CN113065105A - A method and system for managing hybrid cloud resources - Google Patents

Abstract

Translated fromChinese

本发明公开了一种混合云资源的管理方法和系统，能够更好、有效、便捷的管理混合云资源。其技术方案为：本发明封装私有云和公有云的API，在同一个系统就可以申请两种资源，封装资源申请方法进行资源获取。通过标识位区分公有、私有，并且需要有相应的人员管理和资源配额管理。具体而言，本发明实现了统一管理，同一个门户可以申请公有和私有资源；设置了权限控制，细分登录、公有、私有资源权限；实施配额管理，只有配额有余额才能申请出资源；最后实现API驱动的多样化，既对接私有云API，又对接公有云API。

The invention discloses a method and system for managing hybrid cloud resources, which can better, effectively and conveniently manage the hybrid cloud resources. The technical scheme is as follows: the present invention encapsulates the APIs of the private cloud and the public cloud, and can apply for two resources in the same system, and encapsulates the resource application method for resource acquisition. The public and private are distinguished by identifiers, and corresponding personnel management and resource quota management are required. Specifically, the invention realizes unified management, and the same portal can apply for public and private resources; sets up authority control, subdivides the authority of login, public and private resources; implements quota management, and can only apply for resources if the quota has a balance; finally To achieve the diversification of API drivers, it can connect both private cloud APIs and public cloud APIs.

Description

Management method and system of hybrid cloud resources

Technical Field

The invention relates to an application technology based on cloud computing, in particular to a cloud resource management method and system for mixing public cloud and private cloud realized through a cloud computing platform.

Background

Cloud computing is a great revolution of the information industry of the internet, and the virtualization of resources such as storage, network and memory of the cloud computing greatly improves the utilization rate of the resources, so that the computing resources of enterprises at present continuously use cloud computing to allocate and manage the resources.

The hybrid cloud integrates public cloud and private cloud, and is a main mode and development direction of cloud computing in recent years. The public cloud generally refers to a cloud which can be used and is provided by a third-party provider for a user, the public cloud can be generally used through the Internet and can be free or low in cost, and the core attribute of the public cloud is a shared resource service. Private clouds are built for individual use by one customer and thus provide the most effective control over data, security and quality of service. The company owns the infrastructure and can control the manner in which applications are deployed on this infrastructure. The private cloud can be deployed in a firewall of an enterprise data center, or can be deployed in a safe host hosting place, and the core attribute of the private cloud is a proprietary resource. From the above two points, it can be seen that the public cloud and the private cloud both provide resources, and the difference is that one is shared resources, and the other is private resources, so that the security is strong.

Private clouds in the hybrid cloud are all internal control of the enterprise, are based on openstack cloud computing management platform project, and provide corresponding API. The public cloud is generally provided by an external public cloud enterprise, and a login account and an API document are provided in a purchase form.

In general, management of hybrid cloud resources is divided into two management modes, and private cloud is realized through a self-contained management function in a cloud computing management platform project. The public cloud generally has only one account number, and specific management is more mechanical, and particularly for a large number of employees in a company, an administrator and a standing book are often required to be assisted for management, so that manpower and material resources are consumed, the efficiency is very low, and a set of management platform of a mixed cloud is required for implementation.

Disclosure of Invention

The following presents a simplified summary of one or more aspects in order to provide a basic understanding of such aspects. This summary is not an extensive overview of all contemplated aspects, and is intended to neither identify key or critical elements of all aspects nor delineate the scope of any or all aspects. Its sole purpose is to present some concepts of one or more aspects in a simplified form as a prelude to the more detailed description that is presented later.

The invention aims to solve the problems and provides a method and a system for managing hybrid cloud resources, which can manage the hybrid cloud resources better, effectively and conveniently.

The technical scheme of the invention is as follows: the invention discloses a management method of hybrid cloud resources, which comprises the following steps:

step 1: judging whether the user has login authority or not when the user logs in, and allowing the user to log in after judging that the user has the login authority;

step 2: after judging that the user has the login authority, further judging whether the user applies for public resources or private resources, if the user applies for the public resources, executing the processing of the step 3, and if the user applies for the private resources, executing the processing of the step 4;

and step 3: judging whether the user has a public resource authority, if so, checking whether the user has a public cloud quota, and if so, applying for a public cloud resource;

and 4, step 4: judging whether the user has a private resource authority, if so, checking whether the user has a private cloud quota, and if so, applying for the private cloud resources;

and 5: creating resources, creating resources through private and public resource identifiers selected by a user, judging the identifiers by the API for creating the resources, and selecting the bottom API of the private cloud or the public cloud to create the resources.

According to an embodiment of the management method of the hybrid cloud resource, in step 1, if the login authority does not exist, the authentication authority is opened for the user, and after the authentication is passed, the login operation is performed.

According to an embodiment of the management method for the hybrid cloud resources, in step 3, if the user does not have the public resource authority, the public resource authority is firstly opened for the user, and if the user does not have the public cloud quota, the public cloud quota is firstly applied for the user.

According to an embodiment of the management method of the hybrid cloud resource, in step 4, if the user does not have the private resource authority, the private resource authority is firstly opened for the user, and if the user does not have the private cloud quota, the private cloud quota is firstly applied for the user.

The invention also discloses a management system of the hybrid cloud resource, which comprises the following steps:

the login module is configured to judge whether the user has login authority or not when the user logs in, and allow the user to log in after judging that the user has the login authority;

the application type judging module is configured to further judge whether the user applies for public resources or private resources after judging that the user has the login authority;

the public cloud processing module is configured to judge whether the user has a public resource authority, check whether the user has a public cloud quota if the user has the public resource authority, and apply for public cloud resources if the user has the public cloud quota;

the private cloud processing module is configured to judge whether the user has a private resource authority, check whether the user has a private cloud quota if the user has the private resource authority, and apply for the private cloud resources if the user has the private cloud quota;

and the resource creating module is configured to create resources, create the resources through the private and public resource identifiers selected by the user, judge the identifiers through the API for creating the resources, and select the bottom API of the private cloud or the public cloud to create the resources.

According to an embodiment of the management system of the hybrid cloud resource, the login module is further configured to open an authentication authority for the user if the login authority does not exist, and perform login operation after the authentication is passed.

According to an embodiment of the management system for hybrid cloud resources of the present invention, the public cloud processing module is further configured to open the public resource authority for the user first if the user does not have the public resource authority, and apply for the public cloud quota for the user first if the user does not have the public cloud quota.

According to an embodiment of the management system for hybrid cloud resources, the private cloud processing module is further configured to firstly open the private resource authority for the user if the user does not have the private resource authority, and firstly apply for the private cloud quota for the user if the user does not have the private cloud quota.

The invention also discloses a management system of the hybrid cloud resource, which comprises the following steps:

a processor; and

a memory configured to store a series of computer-executable instructions and computer-accessible data associated with the series of computer-executable instructions,

wherein the series of computer executable instructions, when executed by the processor, cause the processor to perform the method as described above.

Also disclosed is a non-transitory computer readable storage medium having stored thereon a series of computer executable instructions which, when executed by a computing device, cause the computing device to perform the method as described above.

Compared with the prior art, the invention has the following beneficial effects: the invention encapsulates the API of the private cloud and the public cloud, can apply for two resources in the same system, and encapsulates the resource application method to acquire the resources. Public and private are distinguished through the identification bit, and corresponding personnel management and resource quota management are needed. Specifically, the invention realizes unified management, and the same portal can apply for public and private resources; setting authority control, subdividing login, public and private resource authorities; quota management is implemented, and resources can be applied only if quota has balance; and finally, the diversification of API drive is realized, and the private cloud API is connected with the public cloud API.

Drawings

The above features and advantages of the present disclosure will be better understood upon reading the detailed description of embodiments of the disclosure in conjunction with the following drawings. In the drawings, components are not necessarily drawn to scale, and components having similar relative characteristics or features may have the same or similar reference numerals.

Fig. 1 shows a flowchart of an embodiment of a management method of a hybrid cloud resource of the present invention.

Fig. 2 shows a schematic diagram of an embodiment of the management system of the hybrid cloud resources of the present invention.

Fig. 3 shows a schematic diagram of a computing device to which the management method of the hybrid cloud resource of the present invention is applied.

Detailed Description

The invention is described in detail below with reference to the figures and specific embodiments. It is noted that the aspects described below in connection with the figures and the specific embodiments are only exemplary and should not be construed as imposing any limitation on the scope of the present invention.

Fig. 1 shows a flow of an embodiment of a management method of a hybrid cloud resource of the present invention. Referring to fig. 1, the following is a detailed description of implementation steps of the management method of the present embodiment.

Step 1: and judging whether the user has login authority or not when the user logs in, opening authentication authority for the user if the user does not have the login authority, and performing login operation after the user passes the authentication.

Step 2: and after judging that the user has the login authority, further judging whether the user applies for the public resource or the private resource, if the user applies for the public resource, executing the processing of the step 3, and if the user applies for the private resource, executing the processing of the step 4.

And step 3: judging whether the user has a public resource authority, if not, opening the public resource authority for the user, if so, checking whether the user has a public cloud quota, if not, applying for the public cloud quota for the user, and if so, applying for the public cloud resources.

And 4, step 4: judging whether the user has the private resource authority, if not, opening the private resource authority for the user, if so, checking whether the user has the private cloud quota, if not, applying for the private cloud quota for the user, and if so, applying for the private cloud resources.

And 5: creating resources, creating resources through private and public resource identifications selected by a user on a foreground interface, judging the identifications by an API for creating the resources, and creating the resources by selecting different implementation methods, wherein the API for creating the resources is a method for creating the resources by encapsulating a bottom API of a public cloud and a private cloud, if the API has the private identification, the bottom API of the private cloud is selected for implementation, and if the API has the public identification, the bottom API of the public cloud is selected for implementation.

Fig. 2 illustrates the principle of an embodiment of the management system of the hybrid cloud resources of the present invention. Referring to fig. 2, the system of the present embodiment includes: the system comprises a login module, an application type judgment module, a public cloud processing module, a private cloud processing module and a resource creation module.

And the login module is configured to judge whether the user has login authority or not when the user logs in, open authentication authority for the user if the user does not have the login authority, and perform login operation after the authentication is passed.

And the application type judging module is configured to further judge whether the user applies for the public resources or the private resources after judging that the user has the login authority, execute the processing of the public cloud processing module if the user applies for the public resources, and execute the processing of the private cloud processing module if the user applies for the private resources.

The public cloud processing module is configured to judge whether the user has a public resource authority, if not, open the public resource authority for the user, if so, check whether the user has a public cloud quota, if not, apply for the public cloud quota for the user, and if so, apply for the public cloud resources.

The private cloud processing module is configured to judge whether the user has a private resource authority, if not, open the private resource authority for the user, if so, check whether the user has a private cloud quota, if not, apply for the private cloud quota for the user, and if so, apply for the private cloud resources.

The resource creating module is configured to create resources, create the resources through private and public resource identifiers selected by a user on a foreground interface, then judge the identifiers by an API for creating the resources, and select different implementation methods to create the resources, wherein the API for creating the resources is a method for creating the resources by a bottom API which encapsulates a public cloud and a private cloud, if the API has the private identifier, the bottom API of the private cloud is selected to be implemented, and if the API is the public identifier, the bottom API of the public cloud is selected to be implemented.

Further, the system shown in FIG. 3 includes a processor and a memory. The memory is configured to store a series of computer-executable instructions and computer-accessible data associated with the series of computer-executable instructions. When executed by a processor, the series of computer-executable instructions cause the processor to perform the method as shown in fig. 1.

A non-transitory computer readable storage medium having stored thereon a series of computer executable instructions which, when executed by a computing device, cause the computing device to perform the method as shown in fig. 1.

While, for purposes of simplicity of explanation, the methodologies are shown and described as a series of acts, it is to be understood and appreciated that the methodologies are not limited by the order of acts, as some acts may, in accordance with one or more embodiments, occur in different orders and/or concurrently with other acts from that shown and described herein or not shown and described herein, as would be understood by one skilled in the art.

Those of skill would further appreciate that the various illustrative logical blocks, modules, circuits, and algorithm steps described in connection with the embodiments disclosed herein may be implemented as electronic hardware, computer software, or combinations of both. To clearly illustrate this interchangeability of hardware and software, various illustrative components, blocks, modules, circuits, and steps have been described above generally in terms of their functionality. Whether such functionality is implemented as hardware or software depends upon the particular application and design constraints imposed on the overall system. Skilled artisans may implement the described functionality in varying ways for each particular application, but such implementation decisions should not be interpreted as causing a departure from the scope of the present invention.

The various illustrative logical blocks, modules, and circuits described in connection with the embodiments disclosed herein may be implemented or performed with a general purpose processor, a Digital Signal Processor (DSP), an Application Specific Integrated Circuit (ASIC), a Field Programmable Gate Array (FPGA) or other programmable logic device, discrete gate or transistor logic, discrete hardware components, or any combination thereof designed to perform the functions described herein. A general purpose processor may be a microprocessor, but in the alternative, the processor may be any conventional processor, controller, microcontroller, or state machine. A processor may also be implemented as a combination of computing devices, e.g., a combination of a DSP and a microprocessor, a plurality of microprocessors, one or more microprocessors in conjunction with a DSP core, or any other such configuration.

The steps of a method or algorithm described in connection with the embodiments disclosed herein may be embodied directly in hardware, in a software module executed by a processor, or in a combination of the two. A software module may reside in RAM memory, flash memory, ROM memory, EPROM memory, EEPROM memory, registers, hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art. An exemplary storage medium is coupled to the processor such the processor can read information from, and write information to, the storage medium. In the alternative, the storage medium may be integral to the processor. The processor and the storage medium may reside in an ASIC. The ASIC may reside in a user terminal. In the alternative, the processor and the storage medium may reside as discrete components in a user terminal.

In one or more exemplary embodiments, the functions described may be implemented in hardware, software, firmware, or any combination thereof. If implemented in software as a computer program product, the functions may be stored on or transmitted over as one or more instructions or code on a computer-readable medium. Computer-readable media includes both computer storage media and communication media including any medium that facilitates transfer of a computer program from one place to another. A storage media may be any available media that can be accessed by a computer. By way of example, and not limitation, such computer-readable media can comprise RAM, ROM, EEPROM, CD-ROM or other optical disk storage, magnetic disk storage or other magnetic storage devices, or any other medium that can be used to carry or store desired program code in the form of instructions or data structures and that can be accessed by a computer. Any connection is properly termed a computer-readable medium. For example, if the software is transmitted from a web site, server, or other remote source using a coaxial cable, fiber optic cable, twisted pair, Digital Subscriber Line (DSL), or wireless technologies such as infrared, radio, and microwave, then the coaxial cable, fiber optic cable, twisted pair, DSL, or wireless technologies such as infrared, radio, and microwave are included in the definition of medium. Disk (disk) and disc (disc), as used herein, includes Compact Disc (CD), laser disc, optical disc, Digital Versatile Disc (DVD), floppy disk and blu-ray disc where disks (disks) usually reproduce data magnetically, while discs (discs) reproduce data optically with lasers. Combinations of the above should also be included within the scope of computer-readable media.

The previous description of the disclosure is provided to enable any person skilled in the art to make or use the disclosure. Various modifications to the disclosure will be readily apparent to those skilled in the art, and the generic principles defined herein may be applied to other variations without departing from the spirit or scope of the disclosure. Thus, the disclosure is not intended to be limited to the examples and designs described herein but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.

Claims (10)

Translated fromChinese

1.一种混合云资源的管理方法，其特征在于，方法包括：1. A management method for hybrid cloud resources, characterized in that the method comprises:步骤1：在用户登录时判断用户是否有登录权限，判断出具有登录权限后允许用户登录；Step 1: When the user logs in, determine whether the user has the login authority, and allow the user to log in after judging that the user has the login authority;步骤2：在判断用户具有登录权限后进一步判断用户申请的是公有资源还是私有资源，如果申请的是公有资源则执行步骤3的处理，如果申请的是私有资源则执行步骤4的处理；Step 2: After judging that the user has the login authority, it is further judged whether the user is applying for a public resource or a private resource. If the application is a public resource, the processing of step 3 is performed, and if the application is a private resource, the processing of step 4 is performed;步骤3：判断用户是否具有公有资源权限，若具有公有资源权限则检查用户是否具有公有云配额，如果具有公有云配额则申请公有云资源；Step 3: Determine whether the user has public resource rights, if it has public resource rights, check whether the user has public cloud quota, and if it has public cloud quota, apply for public cloud resources;步骤4：判断用户是否具有私有资源权限，若具有私有资源权限则检查用户是否具有私有云配额，如果具有私有云配额则申请私有云资源；Step 4: Determine whether the user has the private resource permission, if the user has the private resource permission, check whether the user has the private cloud quota, and apply for the private cloud resource if the user has the private cloud quota;步骤5：创建资源，通过用户选择的私有、公有资源标识创建资源，创建资源的API对标识进行判断，选择私有云或公有云的底层API进行资源创建。Step 5: Create a resource, create a resource through the private and public resource identifiers selected by the user, judge the identifier by the API for creating the resource, and select the underlying API of the private cloud or the public cloud to create the resource.2.根据权利要求1所述的混合云资源的管理方法，其特征在于，在步骤1中，如果没有登录权限则为该用户开通认证权限，待认证通过后再进行登录操作。2 . The method for managing hybrid cloud resources according to claim 1 , wherein in step 1, if there is no login authority, an authentication authority is activated for the user, and the login operation is performed after the authentication is passed. 3 .3.根据权利要求1所述的混合云资源的管理方法，其特征在于，在步骤3中，若用户没有公有资源权限则先为用户开通公有资源权限，若用户没有公有云配额则先为用户申请公有云配额。3. The method for managing hybrid cloud resources according to claim 1, characterized in that, in step 3, if the user does not have a public resource authority, firstly activate the public resource authority for the user, and if the user does not have a public cloud quota, then the user first Apply for public cloud quota.4.根据权利要求1所述的混合云资源的管理方法，其特征在于，在步骤4中，若用户没有私有资源权限则先为用户开通私有资源权限，若用户没有私有云配额则先为用户申请私有云配额。4. The management method of hybrid cloud resources according to claim 1, is characterized in that, in step 4, if the user does not have the private resource authority, then first open the private resource authority for the user, if the user does not have the private cloud quota, then the user first Apply for a private cloud quota.5.一种混合云资源的管理系统，其特征在于，系统包括：5. A management system for hybrid cloud resources, characterized in that the system comprises:登录模块，配置为在用户登录时判断用户是否有登录权限，判断出具有登录权限后允许用户登录；The login module is configured to determine whether the user has the login authority when the user logs in, and allows the user to log in after determining that the user has the login authority;申请类型判断模块，配置为在判断用户具有登录权限后进一步判断用户申请的是公有资源还是私有资源；The application type judgment module is configured to further judge whether the user applies for a public resource or a private resource after judging that the user has the login authority;公有云处理模块，配置为判断用户是否具有公有资源权限，若具有公有资源权限则检查用户是否具有公有云配额，如果具有公有云配额则申请公有云资源；The public cloud processing module is configured to determine whether the user has public resource rights, and if it has public resource rights, it checks whether the user has public cloud quotas, and if it has public cloud quotas, it applies for public cloud resources;私有云处理模块，配置为判断用户是否具有私有资源权限，若具有私有资源权限则检查用户是否具有私有云配额，如果具有私有云配额则申请私有云资源；The private cloud processing module is configured to determine whether the user has the permission to private resources, and if it has the permission to private resources, check whether the user has the quota of the private cloud, and apply for the resources of the private cloud if it has the quota of the private cloud;资源创建模块，配置为创建资源，通过用户选择的私有、公有资源标识创建资源，创建资源的API对标识进行判断，选择私有云或公有云的底层API进行资源创建。The resource creation module is configured to create resources, create resources through the private and public resource identifiers selected by the user, judge the identifier by the API for creating the resource, and select the underlying API of the private cloud or public cloud for resource creation.6.根据权利要求5所述的混合云资源的管理系统，其特征在于，登录模块进一步配置为如果没有登录权限则为该用户开通认证权限，待认证通过后再进行登录操作。6 . The hybrid cloud resource management system according to claim 5 , wherein the login module is further configured to activate authentication authority for the user if there is no login authority, and perform the login operation after the authentication is passed. 7 .7.根据权利要求5所述的混合云资源的管理系统，其特征在于，公有云处理模块进一步配置为若用户没有公有资源权限则先为用户开通公有资源权限，若用户没有公有云配额则先为用户申请公有云配额。7. The management system for hybrid cloud resources according to claim 5, characterized in that, the public cloud processing module is further configured to first activate public resource rights for the user if the user does not have public resource rights, and to first activate the public resource rights for the user if the user does not have a public cloud quota. Apply for public cloud quotas for users.8.根据权利要求5所述的混合云资源的管理系统，其特征在于，私有云处理模块进一步配置为若用户没有私有资源权限则先为用户开通私有资源权限，若用户没有私有云配额则先为用户申请私有云配额。8. The management system of hybrid cloud resources according to claim 5, characterized in that, the private cloud processing module is further configured to first activate the private resource authority for the user if the user does not have the private resource authority, and first activate the private resource authority for the user if the user does not have the private cloud quota. Apply for private cloud quotas for users.9.一种混合云资源的管理系统，其特征在于，系统包括：9. A management system for hybrid cloud resources, characterized in that the system comprises:处理器；以及processor; and存储器，所述存储器被配置为存储一系列计算机可执行的指令以及与所述一系列计算机可执行的指令相关联的计算机可访问的数据，a memory configured to store a series of computer-executable instructions and computer-accessible data associated with the series of computer-executable instructions,其中，当所述一系列计算机可执行的指令被所述处理器执行时，使得所述处理器进行如权利要求1至4中任一项所述的方法。wherein the series of computer-executable instructions, when executed by the processor, cause the processor to perform the method of any one of claims 1-4.10.一种非临时性计算机可读存储介质，其特征在于，所述非临时性计算机可读存储介质上存储有一系列计算机可执行的指令，当所述一系列可执行的指令被计算装置执行时，使得计算装置进行如权利要求1至4中任一项所述的方法。10. A non-transitory computer-readable storage medium, wherein a series of computer-executable instructions are stored on the non-transitory computer-readable storage medium, and when the series of executable instructions are executed by a computing device , causing the computing device to perform the method of any one of claims 1-4.

Images