| At present,the operation and maintenance security audit system is built using virtual machine technology,which has reduced the system’s operation and maintenance costs to a certain extent.However,due to factors such as the complexity of the network environment and the differences between servers,the installation and deployment process of the system is extremely complex.A large amount of operation and maintenance work in the later stage,high coupling between components,and difficulties in upgrading all affect the cost and efficiency of using the system in a production environment.The emergence of Docker container technology has made system development and deployment easier and more efficient while improving application portability and scalability.Therefore,it is necessary to use Docker container technology to simplify the deployment and reduce the operation and reduce the costs of the system,and provide safe and reliable new functions for users of the system in time.This paper studies Docker container technology,container choreography technology,load balancing and high availability technology,and systematically analyzes the actual situation of the operation and maintenance security audit system of a telecommunications company affiliated to the State Grid,then points out the problems exposed by the current cluster deployment mode of the system under the condition that the field workload is rapidly increasing.By analyzing the advantages of Docker container deployment,this paper proposes the conclusion of applying Docker container technology to the system,and gives the overall architecture of the system based on Docker technology,which is divided into four modules according to system functions.The first is the Web Services module,which proposes and implements a Redis-based Session storage design,and proposes and designs a dynamic load balancing strategy based on Nginx for the shortcomings of Nginx’s own load balancing strategy to achieve highly available access to Web services.The second is the proxy service module,mainly designed based on the ClusterIP service exposure scheme to achieve proxy service exposure inside the container cluster,and based on the HPA proposed a custom metric elastic scaling policy to achieve elastic scaling of proxy services according to the load of nodes.The third is the data storage module,which designs a highly available data storage cluster to achieve the availability,reliability,and consistency of MySQL data,Redis memory data,and disk data of the operation and maintenance security audit system.The fourth is the cluster management module,aiming at the fact that Etcd storage nodes are prone to failures in actual production environments,this module designs and implements a Etcd storage management module to improve the high availability of Etcd clusters effectively and designs the Kubernetes cluster control node high availability architecture to ensure the availability and stability of the Kubernetes cluster,ensuring the system can always run reliably.Finally,according to the design of each module to complete the development of the corresponding functions.Based on building Kubernetes cluster,this paper realizes the deployment of operation and maintenance security audit system based on Docker technology,and completes the testing and verification for system functions and performance.The results demonstrate that applying Docker container technology to the operation and maintenance security audit system is implementable and effective,which is of great significance for improving the availability of the operation and maintenance security audit system,reducing system deployment costs,and improving operation and maintenance efficiency. |