CN116436790A - Scene target drone network topology detection method and system in network target range - Google Patents

Abstract

The invention discloses a method and a system for detecting network topology of a scene target drone in a network target range, wherein virtual machines, networks and routes to be detected are obtained by analyzing scene data of the network target range; for the virtual machine, in a network naming space where the virtual machine is located on the control node, the IP address of the virtual machine is arping, the mac address of the reply packet is obtained, and the mac address is compared with the allocated mac address to judge whether the configuration of the virtual machine is normal or not; for a network, dispatching to a computing node where a virtual machine in the network is located through rpc, accessing the virtual machine through a serial port, and pinging a gateway address on the virtual machine to judge whether network configuration is normal; for routing, the routing is dispatched to a computing node where a virtual machine in one network is located, the virtual machine is accessed through a serial port, an IP address in the other network is ping on the virtual machine, and whether routing configuration is normal or not is judged. The invention is helpful for network topology verification and network connectivity problem positioning, and greatly improves the working efficiency.

Description

A network topology detection method and system for a target machine in a network shooting range

technical field

The invention relates to a network topology detection method and system for a scene target machine in a network shooting range, belonging to the fields of computer software and network security.

Background technique

When starting the scene based on the network topology map in the network shooting range, the network, virtual machine terminal, switch, and router will be instantiated according to the scene configuration data. At present, after the scene is instantiated, it will judge whether the scene is initialized for some special applications (such as whether the ports of some services can be connected), but it is not clear whether the actual startup scene is consistent with the configuration of the network topology diagram, and whether the entire topology network can really Connectivity, you need to manually detect the target drone in the topology. And when there is a problem with the connectivity of the network topology, troubleshooting is complicated and cumbersome.

Contents of the invention

Purpose of the invention: In view of the problems existing in the above-mentioned prior art, the purpose of the present invention is to provide a network topology detection method and system for a target machine in a network shooting range, which can automatically analyze the network scene topology, obtain the network link status, and display the network topology change status , improve detection efficiency.

Technical solution: In order to achieve the above-mentioned purpose of the invention, the present invention adopts the following technical solution:

A network topology detection method for a scene target machine in a network shooting range, comprising the following steps:

Obtain the scene data of the network shooting range, analyze and obtain the list of virtual machines, network lists and routing lists that need to be detected; the list of virtual machines contains all the virtual machines in the scene topology, and the list of networks contains all the networks in the scene topology and the The routing list contains two different networks connected by routers in the scene topology and the virtual machines in the network;

Traverse each virtual machine to be detected in the virtual machine list, arping the IP address of the virtual machine in the network namespace where the virtual machine is located on the network range control node, obtain the mac address of the reply packet, and match it with the virtual machine assigned when it was created The mac address is compared to determine whether the virtual machine configuration is normal;

Traverse each network to be detected in the network list, dispatch to the computing node where the virtual machine in the network is located through rpc, access the virtual machine through the serial port, ping the gateway address of the network on the virtual machine, and judge whether the network configuration is normal;

Traverse each route to be detected in the routing list, dispatch to the computing node where the virtual machine in one of the networks is located through rpc, access the virtual machine through the serial port, and ping the IP address of the virtual machine in the other network on the virtual machine, according to Whether the ping is successful determines whether the routing configuration is normal.

Preferably, when detecting a network or a route, a virtual machine is randomly selected from the virtual machines in the network for detection.

Preferably, the mac address allocated when the virtual machine is created is obtained in a manner: the virtual machine configuration file is queried by the computing node where the virtual machine is scheduled by rpc, and the virtual machine mac address in the configuration file is obtained.

Further, the method further includes, during the detection process, displaying the network link status of the scene topology according to the real-time detection result.

A network topology detection system for a scene target machine in a network shooting range, comprising:

The task parsing module is used to obtain the scene data of the network shooting range, and parse to obtain the virtual machine list, network list and routing list to be detected; the virtual machine list includes all the virtual machines in the scene topology, and the network list contains all the virtual machines in the scene topology. For all networks and virtual machines in the network, the routing list contains two different networks connected by routers in the scene topology and virtual machines in the network;

The terminal detection module is used to traverse each virtual machine to be detected in the virtual machine list, arping the IP address of the virtual machine in the network namespace where the virtual machine is located on the control node of the network shooting range, obtain the mac address of the reply packet, and communicate with Compare the mac address assigned when the virtual machine is created to determine whether the virtual machine configuration is normal;

The network detection module is used to traverse each network to be detected in the network list, dispatch to the computing node where the virtual machine in the network is located through rpc, access the virtual machine through the serial port, and ping the gateway address of the network on the virtual machine, according to whether Ping through to determine whether the network configuration is normal;

The route detection module is used to traverse each route to be detected in the route list, dispatch to the computing node where the virtual machine in one of the networks is located through rpc, access the virtual machine through the serial port, and ping the virtual machine in another network on the virtual machine Check whether the routing configuration is normal based on whether the ping is successful.

Preferably, the network detection module or the route detection module randomly selects a virtual machine among the virtual machines in the network for detection when detecting the network or the route.

Preferably, in the terminal detection module, the mac address assigned when the virtual machine is created is obtained in a manner: through RPC scheduling, the computing node where the virtual machine is located queries the configuration file of the virtual machine, and obtains the mac address of the virtual machine in the configuration file.

Further, the system further includes a result display module, configured to display the network link status of the scene topology according to the real-time detection results during the detection process.

A computer system, comprising a memory, a processor, and a computer program stored on the memory and operable on the processor, when the computer program is loaded into the processor, the method for detecting network topology of a scene target machine in a network shooting range is realized A step of.

A computer-readable storage medium, the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the network topology detection method for a scene target machine in a network shooting range are realized.

Beneficial effects: compared with the prior art, the present invention has the following advantages: the present invention can automatically analyze the network topology of the scene, perform classification detection of terminals, networks, and routes, and can obtain the link status of the entire network topology, ensuring that the actual start-up scene The topology is consistent with the configuration, which is helpful for network topology verification and network connectivity problem location, which greatly improves work efficiency. The present invention can acquire and display the change of the whole network topology through the automatic detection of the network link.

Description of drawings

Fig. 1 is an overall flow chart of the embodiment of the present invention.

Figure 2 is a schematic diagram of the network topology of the shooting range scene.

FIG. 3 is a schematic diagram of virtual machine terminal detection in an embodiment of the present invention.

FIG. 4 is a schematic diagram of network detection in an embodiment of the present invention.

FIG. 5 is a schematic diagram of route detection in an embodiment of the present invention.

Detailed ways

The technical solutions of the present invention will be clearly and completely described below in conjunction with the accompanying drawings and specific embodiments.

As shown in FIG. 1 , a network topology detection method for a scene target machine in a network shooting range disclosed by an embodiment of the present invention mainly includes several steps of task analysis, virtual machine terminal detection, network detection, and routing detection. After starting the scene through the front end of the shooting range management platform, the platform transmits the scene start data to the automatic analysis and detection network link service through the interface, and analyzes the scene data through the service, and first classifies it, which requires terminal detection, network detection, and routing detection. Type for optimized detection. After parsing the scene data, the virtual machine list, network list and route list to be detected are obtained; the virtual machine list contains all the virtual machines in the scene topology, and the network list contains all the networks in the scene topology and the networks in the network. For virtual machines, the route list includes two different networks connected by routers in the scene topology and the virtual machines in the networks.

The specific scene data can be imported into the automatic detection service as an xml file or a database file. For specific analysis, routers can be used as the first type of label and the network information under it can be recorded, and network switches can be used as the second type of label and the virtual machine under it can be recorded. The machine terminal is the third type. The second type of network switch can know the virtual machine terminal under the network, and also know the route of the network connection, that is, first determine the network, detect the virtual machine terminal under each network, and then detect the virtual machine under the corresponding network. Detect the network, and then detect the routes of the networks of different network segments under the router connected to it.

In addition, the efficiency can also be improved by optimizing the detection. In the scenario shown in Figure 2, vm1 and vm2 are connected to the switch s1, and vm2, vm3, and vm4 are connected to the switch s2. After detecting vm1 and vm2 through the terminal detection method, network detection is performed. It is only necessary to detect one of the terminal nodes. The network detection is performed on vm1, and the result is the result of vm2. Similarly, vm3, vm4, and vm5 only need to perform network detection on one of the virtual machines, and the detection route only needs to It is necessary to perform routing detection through vm1 and vm3 to find out whether the router connected to the two switches is normal. In this way, there is no need to perform too much network detection and routing detection for all machines, which greatly improves the detection efficiency. Because it is reported in real time, each time when detecting, when detecting the network or routing, a virtual machine is randomly selected among them for detection.

In all types of network scenarios, except that virtual machines need to be detected in real time; when a switch is connected to multiple virtual machines, only one of the virtual machines needs to be detected; when two switches are connected through a router, only one of them needs to be detected. Virtual machine for routing detection. The specific detection methods of the virtual machine terminal, network and routing are explained in detail below.

1. Terminal detection method

When creating a virtual machine, if a new network is allocated, a namespace corresponding to the network will be created on the network range control node (that is, the OpenStack control node), and the dhcp service of the network will be configured, that is, arping to the network namespace where the virtual machine is located through the service Compare the IP address of each virtual machine and the mac address obtained in the return packet with the mac address assigned when the virtual machine was created to check whether the virtual machine network is normal, as shown in Figure 3.

Arping virtual machine IP through namespace:

ip netns exec qdhcp-f46b1cf0-7d9c-49e3-b8ea-4048ded3566b arping192.168.1.147

ARPING 192.168.1.147 from 192.168.1.1 tap75f58168-e4

Unicast reply from 192.168.1.147 [FA:16:3E:FD:B4:D9] 1.047ms

Unicast reply from 192.168.1.147 [FA:16:3E:FD:B4:D9] 0.876ms

Query the configuration file mac information of the virtual machine through rpc scheduling to the node where the virtual machine is located, and verify it with the mac address obtained above to obtain the result. Example of a network interface section of a configuration file:

<interface type='bridge'>

<mac address='fa:16:3e:fd:b4:d9'/>

<source bridge='qbr9a7743eb-ad'/>

<target dev='tap9a7743eb-ad'/>

<model type='virtio'/>

<mtu size='1500'/>

<alias name='net0'/>

<address type='pci' domain='0x0000' bus='0x00' slot='0x03' function='0x0'/>

</interface>

Analyze whether the mac addresses of the two are the same to know the detection result.

2. Network detection method

As shown in Figure 4, call the host where the virtual machine is located through the service rpc, connect the virtual machine through the serial port, and ping the gateway address on the virtual machine. If the ping is successful, it means that the network is connected, and vice versa.

3. Routing detection method

As shown in Figure 5, connect the virtual machine through the serial port, and ping the address across the network segment on the virtual machine.

When creating a virtual machine in the network shooting range, a console device of type tcp will be created, and the target will be pointed to the serial device of the virtual machine.

That is, an example of serial device configuration;

<console type='tcp'>

<source mode='bind' host='0.0.0.0' service='15913' tls='no'/>

<protocol type='telnet'/>

<logfile='/var/lib/nova/instances/f3279ec8-388d-4ebb-904a-61a320f13ba1/console.log' append='off'/>

<target type='serial' port='0'/>

<alias name='serial0'/>

</console>

Through the interval time and real-time acquisition of the current network link status, it will be pushed to the front-end page in time through websocket, and the front-end will display the results.

Based on the same inventive concept, the embodiment of the present invention discloses a target machine network topology detection system in a network shooting range, including: a task analysis module, which is used to obtain the scene data of the network shooting range, and analyze to obtain a list of virtual machines and a network list that need to be detected and routing list; the terminal detection module is used to traverse each virtual machine to be detected in the virtual machine list, arping the IP address of the virtual machine in the network namespace where the virtual machine is located on the network range control node, and obtain the mac of the reply packet address, and compare it with the mac address in the configuration file on the computing node where the virtual machine is located to determine whether the virtual machine configuration is normal; the network detection module is used to traverse each network to be detected in the network list, and dispatch to the network through rpc The computing node where the internal virtual machine is located accesses the virtual machine through a serial port, pings the gateway address of the network on the virtual machine, and judges whether the network configuration is normal according to whether the ping is successful; the routing detection module is used to traverse each to-be-detected node in the routing list The route is dispatched to the computing node where the virtual machine in one of the networks is located through rpc, connected to the virtual machine through the serial port, and pings the IP address of the virtual machine in the other network on the virtual machine, and judges whether the routing configuration is normal according to whether the ping is successful.

Based on the same inventive concept, a computer system disclosed in an embodiment of the present invention includes a memory, a processor, and a computer program stored in the memory and operable on the processor. When the computer program is loaded into the processor, the The steps of the network topology detection method for the scene target machine in the network shooting range described above.

Based on the same inventive concept, an embodiment of the present invention discloses a computer-readable storage medium, the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the scene target in the network shooting range is realized. The steps of the computer network topology detection method.

Claims (10)

1. A method for detecting the network topology of a scene target drone in a network target range is characterized by comprising the following steps:

acquiring network target range scene data, and analyzing to obtain a virtual machine list, a network list and a routing list which need to be detected; the virtual machine list comprises all virtual machines in the scene topology, the network list comprises all networks in the scene topology and virtual machines in the networks, and the route list comprises two different networks connected through a router in the scene topology and virtual machines in the networks;

traversing each virtual machine to be detected in the virtual machine list, in a network naming space where the virtual machine is located on a network shooting range control node, arping the IP address of the virtual machine, acquiring the mac address of a reply packet, and comparing the mac address with the mac address allocated when the virtual machine is created to judge whether the configuration of the virtual machine is normal or not;

traversing each network to be detected in the network list, dispatching to a computing node where a virtual machine in the network is located through rpc, accessing the virtual machine through a serial port, pinging a gateway address of the network on the virtual machine, and judging whether the network configuration is normal according to whether ping is conducted;

traversing each route to be detected in the route list, dispatching the routes to a computing node where a virtual machine in one network is located through rpc, accessing the virtual machine through a serial port, pinging the IP address of the virtual machine in the other network on the virtual machine, and judging whether the configuration of the open circuit is normal according to whether the ping is conducted.

2. The method for detecting the network topology of a scene target in a network target range according to claim 1, wherein when detecting a network or a route, one virtual machine is randomly selected from virtual machines in the network for detection.

3. The method for detecting a scene drone network topology in a network range according to claim 1, wherein the mac address obtaining mode allocated when the virtual machine is created is as follows: and inquiring a virtual machine configuration file through a computing node where the rpc dispatching virtual machine is located, and obtaining a mac address of the virtual machine in the configuration file.

4. The method of claim 1, further comprising displaying network link states of the scene topology during the detecting based on the real-time detection result.

5. A system for detecting a network topology of a scene target drone in a network target range, comprising:

the task analysis module is used for acquiring the network shooting range scene data and analyzing to obtain a virtual machine list, a network list and a routing list which need to be detected; the virtual machine list comprises all virtual machines in the scene topology, the network list comprises all networks in the scene topology and virtual machines in the networks, and the route list comprises two different networks connected through a router in the scene topology and virtual machines in the networks;

the terminal detection module is used for traversing each virtual machine to be detected in the virtual machine list, and in a network naming space where the virtual machine is located on the network shooting range control node, the IP address of the virtual machine is arping, the mac address of the reply packet is obtained, and the mac address is compared with the mac address allocated when the virtual machine is created to judge whether the configuration of the virtual machine is normal or not;

the network detection module is used for traversing each network to be detected in the network list, scheduling the network to a computing node where a virtual machine in the network is located through rpc, accessing the virtual machine through a serial port, and pinging a gateway address of the network on the virtual machine, and judging whether the network configuration is normal according to whether ping is conducted;

the route detection module is used for traversing each route to be detected in the route list, dispatching the routes to a computing node where a virtual machine in one network is located through rpc, accessing the virtual machine through a serial port, pinging the IP address of the virtual machine in the other network on the virtual machine, and judging whether the configuration of the open circuit route is normal according to whether the ping is conducted.

6. The system of claim 5, wherein the network detection module or the route detection module, when detecting the network or the route, randomly selects one virtual machine from the virtual machines in the network for detection.

7. The network topology detection system of a scene drone in a network range according to claim 5, wherein the terminal detection module obtains a mac address allocated during creation of a virtual machine by: and inquiring a virtual machine configuration file through a computing node where the rpc dispatching virtual machine is located, and obtaining a mac address of the virtual machine in the configuration file.

8. The system for detecting network topology of a scene drone in a network range of claim 5, further comprising a result display module for displaying network link states of the scene topology according to results of the real-time detection during the detection.

9. A computer system comprising a memory, a processor and a computer program stored on the memory and executable on the processor, wherein the computer program when loaded onto the processor implements the steps of the method for detecting a network topology of a scene drone in a network range according to any one of claims 1 to 4.

10. A computer readable storage medium storing a computer program, characterized in that the computer program when executed by a processor implements the steps of the method for detecting a network topology of a scene drone in a network range according to any one of claims 1-4.

Images