim 1, wherein when the target operation option is the deletion information item, acquiring application type information and corresponding network configuration information of a to-be-processed container set, and cleaning the network configuration information corresponding to the to-be-processed container set according to the application type information includes:

when the target operation option is the deletion information item, acquiring application type information of a container set to be processed, and judging whether the application type information is stateful application;

if the application type information is stateful application, deleting a preset virtual device interface and preset routing information corresponding to the to-be-processed container set;

and if the application type information is not stateful application, cleaning a preset internet interconnection protocol address, a preset virtual device interface and preset routing information corresponding to the to-be-processed container set.

7. The container network management method according to any one of claims 1 to 6, wherein after the obtaining of the application type information and the corresponding network configuration information of the to-be-processed container set when the target operation option is the deletion information item, and cleaning the network configuration information corresponding to the to-be-processed container set according to the application type information, the container network management method further comprises:

receiving an application micro-service deployment request, deploying the application micro-service in the preset virtual machine to a container set of a configured network according to the application micro-service deployment request to obtain a deployment result, and recording the deployment result;

receiving a printing operation log request, and reading a data set to be printed from a preset log record data table according to the printing operation log request, wherein the data set to be printed comprises the deployment result, an operation result corresponding to the target operation option and a corresponding state code;

and acquiring preset printing parameters, and calling preset printing equipment to print and output the data set to be printed according to the preset printing parameters.

8. A container network management apparatus, characterized in that the container network management apparatus comprises:

the system comprises an acquisition module, a storage module and a processing module, wherein the acquisition module is used for receiving an operation container network interface request sent by a terminal and acquiring a target operation option and a to-be-processed container set from the operation container network interface request, the target operation option is a read information item, an insert information item or a delete information item, and the to-be-processed container set comprises at least one container with deployed business application microservices;

the query module is used for acquiring the version information of the container network interface and returning the version information of the container network interface to the terminal when the target operation option is the read information item, wherein the version information of the container network interface is used for indicating whether the to-be-processed container set completes the updating of the configuration information;

the newly added module is used for acquiring application type information and a target internet interconnection protocol address of a container set to be processed when the target operation option is the insertion information item, and adding network configuration information to the container set to be processed according to the application type information, the target internet interconnection protocol address and a preset host machine virtual network bridge, wherein the preset host machine virtual network bridge is used for indicating that a preset host machine and a preset virtual machine are communicated by using a network card of the virtual network bridge in advance;

and the cleaning module is used for acquiring the application type information and the corresponding network configuration information of the container set to be processed when the target operation option is the deletion information item, and cleaning the network configuration information corresponding to the container set to be processed according to the application type information.

9. A container network management device, characterized in that the container network management device comprises: a memory and at least one processor, the memory having instructions stored therein;

the at least one processor invoking the instructions in the memory to cause the container network management device to perform the container network management method of any of claims 1-7.

10. A computer-readable storage medium having instructions stored thereon, wherein the instructions, when executed by a processor, implement the container network management method of any one of claims 1-7.

Images