Mixed policy loading system and method for realizing policy management

Abstract

The present invention discloses a mixed strategy loading system. It contains strategy type information describing file, strategy management process defining unit, strategy process executing unit, strategy topological data management unit. The present invention also discloses a method to realize strategy management, said method reading method of extraction from memory, extracting strategy raw data, then reading formatting and global processing method, to proceed formatting and global processing to raw data.

Description

Technical field [0001] The invention relates to a technology for centralized management of network equipment, in particular to a hybrid strategy loading system for performing strategy services in a centralized manager and a method for implementing strategy management. Background technique [0002] With the increasing scale of the network environment, the number of various devices in the network has also increased sharply, including various routing and switching devices, storage devices, and numerous security devices, such as firewalls, and intrusion detection systems (IDS, Intrusion Detection System) and many more. [0003] A very important aspect of the management of many network devices is to set various operating environment parameters for these devices, as well as various operating conditions of the devices, which are all classified as strategic management of the devices. [0004] An initial method of device policy management is to log in directly to the device or perform one...

AI Technical Summary

Problems solved by technology

[0008] First of all, the existing centralized manager can only process different policies separately, and cannot realize mixed management of multiple policies at the same time. At the same time, since different policy management modules are developed for different devices, each policy management module independently Policy management. Therefore, when the centralized manager faces a large number of policy requests at the same time, it cannot flexibly respond to different policy requests according to the overall network. The policy management efficiency is low and the system resources are seriously consumed. Secondly, each policy management module in the centralized manager is independent Development and operation make policy expansion lack the necessary capabilities, resulting in the need to re-develop a policy management module for each policy expansion, wasting human resources and high development costs; thirdly, due to the lack of connection and collaboration between different policy management modules, Therefore, the coordination problem formed between different strategies cannot be solved quickly, and because the centralized manager lacks the necessary internal connection structure, it is difficult to integrate the newly developed strategy management module into the original system; in addition, in the strategy management The policy extraction process and formatting process in the module are mixed together. The policy extraction process will mostly occupy other system resources, such as file access, database access, or network access. At the same time, the policy formatting time will also be calculated in Within the use of the entire resource, the two are added together, which makes the occupancy rate of the system resource too high

Images