CN118413578A - Method and device for managing edge equipment - Google Patents

Abstract

The application provides a method and a device for managing edge equipment, and relates to the field of communication. In the process of managing the edge device, the complexity of the server management system can be reduced. The method comprises the following steps: the management server packages the first message in the first protocol format into a second message in the second protocol format, and the load of the second message comprises the first message. And the management server sends the second message to the edge equipment.

Description

Method and device for managing edge equipment

Technical Field

The embodiment of the application relates to the technical field of communication, in particular to a method and a device for managing edge equipment.

Background

The edge device is a service platform device constructed on the edge side of the network close to the user, and can provide storage, calculation, network and other resources. Some critical service applications sink to the edge devices of the access network, which can reduce bandwidth loss and delay loss caused by network transmission and multistage forwarding.

When a computing network management system of a data center manages a plurality of edge devices, because the edge devices are usually deployed at a position far away from the data center and are difficult to be located in the same local area network with the computing network management system, the computing network management system needs to establish long connection based on webSocket protocol with the edge devices for communication through a public network of an operator.

In the scheme of the conventional computing network management system for managing the edge devices, the computing network management system needs to communicate with the edge devices through webSocket protocols, and the computing network management system manages a plurality of service servers by adopting redfish protocols, so that two protocols are needed to be used for network communication, and the complexity of the computing network management system is high.

Disclosure of Invention

The embodiment of the application provides a management method and a management device for edge equipment, which can reduce the complexity of a server management system.

In a first aspect, an embodiment of the present application provides a method for managing an edge device, which is applied to a management server, where the method includes: the management server packages a first message in a first protocol format into a second message in a second protocol format, and the load of the second message comprises the first message; and the management server sends the second message to the edge equipment.

In the possible implementation manner, the management server can directly communicate with the edge equipment without the transfer of a third party platform, so that the management server directly manages the edge equipment, and the complexity of the system is reduced; on the other hand, the management server and the edge device can uniformly use the second protocol format as a communication protocol, so that the development workload of the management protocol is reduced, and the adaptability of the management server and the edge device is enhanced.

In one possible implementation, before the management server encapsulates the first packet in the first protocol format into the second packet in the second protocol format, the method further includes: the management server establishes network connection with the edge equipment; the management server authenticates the edge device; the management server sends a second message to the edge device, including: and under the condition that the authentication of the edge equipment is passed, the management server sends a second message to the edge equipment.

In this possible implementation manner, the management server and the edge devices can perform authentication before communication, so that the realizability and reliability of the management server for managing a plurality of edge devices are enhanced.

In another possible implementation manner, the method further includes: in the case that the edge device authentication is passed, the management server transmits an authentication pass notification to the edge device, the authentication pass notification indicating authentication of the edge device by the management server.

In another possible implementation manner, the method further includes: the management server receives an adding operation of the edge equipment from a user; and the management server instructs the nanotube edge device according to the adding operation.

In the possible implementation manner, the user can directly add the edge equipment to be managed on the management server side, so that the feasibility of the embodiment of the application is improved.

In another possible implementation manner, in a case that the edge device authentication passes, the method further includes: the management server stores network address information of the edge device; the management server sends a second message to the edge device, including: and the management server sends the second message to the edge equipment according to the network address information of the edge equipment.

In another possible implementation manner, the method further includes: the management server receives a third message in a second protocol format from the edge equipment, and the load of the third message is packaged with a fourth message in the first protocol format; and the management server analyzes the third message to obtain a fourth message.

In the possible implementation manner, the management server receives the message from the edge device, the message is in the second protocol format, the management server analyzes the third message to obtain the fourth message, the complexity of the system is reduced, the opening amount of the management protocol is reduced, and the adaptability of the management server and the edge device is enhanced.

In another possible implementation, the first protocol includes redfi sh protocols, and the second protocol includes VPN protocols and webSocket protocols.

In a second aspect, an embodiment of the present application provides a method for managing an edge device, where the method is applied to an edge device, and the method includes: the edge equipment receives a second message in a second protocol format from the management server, and the load of the second message is packaged with a first message in a first protocol format; the edge device analyzes the second message to obtain a first message.

In the possible implementation manner, the edge equipment can directly communicate with the management server without the transfer of a third party platform, so that the edge equipment can directly accept the management of the management server, and the complexity of the system is reduced; on the other hand, the management server and the edge device can uniformly use the second protocol format as a communication protocol, so that the development workload of the management protocol is reduced, and the adaptability of the management server and the edge device is enhanced.

In one possible implementation manner, before the edge device receives the second message in the second protocol format from the management server, the method further includes: the edge equipment acquires network address information of a management server; and the edge equipment establishes network connection with the management server according to the network address information of the management server.

In another possible implementation manner, the method further includes: the edge device receives an authentication passing notification from the management server, the authentication passing notification indicating authentication of the edge device by the management server.

In another possible implementation manner, the method further includes: responding to the second message, and generating a fourth message in the first protocol format by the edge equipment; the edge device packages a fourth message in the first protocol format into a third message in the second protocol format, and the load of the third message comprises the fourth message; and the edge equipment sends the third message to the management server.

In the possible implementation manner, the edge device sends the third message to the management server, the third message is in the second protocol format, the management server analyzes the third message to obtain the fourth message, the complexity of the system is reduced, the opening amount of the management protocol is reduced, and the adaptability of the management server and the edge device is enhanced.

In another possible implementation, the first protocol includes redfi sh protocols, and the second protocol includes VPN protocols and webSocket protocols.

In a third aspect, an embodiment of the present application provides a management server, including: a processor and a memory. The processor is coupled with the memory; the memory is used to store computer instructions that are loaded and executed by the processor to cause the management server to implement any one of the methods provided in the first aspect.

In a fourth aspect, an embodiment of the present application provides an edge device, including: a processor and a memory. The processor is coupled with the memory; the memory is for storing computer instructions that are loaded and executed by the processor to cause the edge device to implement any one of the methods provided in the second aspect.

In a fifth aspect, an embodiment of the present application provides a chip, including: a processor and interface circuit; the interface circuit is used for receiving the code instruction and transmitting the code instruction to the processor; a processor for executing code instructions to perform any of the methods provided in the first aspect.

In a sixth aspect, an embodiment of the present application provides a chip, including: a processor and interface circuit; the interface circuit is used for receiving the code instruction and transmitting the code instruction to the processor; a processor for executing code instructions to perform any of the methods provided in the second aspect.

In a seventh aspect, embodiments of the present application provide a computer readable storage medium having stored therein at least one computer program instruction that is loaded and executed by a processor to implement any one of the methods provided in the first aspect above.

In an eighth aspect, embodiments of the present application provide a computer readable storage medium having stored therein at least one computer program instruction that is loaded and executed by a processor to implement any one of the methods provided in the second aspect above.

In a ninth aspect, embodiments of the present application provide a computer program product comprising computer-executable instructions which, when run on a computer, cause the computer to perform any one of the methods provided in the first aspect.

In a tenth aspect, embodiments of the present application provide a computer program product comprising computer-executable instructions which, when run on a computer, cause the computer to perform any of the methods provided in the second aspect.

Technical effects caused by any implementation manner of the third aspect to the tenth aspect may be referred to technical effects caused by corresponding implementation manners of the first aspect and the second aspect, and are not described herein.

Drawings

FIG. 1 is a schematic diagram of an application scenario of restfull application programming interfaces;

FIG. 2 is a schematic diagram of a communication flow between a client and a server;

FIG. 3 is a schematic diagram of a scenario for edge computation;

FIG. 4 is a schematic diagram of a computer network management system;

FIG. 5 is a schematic diagram of a communication flow between an edge device and a computing network management system;

FIG. 6 is a schematic diagram of a communication flow between another edge device and a computing network management system;

FIG. 7 is a schematic diagram of a format of a WebSocket service packet;

FIG. 8 is a schematic diagram of an architecture of a data center server, edge devices, and a third party management platform;

fig. 9 is a schematic diagram of an architecture of an edge device management system according to an embodiment of the present application;

FIG. 10 is a schematic diagram of another edge device management system according to an embodiment of the present application;

Fig. 11 is a schematic diagram of another edge device management system according to an embodiment of the present application

Fig. 12 is a flowchart illustrating a method for managing an edge device according to an embodiment of the present application;

FIG. 13 is a schematic diagram of a message package format according to an embodiment of the present application;

FIG. 14 is a schematic diagram of another packet format according to an embodiment of the present application;

FIG. 15 is a schematic diagram of another packet format according to an embodiment of the present application;

fig. 16 is a schematic structural diagram of a management server according to an embodiment of the present application;

Fig. 17 is a schematic structural diagram of an edge device according to an embodiment of the present application;

fig. 18 is a schematic structural diagram of another management server according to an embodiment of the present application;

Fig. 19 is a schematic structural diagram of another edge device according to an embodiment of the present application;

Fig. 20 is a schematic structural diagram of an edge device management system according to an embodiment of the present application.

Detailed Description

In the description of the present application, unless otherwise indicated, "/" means that the objects associated in tandem are in a "or" relationship, e.g., A/B may represent A or B; the "and/or" in the present application is merely an association relationship describing the association object, and indicates that three relationships may exist, for example, a and/or B may indicate: there are three cases, a alone, a and B together, and B alone, wherein a, B may be singular or plural.

In the description of the present application, unless otherwise indicated, "a plurality" means two or more than two. "at least one of" or the like means any combination of these items, including any combination of single item(s) or plural items(s). For example, at least one (one) of a, b, or c may represent: a, b, c, a-b, a-c, b-c, or a-b-c, wherein a, b, c may be single or plural.

In addition, in order to facilitate the clear description of the technical solution of the embodiments of the present application, in the embodiments of the present application, the words "first", "second", etc. are used to distinguish the same item or similar items having substantially the same function and effect. It will be appreciated by those of skill in the art that the words "first," "second," and the like do not limit the amount and order of execution, and that the words "first," "second," and the like do not necessarily differ.

In embodiments of the application, words such as "exemplary" or "such as" are used to mean serving as an example, instance, or illustration. Any embodiment or design described herein as "exemplary" or "e.g." in an embodiment should not be taken as preferred or advantageous over other embodiments or designs. Rather, the use of words such as "exemplary" or "such as" is intended to present related concepts in a concrete fashion that may be readily understood.

It is appreciated that reference throughout this specification to "an embodiment" means that a particular feature, structure, or characteristic described in connection with the embodiment is included in at least one embodiment of the present application. Thus, the various embodiments are not necessarily all referring to the same embodiment throughout the specification. Furthermore, the particular features, structures, or characteristics may be combined in any suitable manner in one or more embodiments. It should be understood that, in various embodiments of the present application, the sequence number of each process does not mean that the execution sequence of each process should be determined by the function and the internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.

It can be appreciated that some optional features of the embodiments of the present application may be implemented independently in some scenarios, independent of other features, such as the scheme on which they are currently based, to solve corresponding technical problems, achieve corresponding effects, or may be combined with other features according to requirements in some scenarios. Accordingly, the device provided in the embodiment of the present application may also implement these features or functions accordingly, which will not be described herein.

In the present application, the same or similar parts between the embodiments may be referred to each other unless specifically stated otherwise. In the present application, unless specifically stated or logically conflicting, terms and/or descriptions between different embodiments are consistent and mutually referents, and different embodiments may be combined to form new embodiments according to their inherent logical relationship. The following embodiments of the present application are not intended to limit the scope of the present application.

In order to facilitate understanding of the technical solutions of the embodiments of the present application, the following is a brief description of the related technologies of the embodiments of the present application, which is given below:

First, representational state transfer techniques.

The representational state transfer (resource representational STATE TRANSFER, rest) is a state transfer of a network resource in a network in some form of representation, describing one form of interaction information between two devices in the network. The resource may be described using a uniform resource location system (uniform resource locator, URL) and the actions to be performed using verbs of the hypertext transfer protocol (hypertext transfer protocol, HTTP).

Restfull application programming interfaces (application programming interface, APIs) typically represent APIs that use the rest style. When restfull API is applied, the devices in the network are divided into client devices and Server devices, and the Server devices provide a set of unified RESTful API to provide services for various client devices. For example, as shown in fig. 1, various client devices such as a world wide Web (Web) device, an iOS device, and an Android device can acquire and operate resources of a server serving as a server device through the socket.

Wherein, for example, a friend list friend is stored in the server, and the resource defining the friend is URL: http:// api.qc.com/v1/friends, uses verbs in the HTTP protocol to implement operations such as adding, modifying, deleting, etc. to the friend resources. I.e. state flow of resources is implemented by HTTP verbs. For example, GET is used to acquire resources.

POST is used to create resources (and can also be used to update resources), PUT is used to update resources, DELETE is used to DELETE resources. The add friends operation may be correspondingly defined as POST http:// api.qc.com/v1/friends, the delete friends operation may be correspondingly defined as DELETE HTTP:// api.qc.com/v1/friends, and the update friends information operation may be correspondingly defined as PUT http:// api.qc.com/v1/friends.

Second, redfish protocol.

The redfish protocol is a management standard based on HTTPs services, and uses the RESTful interface to implement device management. Each HTTPs submits or returns a resource in the form of UTF-8 encoded JSON. redfish defines a comprehensive Restful API for server management, which can solve the common operation and business problems of server management, and includes some fixed resources and some resources strongly related to business attributes. The basic command format of redfish protocol may be as follows: GET, URL: https:// device_ip/redfish.

Third, webSocket protocol.

The WebSocket protocol is at the application layer of the open system interconnection communication reference model (open system interconnection reference model, OSI), and unlike HTTP, webSocket provides full duplex communication, allowing messages to pass back and forth while keeping connections open. In this way, a bi-directional persistent session can be conducted between the client and the server.

As shown in fig. 2, the network connection is established between the client and the server through HTTP protocol handshake, after the handshake is successful, the network connection is switched to WebSocket protocol capable of full duplex communication, and the server can directly push information to the client, instead of just initiating communication by the client like HTTP protocol.

Compared with the HTTP protocol, the WebSocket protocol not only can provide full duplex communication, but also has stronger instantaneity, can keep a connection state, and is easier to support expansion.

Fourth, edge calculation.

As shown in fig. 3, with the continuous expansion of the artificial intelligence application, the artificial intelligence application located in the cloud end such as the data center generally has the problems of high power consumption, low real-time performance, insufficient bandwidth, low data transmission security and the like, and the artificial intelligence will gradually migrate from the cloud end to the embedded end at the edge side. The edge intelligence can ensure real-time results sensitive to time, is not interfered by a network, and accelerates the speed of local decision. Edge computation has the advantages of saving bandwidth, reducing delay, enhancing security and privacy, etc.

Edge Computing can take two forms, one is the extension of the service capability of the central cloud to the edge, and its architecture is similar to that of the central cloud, and includes storage, computing, networking, artificial intelligence, big data, security and other capabilities, and typically, content delivery network (content delivery network, CDN) and Multi-access edge Computing (MEC) belong to the edge cloud.

The other is edge node, which is a service platform constructed at the edge side of the network near the user, provides storage, calculation, network and other resources, and sinks part of key service application to the edge of the access network so as to reduce the width and delay loss caused by network transmission and multistage forwarding.

The network device capable of carrying the edge computing task is the edge device. The prior edge devices have wide application fields, scattered physical addresses, numerous devices and diversified device forms, so that a centralized management system is required to uniformly manage a plurality of edge devices.

As shown in fig. 4, the existing computing network management system for managing operation and maintenance by the server includes a scenario of both data center and edge computing. In a data center scene, the computing network management system and the managed service node server are in the same local area network, and network elements and modules related to the operation and maintenance of the data center scene comprise:

And the computing network management system is responsible for information management and monitoring of the servers, and one computing network management system can manage a plurality of servers.

Service node server: the business server is mainly used for processing the calculation tasks. The server is provided with management operation software, which is mainly responsible for information and state collection and configuration issuing of the server.

The switch: for interconnection between servers of a data center, and for interconnection of a computing network management system with a plurality of servers.

Currently, a redfish standard interface is adopted by a computing network management system management server, the redfish interface is actually an interface of restfull, wherein the server is in the role of restfull server, the computing network management system is client, and the computing network management system accesses system resources through restfull API provided by the server to complete information acquisition and configuration of the server.

In the scenario of edge computing, since the edge devices are usually deployed in remote locations, it is difficult for the computing network management system to have local area network conditions when managing the edge devices, and it is often necessary to cross the public network of the operator. The operation and maintenance related network element of the edge computing scene comprises:

Computing network management system: and the system is responsible for information management and monitoring of the edge equipment, and a computing network management system can manage a plurality of servers.

Edge device: is responsible for the processing of edge traffic.

Gateway: and the access of the edge equipment is responsible, and the local area network IP address is allocated for the edge equipment.

Typically, the operator's access gateway translates (network address translation, NAT) the internet protocol (Internet Protocol, IP) address, and the computing network management system cannot directly access the IP address of the edge device. In order to solve the problem, the current edge device actively goes to a computing network management system for registration in the starting process, authentication is performed by using a user name and a password, and websocket connection is established, so that a long connection is established between the edge device and the computing network management system, and bidirectional communication between the edge device and the computing network management system is realized.

In particular, as shown in fig. 5 and fig. 6, in order to implement communication connection between an edge device and a computing network management system, the computing network management system and the edge device communicate through a terminal cloud cooperative protocol, and when the edge device registers with the computing network management system based on the protocol, in combination with fig. 5 and fig. 6, the computing network management system is actively connected by using a user name and a password; then, after the authentication of the edge equipment is passed, the computing network management system sends authentication passing information to the edge equipment, wherein the authentication passing information indicates that the edge equipment passes the authentication of the computing network management system; then the edge device reports the system static information to the computing network management system and reports the system state information; and then the edge device sends a handshake request to the computing network management system, and correspondingly, the computing network management system sends a handshake response to the edge device, and then the service data can be transmitted between the edge device and the computing network management system. As shown in fig. 6, after the edge device and the computing network management system establish handshake connection by using the http protocol through step 1 and step 2, the WebSocket service data packets are mutually transmitted by using the WebSocket protocol through step 3 and step 4. As shown in fig. 7, the WebSocket service packet transmitted between the edge device and the computing network management system may include an IP header, a transmission control protocol (transmission control protocol, TCP) header, a WebSocket header, and a WebSocket payload (payload).

A third party management platform is usually also docked between the data center server and the edge device, as shown in fig. 8, where the third party management platform further includes a third party management platform, the third party management platform needs to communicate with the service server through the restfull API interface of the server device management unit of the service server, and the third party management platform further needs to cooperatively manage the restfull API interface and the edge cloud of the edge device management unit of the edge device. In the existing edge node management scheme, edge equipment can only perform network communication with a computing network management system through an edge cloud cooperative management interface, restfull API interfaces of the edge equipment do not support communication with the computing network management system and a third party management platform, and edge cloud cooperative management interfaces provided by the edge equipment also do not support communication with the third party management platform.

According to the description of the data center scene, the edge computing scene and the third party management platform, the restfull API interface is easy to expand to the third party management platform although being supported by a standard, but cannot communicate across network segments, and is not suitable for the third party management platform and the computing network management system to manage the edge equipment. The edge nodes are managed through the edge cloud collaborative management interface, a large amount of adaptation development is needed by the third party management platform, the edge devices are managed through the edge cloud collaborative management interface by the computing network management system of the data center, the service servers are managed through restfull API, the service servers and the edge devices are managed through two protocols, the management system is repeatedly deployed, and the system complexity is high.

Based on this, the embodiment of the application provides a management method of an edge device, a server can package a first message in a first protocol format into a second message in a second protocol format, the load of the second message comprises the first message, and then the server sends the second message to the edge device. In this way, the second protocol can be uniformly used for the communication between the server and the edge device, and the complexity of the system is reduced.

As shown in fig. 9 and fig. 10, the method for managing edge devices provided in the embodiment of the present application may be applied to the communication systems shown in fig. 9 and fig. 10, where both the data center side and the edge device side have corresponding rest proxy units. As shown in fig. 9, the data center side includes a rest proxy server unit, FD (Fusion Director) operation and maintenance management unit and network infrastructure; the operator network comprises an operator network switching unit and an access gateway unit; the edge device side comprises a rest proxy client unit, an edge device management unit and intelligent edge devices. The rest proxy unit at the data center side is a rest proxy server unit, is a system for receiving the registration of the edge equipment and processing the information in a proxy way, and serves software running on the data center server. The rest proxy unit at the edge device side is a rest proxy client unit, is a unit in which an edge node registers to a network management system and manages states, and is a software service running on the edge device. The method comprises the steps that an original FD operation and maintenance management unit at a data center side and a rest proxy server unit at the data center side mutually transmit information, and the FD operation and maintenance management unit is an operation and maintenance management system of the data center and is a software service running on a data center server; the original edge equipment management unit at the edge equipment side and the rest proxy client unit mutually transmit information, and the edge equipment management unit is a software service running on the edge equipment, is responsible for monitoring, collecting and processing the state of the edge equipment, periodically transmits handshakes to the edge equipment and reports the handshakes to the FD operation and maintenance management system. Meanwhile, the network infrastructure of the data center side is mainly the network infrastructure of the data center and comprises a router, a switch, a server and other devices. On the operator network side, the operator network switching unit refers to a router of the wide area network and other network devices. The access gateway unit refers to a gateway for the edge device to access the operator network.

As shown in fig. 10, the communication system includes a management server located in a data center, a switch located in an operator network, a gateway, and an intelligent edge substation group located on an edge device side, where the intelligent edge substation is an intelligent edge device. The management server has a public IP address, an operation and maintenance management unit FD and a rest server unit restproxy server are deployed on the server; the operator network side includes switches and gateways.

The edge device side includes two edge intelligent substations, the IP addresses of the two edge intelligent substations are 192.168.1.100 and 192.168.1.101, respectively, and each edge intelligent substation is deployed with edge device management software and a rest proxy client unit restpoxy client.

As shown in fig. 11, in the communication system, the rest proxy server unit in the embodiment of the present application may include an authentication proxy service unit, an edge node management unit, a protocol message routing unit, a protocol message conversion unit, and a local data storage unit; the Rest proxy client unit includes an authentication proxy client unit and a protocol message conversion unit.

The authentication proxy service unit at the data center side is responsible for the registration, authentication and authorization of the edge equipment. The edge node management unit is responsible for managing the edge node information, and can receive the registration message sent by the edge device, add the node information to the edge node management unit, register the protocol route and perform information synchronization with the edge device management unit. And the protocol message conversion unit is used for decapsulating and encapsulating the message according to the message content. The protocol message routing unit is responsible for the transceiving of messages.

The authentication proxy client unit at the edge equipment side is responsible for initiating registration and authentication of the edge node and recording the authentication state. And the protocol message conversion unit is used for decapsulating and packaging the message according to the message content and forwarding the message to the edge device management unit.

The method and the device for managing the edge device provided by the embodiment of the application can be applied to the communication system shown in the fig. 9 and 10, and the execution main body of the method for managing the edge device can be a management server and the edge device in the communication system.

It is to be understood that, in the embodiments of the present application, the execution subject may perform some or all of the steps in the embodiments of the present application, these steps or operations are only examples, and the embodiments of the present application may also perform other operations or variations of the various operations. Furthermore, the various steps may be performed in a different order presented in accordance with embodiments of the application, and it is possible that not all of the operations in the embodiments of the application may be performed.

It should be noted that, in the following embodiments of the present application, names of messages between devices or names of parameters in a message are merely examples, and may be other names in specific implementations, which are not limited in particular by the embodiments of the present application.

As shown in fig. 12, a method for managing an edge device according to an embodiment of the present application includes the following steps:

step 1201, the intelligent edge workstation obtains the network address of the management server.

After the intelligent edge substation is started, an authentication proxy client unit in the intelligent edge substation firstly acquires the starting state of the edge equipment management unit, and after the edge equipment management unit is determined to be started normally, the intelligent edge substation acquires the network address of the management server through the edge equipment management unit.

In a possible implementation manner, the intelligent edge substation may acquire the network address of the management server, where a user configures a configuration management unit (FD) network address of the management server.

In one possible implementation manner, the intelligent edge station firstly acquires the domain name of the management website, the management website stores the network address information of the management server, and the intelligent edge station can log in the management website through the stored user name and the corresponding password and then acquire the network address of the management server from the management website. Step 1202, the intelligent edge substation establishes a network connection with the management server.

The "authentication proxy client unit" of the intelligent edge workstation and the "edge node management unit" of the management server establish a network connection.

In the embodiment of the present application, the network connection established between the intelligent edge substation and the management server may be websocket connection, virtual private network (virtual private network, VPN) connection, or other types of network connection, which is not limited herein.

Step 1203, the management server authenticates the intelligent edge substation.

The edge node management unit of the management server calls an authentication proxy service unit to authenticate the intelligent edge small station. After the management server passes the authentication of the intelligent edge substation, an 'edge node management unit' of the management server updates the device routing information and stores the updated device routing information into a 'local data storage unit' of the management server.

Specifically, in the embodiment of the present application, the authentication of the intelligent edge substation by the management server may be that the management server authenticates the user name and the password of the intelligent edge substation, and in the case that the user name and the password of the intelligent edge substation are determined to be correct, the management server updates the routing information of the intelligent edge substation and stores the routing information in the "local data storage unit" of the management server.

In a possible implementation manner, in step 1202, the intelligent edge substation establishes a websocket connection with the management server, and the device routing information may be as shown in table 1:

Destination IP	Websocket session ID
		192.168.1.100	1
192.168.1.101	2

TABLE 1

As shown in table 1, intelligent edge station 1 with an IP address of 192.168.1.100 corresponds to Websocket session ID being 1 and intelligent edge station 2 with an IP address of 192.168.1.101 corresponds to Websocket session ID being 2. The IP address is assigned to Websocket session ID to facilitate communication between the management server and the plurality of intelligent edge kiosks. In addition, the "local data storage unit" of the management server may also store IP addresses and corresponding Websocket session ID of other intelligent edge devices, which is not limited herein.

In another possible implementation, the FD operation and maintenance management unit of the management server is provided with an interface for the authentication proxy service unit to authenticate the user name and the password, and the user may add the IP address of the edge device to the FD operation and maintenance management unit, for example, the user may add the IP address of the intelligent edge workstation 1 to 192.168.1.100 and the IP address of the intelligent edge workstation 2 to the management server to 192.168.1.101. In this possible implementation, the user adds the edge device directly at the management server, so the management server may not authenticate the edge device.

And 1204, the management server sends authentication result information to the intelligent edge substation.

The "edge node management unit" of the management server sends authentication result information to the "authentication proxy service unit" of the intelligent edge substation, the authentication result information including an authentication result of the intelligent edge substation by the management server. For example, in the case where the edge device is authenticated, the management server transmits an authentication-passing notification to the edge device, the authentication-passing notification indicating that the edge device passes the authentication of the management server. The intelligent edge workstation completes the registration process at the management server, via steps 1201 through 1204.

Step 1205, the FD operation management unit of the management server transmits a first message in a first protocol format to the "edge node management unit".

The FD operation management unit of the management server transmits a first message in a first protocol format to the "edge node management unit".

Specifically, the FD operation management unit of the management server brings the intelligent edge substation 1 (192.168.1.100) into management, and transmits redfish interface message, namely the first message in the first protocol format, to the edge node management unit, wherein the format of the redfish interface message can be get https://192.168.1.100/redfish.

In step 1206, the management server encapsulates the first message in the first protocol format into a second message in the second protocol format.

The management server packages the first message in the first protocol format into the second message in the second protocol format. Specifically, the management server calls a "protocol message conversion unit" to encapsulate the first message in the first protocol format into the second message in the second protocol format.

In a possible implementation manner, the first message in the first protocol format is a redfish interface message, the second message in the second protocol format is a websocket message, and the "protocol message conversion unit" may encapsulate the redfish interface message in the websocket message. As shown in fig. 13, the management server may encapsulate redfish interface messages in the payload field of the websocket message. The payload field of the encapsulated websocket message includes REDFISH HEAD field and redfish payload field of redfish interface message.

In the scheme, the management server packages the first message in the first protocol format into the second message in the second protocol format, so that the information can be directly transmitted between the management server and the edge equipment through the message in the second protocol format, the transfer of a third party management platform is not needed, and the complexity of a server management system is reduced.

In another possible implementation, the first message in the first protocol format is a redfish interface message, the second message in the second protocol format is a VPN message, as shown in fig. 14 and 15, and the "protocol message conversion unit" may encapsulate the redfish interface message in a generic routing encapsulation (generic routing encapsulation, GRE) message. The GRE message includes the IP field, TCP field, REDFISH HEAD field, and redfish payload field of the redfish interface message. In this possible implementation manner, the VPN message is a GRE message, and in addition, the VPN message may be other types of messages, such as an internet security protocol (internet protocol security, IPSec), a point-to-point tunneling protocol (PPTP), and a layer 2tunneling protocol,L2TP, which are not limited herein.

Step 1207, the management server sends the second message in the second protocol format to the intelligent edge substation.

After the first message in the first protocol format is encapsulated into the second message in the second protocol format, the management server queries the routing information table, obtains websocket sessionID of the IP address included in the second message in the second protocol format, and then invokes the protocol message routing unit to send the encapsulated second message to the corresponding intelligent edge small station.

Accordingly, the intelligent edge workstation receives the second message from the management server.

In one possible implementation manner, the second message in the second protocol format is a VPN message, and the management server invokes the "protocol message routing unit" to send the second message to the corresponding intelligent edge substation through the VPN tunnel.

Step 1208, the intelligent edge substation parses the second message to obtain the first message.

After receiving the second message in the second protocol format from the management server, the intelligent edge small station acquires the first message in the first protocol format carried by the second message by analyzing the second message.

Specifically, after receiving the second message, the authentication proxy client unit of the intelligent edge substation calls the protocol message conversion unit to analyze the payload field of the second message, and then uses the payload field of the second message as an independent message, thereby obtaining the first message in the first protocol format. The first message is then transmitted to an "edge device management unit".

In a possible implementation manner, the first message in the first protocol format is a redfish interface message, the second message in the second protocol format is a websocket message, the management server calls a "protocol message conversion unit" to analyze a payload field of the websocket message, the payload field of the websocket message includes REDFISH HEAD fields and redfish payload fields of redfish interface message, and the management server determines REDFISH HEAD fields and redfish payload fields of the redfish interface message as redfish interface message, that is, the first message in the first protocol format. The "protocol message conversion unit" then transmits REDFISH HEAD field and redfish payload field of the redfish interface message to the "edge device management unit".

In another possible implementation manner, the first message in the first protocol format is a redfish interface message, the second message in the second protocol format is a VPN message, the management server calls a "protocol message conversion unit" to parse a payload field of the VPN message, where the payload field of the VPN message includes an IP field, a TCP field, a REDFISH HEAD field, and a redfish payload field of the redfish interface message, and then the management server determines the IP field, the TCP field, the REDFISH HEAD field, and the redfish payload field of the redfish interface message as redfish interface messages, that is, the first message in the first protocol format. The "protocol message conversion unit" then transmits the first message to the "edge device management unit".

In the scheme, the intelligent edge small station can acquire the first message in the first protocol format by analyzing the second message in the second protocol format, and the management server and the intelligent edge small station can directly communicate through the second message in the second protocol format without transferring of a third party platform, so that the complexity of a server management system is reduced.

Step 1209, the intelligent edge substation sends a third message to the management server.

And responding to the second message, the intelligent edge small station generates a fourth message in the first protocol format, and then the intelligent edge small station calls a protocol message conversion unit to package the fourth message in the first protocol format into a third message in the second protocol format, wherein a payload field of the third message comprises the fourth message in the first protocol format. And then the intelligent edge small station sends the packaged third message to the management server.

In the embodiment of the present application, the encapsulation manners of step 1209 and step 1206 are the same, and detailed descriptions thereof are omitted here.

In a possible implementation manner, the fourth message in the first protocol format is a redfish interface message, the third message in the second protocol format is a websocket message, the intelligent edge station generates redfish interface message, then the intelligent edge station calls a "protocol message conversion unit" to package the redfish interface message into the websocket message, and a payload field of the websocket message includes REDFISH HEAD fields and redfish payload fields of the redfish interface message. The intelligent edge substation invokes the authentication proxy client unit to send the websocket message to the management server.

In another possible implementation, the fourth message in the first protocol format is a redfish interface message, the third message in the second protocol format is a VPN message, the intelligent edge station generates a redfish interface message, and then the intelligent edge station encapsulates the redfish interface message into a VPN message, where the payload field of the VPN message includes an IP field, a TCP field, a REDFISH HEAD field, and a redfish payload field of the redfish interface message. The intelligent edge workstation then invokes the authentication proxy client unit to send the VPN message to the management server.

In the scheme, the edge device packages the fourth message in the first protocol format into the third message in the second protocol format, so that the information can be directly transmitted between the management server and the edge device through the message in the second protocol format, the transfer through a third party management platform is not needed, and the complexity of a server management system is reduced.

Step 1210, the management server obtains a fourth message by parsing the third message.

The intelligent edge small station sends a third message to the management server, and correspondingly, the management server receives the third message and acquires a fourth message by analyzing a payload field of the third message.

Specifically, after the "authentication proxy service unit" of the management server receives the third message, the "edge device management unit" calls the "protocol message conversion unit" to analyze the payload field of the third message, and then uses the payload field of the third message as an independent message, thereby obtaining a fourth message in the first protocol format. The "edge device management unit" then transmits the fourth message to the "FD operation management unit".

The management server completes one message interaction with the intelligent edge workstation through steps 1201-1210.

In the embodiment of the application, the edge node management unit of the management server can periodically send handshake information to all intelligent edge small stations. For the intelligent edge small station with the handshake timeout, the management server deletes the intelligent edge small station with the handshake timeout from the edge device management list and reports the timeout when the FD operation and maintenance management unit inquires next time.

In the embodiment of the application, the management server can directly communicate with the edge equipment without the transfer of a third party platform, thereby realizing the direct management of the edge equipment by the management server and reducing the complexity of the system; on the other hand, the management server and the edge equipment can unify the communication protocol, reduce the opening amount of the management protocol, and enhance the adaptability of the management server and the edge equipment.

Accordingly, in the embodiment of the present application, the management server 1600 may be divided into functional modules according to the above method example, for example, each functional module may be divided into each functional module, or two or more functions may be integrated into one processing module. The integrated modules may be implemented in hardware or in software functional modules. It should be noted that, in the embodiment of the present application, the division of the modules is schematic, which is merely a logic function division, and other division manners may be implemented in actual implementation.

Fig. 16 shows a possible structural diagram of the management server 1600 involved in the above-described embodiment in the case where respective functional blocks are divided with corresponding respective functions. As shown in fig. 16, the management server 1600 includes:

A setting-up unit 1601, configured to set up a network connection with an edge device; for example, step 1202 in the method embodiment described above.

An authentication unit 1602, configured to authenticate an edge device; for example, step 1203 in the method embodiment described above is performed.

A first sending unit 1603 configured to send an authentication passing notification to the edge device, the authentication passing notification indicating that the edge device passes authentication of the management server, in a case where the edge device authentication passes; for example, step 1204 in the method embodiment described above is performed.

A storage unit 1604, configured to store network address information of the edge device in the management server if the edge device authentication passes; for example, step 1203 in the method embodiment described above is performed.

An encapsulation unit 1605, configured to encapsulate a first packet in a first protocol format into a second packet in a second protocol format, where a load of the second packet includes the first packet; for example, performing step 1206 in the method embodiment described above.

A second sending unit 1606, configured to send the second packet to the edge device. For example, step 1207 in the method embodiment described above is performed.

Specifically, the second sending unit 1606 is configured to send the second message to the edge device according to the network address information of the edge device when the edge device authentication is passed. For example, step 1207 in the method embodiment described above is performed.

A receiving unit 1607, configured to receive a third message in the second protocol format from the edge device, where a payload of the third message encapsulates a fourth message in the first protocol format; for example, step 1209 in the method embodiment described above is performed.

And the parsing unit 1608 is configured to parse the third message by using the management server to obtain a fourth message. For example, to perform step 1210 in the method embodiment described above.

In an embodiment of the present application, the first protocol includes redfish protocols, and the second protocol includes VPN protocols and webSocket protocols.

The modules of the management server may also be used to perform other actions in the above method embodiments, and all relevant content of each step related to the above method embodiments may be referred to the functional descriptions of the corresponding functional modules, which are not repeated herein.

Accordingly, in the embodiment of the present application, the edge device 1700 may be divided into functional modules according to the above method example, for example, each functional module may be divided into functional modules corresponding to each function, or two or more functions may be integrated into one processing module. The integrated modules may be implemented in hardware or in software functional modules. It should be noted that, in the embodiment of the present application, the division of the modules is schematic, which is merely a logic function division, and other division manners may be implemented in actual implementation.

Fig. 17 shows a possible structural diagram of an edge device 1700 involved in the above-described embodiment in the case where respective functional blocks are divided with corresponding respective functions. As shown in fig. 17, the edge device 1700 includes:

An acquiring unit 1701, configured to acquire network address information of the management server; for example, step 1201 in the method embodiment described above is performed.

The establishing unit 1702 is configured to establish a network connection with the management server according to the network address information of the management server. For example, step 1202 in the method embodiment described above.

A first receiving unit 1703, configured to receive an authentication passing notification from the management server, where the authentication passing notification indicates authentication of the edge device passing the management server. For example, step 1204 in the method embodiment described above is performed.

A second receiving unit 1704, configured to receive a second packet in a second protocol format from the management server, where a payload of the second packet encapsulates a first packet in the first protocol format; for example, step 1207 in the method embodiment described above is performed.

And the parsing unit 1705 is configured to parse the second packet to obtain the first packet. For example, performing step 1208 in the method embodiment described above.

A generating unit 1706, configured to generate a fourth packet in the first protocol format in response to the second packet; for example, step 1209 in the method embodiment described above is performed.

An encapsulation unit 1707, configured to encapsulate a fourth packet in the first protocol format into a third packet in the second protocol format, where a load of the third packet includes the fourth packet; for example, step 1209 in the method embodiment described above is performed.

And a sending unit 1708, configured to send the third packet to the management server. For example, step 120 in the method embodiment described above is performed.

In the embodiment of the present application, the first protocol includes redfish protocols, and the second protocol includes VPN protocols and webSocket protocols.

The modules of the edge device may also be used to perform other actions in the above method embodiments, and all relevant content of each step related to the above method embodiments may be cited to functional descriptions of corresponding functional modules, which are not described herein.

Fig. 18 is a schematic diagram of a management server according to an embodiment of the present application, where the management server 1800 may include one or more central processing units (central processing units, CPU) 1801 and a memory 1805, and one or more application programs or data are stored in the memory 1805.

Wherein the memory 1805 may be volatile storage or persistent storage. The program stored in the memory 1805 may include one or more modules, each of which may include a series of instruction operations in the management server. Further, the central processor 1801 may be configured to communicate with the memory 1805 and execute a series of instruction operations in the memory 1805 on the management server 1800.

Wherein the central processor 1801 is configured to execute a computer program in the memory 1805, so that the management server 1800 is configured to execute: the management server packages a first message in a first protocol format into a second message in a second protocol format, and the load of the second message comprises the first message; and the management server sends the second message to the edge equipment. For specific implementation, please refer to steps 1201-1210 in the embodiment shown in fig. 12, which are not described herein.

The management server 1800 may also include one or more power supplies 1802, one or more wired or wireless network interfaces 1803, one or more input output interfaces 1804, and/or one or more operating systems, such as Windows Server, mac OS XTM, unixTM, linuxTM, freeBSDTM, etc.

The management server 1800 may perform the operations performed by the management server in the embodiment shown in fig. 12, which are not described in detail herein.

Fig. 19 is a schematic diagram of an edge device structure according to an embodiment of the present application, where the edge device 1900 may include one or more central processing units (central processing units, CPU) 1901 and a memory 1905, where one or more application programs or data are stored in the memory 1905.

Wherein the memory 1905 may be volatile storage or persistent storage. The program stored in the memory 1905 may include one or more modules, each of which may include a series of instruction operations in the edge device. Still further, the central processor 1901 may be configured to communicate with the memory 1905 and execute a series of instruction operations in the memory 1905 on the edge device 1900.

Wherein the central processor 1901 is configured to execute a computer program in the memory 1905, so that the edge device 1900 is configured to execute: the edge equipment receives a second message in a second protocol format from the management server, and the load of the second message is packaged with a first message in a first protocol format; the edge device analyzes the second message to obtain a first message. For specific implementation, please refer to steps 1201-1210 in the embodiment shown in fig. 12, which are not described herein.

The edge devices 1900 may also include one or more power supplies 1902, one or more wired or wireless network interfaces 1903, one or more input/output interfaces 1904, and/or one or more operating systems, such as Windows ServerTM, mac OS XTM, unixTM, linuxTM, freeBSDTM, etc.

The edge device 1900 may perform the operations performed by the edge device in the embodiment shown in fig. 12, which are not described herein.

Accordingly, an embodiment of the present application provides an edge device management system 2000, where the edge device management system 2000 includes a management server 2001 and an edge device 2002, where the management server 2001 may perform operations performed by the management server in the embodiment shown in fig. 12, and the edge device 2002 may perform operations performed by the edge device in the embodiment shown in fig. 12, which are not described herein in detail.

In the above embodiments, it may be implemented in whole or in part by software, hardware, firmware, or any combination thereof. When implemented using a software program, it may be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, all or a portion of the flow (or functionality) described in embodiments of the application is implemented. The computer may be a general purpose computer, a special purpose computer, a computer network, or other programmable apparatus. The computer instructions may be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another computer-readable storage medium, for example, the computer instructions may be transmitted from one website, computer, server, or data center to another website, computer, server, or data center by a wired (e.g., coaxial cable, fiber optic, digital subscriber line (digital subscriber line, DSL)) or wireless (e.g., infrared, wireless, microwave, etc.). The computer readable storage medium may be any available medium that can be accessed by a computer or a data storage device including one or more servers, data centers, etc. that can be integrated with the medium. The usable medium may be a magnetic medium (e.g., floppy disk, hard disk, magnetic tape), an optical medium (e.g., DVD), or a semiconductor medium (e.g., solid State Disk (SSD)), etc. In an embodiment of the present application, the computer may include the apparatus described above.

Although the application is described herein in connection with various embodiments, other variations to the disclosed embodiments can be understood and effected by those skilled in the art in practicing the claimed application, from a study of the drawings, the disclosure, and the appended claims. In the claims, the word "comprising" does not exclude other elements or steps, and the "a" or "an" does not exclude a plurality. A single processor or other unit may fulfill the functions of several items recited in the claims. The mere fact that certain measures are recited in mutually different dependent claims does not indicate that a combination of these measures cannot be used to advantage.

Claims (19)

1. A method for managing an edge device, the method comprising:

The method comprises the steps that a management server packages a first message in a first protocol format into a second message in a second protocol format, and the load of the second message comprises the first message;

and the management server sends the second message to the edge equipment.

2. The method of claim 1, wherein before the management server encapsulates the first message in the first protocol format into the second message in the second protocol format, the method further comprises:

the management server establishes network connection with the edge equipment;

the management server authenticates the edge device;

the management server sends the second message to an edge device, including:

And under the condition that the authentication of the edge equipment is passed, the management server sends the second message to the edge equipment.

3. The method according to claim 2, wherein the method further comprises:

And when the edge equipment is authenticated, the management server sends an authentication passing notification to the edge equipment, wherein the authentication passing notification indicates the authentication of the edge equipment passing the management server.

4. A method according to any one of claims 1-3, wherein the method further comprises:

The management server receives an adding operation of the edge equipment from a user;

and the management server receives the edge equipment according to the indication of the adding operation.

5. The method of claim 4, wherein in the event that the edge device is authenticated, the method further comprises:

the management server stores network address information of the edge equipment;

the management server sends the second message to an edge device, including:

And the management server sends the second message to the edge equipment according to the network address information of the edge equipment.

6. The method according to any one of claims 1-5, further comprising:

the management server receives a third message in a second protocol format from the edge equipment, and the load of the third message is packaged with a fourth message in a first protocol format;

and the management server analyzes the third message to obtain the fourth message.

7. The method of claim 6, wherein the first protocol comprises redfish protocol and the second protocol comprises VPN protocol and webSocket protocol.

8. A method for managing an edge device, the method comprising:

The edge equipment receives a second message in a second protocol format from the management server, and the load of the second message is packaged with a first message in a first protocol format;

and the edge equipment analyzes the second message to obtain the first message.

9. The method of claim 8, wherein prior to the edge device receiving the second message in the second protocol format from the management server, the method further comprises:

the edge equipment acquires network address information of the management server;

and the edge equipment establishes network connection with the management server according to the network address information of the management server.

10. The method according to claim 9, wherein the method further comprises:

The edge device receives an authentication pass notification from the management server, the authentication pass notification indicating authentication of the edge device by the management server.

11. The method according to any one of claims 8-10, further comprising:

Responding to the second message, and generating a fourth message in the first protocol format by the edge equipment;

The edge device packages a fourth message in the first protocol format into a third message in the second protocol format, and the load of the third message comprises the fourth message;

And the edge equipment sends the third message to the management server.

12. The method of claim 11, wherein the first protocol comprises redfish protocol and the second protocol comprises VPN protocol and webSocket protocol.

13. A management server, the management server comprising:

The encapsulation module is used for encapsulating a first message in a first protocol format into a second message in a second protocol format, and the load of the second message comprises the first message;

and the sending module is used for sending the second message to the edge equipment.

14. An edge device, the edge device comprising:

The receiving module is used for receiving a second message in a second protocol format from the management server, and the load of the second message is packaged with a first message in a first protocol format;

And the analysis module is used for analyzing the second message to obtain the first message.

15. A management server, wherein the management server comprises a processor and a memory; the processor is coupled with the memory; the memory is for storing computer instructions to be loaded and executed by the processor to cause a management server to implement the method of any of claims 1-7.

16. An edge device, the edge device comprising a processor and a memory; the processor is coupled with the memory; the memory is configured to store computer instructions that are loaded and executed by the processor to cause an edge device to implement the method of any of claims 8-12.

17. A computer readable storage medium having stored therein at least one computer program instruction that is loaded and executed by a processor to implement the method of any of claims 1-7.

18. A computer readable storage medium having stored therein at least one computer program instruction that is loaded and executed by a processor to implement the method of any of claims 8-12.

19. A communication system comprising a management server for performing the method of any of claims 1-7 and an edge device for performing the method of any of claims 8-12.