CN109040276B - A method, device, computer storage medium and terminal for building a cloud platform - Google Patents
A method, device, computer storage medium and terminal for building a cloud platform Download PDFInfo
- Publication number
- CN109040276B CN109040276B CN201810946495.5A CN201810946495A CN109040276B CN 109040276 B CN109040276 B CN 109040276B CN 201810946495 A CN201810946495 A CN 201810946495A CN 109040276 B CN109040276 B CN 109040276B
- Authority
- CN
- China
- Prior art keywords
- service
- virtual machine
- tenants
- network
- establishing
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000000034 method Methods 0.000 title claims abstract description 22
- 210000001503 joint Anatomy 0.000 claims abstract 4
- 238000003032 molecular docking Methods 0.000 claims description 9
- 238000012545 processing Methods 0.000 claims description 4
- 238000007726 management method Methods 0.000 description 29
- 238000010276 construction Methods 0.000 description 5
- 238000002955 isolation Methods 0.000 description 5
- 238000010586 diagram Methods 0.000 description 4
- 230000006870 function Effects 0.000 description 4
- 238000012423 maintenance Methods 0.000 description 4
- 238000004891 communication Methods 0.000 description 3
- 238000005516 engineering process Methods 0.000 description 3
- 230000007246 mechanism Effects 0.000 description 3
- 230000006978 adaptation Effects 0.000 description 1
- 230000010354 integration Effects 0.000 description 1
- 238000004519 manufacturing process Methods 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 230000003287 optical effect Effects 0.000 description 1
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/10—Protocols in which an application is distributed across nodes in the network
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
- H04L63/0272—Virtual private networks
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/20—Network architectures or network communication protocols for network security for managing network security; network security policies in general
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/10—Protocols in which an application is distributed across nodes in the network
- H04L67/1001—Protocols in which an application is distributed across nodes in the network for accessing one among a plurality of replicated servers
- H04L67/1004—Server selection for load balancing
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/10—Protocols in which an application is distributed across nodes in the network
- H04L67/1001—Protocols in which an application is distributed across nodes in the network for accessing one among a plurality of replicated servers
- H04L67/1036—Load balancing of requests to servers for services different from user content provisioning, e.g. load balancing across domain name servers
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/10—Protocols in which an application is distributed across nodes in the network
- H04L67/104—Peer-to-peer [P2P] networks
- H04L67/1044—Group management mechanisms
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Security & Cryptography (AREA)
- Computing Systems (AREA)
- Computer Hardware Design (AREA)
- General Engineering & Computer Science (AREA)
- Physics & Mathematics (AREA)
- Mathematical Physics (AREA)
- Theoretical Computer Science (AREA)
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
Description
技术领域technical field
本文涉及但不限于云计算技术,尤指一种构建云平台的方法、装置、计算机存储介质及终端。This article involves but is not limited to cloud computing technology, especially a method, device, computer storage medium and terminal for building a cloud platform.
背景技术Background technique
OpenStack是一个旨在为公共及私有云的建设与管理提供软件支持的开源项目;由计算、存储、网络等组件组合起来实现云计算的管理,其目标是为全球数以亿计的用户提供实施简单、可大规模扩展、丰富、标准统一的云计算管理平台。OpenStack is an open source project designed to provide software support for the construction and management of public and private clouds; it is a combination of computing, storage, network and other components to achieve cloud computing management, and its goal is to provide implementation for hundreds of millions of users around the world Simple, massively scalable, rich, and unified standard cloud computing management platform.
在实际应用于生产的混合业务云环境中,由于多个业务云环境的混合,对业务云的隔离、数据安全、服务可用性等均有较高的性能要求。对于构建、运营、维护多个客户业务云的服务商,如何快速构建混合业务云的云管理平台,如何快速部署上线客户的业务云并确保各业务云之间高可靠、高安全性的运行,如何降低运维成本、保障云平台高性能、低容错的稳定运营已成为当下需要解决的一个热点问题。In a hybrid business cloud environment that is actually used in production, due to the mixing of multiple business cloud environments, there are high performance requirements for business cloud isolation, data security, and service availability. For service providers who build, operate, and maintain multiple customer business clouds, how to quickly build a cloud management platform for hybrid business clouds, how to quickly deploy and go online customer business clouds, and ensure high reliability and high security between business clouds. How to reduce operation and maintenance costs and ensure the stable operation of cloud platform with high performance and low fault tolerance has become a hot issue that needs to be solved.
发明内容SUMMARY OF THE INVENTION
以下是对本文详细描述的主题的概述。本概述并非是为了限制权利要求的保护范围。The following is an overview of the topics detailed in this article. This summary is not intended to limit the scope of protection of the claims.
本发明实施例提供一种构建云平台的方法、装置、计算机存储介质及终端,能够实现混合业务云的快速部署。Embodiments of the present invention provide a method, device, computer storage medium and terminal for building a cloud platform, which can realize rapid deployment of a hybrid service cloud.
本发明实施例提供了一种构建云平台的方法,包括:Embodiments of the present invention provide a method for building a cloud platform, including:
根据各业务云的业务需求,为各租户建立各业务云的企业租户;According to the business requirements of each business cloud, establish enterprise tenants of each business cloud for each tenant;
为建立的各企业租户,配置相应的资源和用户层;Configure corresponding resources and user layers for each established enterprise tenant;
建立配置的资源和用户层与云平台的管理对接;Establish the management connection between the configured resources and the user layer and the cloud platform;
其中,所述业务需求包括:资源需求和功能需求;所述为各租户建立各业务云的企业租户包括:对每一个租户:根据业务需求创建并配置相应的网络资源;创建当前租户的业务虚拟机;对创建的业务虚拟机,根据配置的网络资源进行网络配置;所述网络资源包括:业务虚拟局域网vlan;不同租户间的所述vlan网络相互隔离。Wherein, the business requirements include: resource requirements and functional requirements; the enterprise tenants that establish each business cloud for each tenant include: for each tenant: creating and configuring corresponding network resources according to business requirements; creating a business virtual machine for the current tenant For the created service virtual machine, network configuration is performed according to the configured network resources; the network resources include: service virtual local area network vlan; the vlan networks between different tenants are isolated from each other.
可选的,所述网络资源还包括:系统盘和/或数据盘。Optionally, the network resources further include: a system disk and/or a data disk.
可选的,所述进行网络配置包括:Optionally, the performing network configuration includes:
配置所述业务虚拟机所用的系统盘、所属的业务vlan、虚拟机类型、及所属的计算集群,并挂载相应的数据盘;Configure the system disk used by the business virtual machine, the business vlan to which it belongs, the virtual machine type, and the computing cluster to which it belongs, and mount the corresponding data disk;
其中,所述网络资源包括业务vlan时,所述业务vlan的配置包括以下部分或全部信息的配置:子网、网关、互联网协议IP地址池。Wherein, when the network resource includes a service vlan, the configuration of the service vlan includes the configuration of part or all of the following information: subnet, gateway, and Internet Protocol IP address pool.
可选的,所述方法还包括:Optionally, the method further includes:
为所述业务虚拟机部署两个或两个以上实例;deploying two or more instances for the business virtual machine;
通过预先设置的负载均衡策略将业务请求分发至部署的各所述实例上。Distribute service requests to each of the deployed instances through a preset load balancing strategy.
另一方面,本发明实施例还提供一种构建云平台的装置,包括:建立单元、配置单元和对接单元;其中,On the other hand, an embodiment of the present invention also provides an apparatus for building a cloud platform, including: a building unit, a configuration unit, and a docking unit; wherein,
建立单元用于:根据各业务云的业务需求,为各租户建立各业务云的企业租户;The establishment unit is used to: establish enterprise tenants of each business cloud for each tenant according to the business requirements of each business cloud;
配置单元用于:为建立的各企业租户,配置相应的资源和用户层;The configuration unit is used to configure the corresponding resources and user layers for each established enterprise tenant;
对接单元用于:建立配置的资源和用户层与云平台的管理对接;The docking unit is used to: establish the management docking between the configured resources and the user layer and the cloud platform;
其中,所述业务需求包括:资源需求和功能需求;所述为各租户建立各业务云的企业租户包括:对每一个租户:根据业务需求创建并配置相应的网络资源;创建当前租户的业务虚拟机;对创建的业务虚拟机,根据配置的网络资源进行网络配置;所述网络资源包括:业务虚拟局域网vlan;不同租户间的所述vlan网络相互隔离。Wherein, the business requirements include: resource requirements and functional requirements; the enterprise tenants that establish each business cloud for each tenant include: for each tenant: creating and configuring corresponding network resources according to business requirements; creating a business virtual machine for the current tenant For the created service virtual machine, network configuration is performed according to the configured network resources; the network resources include: service virtual local area network vlan; the vlan networks between different tenants are isolated from each other.
可选的,所述网络资源还包括:系统盘和/或数据盘。Optionally, the network resources further include: a system disk and/or a data disk.
可选的,所述建立单元用于进行网络配置包括:Optionally, the establishment unit is used for network configuration including:
配置所述业务虚拟机所用的系统盘、所属的业务vlan、虚拟机类型、及所属的计算集群,并挂载相应的数据盘;Configure the system disk used by the business virtual machine, the business vlan to which it belongs, the virtual machine type, and the computing cluster to which it belongs, and mount the corresponding data disk;
其中,所述网络资源包括业务vlan时,所述业务vlan的配置包括以下部分或全部信息的配置:子网、网关、互联网协议IP地址池。Wherein, when the network resource includes a service vlan, the configuration of the service vlan includes the configuration of part or all of the following information: subnet, gateway, and Internet Protocol IP address pool.
可选的,所述装置还包括业务请求处理单元,用于:Optionally, the device further includes a service request processing unit for:
为所述业务虚拟机部署两个或两个以上实例;deploying two or more instances for the business virtual machine;
通过预先设置的负载均衡策略将业务请求分发至部署的各所述实例上。Distribute service requests to each of the deployed instances through a preset load balancing strategy.
再一方面,本发明实施例还提供一种计算机存储介质,所述计算机存储介质中存储有计算机可执行指令,所述计算机可执行上述构建云平台的方法。In another aspect, an embodiment of the present invention further provides a computer storage medium, where computer-executable instructions are stored in the computer storage medium, and the computer can execute the above method for building a cloud platform.
还一方面,本发明实施例还提供一种终端,包括:存储器和处理器;其中,In another aspect, an embodiment of the present invention further provides a terminal, including: a memory and a processor; wherein,
处理器被配置为执行存储器中的程序指令;the processor is configured to execute program instructions in the memory;
程序指令在处理器读取执行以下操作:Program instructions are read by the processor to do the following:
根据各业务云的业务需求,为各租户建立各业务云的企业租户;According to the business requirements of each business cloud, establish enterprise tenants of each business cloud for each tenant;
为建立的各企业租户,配置相应的资源和用户层;Configure corresponding resources and user layers for each established enterprise tenant;
建立配置的资源和用户层与云平台的管理对接;Establish the management connection between the configured resources and the user layer and the cloud platform;
其中,所述业务需求包括:资源需求和功能需求;所述为各租户建立各业务云的企业租户包括:对每一个租户:根据业务需求创建并配置相应的网络资源;创建当前租户的业务虚拟机;对创建的业务虚拟机,根据配置的网络资源进行网络配置;所述网络资源包括:业务虚拟局域网vlan;不同租户间的所述vlan网络相互隔离。Wherein, the business requirements include: resource requirements and functional requirements; the enterprise tenants that establish each business cloud for each tenant include: for each tenant: creating and configuring corresponding network resources according to business requirements; creating a business virtual machine for the current tenant For the created service virtual machine, network configuration is performed according to the configured network resources; the network resources include: service virtual local area network vlan; the vlan networks between different tenants are isolated from each other.
与相关技术相比,本申请技术方案包括:根据各业务云的业务需求,为各租户建立各业务云的企业租户;为建立的各企业租户,配置相应的资源和用户层;建立配置的资源和用户层与云平台的管理对接。本发明实施例实现了混合业务云的快速部署,保证了各业务云可靠、安全的运行。Compared with related technologies, the technical solution of the present application includes: establishing enterprise tenants of each business cloud for each tenant according to the business requirements of each business cloud; configuring corresponding resources and user layers for each established enterprise tenant; establishing the configured resources It is connected with the management of the user layer and the cloud platform. The embodiment of the present invention realizes the rapid deployment of the hybrid service cloud, and ensures the reliable and safe operation of each service cloud.
本发明的其它特征和优点将在随后的说明书中阐述,并且,部分地从说明书中变得显而易见,或者通过实施本发明而了解。本发明的目的和其他优点可通过在说明书、权利要求书以及附图中所特别指出的结构来实现和获得。Other features and advantages of the present invention will be set forth in the description which follows, and in part will be apparent from the description, or may be learned by practice of the invention. The objectives and other advantages of the invention may be realized and attained by the structure particularly pointed out in the description, claims and drawings.
附图说明Description of drawings
附图用来提供对本发明技术方案的进一步理解,并且构成说明书的一部分,与本申请的实施例一起用于解释本发明的技术方案,并不构成对本发明技术方案的限制。The accompanying drawings are used to provide a further understanding of the technical solutions of the present invention, and constitute a part of the specification. They are used to explain the technical solutions of the present invention together with the embodiments of the present application, and do not limit the technical solutions of the present invention.
图1为本发明实施例构建云平台的方法的流程图;1 is a flowchart of a method for constructing a cloud platform according to an embodiment of the present invention;
图2为本发明实施例构建云平台的装置的结构框图;2 is a structural block diagram of an apparatus for constructing a cloud platform according to an embodiment of the present invention;
图3为业务云平台的基本组成结构示意图。FIG. 3 is a schematic diagram of the basic structure of the service cloud platform.
具体实施方式Detailed ways
为使本发明的目的、技术方案和优点更加清楚明白,下文中将结合附图对本发明的实施例进行详细说明。需要说明的是,在不冲突的情况下,本申请中的实施例及实施例中的特征可以相互任意组合。In order to make the objectives, technical solutions and advantages of the present invention clearer, the embodiments of the present invention will be described in detail below with reference to the accompanying drawings. It should be noted that, the embodiments in the present application and the features in the embodiments may be arbitrarily combined with each other if there is no conflict.
在附图的流程图示出的步骤可以在诸如一组计算机可执行指令的计算机系统中执行。并且,虽然在流程图中示出了逻辑顺序,但是在某些情况下,可以以不同于此处的顺序执行所示出或描述的步骤。The steps shown in the flowcharts of the figures may be performed in a computer system, such as a set of computer-executable instructions. Also, although a logical order is shown in the flowcharts, in some cases the steps shown or described may be performed in an order different from that herein.
图1为本发明实施例构建云平台的方法的流程图,如图1所示,包括:FIG. 1 is a flowchart of a method for building a cloud platform according to an embodiment of the present invention, as shown in FIG. 1 , including:
步骤101、根据各业务云的业务需求,为各租户建立各业务云的企业租户;
可选的,本发明实施例为各租户建立各业务云的企业租户包括:对每一个租户:Optionally, the enterprise tenants that establish each service cloud for each tenant in this embodiment of the present invention include: for each tenant:
根据业务需求创建并配置相应的网络资源;Create and configure corresponding network resources according to business needs;
创建当前租户的业务虚拟机;Create a business virtual machine for the current tenant;
对创建的业务虚拟机,根据配置的网络资源进行网络配置;For the created service virtual machine, perform network configuration according to the configured network resources;
其中,所述网络资源包括以下部分或全部资源:业务虚拟局域网vlan、系统盘及数据盘。Wherein, the network resources include some or all of the following resources: service virtual local area network vlan, system disk and data disk.
可选的,本发明实施例进行网络配置包括:Optionally, the network configuration in this embodiment of the present invention includes:
配置所述业务虚拟机所用的系统盘、所属的业务vlan、虚拟机类型、及所属的计算集群,并挂载相应的数据盘;Configure the system disk used by the business virtual machine, the business vlan to which it belongs, the virtual machine type, and the computing cluster to which it belongs, and mount the corresponding data disk;
其中,所述网络资源包括业务vlan时,所述业务vlan的配置包括以下部分或全部信息的配置:子网、网关、互联网协议IP地址池。Wherein, when the network resource includes a service vlan, the configuration of the service vlan includes the configuration of part or all of the following information: subnet, gateway, and Internet Protocol IP address pool.
可选的,本发明实施例方法还包括:Optionally, the method according to the embodiment of the present invention further includes:
为所述业务虚拟机部署两个或两个以上实例;deploying two or more instances for the business virtual machine;
通过预先设置的负载均衡策略将业务请求分发至部署的各所述实例上。Distribute service requests to each of the deployed instances through a preset load balancing strategy.
步骤102、为建立的各企业租户,配置相应的资源和用户层;
步骤103、建立配置的资源和用户层与云平台的管理对接。Step 103: Establish the management connection between the configured resource and user layer and the cloud platform.
需要说明的是,本发明实施例业务需求包括:资源需求和功能需求。配置的资源和用户层与云平台的管理对接可以通过云管理平台提供的驱动代码格式进行编辑实现。It should be noted that the service requirements in this embodiment of the present invention include: resource requirements and functional requirements. The management connection between the configured resources and the user layer and the cloud platform can be realized by editing the driver code format provided by the cloud management platform.
与相关技术相比,本申请技术方案包括:根据各业务云的业务需求,为各租户建立各业务云的企业租户;为建立的各企业租户,配置相应的资源和用户层;建立配置的资源和用户层与云平台的管理对接。本发明实施例实现了混合业务云的快速部署,保证了各业务云可靠、安全的运行。Compared with related technologies, the technical solution of the present application includes: establishing enterprise tenants of each business cloud for each tenant according to the business requirements of each business cloud; configuring corresponding resources and user layers for each established enterprise tenant; establishing the configured resources It is connected with the management of the user layer and the cloud platform. The embodiment of the present invention realizes the rapid deployment of the hybrid service cloud, and ensures the reliable and safe operation of each service cloud.
图2为本发明实施例构建云平台的装置的结构框图,如图2所示,包括:建立单元、配置单元和对接单元;其中,FIG. 2 is a structural block diagram of an apparatus for building a cloud platform according to an embodiment of the present invention. As shown in FIG. 2 , it includes: an establishment unit, a configuration unit, and a docking unit; wherein,
建立单元用于:根据各业务云的业务需求,为各租户建立各业务云的企业租户;The establishment unit is used to: establish enterprise tenants of each business cloud for each tenant according to the business requirements of each business cloud;
配置单元用于:为建立的各企业租户,配置相应的资源和用户层;The configuration unit is used to configure the corresponding resources and user layers for each established enterprise tenant;
对接单元用于:建立配置的资源和用户层与云平台的管理对接。The docking unit is used to establish the management docking between the configured resources and the user layer and the cloud platform.
需要说明的是,本发明实施例业务需求包括:资源需求和功能需求。配置的资源和用户层与云平台的管理对接可以通过云管理平台提供的驱动代码格式进行编辑实现。It should be noted that the service requirements in this embodiment of the present invention include: resource requirements and functional requirements. The management connection between the configured resources and the user layer and the cloud platform can be realized by editing the driver code format provided by the cloud management platform.
可选的,本发明实施例建立单元具体用于,对每一个租户:Optionally, the establishment unit in this embodiment of the present invention is specifically configured to, for each tenant:
根据业务需求创建并配置相应的网络资源;Create and configure corresponding network resources according to business needs;
创建当前租户的业务虚拟机;Create a business virtual machine for the current tenant;
对创建的业务虚拟机,根据配置的网络资源进行网络配置;For the created service virtual machine, perform network configuration according to the configured network resources;
其中,所述网络资源包括以下部分或全部资源:业务虚拟局域网vlan、系统盘及数据盘。Wherein, the network resources include some or all of the following resources: service virtual local area network vlan, system disk and data disk.
可选的,本发明实施例建立单元用于进行网络配置包括:Optionally, the establishment unit in this embodiment of the present invention is configured to perform network configuration including:
配置所述业务虚拟机所用的系统盘、所属的业务vlan、虚拟机类型、及所属的计算集群,并挂载相应的数据盘;Configure the system disk used by the business virtual machine, the business vlan to which it belongs, the virtual machine type, and the computing cluster to which it belongs, and mount the corresponding data disk;
其中,所述网络资源包括业务vlan时,所述业务vlan的配置包括以下部分或全部信息的配置:子网、网关、互联网协议IP地址池。Wherein, when the network resource includes a service vlan, the configuration of the service vlan includes the configuration of part or all of the following information: subnet, gateway, and Internet Protocol IP address pool.
可选的,本发明实施例装置还包括业务请求处理单元,用于:Optionally, the apparatus according to the embodiment of the present invention further includes a service request processing unit, configured to:
为所述业务虚拟机部署两个或两个以上实例;deploying two or more instances for the business virtual machine;
通过预先设置的负载均衡策略将业务请求分发至部署的各所述实例上。Distribute service requests to each of the deployed instances through a preset load balancing strategy.
本发明实施例还提供一种计算机存储介质,所述计算机存储介质中存储有计算机可执行指令,所述计算机可执行上述构建云平台的方法。An embodiment of the present invention further provides a computer storage medium, where computer-executable instructions are stored in the computer storage medium, and the computer can execute the above method for building a cloud platform.
本发明实施例还提供一种终端,包括:存储器和处理器;其中,An embodiment of the present invention further provides a terminal, including: a memory and a processor; wherein,
处理器被配置为执行存储器中的程序指令;the processor is configured to execute program instructions in the memory;
程序指令在处理器读取执行以下操作:Program instructions are read by the processor to do the following:
根据各业务云的业务需求,为各租户建立各业务云的企业租户;According to the business requirements of each business cloud, establish enterprise tenants of each business cloud for each tenant;
为建立的各企业租户,配置相应的资源和用户层;Configure corresponding resources and user layers for each established enterprise tenant;
建立配置的资源和用户层与云平台的管理对接。Establish the management connection between the configured resources and the user layer and the cloud platform.
以下通过应用示例对本发明实施例方法进行清楚详细的说明,应用示例仅用于陈述本发明,并不用于限定本发明的保护范围。The method of the embodiments of the present invention will be described clearly and in detail below through application examples. The application examples are only used to describe the present invention, and are not used to limit the protection scope of the present invention.
应用示例Application example
图3为业务云平台的基本组成结构示意图,如图3所示,本发明实施例基于OpenStack实现,图3所示的所有的硬件资源(物理服务器节点、存储设备、网络)和基于OpenStack的云管理平台都可以由业务云运维服务商统一提供、部署和管理;各业务云通过多租户在各自的租户环境下进行业务云服务的虚拟机、存储、网络等基础资源的创建、业务网络的配置、在虚拟机上进行业务服务的部署及发布。云管理平台采用OpenStack多节点分布式的部署方式,以控制集群实现对云平台的控制、管理;通过计算服务对云平台的物理计算节点进行集群的划分,并通过租户定制机制分配各业务云所属的计算集群;通过存储服务对接云平台的各个存储后端(包括各种物理存储设备、软件定义的商业存储等)进行对接;通过OpenStack存储服务提供的云硬盘类型管理机制将云硬盘类型与后端存储类型进行映射对应,各业务云租户根据自身对云硬盘类型的需求进行云硬盘类型的定制;通过网络服务对接云平台的网络设备,构建云平台统一的网络资源池;云平台基于网络资源池搭建云平台管理网,保证云平台各管理业务的正常运行和租户在云平台上服务正常定制使用,租户在云平台提供的各自租户环境下创建自身业务所需的VLAN网络,不同租户间的VLAN网络是相互隔离的,以此提高各业务云的数据隔离及安全。FIG. 3 is a schematic diagram of the basic structure of a business cloud platform. As shown in FIG. 3, an embodiment of the present invention is implemented based on OpenStack. All hardware resources (physical server nodes, storage devices, and networks) shown in FIG. All management platforms can be uniformly provided, deployed, and managed by business cloud operation and maintenance service providers; each business cloud can create virtual machines, storage, networks and other basic resources for business cloud services through multi-tenancy in their own tenant environments, and establish business networks. Configure, deploy and publish business services on virtual machines. The cloud management platform adopts the OpenStack multi-node distributed deployment method to control the cluster to realize the control and management of the cloud platform; through the computing service, the physical computing nodes of the cloud platform are divided into clusters, and each business cloud belongs to the tenant customization mechanism. It connects with various storage backends of the cloud platform (including various physical storage devices, software-defined commercial storage, etc.) through the storage service; through the cloud hard disk type management mechanism provided by the OpenStack storage service, the cloud hard disk type is connected with the backend The cloud storage type is mapped and corresponding, and each business cloud tenant customizes the cloud hard disk type according to their own needs for the cloud hard disk type; connects with the network devices of the cloud platform through network services to build a unified network resource pool of the cloud platform; the cloud platform is based on network resources. The pool builds a cloud platform management network to ensure the normal operation of various management services on the cloud platform and the normal custom use of services by tenants on the cloud platform. Tenants create VLAN networks required for their own services in the tenant environment provided by the cloud platform. VLAN networks are isolated from each other to improve data isolation and security of each service cloud.
基于上述业务云平台的基本组成,本发明应用示例构建云平台的方法,包括:Based on the basic composition of the above-mentioned business cloud platform, the method for constructing a cloud platform in the application example of the present invention includes:
根据客户的需求进行物理设备(物理服务器、存储设备、网络设备等基础物理设施的)准备及部署,搭建承载云管理平台的物理环境;物理设备的准备和部署可以由混合业务云运维服务商实施;Prepare and deploy physical equipment (basic physical facilities such as physical servers, storage equipment, network equipment, etc.) according to customer needs, and build a physical environment that carries the cloud management platform; implement;
在物理环境搭建完成后,结合物理设备的具体情况及各客户业务云的业务性能需求规划,为云管理平台的分布式部署方案;即进行控制服务器节点、计算服务器节点、存储服务器节点、网络服务器节点等各种类型业务服务节点的规模(数目及组合关系)、硬件资源能力(物理服务器的CPU、内存等)的部署;After the construction of the physical environment is completed, combined with the specific conditions of the physical equipment and the business performance requirements planning of each customer's business cloud, it is a distributed deployment solution for the cloud management platform; that is, control server nodes, computing server nodes, storage server nodes, and network servers. Deployment of the scale (number and combination) and hardware resource capabilities (CPU, memory, etc. of physical servers) of various types of business service nodes such as nodes;
本发明应用实施例采用开放栈(OpenStack)的分布式部署方式,配置云平台的各个物理节点的名称、互联网协议(IP)地址,并在各个业务节点的主机(hosts)配置文件中加入所有物理节点的名称及IP地址,建立彼此间的互信和业务通信,各业务节点由控制集群统一调度管理。由于各业务以集群的形式对各租户的业务云提供服务,如果平台用户规模大,并发访问量高,业务处理频繁,则以集群形式可提高性能、降低负载、兼备容灾,平台基于OpenStack提供的负载均衡策略合理下发用户请求到相应的服务节点,以此保障平台稳定、高性能的运行。本发明应用示例根据各业务云的业务需求(实际资源需求和功能需求),基于OpenStack平台的租户建立各业务云的企业租户,指定各租户的资源配额和用户层,以此实现各业务云之间资源的物理隔离、权限及业务上的逻辑隔离;各租户下业务云之间的业务网络、管理网络彼此分离,租户通过管理网对其下的平台资源进行统一配置、管理;对于每个指定的业务云,根据业务云不同业务的资源需求(如业务1需2台类型为1虚拟机,属于一个网络1,业务2需3台类型为2的虚拟机),在构建租户下业务网络时,根据不同业务的需要创建各自的业务vlan,指定该网络的子网、网关、IP池;对于云硬盘资源,各业务指定其云硬盘类型创建所需的系统盘、数据盘,在业务虚拟机创建时指定虚拟机的所用系统盘、所属的业务vlan网、虚拟机类型、虚拟机所属的计算集群(对应Openstack的计算域)并挂载相应的数据盘到业务虚拟机,不同业务虚拟机由于分属不同的计算集群下,在不同的业务vlan中,因此不同业务虚拟机间在资源层面上进行了物理隔离,网络层面上进行了数据隔离,不同业务虚拟机间如若要进行网络通信与数据交互,则在OpenStack平台租户下的网络增加路由对象,对所通信的各业务vlan进行路由连接,当大规模用户同时对某一业务云的业务进行业务访问时,本发明应用示例在业务虚拟机部署多个实例,以兼备容灾、提高性能和服务质量,同时平台租户下网络服务提供负载均衡器和安全规则策略,用户指定某业务下虚拟机网络的负载均衡器及其策略,能够合理分发用户的业务请求到业务虚拟机的多个实例上,并通过指定安全策略对进出业务虚拟机的进行流量进行管控,以此提高安全性、降低负载,达到平台业务云稳定、安全、可靠的运营。The application embodiment of the present invention adopts the distributed deployment mode of OpenStack (OpenStack), configures the name and Internet Protocol (IP) address of each physical node of the cloud platform, and adds all physical nodes to the hosts configuration file of each service node. The names and IP addresses of the nodes establish mutual trust and business communication with each other. Each business node is uniformly scheduled and managed by the control cluster. Since each business provides services to each tenant's business cloud in the form of a cluster, if the platform has large user scale, high concurrent access, and frequent business processing, clustering can improve performance, reduce load, and provide disaster tolerance. The platform is based on OpenStack to provide The load balancing strategy reasonably distributes user requests to the corresponding service nodes, so as to ensure the stable and high-performance operation of the platform. Application example of the present invention According to the business requirements (actual resource requirements and functional requirements) of each business cloud, based on the tenants of the OpenStack platform, the enterprise tenants of each business cloud are established, and the resource quota and user layer of each tenant are specified, so as to realize the communication between each business cloud. Physical isolation of resources, permissions and logical isolation of services; the service network and management network between the service clouds under each tenant are separated from each other, and the tenants can configure and manage the platform resources under them through the management network; According to the resource requirements of different services in the service cloud (for example,
本发明应用示例根据不同类型存储设备、网络设备的对接方式,通过OpenStack提供的统一适配驱动代码格式,编写并调用相应的驱动完成各后端设备与云平台的管理对接。The application example of the present invention compiles and calls the corresponding driver to complete the management connection between each back-end device and the cloud platform through the unified adaptation driver code format provided by OpenStack according to the docking methods of different types of storage devices and network devices.
完成云平台的构建后,运营商创建平台运行所需的基础资源(如管理网),并开启服务,为各租户的业务云分配空间配额和根据各租户的业务需求指定资源类型(即所属计算集群、所用云硬盘类型,所用的vlan网络区间等);各租户在通过云平台统一门户进入各自的租户空间后部署虚拟机及其所接云硬盘、所需业务网,并在创建完成的虚拟机上部署发布自己的业务云。After completing the construction of the cloud platform, the operator creates the basic resources (such as the management network) required for the operation of the platform, and starts the service, allocates space quotas for each tenant's business cloud, and specifies the resource type (that is, the computing device belongs to) according to the business needs of each tenant. cluster, the type of cloud hard disk used, the vlan network interval used, etc.); after each tenant enters their own tenant space through the unified portal of the cloud platform, they deploy virtual machines, their connected cloud hard disks, and required service networks, and create virtual machines after they are created. On-board deployment and release of your own business cloud.
本发明应用示例通过上述步骤完成了基于OpenStack的混合业务云平台的构建。本发明应用示例依赖于OpenStack的多租户模式、分布式部署、高融合、高可用等特性对不同的业务云进行资源、业务、数据上的隔离,同时保障云管理平台和各个业务云的稳定运行,降低平台运维的人力投入和成本。本发明应用示例实现了云平台的快速构建和各业务云的部署发布,在保证云平台和各业务云稳定运行的同时,降低了运维人力和成本的投入;基于OpenStack的混合业务云平台的模型,通过该模型能够清晰的了解参与平台运营和使用的各业务对象,平台和各业务云正常运行所牵涉的业务元素和保障机制。The application example of the present invention completes the construction of an OpenStack-based hybrid service cloud platform through the above steps. The application example of the present invention relies on the multi-tenant mode, distributed deployment, high integration, and high availability of OpenStack to isolate resources, services, and data for different business clouds, while ensuring the stable operation of the cloud management platform and each business cloud. , reduce the labor input and cost of platform operation and maintenance. The application example of the present invention realizes the rapid construction of the cloud platform and the deployment and release of each business cloud, and reduces the input of operation and maintenance manpower and cost while ensuring the stable operation of the cloud platform and each business cloud; the hybrid business cloud platform based on OpenStack The model, through which the business objects involved in the operation and use of the platform, the business elements and guarantee mechanisms involved in the normal operation of the platform and each business cloud can be clearly understood.
本领域普通技术人员可以理解上述方法中的全部或部分步骤可通过程序来指令相关硬件(例如处理器)完成,所述程序可以存储于计算机可读存储介质中,如只读存储器、磁盘或光盘等。可选地,上述实施例的全部或部分步骤也可以使用一个或多个集成电路来实现。相应地,上述实施例中的每个模块/单元可以采用硬件的形式实现,例如通过集成电路来实现其相应功能,也可以采用软件功能模块的形式实现,例如通过处理器执行存储于存储器中的程序/指令来实现其相应功能。本发明不限制于任何特定形式的硬件和软件的结合。Those of ordinary skill in the art can understand that all or part of the steps in the above method can be completed by instructing relevant hardware (such as a processor) through a program, and the program can be stored in a computer-readable storage medium, such as a read-only memory, a magnetic disk or an optical disk Wait. Optionally, all or part of the steps in the above embodiments may also be implemented using one or more integrated circuits. Correspondingly, each module/unit in the above-mentioned embodiments can be implemented in the form of hardware, for example, an integrated circuit to implement its corresponding function, or it can be implemented in the form of a software function module, for example, a processor executes a function stored in a memory. program/instruction to achieve its corresponding function. The present invention is not limited to any particular form of combination of hardware and software.
虽然本发明所揭露的实施方式如上,但所述的内容仅为便于理解本发明而采用的实施方式,并非用以限定本发明。任何本发明所属领域内的技术人员,在不脱离本发明所揭露的精神和范围的前提下,可以在实施的形式及细节上进行任何的修改与变化,但本发明的专利保护范围,仍须以所附的权利要求书所界定的范围为准。Although the embodiments disclosed in the present invention are as above, the described contents are only the embodiments adopted to facilitate the understanding of the present invention, and are not intended to limit the present invention. Any person skilled in the art to which the present invention belongs, without departing from the spirit and scope disclosed by the present invention, can make any modifications and changes in the form and details of the implementation, but the scope of the patent protection of the present invention still needs to be The scope defined by the appended claims shall prevail.
Claims (10)
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201810946495.5A CN109040276B (en) | 2018-08-20 | 2018-08-20 | A method, device, computer storage medium and terminal for building a cloud platform |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201810946495.5A CN109040276B (en) | 2018-08-20 | 2018-08-20 | A method, device, computer storage medium and terminal for building a cloud platform |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN109040276A CN109040276A (en) | 2018-12-18 |
| CN109040276B true CN109040276B (en) | 2022-03-22 |
Family
ID=64631401
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201810946495.5A Active CN109040276B (en) | 2018-08-20 | 2018-08-20 | A method, device, computer storage medium and terminal for building a cloud platform |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN109040276B (en) |
Families Citing this family (17)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109670713B (en) * | 2018-12-21 | 2021-04-06 | 杭州数梦工场科技有限公司 | Cloud product service management method, device, equipment and storage medium for cloud management and control platform |
| CN109412876B (en) * | 2018-12-27 | 2022-02-08 | 杭州数梦工场科技有限公司 | Cloud management platform, cloud management method and cloud management system |
| CN109412878A (en) * | 2019-01-16 | 2019-03-01 | 紫光云数科技有限公司 | Multi-tenant service access implementation method, device and electronic equipment |
| CN110324191B (en) * | 2019-07-09 | 2022-08-23 | 西安点告网络科技有限公司 | Hybrid cloud deployment method, device and system |
| CN110535964B (en) * | 2019-09-03 | 2021-12-14 | 北京首都在线科技股份有限公司 | Data processing method and device based on Paas connector |
| CN110365547B (en) * | 2019-09-09 | 2019-12-24 | 数字广东网络建设有限公司 | Method, device and equipment for creating tenant node of multi-level tenant system and computer readable storage medium |
| CN110798354A (en) * | 2019-11-01 | 2020-02-14 | 国云科技股份有限公司 | Multi-cloud-based VDC resource management method |
| CN110932914B (en) * | 2019-12-16 | 2023-04-07 | 深信服科技股份有限公司 | Deployment method, deployment device, hybrid cloud system architecture and computer storage medium |
| CN110913024B (en) * | 2019-12-30 | 2022-02-01 | 中国联合网络通信集团有限公司 | Cloud platform information synchronization method, system, control device and storage medium |
| CN111538592A (en) * | 2020-04-21 | 2020-08-14 | 上海思询信息科技有限公司 | Method for realizing enterprise multi-user resource management by OpenStack single tenant |
| CN111835820A (en) * | 2020-05-21 | 2020-10-27 | 上海灏拓智能科技有限公司 | System and method for realizing cloud management |
| CN113821157B (en) * | 2020-06-18 | 2024-05-24 | 中移(苏州)软件技术有限公司 | Local disk mounting method, device, equipment and storage medium |
| CN114697319B (en) * | 2020-12-30 | 2023-06-16 | 华为云计算技术有限公司 | Tenant service management method and device for public cloud |
| CN112965662B (en) * | 2021-03-03 | 2024-08-30 | 北京金山云网络技术有限公司 | Configuration method and device of cloud server, management server and storage medium |
| CN114528155B (en) * | 2022-02-11 | 2024-12-17 | 联通(广东)产业互联网有限公司 | Disaster recovery method, platform, system, computer equipment and storage medium |
| CN115801775B (en) * | 2022-09-07 | 2025-09-16 | 中国建设银行股份有限公司 | Distributed micro-service platform resource allocation method and device |
| CN119363810A (en) * | 2023-07-24 | 2025-01-24 | 华为云计算技术有限公司 | Service deployment method, cloud management platform and related device |
Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103607430A (en) * | 2013-10-30 | 2014-02-26 | 中兴通讯股份有限公司 | Network processing method and system, and network control center |
| CN106803796A (en) * | 2017-03-05 | 2017-06-06 | 北京工业大学 | Multi-tenant network topology reconstructing method based on cloud platform |
| CN107153565A (en) * | 2016-03-03 | 2017-09-12 | 华为技术有限公司 | Configure the method and its network equipment of resource |
| CN107295008A (en) * | 2017-08-01 | 2017-10-24 | 广东云下汇金科技有限公司 | A kind of connection method for building up under enterprise's mixing cloud computing environment |
| CN108062225A (en) * | 2017-11-27 | 2018-05-22 | 国云科技股份有限公司 | Method for issuing application cluster by multi-template combination |
| CN108173842A (en) * | 2017-12-26 | 2018-06-15 | 国家电网公司 | The disposition optimization method of software definition fire wall based on openstack cloud platforms |
| CN108170520A (en) * | 2018-01-29 | 2018-06-15 | 北京搜狐新媒体信息技术有限公司 | A kind of cloud computing resources management method and device |
| CN108400898A (en) * | 2018-05-30 | 2018-08-14 | 郑州云海信息技术有限公司 | The management method and device of resource in cloud data management platform |
-
2018
- 2018-08-20 CN CN201810946495.5A patent/CN109040276B/en active Active
Patent Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103607430A (en) * | 2013-10-30 | 2014-02-26 | 中兴通讯股份有限公司 | Network processing method and system, and network control center |
| CN107153565A (en) * | 2016-03-03 | 2017-09-12 | 华为技术有限公司 | Configure the method and its network equipment of resource |
| CN106803796A (en) * | 2017-03-05 | 2017-06-06 | 北京工业大学 | Multi-tenant network topology reconstructing method based on cloud platform |
| CN107295008A (en) * | 2017-08-01 | 2017-10-24 | 广东云下汇金科技有限公司 | A kind of connection method for building up under enterprise's mixing cloud computing environment |
| CN108062225A (en) * | 2017-11-27 | 2018-05-22 | 国云科技股份有限公司 | Method for issuing application cluster by multi-template combination |
| CN108173842A (en) * | 2017-12-26 | 2018-06-15 | 国家电网公司 | The disposition optimization method of software definition fire wall based on openstack cloud platforms |
| CN108170520A (en) * | 2018-01-29 | 2018-06-15 | 北京搜狐新媒体信息技术有限公司 | A kind of cloud computing resources management method and device |
| CN108400898A (en) * | 2018-05-30 | 2018-08-14 | 郑州云海信息技术有限公司 | The management method and device of resource in cloud data management platform |
Also Published As
| Publication number | Publication date |
|---|---|
| CN109040276A (en) | 2018-12-18 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN109040276B (en) | A method, device, computer storage medium and terminal for building a cloud platform | |
| US12355637B2 (en) | Virtual network interface objects | |
| US12445419B2 (en) | Metadata customization for virtual private label clouds | |
| US10911528B2 (en) | Managing replication of computing nodes for provided computer networks | |
| US10666609B2 (en) | Management of domain name systems in a large-scale processing environment | |
| US9999030B2 (en) | Resource provisioning method | |
| JP5976942B2 (en) | System and method for providing policy-based data center network automation | |
| CN109194502B (en) | Management method of multi-tenant container cloud computing system | |
| US10333901B1 (en) | Policy based data aggregation | |
| US20250088388A1 (en) | Systems and methods for automated network configurations with a network as a service (naas) system | |
| US20180212788A1 (en) | Multicast helper to link virtual extensible lans | |
| WO2015172362A1 (en) | Network function virtualization network system, data processing method and device | |
| CN106663034A (en) | Migration of applications between an enterprise-based network and a multi-tenant network | |
| US11178218B2 (en) | Bidirectional communication clusters | |
| CN111510310B (en) | Network mode implementation method and device under public cloud architecture | |
| CN103607432A (en) | Network establishment method and system, and network control center | |
| Bastin et al. | The InstaGENI initiative: An architecture for distributed systems and advanced programmable networks | |
| CN116800622B (en) | SDN construction methods, devices, electronic equipment, and storage media based on traditional networks | |
| WO2025010985A1 (en) | Service governance method and apparatus, and computer-readable storage medium | |
| CN102694667A (en) | Method supporting user autonomous deployment of network and system thereof | |
| US20150326505A1 (en) | Logical switch architecture for network virtualization | |
| Kamla et al. | An implementation of software routing for building a private cloud | |
| CN116366689A (en) | Distributed industrial private cloud system | |
| Aznar et al. | OpenNaaS based management solution for inter-data centers connectivity | |
| Thakurratan | Learning VMware NSX |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |