Search

CN-122001755-A - Automatic hosting method and device based on fort machine

CN122001755ACN 122001755 ACN122001755 ACN 122001755ACN-122001755-A

Abstract

The application provides an automatic hosting method and device based on a fort machine, and the method and device comprise the steps of determining configuration information sent to a target fort machine according to types of a plurality of resources to be hosted at the current moment, determining a matching relation between the resources to be hosted and the target fort machine based on analysis of the configuration information, determining a hosting strategy at the current moment according to the matching relation, and hosting the resources to be hosted to the target fort machine in batches based on the hosting strategy. According to the configuration information sent by the plurality of resources to be hosted to the target bastion machine at the current moment and the matching relation between the resources to be hosted and the target bastion machine, a hosting strategy at the current moment is formulated, and the resources to be hosted are hosted to the target bastion machine in batches based on the hosting strategy, so that hosting operation is not required to be directly carried out by logging in the bastion machine to be hosted, the operation and maintenance efficiency is greatly improved, and the operation risk is reduced.

Inventors

  • QI PENGPENG
  • Song Ziruo
  • Mou Qingchao
  • YANG MENG
  • HE TAO

Assignees

  • 网联清算有限公司

Dates

Publication Date
20260508
Application Date
20241108

Claims (10)

  1. 1. An automatic hosting method based on a fort machine is characterized by comprising the following steps: Determining configuration information sent to a target fort machine according to the types of a plurality of resources to be hosted at the current moment; determining a matching relationship between the resource to be hosted and the target fort machine based on analysis of the configuration information; And determining a hosting strategy at the current moment according to the matching relation, and hosting the resources to be hosted to the target fort machine in batches based on the hosting strategy.
  2. 2. The method of claim 1, wherein determining configuration information to be sent to a target fort machine according to types of a plurality of resources to be hosted at a current time comprises: determining the configuration requirement required by each resource to be managed according to the types of a plurality of resources to be managed at the current moment; and formatting the configuration requirements based on the configuration specification of the target fort machine, and determining configuration information sent to the target fort machine.
  3. 3. The method according to claim 2, wherein the determining the configuration requirement required by each resource to be hosted according to the types of the plurality of resources to be hosted at the current moment comprises: Identifying key parameters of each resource to be hosted; And evaluating the key parameters according to the benchmark test standard corresponding to the type, and determining the configuration requirement required by each resource to be managed.
  4. 4. The method of claim 2, wherein the formatting the configuration requirements based on the configuration specification of the target fort machine, determining configuration information to send to the target fort machine, comprises: Formatting the configuration requirements based on the configuration specification of the target fort machine, and acquiring parameter names, parameter values, parameter formats and parameter sequences required by the target fort machine; Acquiring a first middleware based on integrating the parameter name, the parameter value, the parameter format and the parameter sequence; and based on the verification of the first middleware, acquiring a second middleware which is successfully verified, and taking the second middleware as configuration information sent to a target fort machine.
  5. 5. The method of claim 1, wherein the determining a matching relationship of the resource to be hosted and the target fort machine based on the parsing of the configuration information comprises: Analyzing the configuration information according to the manageable resource types of the target fort machine, and acquiring compatibility requirements, performance matching degree and security policies required by the resources to be hosted; And determining the matching relationship between the resource to be hosted and the target fort machine according to the compatibility requirement, the performance matching degree and the security policy.
  6. 6. The method of claim 1, wherein the determining an automated hosting policy for a current time based on the matching relationship comprises: classifying and hierarchically ordering the resources to be managed according to the matching relation to obtain a resource attribute description; And configuring a hosting strategy at the current moment according to the resource attribute description, and determining script files imported in batches based on the hosting strategy.
  7. 7. Automatic hosting device based on fort machine, characterized by comprising: the acquisition module is used for determining configuration information sent to the target fort machine according to the types of a plurality of resources to be hosted at the current moment; the identification module is used for determining the matching relation between the resource to be hosted and the target fort machine based on the analysis of the configuration information; and the authentication module is used for determining a hosting strategy at the current moment according to the matching relation and hosting the resources to be hosted to the target fort machine in batches based on the hosting strategy.
  8. 8. The apparatus of claim 7, wherein the acquisition module is further configured to: determining the configuration requirement required by each resource to be managed according to the types of a plurality of resources to be managed at the current moment; and formatting the configuration requirements based on the configuration specification of the target fort machine, and determining configuration information sent to the target fort machine.
  9. 9. The apparatus of claim 7, wherein the identification module is further configured to: Analyzing the configuration information according to the manageable resource types of the target fort machine, and acquiring compatibility requirements, performance matching degree and security policies required by the resources to be hosted; And determining the matching relationship between the resource to be hosted and the target fort machine according to the compatibility requirement, the performance matching degree and the security policy.
  10. 10. The apparatus of claim 7, wherein the authentication module is further configured to: classifying and hierarchically ordering the resources to be managed according to the matching relation to obtain a resource attribute description; And configuring a hosting strategy at the current moment according to the resource attribute description, and determining script files imported in batches based on the hosting strategy.

Description

Automatic hosting method and device based on fort machine Technical Field The application relates to the technical field of information security design and application, in particular to an automatic hosting method and device based on a fort machine. Background The bastion machine monitors and records the operation behaviors of operation and maintenance personnel on the devices such as servers, network devices, security devices, databases and the like in the network by using various technical means under a specific network environment so as to ensure that the network and the data are not illegally invaded and damaged, thereby facilitating audit management. When the number of the bastion machines exceeds a certain number, the hosting difficulty of the bastion machines is greatly increased due to the difference of brands, machine room distribution, the number of hosted devices, account information and the like of the bastion machines, so that the operation and maintenance cost is increased, the operation risk is increased, and the operation and maintenance efficiency is reduced. It should be noted that the foregoing description of the background art is only for the purpose of providing a clear and complete description of the technical solution of the present application and is presented for the convenience of understanding by those skilled in the art. The above-described solutions are not considered to be known to the person skilled in the art simply because they are set forth in the background of the application section. Disclosure of Invention The embodiment of the application provides an automatic hosting method and device based on a fort machine. An embodiment of a first aspect of the present application provides an automatic hosting method based on a fort machine, including: Determining configuration information sent to a target fort machine according to the types of a plurality of resources to be hosted at the current moment; determining a matching relationship between the resource to be hosted and the target fort machine based on analysis of the configuration information; And determining a hosting strategy at the current moment according to the matching relation, and hosting the resources to be hosted to the target fort machine in batches based on the hosting strategy. An embodiment of a second aspect of the present application provides an automatic hosting device based on a fort machine, including: the acquisition module is used for determining configuration information sent to the target fort machine according to the types of a plurality of resources to be hosted at the current moment; the identification module is used for determining the matching relation between the resource to be hosted and the target fort machine based on the analysis of the configuration information; and the authentication module is used for determining a hosting strategy at the current moment according to the matching relation and hosting the resources to be hosted to the target fort machine in batches based on the hosting strategy. An embodiment of a third aspect of the present application provides an electronic device, including a processor, and a memory for storing instructions executable by the processor, where the processor is configured to execute the instructions to implement the automatic hosting method based on the bastion machine according to the embodiment of the first aspect of the present application. An embodiment of a fourth aspect of the present application proposes a non-transitory computer readable storage medium, which when executed by a processor of an electronic device, enables the electronic device to perform the method proposed by the embodiment of the first aspect of the present application. An embodiment of the fifth aspect of the present application proposes a computer program product comprising a computer program which, when executed by a processor in a communication device, implements the method proposed by the embodiment of the first aspect of the present application. The technical scheme provided by the embodiment of the application at least has the following beneficial effects: According to the configuration information sent by the plurality of resources to be hosted to the target bastion machine at the current moment and the matching relation between the resources to be hosted and the target bastion machine, a hosting strategy at the current moment is formulated, and the resources to be hosted are hosted to the target bastion machine in batches based on the hosting strategy, so that hosting operation is not required to be directly carried out by logging in the bastion machine to be hosted, the operation and maintenance efficiency is greatly improved, and the operation risk is reduced. It is to be understood that both the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the application as claimed. Drawings The foregoi