CN103475722B - A kind of business cooperation platform realizes system - Google Patents

Abstract

The invention discloses a system for realizing a service collaboration platform, which relates to the field of information technology, and can integrate equipment from different manufacturers to realize end-to-end management and centralized control of services across different equipment manufacturers. In the embodiment of the present invention, the resource management layer equipment is used to count the network resources in the network domain controlled by the software-defined network SDN controllers of different equipment manufacturers, and to count the IT equipment of each information technology IT manufacturer in the data center network and the IT equipment of different equipment manufacturers. Computing resources and auxiliary resources of the SDN controller, and send the statistical resource information to the core function layer device; the core function layer device is used to summarize the received resource information, guide and manage the summarized resource information, and Resources and affiliated resources are bound to corresponding network resources; system integration layer devices are used to complete user management and realize the functions of interacting with users. The solutions provided by the embodiments of the present invention are applicable to business collaboration platforms.

Description

A Realization System of Business Collaboration Platform

technical field

The invention relates to the field of information technology, in particular to a system for realizing a business collaboration platform.

Background technique

In recent years, the data center network has been vigorously developed at home and abroad, and the construction of the interconnection network between multiple data centers through the telecommunications backbone network has become an important trend in the future network evolution. The current data center connection often lacks a business collaboration mechanism. The emergence of software-defined network (Software Defined Network, SDN) makes it possible to achieve business collaboration through centralized control. The software-defined network is a new type of network architecture, which can separate the control plane of the network from the data forwarding plane, that is, the data forwarding plane is a controlled forwarding device, and the forwarding and business logic are controlled by the separated control plane. Wherein, the control protocol is the open flow protocol. The business collaboration platform is designed to manage multiple controllers and centralize functional modules such as algorithm, calculation, control, and delivery.

For SDN-based networks, equipment manufacturers need to develop switches and routers that support protocols such as Openflow, and at the same time develop SDN controllers that can manage multiple devices. The controller and devices communicate through the Openflow protocol to complete such as control information distribution and routing establishment. , link resource management and other functions. On the SDN controllers of different equipment manufacturers, it is also necessary to build a service collaborative management platform to complete the end-to-end management of services across different equipment manufacturers. However, the existing technology lacks the ability to coordinate business scheduling, it is difficult to integrate equipment from various manufacturers, and it is impossible to complete end-to-end management of services across different equipment manufacturers.

Contents of the invention

Embodiments of the present invention provide a system for implementing a service collaboration platform, which can integrate devices from different manufacturers to realize end-to-end management and centralized control of services across different device manufacturers.

The embodiment of the present invention provides a business collaboration platform implementation system, including: resource management layer equipment, core function layer equipment and system integration layer equipment;

The resource management layer device is located in the resource management layer, and is used to count network resources in the network domain controlled by software-defined network SDN controllers of different device manufacturers, and to count the IT equipment and all information technology IT manufacturers in the data center network. Describe the computing resources and auxiliary resources of the SDN controllers of different equipment manufacturers, and send the statistical resource information to the core function layer equipment;

The core function layer device is located at the core function layer, and is used to summarize the received resource information, guide and manage the summarized resource information, and connect the virtual resources and the attached resources to the corresponding network resource binding;

The system integration layer device is located at the system integration layer and is used to complete user management and realize functions of interacting with users.

An embodiment of the present invention provides a system for implementing a business collaboration platform, including resource management layer equipment, core function layer equipment, and system integration layer equipment. Among them, the resource management device counts the resource information of the entire network and reports it to the core function layer. The core function layer device resummarizes the resource information, binds each resource with the corresponding network resource, and allocates resources for cross-domain services or formulates Computing strategy, system integration layer equipment completes user management and user interaction functions, lacks the ability to coordinate business scheduling with the existing technology, it is difficult to integrate equipment from various manufacturers, and cannot complete end-to-end services when services span different equipment manufacturers Compared with end-to-end management, the solution provided by the embodiment of the present invention can connect devices from different manufacturers through the resource management layer, integrate devices from different manufacturers, and realize end-to-end management when services cross different device manufacturers through the core function layer and centralized control.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only These are some embodiments of the present invention. For those skilled in the art, other drawings can also be obtained according to these drawings without any creative effort.

FIG. 1 is a schematic diagram of a business collaboration platform implementation system provided by an embodiment of the present invention;

Fig. 2 is a schematic diagram of another implementation system of a business collaboration platform provided by another embodiment of the present invention.

detailed description

The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some, not all, embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without creative efforts fall within the protection scope of the present invention.

An embodiment of the present invention provides a system for implementing a business collaboration platform. As shown in FIG. 1 , the system includes a resource management layer device 101 , a core function layer device 102 and a system integration layer device 103 .

The resource management layer device 101 is located in the resource management layer, and is used for counting network resources in the network domain controlled by software-defined network (Soft Defined network, SDN) controllers of different device manufacturers, and counting information technologies in the data center network. (Information Technology, IT) computing resources and auxiliary resources of the IT equipment of the manufacturer and the SDN controllers of the different equipment manufacturers, and send the statistical resource information to the core function layer device 102;

Optionally, the resource management layer is used to abstract resources, that is, to abstract network resources, computing resources, and subsidiary resources. Among them, network resources may include bandwidth resources of bandwidth usage, routing information resources, etc. Computing resources include SDN controllers and computing resources of IT equipment of each IT manufacturer in the data center network, as well as virtual machines of each IT manufacturer in the data center network Accessory resources include resources fed back by devices that implement firewalls, link load balancing, and deep packet inspection.

Optionally, SDN is a new type of network architecture, and its design concept is to separate the control plane of the network from the data forwarding plane, thereby realizing flexible control of network traffic. SDN includes the following basic features: First, control and forwarding are separated; the data forwarding plane is a controlled forwarding device, and data forwarding and business logic are controlled by the separated control plane. The core control protocol of the control plane is the Openflow protocol. Among them, the business logic refers to the relationship between businesses, for example, the relationship between businesses can be inclusion, subordination, and equality. For example, A and B are two services, and they have an equal relationship. When A and B communicate, they need to make a service request and confirmation between the two. For example, A initiates a service request, and B sends a request to A. Send confirmation. The equal relationship between A and B is controlled on the control plane, and the data forwarding plane only transmits service request and confirmation data packets. Second, it is logically centralized control; the control plane of a single network element is separated and unified into a control plane independent of equipment, so it can have network-level status and optimize processing according to the global network status. Third, an open application programming interface (Application Programming Interface, API); provides an interface for network resource operations for applications. Through the API interface, the application layer of SDN can inform the network how to run to better meet the requirements of business bandwidth, delay, Billing and other needs.

The SDN controller can manage multiple devices. For example, the SDN controller can manage switches, routers, and other devices in the network domain it controls. The switches, routers, and other devices support the Openflow protocol. The SDN controller communicates with the switches, routers and other devices in the network domain it controls through the Openflow protocol to complete functions such as control information delivery, route establishment, and link resource management.

A data center is a complete set of complex facilities. It not only includes computer systems and supporting equipment, such as communication and storage systems, but also includes data communication connections, environmental control equipment, monitoring equipment, and various security devices. The data center network has been vigorously developed at home and abroad. It has become an important trend in the future network evolution to build an interconnection network between multiple data centers through the telecommunications backbone network.

The core function layer device 102 is at the core function layer, and is used for summarizing the received resource information, channeling and managing the summarized resource information, and linking the virtual resources and the subsidiary resources with the corresponding Network resource binding;

The core function layer summarizes the abstracted resources of the resource management layer, so as to allocate them according to the actual needs of the business, so as to provide a set of end-to-end intelligent control, where "end" refers to the terminal of the network, such as the SDN control of different equipment manufacturers Devices such as routers and switches managed by the server.

Optionally, the core function layer device 102 may re-summarize the received resource information to form a resource pool, that is, the resource pool includes network resources, computing resources, and auxiliary resources abstracted by the resource management layer.

The system integration layer device 103 is at the system integration layer, and is used to complete user management and realize functions of interacting with users.

Optionally, the system integration layer mainly completes user management and interaction functions, for example, user management, creation and deletion of user information for new users, and so on. This layer can also bind and unbind users with the network resources they can view/modify. Different users can have different permissions. After corresponding users with operable network resources, the current user can only operate and corresponding network resources.

The embodiment of the present invention provides a business collaboration platform implementation system, which uses resource management equipment to count network resources in the network domain controlled by software-defined network SDN controllers of different equipment manufacturers, and counts the IT equipment of each IT manufacturer in the data center network and the computing resources and auxiliary resources of the SDN controllers of the different equipment manufacturers, and send the statistical resource information to the core function layer device; the core function layer device summarizes the received resource information, and The aggregated resource information is channeled and managed, and the virtual resources and the attached resources are bound to the corresponding network resources; the system integration layer device is at the system integration layer, and is used to complete user management and realize interaction with users functions, so that the solution provided by this embodiment can integrate equipment from various manufacturers, and realize end-to-end management and centralized control when services span different equipment manufacturers.

The embodiment of the present invention provides a system for implementing a business collaboration platform. As shown in FIG. 2 , the system includes: a resource management layer device 201, a core function layer device 202, and a system integration layer device 203;

The resource management layer device 201 is in the resource management layer, and is used to count network resources in the network domain controlled by software-defined network SDN controllers of different device manufacturers, and to count the IT devices of each IT manufacturer in the data center network and the The computing resources and subsidiary resources of the SDN controllers of different equipment manufacturers, and send the statistical resource information to the core function layer equipment 202 .

Further optionally, as shown in FIG. 2, the resource management layer device 201 includes a network resource abstraction module 2011, a computing resource abstraction module 2012, and an auxiliary resource abstraction module 2013;

Specifically, the network resource abstraction module 2011 is configured to collect statistics on the device information collected by the SDN controllers of the different device manufacturers and the network resource information of the network domains controlled by the SDN controllers of the different device manufacturers.

It should be noted that the SDN controllers of the different equipment manufacturers are connected to the resource management layer. As shown in Figure 2, SDN controller A, SDN controller B, and SDN controller C are connected to the resource management layer, and the network resource abstraction module 2011 can abstract the network domain controlled by SDN controller A and the network controlled by SDN controller B The domain and the network domain controlled by the SDN controller C use new types of bandwidth, routing information, and protection policies. In addition, the network resource abstraction module 2011 is also used to summarize the information of different devices collected by the SDN controller. Here, different devices include the SDN controller Devices, routers, switches and other equipment in the network controlled by SDN controllers, as well as IT equipment from different equipment manufacturers, different equipment information refers to the equipment brand information, control software version number, function and importance in the network, etc. of the above equipment.

The computing resource abstraction module 2012 is configured to count the computing capability information and virtual resources of the virtual machines of each IT manufacturer in the data center network, and count the information of each node in the network domain controlled by the SDN controllers of the different equipment manufacturers. Computing capability information to obtain computing resources;

Optionally, the computing resource abstraction module 2012 can extract the node computing capability information of each computing node in the network domain controlled by SDN controller A, the network domain controlled by SDN controller B, and the network domain controlled by SDN controller C, and the data center The CPU capabilities and virtual resources of the IT equipment of each IT manufacturer in the network. Optionally, the virtual resources refer to the resources owned by the virtual machine, because the virtual machine is the memory, hard disk space, CPU processing power and other resources owned by the physical equipment. After segmentation, a device that can perform operation control is virtualized for each resource, and the virtual resources of the virtual machine are resources after these resources are segmented. For example, if a computer originally has 4G of memory, and four virtual machines are installed on this computer to run simultaneously and equally, then the virtual memory resource of each virtual machine is 1G.

The subsidiary resource abstraction module 2013 is used to count the IT equipment of each IT manufacturer in the data center network and the subsidiary resources of each node in the network domain controlled by the SDN controllers of the different equipment manufacturers, except for the virtual resources. resources, and the auxiliary resources at least include resources for implementing firewall, link load balancing, and device feedback for deep packet inspection.

Optionally, the auxiliary resources mainly refer to resources of IT devices that implement functions such as firewalls, link load balancing, and deep packet inspection.

Further optionally, after the resource management layer abstracts resources, store statistical resource information in a database in units of devices, that is, abstract the network resource abstraction module, the computing resource abstraction module, and the attached resource abstraction The module stores the statistical resource information of the entire network in the database in units of devices. For example, the database stores the device information and resource information of device A. The device information includes device name, brand and other information, and the resource information includes device A’s memory aG, CPU resource bG, bandwidth information, routing information, computing and processing capabilities, firewall information, etc. .

The resource information stored in the database is open to the core function layer, so that the core function layer devices of the core function layer perform calculations using the resource information in the database as input data.

The core function layer device 202 is at the core function layer, and is used for summarizing the received resource information, channeling and managing the summarized resource information, and linking the virtual resources and the subsidiary resources with the corresponding Network resource binding.

The core function layer device 202 includes a resource pooling and allocation module 2021 , a cross-domain network configuration module 2022 , a computing resource domain network resource binding module 2023 and an auxiliary resource and network resource binding module 2024 .

The resource pooling and allocation module 2021 is configured to summarize the resource information sent by the resource management layer device and store it in different databases, so as to allocate resources to cross-domain services across the entire network;

Optionally, the resource pooling and allocation module 2021 re-summarizes resource information to form a resource pool, so as to allocate resources uniformly. The summary process is the process of inputting the resource information counted by the resource management layer into the database of the core function layer. The forms of the resource management layer and the database of the core function layer are different. The resource management layer summarizes resources in units of equipment. , and at the core function layer, the resource information is summarized according to the needs of the algorithm implementation, that is, the bandwidth information, routing information, computing and processing capabilities, and firewall information of all devices are stored separately.

Optionally, the received resource information stored in units of devices is aggregated into resource information in units of different resources, and different resource information is stored in different databases, and the different databases include: bandwidth information database, routing An information database, a computing processing capability database, a firewall information database, and a link load information database.

The cross-domain network configuration module 2022 is used to guide and manage resources required by cross-domain services;

Optionally, the network domains controlled by the SDN controllers of different equipment manufacturers can be understood as different networks composed of equipment from different equipment manufacturers. The management of the network domains controlled by the SDN controllers of different equipment manufacturers is the management of cross-domain services. Executive management.

The computing resource and network resource binding module 2023 is configured to bind the computing resource and the network resource on which the computing resource is deployed, and when the virtual machine in the data center is migrated, the computing resource responds to the After the instruction of virtual machine migration, correspondingly migrate the network resources, so that the computing resources match the network resources;

Optionally, the computing resource and network resource binding module 2023 is mainly used in the scenario of network policy migration after the virtual machine in the data center is migrated, to ensure that after the computing resource responds to the virtual machine migration instruction, the network resources corresponding to the computing resource, such as Resources such as bandwidth and routing can be migrated quickly and accordingly, matching computing resources with network resources, and enabling virtual machines that process business applications to provide better services. Optionally, the network policy refers to a reconfiguration method such as the IP address and routing mode of the migrated virtual machine after the virtual machine is migrated.

The accessory resource and network resource binding module 2024 is configured to bind the accessory resource to the network resource on which the accessory resource is deployed, and when the internal virtual machine in the data center is migrated, the accessory resource responds to the After the virtual machine migration instruction is executed, the network resources are migrated accordingly, so that the auxiliary resources match the network resources.

Further optionally, as shown in FIG. 2, an algorithm reconstruction module 204 is also included outside the business collaboration platform implementation system;

The core function layer device 202 is connected to an algorithm reconstruction module 204 outside the core function layer, and the algorithm reconstruction module 204 is used to provide a specific calculation algorithm for the core function layer device to realize the core The function or calculation of the functional layer obtains the network optimization strategy. Optionally, the algorithm reconstruction module 204 includes all algorithms from simple to complex routing algorithms, resource allocation algorithms, etc., and the algorithm can be upgraded by replacing software program instructions, and the whole process is not perceived by other layers. Various algorithms in the algorithm reconstruction module 204 can only be called by the core function layer to realize algorithm functions.

It should be noted that the core functional layer finally takes various resource information stored in the database by the resource management device as input, and combines various algorithms and cross-domain resource allocation methods included in the external algorithm reconstruction module 204 to obtain the network The optimized output can be calculated to obtain the optimization strategy.

The system integration layer device 203 is at the system integration layer, and is used to complete user management and realize functions of interacting with users.

Further optionally, as shown in FIG. 2, the system integration layer device 203 includes a user management module 2031, a user cloud resource binding and release module 2032, and a resource monitoring and alarm management module 2033;

The user management module 2031 is used to manage user information of all registered users, including creating user information or deleting user information. That is, the user management module 2031 is responsible for the management of user-related information, which can be understood as security management in network management. For example, if a new user needs to use the system, he must first register, and then he can use the system after being verified by the system administrator. The new user can obtain the permission to view the network information in the system or to modify the network configuration of the system. Among them, different users can view different network information in the system or perform different operations on the system according to their different rights.

The user cloud resource binding and unbinding module 2032 is configured to bind or unbind the user information with the management resources that can be operated within the scope of the user's authority. That is, the user cloud resource binding and unbinding module 2032 is mainly responsible for associating and uncorresponding the user information with the network information that can be viewed or the network configuration that can be modified. After the corresponding relationship is established, the user can only view or modify its corresponding management resources.

The resource monitoring and alarming module 2033 is configured to monitor the resource information of the resource pool, and give an alarm when the resources in the resource pool are not enough for allocation or the network fails.

Further optionally, as shown in FIG. 2, a management view module 205 is also included outside the business collaboration platform implementation system;

The system integration layer device 203 is connected to the external management view module 205 of the system integration layer;

The management view module 205 is used to provide a visual interface for user operations, and display real-time information and optimization strategies calculated by the core function layer equipment, so that users such as network managers can finally understand the SDN control of different equipment manufacturers The network conditions of the network domain controlled by the controller can be configured accordingly.

For example, the above-mentioned alarm is displayed on the management view module 205, so as to attract the attention of network operators.

Optionally, different service flows in the network have corresponding flow identity numbers (Identity, ID). For cross-domain services, the system integration layer manages different service flows by distinguishing IDs, for example, services with different IDs The flow is a different item displayed in the management view module, and the user can find all the information of the business flow of the ID by clicking the corresponding item.

Further optionally, when the user management module 2031 receives registration information of a new user, the user management module 2031 sends the registration information to the user cloud resource binding and release module 2032;

The user cloud resource binding and releasing module 2032 receives the registration information, allocates management resources for the new user according to the registration information, and sends the registration information and corresponding management resource information to the user management module 2031 And the resource monitoring and alarm management module 2033;

The user management module 2031 is configured to display management resource information corresponding to the new user when the new user logs in;

The resource monitoring and alarm management module 2033 is configured to display reminder information through the management view module when resources within the management range of the new user are insufficient, and the reminder information is used to provide insufficient resources.

The embodiment of the present invention provides a system for implementing a business collaboration platform, which is composed of a resource management layer, a core function layer, and a system integration layer. Summarize the abstracted resources of the resource management layer to form a resource pool, enabling resource pooling and allocation, cross-domain network configuration, resource binding, etc., providing a solution for resource collaboration and resource pooling, through the system integration layer The equipment completes user management, so that the network conditions of the system can be monitored, and configuration can be performed according to the optimization strategy calculated by the core function layer. End-to-end management and centralized control of different equipment manufacturers.

It should be noted that the device embodiments described above are only illustrative, and the units described as separate components may or may not be physically separated, and the components shown as units may or may not be physically separated. A unit can be located in one place, or it can be distributed to multiple network units. Part or all of the modules can be selected according to actual needs to achieve the purpose of the solution of this embodiment. It can be understood and implemented by those skilled in the art without creative effort.

Through the description of the above embodiments, those skilled in the art can clearly understand that the present invention can be realized by means of software plus necessary general-purpose hardware. However, in many cases, the former is a better implementation. Based on this understanding, the essence of the technical solution of the present invention or the part that contributes to the prior art can be embodied in the form of a software product, and the computer software product is stored in a readable storage medium, such as a floppy disk of a computer , U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), magnetic disk or optical disk, etc., including several instructions to make a computer device (which can be personal computer, server, or network equipment, etc.) to execute the methods described in various embodiments of the present invention.

Each embodiment in this specification is described in a progressive manner, the same and similar parts of each embodiment can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the device and system embodiments, since they are basically similar to the method embodiments, the description is relatively simple, and for relevant parts, refer to part of the description of the method embodiments.

The above is only a specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Anyone skilled in the art can easily think of changes or substitutions within the technical scope disclosed in the present invention. Should be covered within the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the protection scope of the claims.

Claims (9)

1. A business collaboration platform realization system, is characterized in that, comprises: resource management layer equipment, core function layer equipment and system integration layer equipment; The resource management layer device is located in the resource management layer, and is used to count network resources in the network domain controlled by software-defined network SDN controllers of different device manufacturers, and to count the IT equipment and all information technology IT manufacturers in the data center network. Describe the computing resources and auxiliary resources of the SDN controllers of different equipment manufacturers, and send the statistical resource information to the core function layer equipment; The core function layer device is located at the core function layer, and is used to summarize the received resource information, guide and manage the summarized resource information, and bind virtual resources and the attached resources to corresponding network resources Certainly; The system integration layer device is located at the system integration layer and is used to complete user management and realize functions of interacting with users; Wherein, the resource management layer device includes a network resource abstraction module, a computing resource abstraction module and an auxiliary resource abstraction module; The network resource abstraction module is used to count the device information collected by the SDN controllers of the different device manufacturers and the network resource information of the network domains controlled by the SDN controllers of the different device manufacturers; The computing resource abstraction module is used for counting the computing capability information and virtual resources of the virtual machines of each IT manufacturer in the data center network, and counting the calculation of each node in the network domain controlled by the SDN controllers of the different equipment manufacturers Capability information, access to computing resources; The subsidiary resource abstraction module is used to count the IT equipment of each IT manufacturer in the data center network and the subsidiary resources of each node in the network domain controlled by the SDN controllers of the different equipment manufacturers except the virtual resources , the auxiliary resources at least include resources for implementing firewall, link load balancing, and device feedback for deep packet inspection. 2. The system of claim 1, wherein: The network resource abstraction module, the computing resource abstraction module, and the affiliated resource abstraction module store the statistical resource information of the entire network in a database; Resource information stored in different databases is open to the core function layer, so that the core function layer devices of the core function layer perform calculations using the resource information in the different databases as input data. 3. The system according to claim 2, wherein the network resource abstraction module, the computing resource abstraction module, and the affiliated resource abstraction module store statistical resource information of the entire network in a database, including: The network resource abstraction module, the computing resource abstraction module and the auxiliary resource abstraction module store the statistical resource information of the whole network in the database in units of devices. 4. The system according to any one of claims 1-3, characterized in that, The core function layer device includes a resource pooling and allocation module, a cross-domain network configuration module, a computing resource domain network resource binding module, and an auxiliary resource and network resource binding module; The resource pooling and allocation module is configured to summarize the resource information sent by the resource management layer device and store it in different databases, so as to allocate resources to cross-domain services across the entire network; The cross-domain network configuration module is used to guide and manage resources required by cross-domain services; The computing resource and network resource binding module is configured to bind the computing resource and the network resource on which the computing resource is deployed, and when the virtual machine in the data center is migrated, the computing resource responds to the virtual After the computer migration instruction, migrate the network resources accordingly, so that the computing resources match the network resources; The accessory resource and network resource binding module is configured to bind the accessory resource to the network resource on which the accessory resource is deployed, and when the internal virtual machine in the data center is migrated, the accessory resource responds to the After the virtual machine is instructed to migrate, the network resources are migrated accordingly, so that the attached resources match the network resources. 5. The system according to claim 4, wherein the resource information sent by the resource management layer device is summarized and stored in different databases, including: Summarize the received resource information stored in units of devices into resource information in units of different resources, and store different resource information in different databases, the different databases include: bandwidth information database, routing information database, computing Processing capacity database, firewall information database, and link load information database. 6. The system of claim 4, wherein: The core function layer device is connected to an algorithm reconstruction module outside the core function layer, and the algorithm reconstruction module is used to provide a specific calculation algorithm for the core function layer device to realize the core function layer Functions or calculations to obtain network optimization strategies. 7. The system of claim 6, wherein: The system integration layer device includes a user management module, a user cloud resource binding and release module, and a resource monitoring and alarm management module; The user management module is used to manage user information of all registered users, including creating user information or deleting user information; The user cloud resource binding and unbinding module is used to bind or unbind the user information with the management resources that can be operated within the scope of the user's authority; The resource monitoring and alarming module is used to monitor the resource information, and give an alarm when the resources are not enough to allocate or the network fails. 8. The system of claim 7, wherein: The system integration layer device is connected to the external management view module of the system integration layer; The management view module is used to provide a visual interface for user operations, and display real-time information and optimization strategies calculated by the core function layer device. 9. The system according to claim 7 or 8, characterized in that, When the user management module receives registration information of a new user, the user management module sends the registration information to the user cloud resource binding and release module; The user cloud resource binding and releasing module receives the registration information, allocates management resources for the new user according to the registration information, and sends the registration information and corresponding management resource information to the user management module and the Describe the resource monitoring and alarm management module; The user management module is configured to display management resource information corresponding to the new user when the new user logs in; The resource monitoring and alarm management module is configured to display reminder information through the management view module when the resources within the management scope of the new user are insufficient, and the reminder information is used to provide resource shortage.