CN111371752A - Remote monitoring method, device, equipment and medium for server - Google Patents

Abstract

The invention discloses a remote monitoring method for a server, comprising: establishing a connection with a client, judging whether the request information sent by the client for establishing a remote access connection with the server and performing control is received; The stored permission information corresponding to each client is used to determine whether the request information meets the permission requirements; if not, the client is prevented from accessing the server. It can be seen that by judging whether the request information proposed by the client meets the permission requirements of the remote access server, it is ensured that only the request information that meets the permission requirements can remotely control the server normally, avoiding the situation of unauthorized access; ensuring remote access and control of the server The safety and stability of the process can better meet the needs of users. In addition, a remote monitoring device, device and storage medium for a server provided by the present invention correspond to the above method.

Description

A remote monitoring method, device, equipment and medium for a server

technical field

The present invention relates to the technical field of server access, in particular to a remote monitoring method, device, device and medium for a server.

Background technique

With the rapid development of computer technology, the requirements for the performance of servers are becoming more and more strict. BMC is a baseboard management controller applied to the server motherboard. Through this remote management card, administrators can connect to the server remotely, monitor the server through a browser, and check the health of key components such as processors, power supplies, and fans. Status, such as voltage, fan speed, temperature, etc., to know the working status of the server in time, and estimate the risk. In order to reduce the difficulty and cost of server management, remote monitoring of servers is often performed at present.

In the prior art, in order to realize remote monitoring of various working states of the server, the client is accessed by logging in, and then a communication connection is established with the BMC applied to the server motherboard. It allows administrators to control the server remotely without being in the computer room, including chip-level operations such as BIOS settings and configuration arrays. The control of the server is like controlling the local computer, which is intuitive and convenient.

However, according to the remote monitoring method in the prior art, any visitor is allowed to access and operate, which may easily lead to unauthorized manipulation of the server, reduce the security of remote monitoring of the server, and cause poor user experience. Therefore, it is an urgent problem to provide a method for remotely monitoring the server according to the user's access authority.

SUMMARY OF THE INVENTION

The purpose of the present invention is to provide a remote monitoring method, device, device and medium for a server. It can realize that before the server establishes a remote access connection, the client will judge whether the request information from the client meets the permission requirements of the remote access server, so as to ensure that only the request information that meets the permission requirements can remotely control the server normally, avoiding the situation of unauthorized access. ; Ensure the security and stability of the remote access and control server process, and can better meet the needs of users.

In order to solve the above-mentioned technical problems, the present invention provides a remote monitoring method for a server, including:

Establishing a connection with each client, and judging whether the request information sent by the client for establishing a remote access connection with the server and performing manipulation is received;

If received, according to the pre-stored permission information corresponding to each client, determine whether the request information meets the permission requirements;

If not, the client is blocked from accessing the server.

Preferably, according to the pre-stored permission information corresponding to each client, determining whether the request information meets the permission requirements specifically includes:

Obtain the client IP and access task information contained in the request information;

According to the permission information, determine whether the client IP has the access permission corresponding to the access task information;

If yes, it means that the request information meets the permission requirements;

If not, it means that the request information does not meet the permission requirement.

Preferably, the client is specifically a KVM client.

Preferably, the request information is specifically encrypted information encrypted by the HTTPS algorithm.

Preferably, it also includes:

According to the received update information, the permission information is added or deleted.

Preferably, it also includes:

When the request information does not meet the permission requirement, send feedback information indicating that the request fails to the client that sent the request information.

Preferably, it also includes:

Record the number of times that the request information sent by each client does not meet the permission requirement;

When the number of times reaches a preset number of alarms, abnormal information is generated to give an alarm prompt.

In order to solve the above technical problems, the present invention also provides a remote monitoring device for a server, including:

The first judgment module is used to establish a connection with the client, and judge whether to receive the request information sent by the client to establish a remote access connection with the server and perform manipulation; if received, enter the second judgment module;

The second judgment module is configured to judge whether the request information meets the authority requirement according to the pre-stored authority information corresponding to each client; if it does not meet the authority requirement, enter the blocking access module;

An access blocking module, configured to prevent the client from accessing the server.

In order to solve the above technical problems, the present invention also provides a remote monitoring device for a server, including a memory for storing computer programs;

The processor is configured to implement the steps of the remote monitoring method for a server according to any one of the above when executing the computer program.

In order to solve the above technical problems, the present invention also provides a computer-readable storage medium, where a computer program is stored on the computer-readable storage medium, and when the computer program is executed by a processor, the server described in any of the above is implemented The steps of the remote monitoring method.

A remote monitoring method for a server provided by the present invention includes: establishing a connection with a client, and judging whether the request information sent by the client for establishing a remote access connection with the server and performing control is received; if received, according to The pre-stored permission information corresponding to each client is used to determine whether the request information meets the permission requirements; if not, the client is prevented from accessing the server. It can be seen that before the server establishes a remote access connection, the client will judge whether the request information from the client meets the permission requirements of the remote access server, so as to ensure that only the request information that meets the permission requirements can remotely control the server normally, avoiding the occurrence of unauthorized access. It ensures the security and stability of the remote access and control server process, and can better meet the needs of users.

In addition, the remote monitoring device, device and storage medium of a server provided by the present invention correspond to the above method and have the same beneficial effects.

Description of drawings

In order to explain the embodiments of the present invention more clearly, the following will briefly introduce the accompanying drawings that need to be used in the embodiments. Obviously, the accompanying drawings in the following description are only some embodiments of the present invention, which are not relevant to ordinary skills in the art. As far as personnel are concerned, other drawings can also be obtained from these drawings on the premise of no creative work.

1 is a flowchart of a remote monitoring method for a server provided by an embodiment of the present invention;

2 is a flowchart of another remote monitoring method for a server provided by an embodiment of the present invention;

3 is a structural diagram of a remote monitoring device for a server according to an embodiment of the present invention;

FIG. 4 is a structural diagram of a remote monitoring device for a server according to an embodiment of the present invention.

Detailed ways

The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, but not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative work fall within the protection scope of the present invention.

The core of the present invention is to provide a remote monitoring method, device, device and medium for a server. It can realize that before the server establishes a remote access connection, the client will judge whether the request information from the client meets the permission requirements of the remote access server, so as to ensure that only the request information that meets the permission requirements can remotely control the server normally, avoiding the situation of unauthorized access. ; Ensure the security and stability of the remote access and control server process, and can better meet the needs of users.

In order to make those skilled in the art better understand the solution of the present invention, the present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments.

FIG. 1 is a flowchart of a remote monitoring method for a server provided by an embodiment of the present invention; as shown in FIG. 1 , a remote monitoring method for a server provided by an embodiment of the present invention includes steps S101-S103:

Step S101: establish a connection with the client, and determine whether the request information sent by the client for establishing a remote access connection with the server and performing manipulation is received; if received, proceed to step S102;

In one embodiment, the BMC applied to the server motherboard establishes a communication connection with each client in advance. In a specific implementation, the client is specifically a KVM client. Customers can log in to the KVM client through HTML5 (Hyper Text Markup Language 5th Generation Version), and control the client to send information to the BMC.

In a specific implementation, when a client wants to access the server and perform operations, he can log in to the KVM client through HTML5 and send request information for establishing a remote access connection with the server and performing manipulations to the BMC. In one embodiment, the request information is specifically encrypted information encrypted by the HTTPS algorithm.

Step S102: According to the pre-stored permission information corresponding to each client, determine whether the request information meets the permission requirements; if not, proceed to step S103;

Step S103: Prevent the client from accessing the server.

After receiving the request information sent by the client, it can be determined whether the request information meets the permission requirement according to the pre-stored permission information corresponding to each client. It should be noted that a configuration file can be preset and stored in the BMC, and the configuration file contains permission information that each client can access and manipulate the server. By checking the permission information in the configuration file, you can clearly determine whether the user corresponding to the client currently sending the request information has the corresponding operation authority for the request information. The operation corresponding to the request information; if the authority information does not record that the client has the corresponding operation authority for the request information to the user corresponding to the device, it means that the request information does not meet the authority requirements, and the client sending the request information should be prevented from accessing the server. Specifically, a configuration file can be set for the BMC in advance through the IPMI instruction, and the permission information is stored accordingly.

In one embodiment, according to pre-stored permission information corresponding to each client, determining whether the request information meets the permission requirements specifically includes:

Obtain the client IP and access task information contained in the request information;

According to the permission information, determine whether the client IP has the access permission corresponding to the access task information;

If yes, it means that the requested information meets the permission requirements;

If not, the requested information does not meet the permission requirements.

Specifically, the request information includes the client IP and access task information used to indicate the content of the operation task requested to be performed on the server. In a specific implementation, each client IP and authority information including access authority corresponding to each client IP are preset in the configuration file stored by the BMC. After receiving the request information, the client IP and access task information contained in the request information can be obtained, the access authority corresponding to the client IP can be obtained in the permission information, and it can be judged whether the client IP has the corresponding access in the access task information. permission, if yes, it means that the server allows the client to perform the access operation in the request information, and the request information meets the permission requirements; if not, it means that the client does not have the permission to perform the access operation in the request information, and the request information does not It meets the permission requirements and is an unauthorized operation.

In another embodiment, the request information may also be information including client IP, access task information, and client identification. A client ID can only correspond to one client IP. In addition, the configuration file stored by the BMC may also be preset with each client identifier and authority information including the access authority corresponding to each client identifier.

In a specific implementation, according to the pre-stored permission information corresponding to each client, judging whether the request information meets the permission requirements specifically includes:

Obtain the client identification and access task information contained in the request information;

According to the permission information, determine whether the client ID has the access permission corresponding to the access task information;

If yes, it means that the requested information meets the permission requirements;

If not, the requested information does not meet the permission requirements.

A remote monitoring method for a server provided by the present invention includes: establishing a connection with a client, and judging whether the request information sent by the client for establishing a remote access connection with the server and performing control is received; if received, according to The pre-stored permission information corresponding to each client is used to determine whether the request information meets the permission requirements; if not, the client is prevented from accessing the server. It can be seen that before the server establishes a remote access connection, the client will judge whether the request information from the client meets the permission requirements of the remote access server, so as to ensure that only the request information that meets the permission requirements can remotely control the server normally, avoiding the occurrence of unauthorized access. It ensures the security and stability of the remote access and control server process, and can better meet the needs of users.

FIG. 2 is a flowchart of another remote monitoring method for a server provided by an embodiment of the present invention; as shown in FIG. 2 , in one embodiment, the remote monitoring method for a server provided by the present invention further includes step S104:

Step S104: According to the received update information, add or delete authority information.

Specifically, the number of clients remotely monitoring the server may increase or decrease continuously. When the client changes, the permission information pre-stored in the configuration file needs to be updated accordingly. The update information can be sent to the BMC through the IPMI instruction, and the permission information in the configuration file can be added or reduced according to the received update information, thereby completing the update of the permission information. This ensures the timeliness of the stored permission information and better meets the needs of users.

In one embodiment, the remote monitoring method for a server provided by the present invention further includes step S105:

Step S105: When the request information does not meet the permission requirements, send feedback information indicating that the request fails to the client that sent the request information.

Specifically, when it is determined that the request information does not meet the permission requirements and the client is blocked from accessing the server, feedback information indicating that the request fails can be generated and sent to the client to increase user experience.

In one embodiment, the remote monitoring method for a server provided by the present invention further includes steps S106-S107:

Step S106: record the number of times that the request information sent by each client does not meet the permission requirements;

Step S107: When the number of times reaches a preset number of alarms, generate abnormality information to give an alarm prompt.

Specifically, when the request information sent by the same client fails to meet the permission requirements for many times, it may be malicious access, in order to protect the information security of the server. It can record the number of times that the request information sent by each client does not meet the permission requirements, and compare it with the preset number of alarms. When the number of records reaches the number of alarms, abnormal information is generated to give an alarm prompt. For example, if the number of alarms is 10 times, when the recorded number of times that the request information sent by the same client does not meet the permission requirements is 10 times, abnormal information will be generated to give an alarm prompt. Therefore, it is convenient for operation and maintenance personnel to find abnormalities and deal with them in time, ensuring the normal operation of the server.

The present invention also provides the corresponding embodiments of the remote monitoring device of the server and the remote monitoring device of the server. It should be noted that the present invention describes the embodiments from two perspectives, one is based on a functional module perspective, and the other is based on a hardware perspective.

FIG. 3 is a structural diagram of a remote monitoring device for a server provided by an embodiment of the present invention; as shown in FIG. 3 , a remote monitoring device for a server provided by an embodiment of the present invention includes:

The first judging module 10 is used to establish a connection with the client, and judge whether the request information sent by the client for establishing a remote access connection with the server and performing manipulation is received; if received, enter the second judging module;

The second judgment module 11 is used to judge whether the request information meets the authority requirement according to the authority information corresponding to each client stored in advance; if not, enter the block access module;

The blocking access module 12 is used to block the client from accessing the server.

In one embodiment, the remote monitoring device for a server provided by the present invention further includes:

The update module is used to add or delete permission information according to the received update information.

In one embodiment, the remote monitoring device for a server provided by the present invention further includes:

The feedback module is used to send feedback information indicating that the request fails to the client that sends the request information when the request information does not meet the permission requirements.

In one embodiment, the remote monitoring device for a server provided by the present invention further includes:

The recording module is used to record the number of times that the request information sent by each client does not meet the permission requirements;

The alarm module is configured to generate abnormal information to prompt an alarm when the number of times reaches a preset number of alarms.

Since the embodiments in this part correspond to the embodiments in the method part, the embodiments in this part refer to the description of the embodiments in the method part, and details are not described here for the time being.

A remote monitoring device for a server provided by the present invention establishes a connection with a client, and determines whether the request information sent by the client for establishing a remote access connection with the server and performing control is received; if received, according to the pre-stored request information The permission information corresponding to each client is judged whether the request information meets the permission requirements; if not, the client is prevented from accessing the server. It can be seen that before the server establishes a remote access connection, the client will judge whether the request information from the client meets the permission requirements of the remote access server, so as to ensure that only the request information that meets the permission requirements can remotely control the server normally, avoiding the occurrence of unauthorized access. It ensures the security and stability of the remote access and control server process, and can better meet the needs of users.

FIG. 4 is a structural diagram of a remote monitoring device for a server according to an embodiment of the present invention. As shown in FIG. 4 , a remote monitoring device for a server provided by an embodiment of the present invention includes a memory 20 for storing a computer program;

The processor 21 is configured to implement the steps of the remote monitoring method for a server according to any one of the above when executing the computer program.

The processor 21 may include one or more processing cores, such as a 4-core processor, an 8-core processor, and the like. The processor 21 may use at least one hardware form among DSP (Digital Signal Processing, digital signal processing), FPGA (Field-Programmable Gate Array, field programmable gate array), PLA (Programmable Logic Array, programmable logic array) accomplish. The processor 21 may also include a main processor and a coprocessor. The main processor is a processor used to process data in the wake-up state, also called a CPU (Central Processing Unit, central processing unit); A low-power processor for processing data in a standby state. In some embodiments, the processor 21 may be integrated with a GPU (Graphics Processing Unit, image processor), and the GPU is used for rendering and drawing the content that needs to be displayed on the display screen. In some embodiments, the processor 21 may further include an AI (Artificial Intelligence, artificial intelligence) processor, where the AI processor is used to process computing operations related to machine learning.

Memory 20 may include one or more computer-readable storage media, which may be non-transitory. Memory 20 may also include high-speed random access memory, as well as non-volatile memory, such as one or more magnetic disk storage devices, flash storage devices. In this embodiment, the memory 20 is at least used to store the following computer program 201, where, after the computer program is loaded and executed by the processor 21, it can implement the relevant steps in the remote monitoring method for a server disclosed in any of the foregoing embodiments. In addition, the resources stored in the memory 20 may also include an operating system 202, data 203, etc., and the storage mode may be short-term storage or permanent storage. The operating system 202 may include Windows, Unix, Linux, and the like.

In some embodiments, the remote monitoring device of the server may further include an input/output interface 22 , a communication interface 23 , a power supply 24 and a communication bus 25 .

Those skilled in the art can understand that the structure shown in FIG. 4 does not constitute a limitation on the remote monitoring device of the server, and may include more or less components than those shown in the drawings.

Since the embodiments of the device part and the embodiments of the method part correspond to each other, the embodiments of the device part refer to the description of the embodiments of the method part, which will not be repeated here. In some embodiments of the invention, the processor and memory may be connected by a bus or otherwise.

The remote monitoring device for a server provided by the present invention can implement the following method: establishing a connection with a client, and judging whether the request information sent by the client for establishing a remote access connection with the server and performing control is received; , then according to the pre-stored permission information corresponding to each client, it is judged whether the request information meets the permission requirement; if not, the client is prevented from accessing the server. It can be seen that before the server establishes a remote access connection, the client will judge whether the request information from the client meets the permission requirements of the remote access server, so as to ensure that only the request information that meets the permission requirements can remotely control the server normally, avoiding the occurrence of unauthorized access. It ensures the security and stability of the remote access and control server process, and can better meet the needs of users.

Finally, the present invention also provides an embodiment corresponding to a computer-readable storage medium. A computer program is stored on the computer-readable storage medium, and when the computer program is executed by the processor, the steps described in the foregoing method embodiments are implemented.

It can be understood that, if the methods in the above embodiments are implemented in the form of software functional units and sold or used as independent products, they may be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention is essentially or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium , execute all or part of the steps of the methods described in the various embodiments of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (Read-Only Memory, ROM), random access memory (Random Access Memory, RAM), magnetic disk or optical disk and other media that can store program codes .

A computer-readable storage medium provided by the present invention can implement the following method when executed by a processor: establishing a connection with a client, and judging whether a request sent by the client for establishing a remote access connection with a server and performing manipulation is received. information; if received, determine whether the request information meets the permission requirements according to the pre-stored permission information corresponding to each client; if not, prevent the client from accessing the server. It can be seen that before the server establishes a remote access connection, the client will judge whether the request information from the client meets the permission requirements of the remote access server, so as to ensure that only the request information that meets the permission requirements can remotely control the server normally, avoiding the occurrence of unauthorized access. It ensures the security and stability of the remote access and control server process, and can better meet the needs of users.

The above is a remote monitoring method, device, device and medium for a server provided by the present invention. described in detail. The various embodiments in the specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments, and the same and similar parts between the various embodiments can be referred to each other. As for the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and the relevant part can be referred to the description of the method. It should be pointed out that for those skilled in the art, without departing from the principle of the present invention, several improvements and modifications can also be made to the present invention, and these improvements and modifications also fall within the protection scope of the claims of the present invention.

It should also be noted that, in this specification, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply these entities or operations. There is no such actual relationship or sequence between operations. Moreover, the terms "comprising", "comprising" or any other variation thereof are intended to encompass a non-exclusive inclusion such that a process, method, article or device that includes a list of elements includes not only those elements, but also includes not explicitly listed or other elements inherent to such a process, method, article or apparatus. Without further limitation, an element qualified by the phrase "comprising a..." does not preclude the presence of additional identical elements in a process, method, article or apparatus that includes the element.

Claims (10)

1. A remote monitoring method for a server is characterized by comprising the following steps:

establishing connection with each client, and judging whether request information which is sent by the client and used for establishing remote access connection with a server and carrying out operation and control is received;

if so, judging whether the request information meets the authority requirement according to the prestored authority information corresponding to each client;

if not, the client is prevented from accessing the server.

2. The remote monitoring method for the server according to claim 1, wherein the determining whether the request information meets the permission requirement according to the pre-stored permission information corresponding to each client specifically comprises:

acquiring a client IP and access task information contained in the request information;

judging whether the client IP has an access authority corresponding to the access task information or not according to the authority information;

if yes, the request information is proved to meet the authority requirement;

if not, the request information is not in accordance with the authority requirement.

3. The method for remote monitoring of a server according to claim 1, wherein the client is specifically a KVM client.

4. The method for remotely monitoring a server according to claim 1, wherein the request message is an encrypted message encrypted by HTTPS algorithm.

5. The remote monitoring method of the server according to claim 1, further comprising:

and adding or deleting the authority information according to the received updating information.

6. The remote monitoring method of the server according to claim 1, further comprising:

and when the request information does not meet the authority requirement, sending feedback information for indicating request failure to the client sending the request information.

7. The remote monitoring method of the server according to claim 1, further comprising:

recording the times of the request information sent by each client which does not meet the authority requirement;

and when the frequency reaches the preset alarm frequency, generating abnormal information to carry out alarm prompt.

8. A remote monitoring apparatus for a server, comprising:

the first judgment module is used for establishing connection with a client and judging whether request information which is sent by the client and used for establishing remote access connection with a server and carrying out operation and control is received; if the data is received, entering a second judgment module;

the second judgment module is used for judging whether the request information meets the authority requirement or not according to the prestored authority information corresponding to each client; if not, entering a block access module;

and the access preventing module is used for preventing the client from accessing the server.

9. A remote monitoring apparatus of a server, comprising a memory for storing a computer program;

processor for implementing the steps of the method for remote monitoring of a server according to any of claims 1 to 7 when executing said computer program.

10. A computer-readable storage medium, characterized in that a computer program is stored thereon, which computer program, when being executed by a processor, carries out the steps of the method for remote monitoring of a server according to any one of claims 1 to 7.

Images