US20180324274A1 - Information system, control apparatus, method of providing virtual network, and program - Google Patents
Information system, control apparatus, method of providing virtual network, and program Download PDFInfo
- Publication number
- US20180324274A1 US20180324274A1 US16/034,981 US201816034981A US2018324274A1 US 20180324274 A1 US20180324274 A1 US 20180324274A1 US 201816034981 A US201816034981 A US 201816034981A US 2018324274 A1 US2018324274 A1 US 2018324274A1
- Authority
- US
- United States
- Prior art keywords
- node
- virtual
- physical
- virtual network
- storage unit
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Abandoned
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L12/00—Data switching networks
- H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
- H04L12/46—Interconnection of networks
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/50—Network services
- H04L67/60—Scheduling or organising the servicing of application requests, e.g. requests for application data transmissions using the analysis and optimisation of the required network resources
-
- H04L67/32—
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L12/00—Data switching networks
- H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
- H04L12/46—Interconnection of networks
- H04L12/4604—LAN interconnection over a backbone network, e.g. Internet, Frame Relay
- H04L12/462—LAN interconnection over a bridge based backbone
- H04L12/4625—Single bridge functionality, e.g. connection of two networks over a single bridge
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L12/00—Data switching networks
- H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
- H04L12/46—Interconnection of networks
- H04L12/4641—Virtual LANs, VLANs, e.g. virtual private networks [VPN]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L45/00—Routing or path finding of packets in data switching networks
- H04L45/38—Flow based routing
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L45/00—Routing or path finding of packets in data switching networks
- H04L45/64—Routing or path finding of packets in data switching networks using an overlay routing layer
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L45/00—Routing or path finding of packets in data switching networks
- H04L45/02—Topology update or discovery
Definitions
- the present invention relates to an information system, a control apparatus, a method of providing a virtual network, and a program. More specifically, the invention relates to an information system configured using a forwarding node for processing a received packet according to a processing rule (packet handling operation) which matches the received packet, a control apparatus, a method of providing a virtual network, and a program.
- a processing rule packet handling operation
- OpenFlow OpenFlow
- Patent Literature 1 the technology called OpenFlow (OpenFlow) is proposed (refer to Patent Literature 1, and Non Patent Literatures 1 and 2).
- OpenFlow communication is treated as an end-to-end flow, and path control, failure recovery, load distribution, and optimization are performed on a per-flow basis.
- An OpenFlow switch specified in Non Patent Literature 2 includes a secure channel for communication with an OpenFlow controller corresponding to a control apparatus.
- the OpenFlow switch operates according to a flow table in which appropriate adding or rewriting is instructed by the OpenFlow controller.
- a set of a matching rule (Header Fields) to be matched against a packet header, flow statistics information (Counters), and actions (Actions) defining processing content is defined for each flow (refer to FIG. 17 ).
- the OpenFlow switch When the OpenFlow switch receives a packet, the OpenFlow switch searches the flow table for an entry having a matching rule that matches header information of the received packet (refer to the header fields in FIG. 17 ). When the entry that matches the received packet is found as a result of the search, the OpenFlow switch updates the flow statistics information (one or more counters), and executes processing content (e.g., transmission of the packet from a specified port, flooding of the packet, discarding of the packet, or the like) described in the action field of the entry.
- processing content e.g., transmission of the packet from a specified port, flooding of the packet, discarding of the packet, or the like
- the OpenFlow switch forwards the received packet to the OpenFlow controller through the secure channel, and requests the OpenFlow controller to determine a path of the packet, based on the transmission source and the transmission destination of the received packet.
- the OpenFlow switch receives a flow entry for implementing this path, and then updates the flow table. In this manner, the OpenFlow switch performs packet forwarding by using an entry stored in the flow table as a processing rule (packet handling operation).
- association between a physical node such as the OpenFlow switch (hereinafter referred to as the “physical node”) and a virtual node is problematic especially when providing the virtual network.
- the physical node or the interface of the physical node
- the correspondence relationship between the physical node and the virtual node must be updated whenever the configuration of the network is changed.
- an information system comprising:
- the control apparatus comprises:
- the control apparatus determines the virtual network(s) and the virtual node(s) to which the one of the one or more external nodes is (are) to be connected, based on information on the physical node(s) to which the external node(s) is connected and information on the external node(s).
- first storage unit that defines a correspondence relationship between each of the plurality of physical nodes and one of one or more virtual networks
- second storage unit that defines a correspondence relationship between each of the one or more external nodes and a virtual node on one of the one or more virtual networks.
- the control apparatus determining the virtual network(s) and the virtual node(s) to which the one of the one or more external nodes is to be connected, based on information on the physical node(s) to which the external node(s) is connected and information on the external node(s);
- the control apparatus sets the processing rule in each of the plurality of physical nodes including the physical node(s) corresponding to the virtual node(s), thereby causing the plurality of the physical nodes to operate as virtual nodes on the virtual network that may be used by the one or more external nodes.
- a method of providing a virtual network comprises using a control apparatus connected to a plurality of physical nodes each of which processes a packet received from one of one or more external nodes according to a processing rule (packet handling operation) that associates a matching rule for identifying a flow and processing content to be applied to a packet that matches the matching rule.
- the method comprises the steps of:
- determining the virtual network(s) and the virtual node(s) to which the one of the one or more external nodes is to be connected based on information on the physical node(s) to which the external node(s) is connected and information on the external node(s) by referring to a first storage unit which defines a correspondence relationship between each of the plurality of physical nodes and one of one or more virtual networks and a second storage unit which defines a correspondence relationship between each of the one or more external nodes and a virtual node(s) on one of the one or more virtual networks;
- a program for causing a computer constituting a control apparatus the control apparatus being connected to a plurality of physical nodes each of which processes a packet received from one of one or more external nodes according to a processing rule (packet handling operation) that associates a matching rule for identifying a flow and processing content to be applied to a packet that matches the matching rule.
- the control apparatus comprises:
- the program causes the computer to execute processes of:
- the virtual node(s) to be treated as having an external node(s) connected thereto can be determined, and a service using the virtual network starting from the virtual node can be provided.
- FIG. 4 is a table for explaining a processing rule held in the physical node in the first exemplary embodiment of the present invention.
- FIG. 5 is a diagram showing a configuration of a control server in the first exemplary embodiment of the present invention.
- FIG. 8 is a table for explaining physical-virtual position conversion information held in the physical-virtual conversion information storage unit of the control server in the first exemplary embodiment of the present invention.
- FIG. 10 is a table for explaining physical position-virtual network conversion information held in the physical-virtual conversion information storage unit of the control server in the first exemplary embodiment of the present invention.
- FIG. 12 is a sequence diagram showing operations of the physical node in the first exemplary embodiment of the present invention.
- FIG. 13 is a sequence diagram showing operations of the control server in the first exemplary embodiment of the present invention.
- FIG. 14 is a sequence diagram showing another operations of the control server in the first exemplary embodiment of the present invention.
- FIG. 15 is a sequence diagram showing another operations of the control server in the first exemplary embodiment of the present invention.
- FIG. 16 is a sequence diagram showing another operations of the control server in the first exemplary embodiment of the present invention (when an external node has moved).
- FIG. 17 is a diagram showing a configuration of a flow entry described in Non Patent Literature 2.
- the present invention can be implemented by a configuration of the exemplary embodiment including a plurality of physical nodes and a control server (control apparatus) 20 , as shown in FIG. 1 .
- Each of the plurality of physical nodes processes a packet received from one of external nodes 30 A to 30 D according to a processing rule which associates a matching rule for identifying a flow and processing content to be applied to a packet that matches the matching rule.
- the control server 20 sets the processing rule in each of the plurality of physical nodes, thereby operating each of the plurality of physical nodes as virtual nodes on a virtual network which can be used by the external nodes 30 A to 30 D.
- reference symbols in drawings appended to this overview are added to respective elements for helping understanding as an example, and are not intended to limit the present invention to the mode shown in the drawings.
- the virtual network and the virtual node to which the external node is connected can be uniquely determined based on information on the physical node and the external node.
- the determined virtual node can be associated with the physical node of a moving destination even if the external node has moved like the external node 30 A in FIG. 1 , for example (refer to reference numeral 510 or 520 in FIG. 1 ).
- communication of the flow can be continued.
- FIG. 2 is a diagram showing an overall configuration of the first exemplary embodiment of the present invention.
- physical nodes 10 A to 10 C a control server (control apparatus) 20 which sets a processing rule in each of these physical nodes 10 A to 10 C, and external nodes 30 A to 30 D each of which communicates with a different one of the external nodes through one of the physical nodes 10 A to 10 C are illustrated.
- FIG. 3 is a block diagram showing a detailed configuration of each of the physical nodes 10 A to 10 C (hereinafter written as a “physical node 10 ” and an “external node 30 ” when there is no particular need for making a distinction among the physical nodes and a distinction among the external nodes).
- FIG. 3 there is shown the configuration of the physical node 10 including a packet processing unit 101 which processes a received packet, a processing rule storage unit 102 which holds the processing rule set by the control server 20 , and a control server communication unit 103 that communicates with the control server 20 .
- FIG. 4 is a table for explaining processing rules 102 A held in the processing rule storage unit 102 .
- each processing rule has a configuration where a matching rule for identifying a flow and processing content (action) to be applied to a packet that matches the matching rule are associated.
- the physical node 10 in this exemplary embodiment performs aging of each processing rule.
- the packet processing unit 101 When receiving a packet, the packet processing unit 101 searches the processing rule storage unit 102 for a processing rule having a matching rule which matches the received packet. When the corresponding processing rule is present in the processing rule storage unit 102 , the packet processing unit 101 executes processing content (such as outputting of the packet from a port # 1 ) defined in the processing rule.
- the physical node 10 as mentioned above can be constituted by an OpenFlow switch that operates in a similar manner to that described above and described in Non Patent Literature 2.
- FIG. 5 is a diagram showing a detailed configuration of the control server 20 in the first exemplary embodiment of the present invention.
- the control server 20 is constituted from a physical node control unit 201 , a path control unit 202 , a virtual network control unit 203 , and storage units.
- the physical node control unit 201 controls the physical node 10 by setting a processing rule in the physical node 10 .
- the path control unit 202 calculates a packet forwarding path based on a network topology formed by the physical nodes 10 , or the like.
- the virtual network control unit 203 controls the virtual network constructed on the control server 20 .
- Each of the storage units stores information to be referred to by each of these control units.
- a physical node information storage unit 204 of the control server 20 is means for storing information on the physical node 10 received from the physical node 10 .
- a physical node ID for uniquely identifying the physical node 10 a physical port ID for uniquely identifying a physical port (interface) of the physical node 10 , setting and a status of the physical port, a state of connection of the physical node 10 to the control server 20 , and the like may be pointed out.
- a physical topology information storage unit 206 of the control server 20 stores a connection link state (network topology) among the physical nodes 10 .
- a virtual network path information storage unit 207 of the control server 20 stores a correspondence relationship between each flow (physical flow) on the physical network managed by the forwarding path information storage unit 205 and a flow (virtual flow) between virtual nodes at arbitrary two points on the virtual network.
- a physical-virtual conversion information storage unit 208 of the control server 20 stores a correspondence relationship between physical network position information and virtual network position information. These physical network position information and virtual network position information can also be put into a correspondence relationship between each physical node and a virtual node on the virtual network. Details of the correspondence relationship will be described later in detail using FIG. 7 .
- FIG. 7 is a diagram for explaining information held in the physical-virtual conversion information storage unit.
- a configuration including a physical-virtual position conversion information storage unit (third storage unit) 2081 , a physical position-virtual network conversion information storage unit (first storage unit) 2083 , and an external node-virtual position conversion information storage unit (second storage unit) 2082 is shown.
- the physical-virtual position conversion information storage unit 2081 holds an entry (physical-virtual position conversion information 2081 A) as shown in FIG. 8 , which associates a set of the physical node ID of the physical node, the physical port ID and the VLAN-TAG of the physical node with a virtual network ID, a virtual node ID, and a virtual interface ID.
- the set of the physical node ID, the physical port ID, and the VLAN-TAG (that is not an essential item, however) will be referred to as “physical network position information”
- the virtual network ID, the virtual node ID, and the virtual interface ID will be referred to as “virtual network position information”.
- the external node-virtual position conversion information storage unit 2082 holds an entry (external node-virtual position conversion information 2082 A) as shown in FIG. 9 , which associates information such as a transmission source MAC address, a transmission source IP address, or a transmission source network address for identifying the external node with the virtual network position information.
- the physical position-virtual network conversion information storage unit 2083 holds an entry (physical information-virtual network conversion information 2083 A) as shown in FIG. 10 , which associates the physical network position information with the virtual network ID.
- the path control unit 202 includes a function of determining the path between the physical nodes 10 at the arbitrary two points by referring to the connection link state (network topology) among the physical nodes 10 held in the physical topology information storage unit 206 .
- the path control unit 202 also includes a function of causing the physical node control unit 201 to set the processing rule for implementing the path in each physical node 10 and constructing the flow to be communicated between the physical ports of the physical nodes 10 at the arbitrary two points.
- the path control unit 202 also includes a function of notifying deletion of the processing rule to the virtual network control unit 203 when receiving the notification of deletion of the processing rule from the physical node 10 .
- the virtual network control unit 203 includes a function of identifying the virtual network position information corresponding to the position information on the physical node 10 on the physical network and implementing transmission and reception of a packet between the physical network and the virtual network.
- the virtual network control unit 203 also includes a function of emulating communication on the virtual network and then determining an End-To-End communication flow between the virtual nodes at arbitrary two points of the virtual network.
- the virtual network control unit 203 also includes a function of converting the communication flow on the virtual network to an End-To-End communication flow between the physical nodes at arbitrary two points on the physical network, and then instructing the path control unit 202 to set a path on the physical network and set a processing rule that implements the path.
- FIG. 11 shows an example of the virtual network to be managed by the virtual network control unit 203 as described above.
- the virtual network is configured by using the virtual nodes such as a virtual router V 1 , a virtual firewall V 2 , a virtual load balancer V 3 , a virtual bridge V 4 , virtual servers V 5 and V 6 , virtual interfaces belonging to these virtual nodes, and a virtual link connecting the virtual interfaces, as shown in FIG. 11 .
- FIG. 12 is a sequence diagram showing operations of the physical node that has received a packet from the external node 30 .
- the external node such as the external node 30 A in FIG. 2
- the physical node 10 searches for a processing rule having a matching rule which matches the received packet (in step S 1 - 2 ). It is assumed herein that the packet is a first packet addressed from the external node (such as the external node 30 A in FIG.
- the virtual network control unit 203 refers to the physical-virtual position information storage unit 2081 to search for the virtual network position information corresponding to the physical network position information included in the processing rule setting request (in step S 1 - 6 ). Since the virtual network position information corresponding to the physical network position information is herein registered in the physical-virtual position conversion information storage unit 2081 , the virtual network control unit 203 identifies the virtual node corresponding to the identified virtual network position information using the virtual network configuration information storage unit 209 (in step S 1 - 7 ), and transmits the packet to the identified virtual node (physical node corresponding to the virtual node) (in step S 1 - 8 ).
- the virtual network control unit 203 When it is found as a result of the search that the corresponding virtual network ID is registered in the physical position-virtual network conversion information storage unit 2083 , the virtual network control unit 203 further refers to the external node-virtual position conversion information storage unit 2082 to search for the virtual network position information corresponding to information for identifying the external node that is one of the transmission source MAC address, the transmission source IP address, or the transmission source network address included in the packet header of the received packet (in step S 1 - 10 ).
- the virtual network control unit 203 adds an entry that associates the physical network position information and the virtual network position information identified from the external node-virtual position conversion information storage unit 2082 to the physical-virtual position conversion information storage unit 2081 (in step S 1 - 11 ).
- the processing rule setting request is received again from the same physical node, a packet can be directly transmitted to the virtual node identified by referring to the physical-virtual position information storage unit 2081 , according to the sequence in FIG. 13 .
- the virtual network control unit 203 searches the physical-virtual position conversion information storage unit 2081 for a physical position-virtual position conversion information entry that associates the physical network position information and virtual network position information (in step S 1 - 20 ).
- the external node 30 When the external node 30 has moved, the physical port of another one of the physical nodes that receives a packet from the external node 30 is changed. Then, the external node 30 transmits a GARP (Gratuitous Address Resolution Protocol) packet to the another one of the physical nodes (such as the physical node 10 B in FIG. 2 ).
- GARP Genetic Address Resolution Protocol
- the physical node 10 that has received the GARP packet transmits a processing rule setting request to the control server 20 according to the sequence shown in FIG. 12 .
- FIG. 16 is a sequence diagram showing operations of the control server which has received the processing rule setting request with respect to the GARP packet transmitted from the above-mentioned external node that has moved.
- the virtual network control unit 203 refers to the physical-virtual position conversion information storage unit 2081 to search for virtual network position information corresponding to physical network position information included in the processing rule setting request (in step S 2 - 2 ).
- the virtual network position information corresponding to the physical network position information is not registered in the physical-virtual position conversion information storage unit 2081 due to movement of the external node.
- the virtual network control unit 203 refers to the physical position-virtual network conversion information storage unit 2083 to search for a virtual network ID corresponding to the physical network position information (in step S 2 - 3 ).
- the external node 30 was using the virtual network until the external node 30 has moved.
- the virtual network ID corresponding to the physical network position information is registered in the physical position-virtual network conversion information storage unit 2083 .
- the virtual network control unit 203 further refers to the external node-virtual position conversion information storage unit 2082 to search for virtual network position information corresponding to information for identifying the external node that is one of the transmission source MAC address, the transmission source IP address and the transmission source network address (in step S 2 - 4 ).
- the virtual network control unit 203 adds an entry that associates the physical network position information and the virtual network position information identified from the external node-virtual position conversion information storage unit 2082 to the physical-virtual position conversion information storage unit 2081 (in step S 2 - 5 ).
- the virtual network control unit 203 determines that the external node 30 has moved, and then refers to the virtual network path information storage unit 207 to search for a flow (virtual flow) associated with the physical network position information, (in step S 2 - 6 ).
- the virtual network control unit 203 instructs the path control unit 202 to delete a flow (physical flow) associated with the flow (virtual flow) (in step S 2 - 7 ).
- the path control unit 202 refers to the forwarding path information storage unit 205 to obtain a series of processing rules for implementing the flow (physical flow) (in step S 2 - 8 ).
- the path control unit 202 instructs deletion of all of the processing rules to the physical node control unit 201 (in step S 2 - 9 ).
- the physical node control unit 201 instructs the physical nodes 10 which hold the processing rules instructed to be deleted to delete these processing rules (in step S 2 - 10 ). Thereafter, processes similar to those in steps S 1 - 12 to S 1 - 21 in FIG. 15 are performed.
- the physical network position information and the virtual network position information are dynamically associated, thereby making it possible to eliminate the need for setting the physical port of the physical node that connects the external node in advance. Further, according to this exemplary embodiment, even if the external node 30 has physically moved, communication on the virtual network can be continued, as described above.
- the present invention is not limited to the above-mentioned exemplary embodiment. Further variation, substitution, and adjustment are possible within the technical concept of the present invention.
- the numbers of the physical nodes and the virtual nodes disclosed in the above-mentioned exemplary embodiment are exemplified in order to briefly explain the present invention, and are not of course limited to these numbers.
- the number of the virtual networks is not, however, limited to one in particular.
- the control apparatus determines the virtual network and the virtual node to which the external node is to be connected, based on information on the physical node that has transmitted the request for setting the processing rule and information on the external node included in the request for setting the processing rule.
- control apparatus further comprises:
- a third storage unit which stores a correspondence relationship among the physical node, the determined virtual network and the determined virtual node
- control apparatus when receiving the request for setting the processing rule from the physical node, the control apparatus refers to the third storage unit, and then when a corresponding entry may not be able to be discovered, the control apparatus refers to the first and second storage units to determine the virtual network and the virtual node to which the external node is to be connected, and then stores in the third storage unit the correspondence relationship among the physical node, the determined virtual network, and the determined virtual node.
- virtual network association is made for each interface of each of the plurality of physical nodes in the first storage unit.
- control apparatus makes virtual network determination according to the interface of the physical node that has received a packet related to a request for setting the processing rule.
- information on the virtual node on the virtual network and a virtual interface of the virtual node is associated, for each of the one or more external nodes;
- control apparatus treats the external node as being connected to the virtual node on the virtual network through the virtual interface.
- Each component and each step of the method of providing a virtual network and the program can be similarly developed into the second to sixth exemplary embodiments, like the information system in the first exemplary embodiment.
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Security & Cryptography (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
An information system of the present invention includes a plurality of physical nodes each of which processes a packet received from external node(s) according to a processing rule (packet handling operation) that associates a matching rule for identifying a flow and processing content to be applied to a packet that matches the matching rule, and a control apparatus which sets the processing rule in each of the plurality of physical nodes, thereby causing the plurality of physical nodes to operate as virtual nodes on a virtual network(s) usable by the external node(s). The control apparatus includes a first storage unit defining a correspondence relationship between each of the plurality of physical nodes and virtual network(s), and a second storage unit defining a correspondence relationship between each of the external node(s) and virtual node(s) on virtual network(s). The control apparatus determines the virtual network(s) and the virtual node(s) to which the external node(s) is to be connected, based on information on the physical node(s) to which the external node is connected and information on the external node(s).
Description
- This application is a continuation application of application Ser. No. 13/976,721, filed Jun. 27, 2013, which is a National Stage of International Application No. PCT/JP2011/080181 filed Dec. 27, 2011, claiming priority based on Japanese Patent Application No. 2010-292014 filed Dec. 28, 2010, the contents of all of which are incorporated herein by reference in their entirety.
- The present invention relates to an information system, a control apparatus, a method of providing a virtual network, and a program. More specifically, the invention relates to an information system configured using a forwarding node for processing a received packet according to a processing rule (packet handling operation) which matches the received packet, a control apparatus, a method of providing a virtual network, and a program.
- In recent years, the technology called OpenFlow (OpenFlow) is proposed (refer to
Patent Literature 1, andNon Patent Literatures 1 and 2). In the OpenFlow, communication is treated as an end-to-end flow, and path control, failure recovery, load distribution, and optimization are performed on a per-flow basis. An OpenFlow switch specified inNon Patent Literature 2 includes a secure channel for communication with an OpenFlow controller corresponding to a control apparatus. The OpenFlow switch operates according to a flow table in which appropriate adding or rewriting is instructed by the OpenFlow controller. In the flow table, a set of a matching rule (Header Fields) to be matched against a packet header, flow statistics information (Counters), and actions (Actions) defining processing content is defined for each flow (refer toFIG. 17 ). - When the OpenFlow switch receives a packet, the OpenFlow switch searches the flow table for an entry having a matching rule that matches header information of the received packet (refer to the header fields in
FIG. 17 ). When the entry that matches the received packet is found as a result of the search, the OpenFlow switch updates the flow statistics information (one or more counters), and executes processing content (e.g., transmission of the packet from a specified port, flooding of the packet, discarding of the packet, or the like) described in the action field of the entry. On the other hand, when the entry that matches the received packet is not found as a result of the search, the OpenFlow switch forwards the received packet to the OpenFlow controller through the secure channel, and requests the OpenFlow controller to determine a path of the packet, based on the transmission source and the transmission destination of the received packet. The OpenFlow switch receives a flow entry for implementing this path, and then updates the flow table. In this manner, the OpenFlow switch performs packet forwarding by using an entry stored in the flow table as a processing rule (packet handling operation). -
- International Publication No. WO2008/095010
-
- Nick McKeown and seven other authors, “OpenFlow: Enabling Innovation in Campus Networks, [on line], [Searched on December 1, Heisei 22 (2010)], Internet, openflowswitch.org).
-
- “OpenFlow Switch Specification” Version 1.0.0 (Wire Protocol 0x01), [Searched on December 1 Heisei 22 (2010)], Internet, (openflowswitch.org).
- Each disclosure of the above-listed Patent Literature and Non Patent Literatures is incorporated herein by reference. The following analysis is given by the present invention.
- Example 2 on page 5 in
Non Patent Literature 1 describes that a virtual network such as a VLAN (Virtual Local Area Network) can be provided by using the OpenFlow system as mentioned above. As a method of identifying a user traffic in that case, Example 2 describes identification of the individual user traffic by using the port or MAC (Media Access Control) address of the OpenFlow switch, and describes provision of an appropriate VLAN ID to the OpenFlow switch, user authorization by the controller, and consideration of the location of a user when the VALN ID is provided. - The above-mentioned
Non Patent Literature 1, however, just discloses the method of providing the VLAN ID (or determining the virtual network), and does not mention provision of the OpenFlow switch for use by the user by causing the OpenFlow switch to operate as a virtual node or a virtual front end system on the virtual network. - Association between a physical node such as the OpenFlow switch (hereinafter referred to as the “physical node”) and a virtual node is problematic especially when providing the virtual network. When the physical node (or the interface of the physical node) is statically associated in a one-to-one correspondence with the virtual node (or the interface of the virtual node), there is a problem that a user movement cannot be accommodated until the correspondence relationship is updated. There is also a problem that the correspondence relationship between the physical node and the virtual node must be updated whenever the configuration of the network is changed.
- It is an object of the present invention to provide a configuration and a method capable of dynamically and easily associating a physical node and a virtual node in an information system represented by OpenFlow where a control apparatus controls a plurality of physical nodes.
- According to a first aspect, there is provided an information system comprising:
- a plurality of physical nodes each of which processes a packet received from one of one or more external nodes according to a processing rule (packet handling operation) that associates a matching rule for identifying a flow and processing content to be applied to a packet that matches the matching rule; and
a control apparatus which sets the processing rule in each of the plurality of physical nodes, thereby causing the plurality of physical nodes to operate as virtual nodes on a virtual network that may be used by the one or more external nodes. - The control apparatus comprises:
- a first storage unit which defines a correspondence relationship between each of the plurality of physical nodes and one of one or more virtual networks; and
a second storage unit which defines a correspondence relationship between each of the one or more external nodes and a virtual node on one of the one or more virtual networks; - The control apparatus determines the virtual network(s) and the virtual node(s) to which the one of the one or more external nodes is (are) to be connected, based on information on the physical node(s) to which the external node(s) is connected and information on the external node(s).
- According to a second aspect, there is provided a control apparatus. The control apparatus is connected to a plurality of physical nodes each of which processes a packet received from one of one or more external nodes according to a processing rule (packet handling operation) that associates a matching rule for identifying a flow and processing content to be applied to a packet that matches the matching rule.
- The control apparatus comprises:
- a first storage unit that defines a correspondence relationship between each of the plurality of physical nodes and one of one or more virtual networks; and
a second storage unit that defines a correspondence relationship between each of the one or more external nodes and a virtual node on one of the one or more virtual networks. - The control apparatus determining the virtual network(s) and the virtual node(s) to which the one of the one or more external nodes is to be connected, based on information on the physical node(s) to which the external node(s) is connected and information on the external node(s);
- The control apparatus sets the processing rule in each of the plurality of physical nodes including the physical node(s) corresponding to the virtual node(s), thereby causing the plurality of the physical nodes to operate as virtual nodes on the virtual network that may be used by the one or more external nodes.
- According to a third aspect, there is provided a method of providing a virtual network. The method comprises using a control apparatus connected to a plurality of physical nodes each of which processes a packet received from one of one or more external nodes according to a processing rule (packet handling operation) that associates a matching rule for identifying a flow and processing content to be applied to a packet that matches the matching rule. The method comprises the steps of:
- determining the virtual network(s) and the virtual node(s) to which the one of the one or more external nodes is to be connected, based on information on the physical node(s) to which the external node(s) is connected and information on the external node(s) by referring to a first storage unit which defines a correspondence relationship between each of the plurality of physical nodes and one of one or more virtual networks and a second storage unit which defines a correspondence relationship between each of the one or more external nodes and a virtual node(s) on one of the one or more virtual networks; and
- causing the plurality of physical nodes to operate as virtual nodes on the virtual network that may be used by the one or more external nodes by setting the processing rule in each of the plurality of physical nodes including the physical node(s) corresponding to the virtual node(s) This method is associated with a specific machine, which is the control apparatus that sets the processing rule in each of the plurality of physical nodes.
- According to a fourth aspect, there is provided a program for causing a computer constituting a control apparatus, the control apparatus being connected to a plurality of physical nodes each of which processes a packet received from one of one or more external nodes according to a processing rule (packet handling operation) that associates a matching rule for identifying a flow and processing content to be applied to a packet that matches the matching rule. The control apparatus comprises:
- a first storage unit that defines a correspondence relationship between each of the plurality of physical nodes and one of one or more virtual networks; and
a second storage unit that defines a correspondence relationship between each of the one or more external nodes and a virtual node on one of the one or more virtual networks. The program causes the computer to execute processes of: - determining the virtual network(s) and the virtual node(s) to which the one of the one or more external nodes is to be connected, based on information on the physical node(s) to which the external node(s) is connected and information on the external node(s); and
- causing the plurality of physical nodes to operate as virtual nodes on the virtual network(s) that may be used by the one or more external nodes by setting the processing rule in each of the plurality of physical nodes including the physical node(s) corresponding to the virtual node(s). This program can be recorded in a computer readable recording medium. That is, the present invention can also be embodied as a computer program product.
- The meritorious effects of the present invention are summarized as follows.
- According to the present invention, even if each physical node(s) and virtual node(s) are not associated in a one-to-one correspondence relationship, the virtual node(s) to be treated as having an external node(s) connected thereto can be determined, and a service using the virtual network starting from the virtual node can be provided.
-
FIG. 1 is a diagram for explaining an overview of the present invention. -
FIG. 2 is a diagram showing an overall configuration of a first exemplary embodiment of the present invention. -
FIG. 3 is a diagram showing a configuration of a physical node in the first exemplary embodiment of the present invention. -
FIG. 4 is a table for explaining a processing rule held in the physical node in the first exemplary embodiment of the present invention. -
FIG. 5 is a diagram showing a configuration of a control server in the first exemplary embodiment of the present invention. -
FIG. 6 is a table for explaining virtual network configuration information held in the control server in the first exemplary embodiment of the present invention. -
FIG. 7 is a diagram for explaining information held in a physical-virtual conversion information storage unit of the control server in the first exemplary embodiment of the present invention. -
FIG. 8 is a table for explaining physical-virtual position conversion information held in the physical-virtual conversion information storage unit of the control server in the first exemplary embodiment of the present invention. -
FIG. 9 is a table for explaining external node-virtual position conversion information held in the physical-virtual conversion information storage unit of the control server in the first exemplary embodiment of the present invention. -
FIG. 10 is a table for explaining physical position-virtual network conversion information held in the physical-virtual conversion information storage unit of the control server in the first exemplary embodiment of the present invention. -
FIG. 11 shows an example of a virtual network to be implemented by the configuration of the first exemplary embodiment of the present invention. -
FIG. 12 is a sequence diagram showing operations of the physical node in the first exemplary embodiment of the present invention. -
FIG. 13 is a sequence diagram showing operations of the control server in the first exemplary embodiment of the present invention. -
FIG. 14 is a sequence diagram showing another operations of the control server in the first exemplary embodiment of the present invention. -
FIG. 15 is a sequence diagram showing another operations of the control server in the first exemplary embodiment of the present invention. -
FIG. 16 is a sequence diagram showing another operations of the control server in the first exemplary embodiment of the present invention (when an external node has moved). -
FIG. 17 is a diagram showing a configuration of a flow entry described inNon Patent Literature 2. - First, an overview of an exemplary embodiment of the present invention will be described. The present invention can be implemented by a configuration of the exemplary embodiment including a plurality of physical nodes and a control server (control apparatus) 20, as shown in
FIG. 1 . Each of the plurality of physical nodes processes a packet received from one ofexternal nodes 30A to 30D according to a processing rule which associates a matching rule for identifying a flow and processing content to be applied to a packet that matches the matching rule. Thecontrol server 20 sets the processing rule in each of the plurality of physical nodes, thereby operating each of the plurality of physical nodes as virtual nodes on a virtual network which can be used by theexternal nodes 30A to 30D. For convenience, reference symbols in drawings appended to this overview are added to respective elements for helping understanding as an example, and are not intended to limit the present invention to the mode shown in the drawings. - More specifically, the
control server 20 includes a first storage unit which defines a correspondence relationship between each of the physical nodes and one of one or more virtual networks and a second storage unit which defines a correspondence relationship between each of the external nodes and a virtual node on one of the one or more virtual networks. The control apparatus determines the virtual network and the virtual node to which the one of the external nodes is to be connected, based on information on the physical node (such as aphysical node 10A inFIG. 1 ) to which the external node is connected and information on the external node. - According to the above-mentioned configuration, even if each physical node and a virtual node are not associated with each other in a one-to-one correspondence relationship, the virtual network and the virtual node to which the external node is connected can be uniquely determined based on information on the physical node and the external node. By adopting the configuration, the determined virtual node can be associated with the physical node of a moving destination even if the external node has moved like the
external node 30A inFIG. 1 , for example (refer to reference numeral 510 or 520 inFIG. 1 ). By performing mutual conversion between a flow on the virtual network and a flow on a physical network based on the correspondence relationship after updating, communication of the flow can be continued. - Next, a first exemplary embodiment of the present invention will be described in detail with reference to drawings.
FIG. 2 is a diagram showing an overall configuration of the first exemplary embodiment of the present invention. Referring toFIG. 2 ,physical nodes 10A to 10C, a control server (control apparatus) 20 which sets a processing rule in each of thesephysical nodes 10A to 10C, andexternal nodes 30A to 30D each of which communicates with a different one of the external nodes through one of thephysical nodes 10A to 10C are illustrated. - The
control server 20 sets the processing rule in each of thesephysical nodes 10A to 10C, thereby allowing control over a packet forwarding path and allowing to cause each of thephysical nodes 10A to 10C to behave as a virtual node on a virtual network recognized by a user. When a virtual server is constituted by each of theexternal nodes physical node 10C can be operated as a virtual load balancer by apportioning accesses from theexternal nodes external nodes -
FIG. 3 is a block diagram showing a detailed configuration of each of thephysical nodes 10A to 10C (hereinafter written as a “physical node 10” and an “external node 30” when there is no particular need for making a distinction among the physical nodes and a distinction among the external nodes). - Referring to
FIG. 3 , there is shown the configuration of the physical node 10 including apacket processing unit 101 which processes a received packet, a processingrule storage unit 102 which holds the processing rule set by thecontrol server 20, and a controlserver communication unit 103 that communicates with thecontrol server 20. -
FIG. 4 is a table for explainingprocessing rules 102A held in the processingrule storage unit 102. Referring toFIG. 4 , each processing rule has a configuration where a matching rule for identifying a flow and processing content (action) to be applied to a packet that matches the matching rule are associated. The physical node 10 in this exemplary embodiment performs aging of each processing rule. - When receiving a packet, the
packet processing unit 101 searches the processingrule storage unit 102 for a processing rule having a matching rule which matches the received packet. When the corresponding processing rule is present in the processingrule storage unit 102, thepacket processing unit 101 executes processing content (such as outputting of the packet from a port #1) defined in the processing rule. - When the corresponding rule is not present in the processing
rule storage unit 102 as a result of the search of the processing rule, thepacket processing unit 101 asks theserver communication unit 103 to make a processing rule setting request to thecontrol server 20. - The
packet processing unit 101 deletes from the processing rule storage unit 102 a processing rule for which no reception packet has been received within a set period of time (time-out value) due to the aging. Thepacket processing unit 101 notifies to thecontrol server 20 the deletion from the processingrule storage unit 102 through theserver communication unit 103. - The
server communication unit 103 performs communication with thecontrol server 20 for making the processing rule setting request, receipt of a processing rule, deletion of a processing rule, and the like. The processing rule setting request is made by transmitting to the control server 20 a processing rule request message including the received packet itself or information which has been extracted from the received packet and is necessary for generating a processing rule, and information which uniquely identifies the physical node 10. When receiving the processing rule from thecontrol server 20, theserver communication unit 103 stores the processing rule in the processingrule storage unit 102 through thepacket processing unit 101. - The physical node 10 as mentioned above can be constituted by an OpenFlow switch that operates in a similar manner to that described above and described in
Non Patent Literature 2. -
FIG. 5 is a diagram showing a detailed configuration of thecontrol server 20 in the first exemplary embodiment of the present invention. Referring toFIG. 5 , thecontrol server 20 is constituted from a physicalnode control unit 201, apath control unit 202, a virtualnetwork control unit 203, and storage units. The physicalnode control unit 201 controls the physical node 10 by setting a processing rule in the physical node 10. The path controlunit 202 calculates a packet forwarding path based on a network topology formed by the physical nodes 10, or the like. The virtualnetwork control unit 203 controls the virtual network constructed on thecontrol server 20. Each of the storage units stores information to be referred to by each of these control units. - A physical node
information storage unit 204 of thecontrol server 20 is means for storing information on the physical node 10 received from the physical node 10. As such information on the physical node, a physical node ID for uniquely identifying the physical node 10, a physical port ID for uniquely identifying a physical port (interface) of the physical node 10, setting and a status of the physical port, a state of connection of the physical node 10 to thecontrol server 20, and the like may be pointed out. - A forwarding path
information storage unit 205 of thecontrol server 20 stores a flow (physical flow) on a physical network showing a correspondence relationship between a forwarding path between the physical nodes 10 at arbitrary two points and a processing rule instructed to each physical node on the forwarding path. - A physical topology
information storage unit 206 of thecontrol server 20 stores a connection link state (network topology) among the physical nodes 10. - A virtual network path
information storage unit 207 of thecontrol server 20 stores a correspondence relationship between each flow (physical flow) on the physical network managed by the forwarding pathinformation storage unit 205 and a flow (virtual flow) between virtual nodes at arbitrary two points on the virtual network. - A physical-virtual conversion
information storage unit 208 of thecontrol server 20 stores a correspondence relationship between physical network position information and virtual network position information. These physical network position information and virtual network position information can also be put into a correspondence relationship between each physical node and a virtual node on the virtual network. Details of the correspondence relationship will be described later in detail usingFIG. 7 . - A virtual network configuration
information storage unit 209 of thecontrol server 20 stores virtualnetwork configuration information 209A showing a correspondence relationship among the ID of the virtual network constructed on thecontrol server 20, a virtual node identified from the ID of the virtual node, and the virtual node object of the virtual node, as shown inFIG. 6 . -
FIG. 7 is a diagram for explaining information held in the physical-virtual conversion information storage unit. Referring toFIG. 7 , a configuration including a physical-virtual position conversion information storage unit (third storage unit) 2081, a physical position-virtual network conversion information storage unit (first storage unit) 2083, and an external node-virtual position conversion information storage unit (second storage unit) 2082 is shown. - The physical-virtual position conversion
information storage unit 2081 holds an entry (physical-virtualposition conversion information 2081A) as shown inFIG. 8 , which associates a set of the physical node ID of the physical node, the physical port ID and the VLAN-TAG of the physical node with a virtual network ID, a virtual node ID, and a virtual interface ID. Hereinafter, the set of the physical node ID, the physical port ID, and the VLAN-TAG (that is not an essential item, however) will be referred to as “physical network position information”, and the virtual network ID, the virtual node ID, and the virtual interface ID will be referred to as “virtual network position information”. - The external node-virtual position conversion
information storage unit 2082 holds an entry (external node-virtualposition conversion information 2082A) as shown inFIG. 9 , which associates information such as a transmission source MAC address, a transmission source IP address, or a transmission source network address for identifying the external node with the virtual network position information. - The physical position-virtual network conversion
information storage unit 2083 holds an entry (physical information-virtualnetwork conversion information 2083A) as shown inFIG. 10 , which associates the physical network position information with the virtual network ID. - The physical
node control unit 201 includes a function of generating the processing rule to be set in each physical node 10 on the forwarding path and setting the processing rule in each physical node 10 by referring to the information held in the physical nodeinformation storage unit 204, in response to an instruction from thepath control unit 202, and a function of receiving the processing rule setting request or the notification of deletion of the processing rule received from the physical node 10 and notifying the request or the notification to thepath control unit 202 and the virtualnetwork control unit 203. - The path control
unit 202 includes a function of determining the path between the physical nodes 10 at the arbitrary two points by referring to the connection link state (network topology) among the physical nodes 10 held in the physical topologyinformation storage unit 206. The path controlunit 202 also includes a function of causing the physicalnode control unit 201 to set the processing rule for implementing the path in each physical node 10 and constructing the flow to be communicated between the physical ports of the physical nodes 10 at the arbitrary two points. The path controlunit 202 also includes a function of notifying deletion of the processing rule to the virtualnetwork control unit 203 when receiving the notification of deletion of the processing rule from the physical node 10. - The virtual
network control unit 203 includes a function of identifying the virtual network position information corresponding to the position information on the physical node 10 on the physical network and implementing transmission and reception of a packet between the physical network and the virtual network. The virtualnetwork control unit 203 also includes a function of emulating communication on the virtual network and then determining an End-To-End communication flow between the virtual nodes at arbitrary two points of the virtual network. The virtualnetwork control unit 203 also includes a function of converting the communication flow on the virtual network to an End-To-End communication flow between the physical nodes at arbitrary two points on the physical network, and then instructing thepath control unit 202 to set a path on the physical network and set a processing rule that implements the path. -
FIG. 11 shows an example of the virtual network to be managed by the virtualnetwork control unit 203 as described above. The virtual network is configured by using the virtual nodes such as a virtual router V1, a virtual firewall V2, a virtual load balancer V3, a virtual bridge V4, virtual servers V5 and V6, virtual interfaces belonging to these virtual nodes, and a virtual link connecting the virtual interfaces, as shown inFIG. 11 . - The
control server 20 as described above can also be implemented by a computer program for causing a computer constituting thecontrol server 20 to refer to the above-mentioned information and execute each of the above-mentioned processes using hardware of the computer. - Next, operation of this exemplary embodiment will be described in detail with reference to drawings.
FIG. 12 is a sequence diagram showing operations of the physical node that has received a packet from the external node 30. Referring toFIG. 12 , when the external node (such as theexternal node 30A inFIG. 2 ) transmits the packet addressed to the different external node (such as theexternal node 30D inFIG. 2 ) (in step S1-1), the physical node 10 searches for a processing rule having a matching rule which matches the received packet (in step S1-2). It is assumed herein that the packet is a first packet addressed from the external node (such as theexternal node 30A inFIG. 2 ) to the different external node (such as theexternal node 30D inFIG. 2 ), so that the processing rule which matches the received packet is not present. Then, the physical node 10 adds the physical node ID of the physical node 10 and the physical port ID of a physical port which has received the packet to the received packet (in step S1-3), and transmits the resulting packet to thecontrol server 20 as a processing rule setting request. - Each of
FIGS. 13 and 14 is a sequence diagram showing operations of thecontrol server 20 which has received the above-mentioned processing rule setting request. First, with reference toFIG. 13 , a description will be given about the operations when virtual network position information corresponding to the position information on the physical node that has made the processing rule setting request is registered in the physical-virtual position conversioninformation storage unit 2081. - Referring to
FIG. 13 , the physicalnode control unit 201 of thecontrol server 20 outputs the processing rule setting request received from the physical node 10 to the virtual network control unit 203 (in step S1-5). - The virtual
network control unit 203 refers to the physical-virtual positioninformation storage unit 2081 to search for the virtual network position information corresponding to the physical network position information included in the processing rule setting request (in step S1-6). Since the virtual network position information corresponding to the physical network position information is herein registered in the physical-virtual position conversioninformation storage unit 2081, the virtualnetwork control unit 203 identifies the virtual node corresponding to the identified virtual network position information using the virtual network configuration information storage unit 209 (in step S1-7), and transmits the packet to the identified virtual node (physical node corresponding to the virtual node) (in step S1-8). Thereafter, processes of emulation of communication on the virtual network, calculation of an End-To-End communication flow between the virtual nodes, conversion of the calculated communication flow on the virtual network to a communication flow on the physical network, and setting of the processing rule for implementing the communication flow obtained by the conversion are performed. - Next, with reference to
FIG. 14 , a description will be given about the operations when the virtual network position information corresponding to the position information on the physical node that has made the processing rule setting request is not registered in the physical-virtual position conversioninformation storage unit 2081. - The operations up to steps S1-5 and S1-6 in
FIG. 14 are the same as those described before with reference toFIG. 13 . When it is found in step S1-6 that the virtual network position information corresponding to the position information on the physical node that has made the processing rule setting request is not registered, the virtualnetwork control unit 203 refers to the physical position-virtual network conversioninformation storage unit 2083 to search for a virtual network ID corresponding to the physical network position information (in step S1-9). - When it is found as a result of the search that the corresponding virtual network ID is registered in the physical position-virtual network conversion
information storage unit 2083, the virtualnetwork control unit 203 further refers to the external node-virtual position conversioninformation storage unit 2082 to search for the virtual network position information corresponding to information for identifying the external node that is one of the transmission source MAC address, the transmission source IP address, or the transmission source network address included in the packet header of the received packet (in step S1-10). - When the virtual network position information corresponding to the information for identifying the external node is found as a result of the search, the virtual
network control unit 203 adds an entry that associates the physical network position information and the virtual network position information identified from the external node-virtual position conversioninformation storage unit 2082 to the physical-virtual position conversion information storage unit 2081 (in step S1-11). With this arrangement, when the processing rule setting request is received again from the same physical node, a packet can be directly transmitted to the virtual node identified by referring to the physical-virtual positioninformation storage unit 2081, according to the sequence inFIG. 13 . - Since subsequent operations are the same as those in
FIG. 13 , description of the subsequent operations will be omitted. - Next, a description will be directed to the deletion process of an entry in the physical-virtual position conversion
information storage unit 2081 when a processing rule is deleted from the physical node 10 due to aging. -
FIG. 15 is a sequence diagram showing a sequence of operations when the processing rule is deleted from the physical node 10 due to aging. First, when a received packet that matches one of processing rules in the processingrule storage unit 102 is not received for a given period, the physical node 10 deletes the corresponding processing rule (in step S1-12), and then notifies deletion of the processing rule to the control server 20 (in step S1-13). - The physical
node control unit 201 of thecontrol server 20 which has received the notification forwards the notification of deletion of the processing rule to the path control unit 202 (in step S1-14). - The path control
unit 202 searches for a flow (physical flow) corresponding to the deleted processing rule from the forwarding path information storage unit 205 (in step S1-15), and notifies deletion of the flow to the virtual network control unit 203 (in step S1-16). - Next, the virtual
network control unit 203 searches the virtual network pathinformation storage unit 207 for a flow (virtual flow) corresponding to the notified flow (physical flow) (in step S1-17). The virtualnetwork control unit 203 obtains physical network position information corresponding to the searched flow (physical flow for which the processing rule has been deleted) through the path control unit 202 (in step S1-18). - The virtual
network control unit 203 searches the virtual network pathinformation storage unit 207 for another flow (virtual flow) involving the obtained physical network position information (step S1-19). - Next, the virtual
network control unit 203 searches the physical-virtual position conversioninformation storage unit 2081 for a physical position-virtual position conversion information entry that associates the physical network position information and virtual network position information (in step S1-20). - Finally, the virtual
network control unit 203 deletes the searched physical-virtual position conversion information entry immediately or after a certain period of time (in step S1-21). - As described above, when deletion of the processing rule is performed at the physical node 10, the physical-virtual position conversion information held by the
control server 20 is deleted, in response to this deletion. - Next, a description will be directed to operations when the external node 30 that was connected to the physical node (such as the
physical node 10A inFIG. 2 ) and made it possible to transmit a packet to the virtual node on the virtual network as described above has moved. - When the external node 30 has moved, the physical port of another one of the physical nodes that receives a packet from the external node 30 is changed. Then, the external node 30 transmits a GARP (Gratuitous Address Resolution Protocol) packet to the another one of the physical nodes (such as the
physical node 10B inFIG. 2 ). - The physical node 10 that has received the GARP packet transmits a processing rule setting request to the
control server 20 according to the sequence shown inFIG. 12 . -
FIG. 16 is a sequence diagram showing operations of the control server which has received the processing rule setting request with respect to the GARP packet transmitted from the above-mentioned external node that has moved. - Referring to
FIG. 16 , the physicalnode control unit 201 of thecontrol server 20 first outputs the processing rule setting request received from the physical node 10 to the virtual network control unit 203 (in step S2-1). - The virtual
network control unit 203 refers to the physical-virtual position conversioninformation storage unit 2081 to search for virtual network position information corresponding to physical network position information included in the processing rule setting request (in step S2-2). Herein, the virtual network position information corresponding to the physical network position information is not registered in the physical-virtual position conversioninformation storage unit 2081 due to movement of the external node. Thus, the virtualnetwork control unit 203 refers to the physical position-virtual network conversioninformation storage unit 2083 to search for a virtual network ID corresponding to the physical network position information (in step S2-3). - Herein, the external node 30 was using the virtual network until the external node 30 has moved. Thus, the virtual network ID corresponding to the physical network position information is registered in the physical position-virtual network conversion
information storage unit 2083. Then, the virtualnetwork control unit 203 further refers to the external node-virtual position conversioninformation storage unit 2082 to search for virtual network position information corresponding to information for identifying the external node that is one of the transmission source MAC address, the transmission source IP address and the transmission source network address (in step S2-4). - When the virtual network position information corresponding to the information for identifying the external node is found as a result of the search, the virtual
network control unit 203 adds an entry that associates the physical network position information and the virtual network position information identified from the external node-virtual position conversioninformation storage unit 2082 to the physical-virtual position conversion information storage unit 2081 (in step S2-5). - When an entry that associates physical network position information corresponding to the identified virtual network position information is already present in the physical-virtual position conversion
information storage unit 2081 in this case, the virtualnetwork control unit 203 determines that the external node 30 has moved, and then refers to the virtual network pathinformation storage unit 207 to search for a flow (virtual flow) associated with the physical network position information, (in step S2-6). - When the flow (virtual flow) is found as a result of the search, the virtual
network control unit 203 instructs thepath control unit 202 to delete a flow (physical flow) associated with the flow (virtual flow) (in step S2-7). - The path control
unit 202 refers to the forwarding pathinformation storage unit 205 to obtain a series of processing rules for implementing the flow (physical flow) (in step S2-8). - The path control
unit 202 instructs deletion of all of the processing rules to the physical node control unit 201 (in step S2-9). - Finally, the physical
node control unit 201 instructs the physical nodes 10 which hold the processing rules instructed to be deleted to delete these processing rules (in step S2-10). Thereafter, processes similar to those in steps S1-12 to S1-21 inFIG. 15 are performed. - As described above, according to this exemplary embodiment, the physical network position information and the virtual network position information are dynamically associated, thereby making it possible to eliminate the need for setting the physical port of the physical node that connects the external node in advance. Further, according to this exemplary embodiment, even if the external node 30 has physically moved, communication on the virtual network can be continued, as described above.
- Though the above description was directed to each exemplary embodiment, the present invention is not limited to the above-mentioned exemplary embodiment. Further variation, substitution, and adjustment are possible within the technical concept of the present invention. The numbers of the physical nodes and the virtual nodes disclosed in the above-mentioned exemplary embodiment are exemplified in order to briefly explain the present invention, and are not of course limited to these numbers.
- Similarly, the description was given, assuming that one virtual network is formed in the above-mentioned exemplary embodiment.
- The number of the virtual networks is not, however, limited to one in particular.
- Finally, the preferred exemplary embodiments of the present invention will be summarized.
- See the information system in the first aspect described above.
- Preferably, upon receipt of a request for setting the processing rule from the physical node, the control apparatus determines the virtual network and the virtual node to which the external node is to be connected, based on information on the physical node that has transmitted the request for setting the processing rule and information on the external node included in the request for setting the processing rule.
- Preferably, the control apparatus further comprises:
- a third storage unit which stores a correspondence relationship among the physical node, the determined virtual network and the determined virtual node; and
- when receiving the request for setting the processing rule from the physical node, the control apparatus refers to the third storage unit, and then when a corresponding entry may not be able to be discovered, the control apparatus refers to the first and second storage units to determine the virtual network and the virtual node to which the external node is to be connected, and then stores in the third storage unit the correspondence relationship among the physical node, the determined virtual network, and the determined virtual node.
- Preferably, virtual network association is made for each interface of each of the plurality of physical nodes in the first storage unit; and
- the control apparatus makes virtual network determination according to the interface of the physical node that has received a packet related to a request for setting the processing rule.
- Preferably, in the second storage unit, information on the virtual node on the virtual network and a virtual interface of the virtual node is associated, for each of the one or more external nodes; and
- the control apparatus treats the external node as being connected to the virtual node on the virtual network through the virtual interface.
- See the control apparatus in the second aspect described above.
- See the method of providing a virtual network in the third aspect described above.
- See the program in the fourth aspect described above.
- Each component and each step of the method of providing a virtual network and the program can be similarly developed into the second to sixth exemplary embodiments, like the information system in the first exemplary embodiment.
- Each disclosure of the above-listed Patent Literature and Non Patent Literatures is incorporated herein by reference. Modification and adjustment of each exemplary embodiment are possible within the scope of the overall disclosure (including the claims) of the present invention and the technical concept of the present invention. Various combinations and selections of various disclosed elements (including each element in each claim, each element in each exemplary embodiment, and each element in each drawing) are possible within the scope of the claims of the present invention. That is, the present invention includes various variations and modifications that could be made by those skilled in the art according to the overall disclosure including the claims and the technical concept.
-
- 10,
10 A˜ 10C physical node - 20 control server (control apparatus)
- 30,
30 A˜ 30D external node - 101 packet processing unit
- 102 processing rule storage unit
- 103 server communication unit
- 201 physical node control unit
- 202 path control unit
- 203 virtual network control unit
- 204 physical node information storage unit
- 205 forwarding path information storage unit
- 206 physical topology information storage unit
- 207 virtual network path information storage unit
- 208 physical-virtual conversion information storage unit
- 209 virtual network configuration information storage unit
- 2081 physical-virtual position conversion information storage unit (third storage unit)
- 2082 external node-virtual position conversion information storage unit (second storage unit)
- 2083 physical position-virtual network conversion information storage unit (first storage unit)
Claims (6)
1. A physical node comprising;
a memory configured to store program instructions for controlling a virtual network,
a processor configured to execute the program instructions to:
communicate an external control apparatus, the control apparatus that manages a relationship between a virtual node on the virtual network and a terminal node communication with the virtual node, and
execute a function of the virtual node in response to instruction from the external control apparatus when the physical node received a data; wherein, the function is associated with the terminal node of the data source.
2. The physical node according to the claim 1 , the instruction is created in response to the change of the physical node through which the communication data transmitted by the terminal node passes.
3. A control apparatus comprising;
a memory configured to store program instructions for controlling a physical node correspond to a virtual network,
a processor configured to execute the program instructions to:
associate a virtual node on the virtual network with a terminal node that communicates with the virtual node,
associate the physical node that processes communication data with the virtual node that corresponds to the terminal node of the data source that processes the communication data,
instruct the physical node to execute a function of the virtual node associated with the physical node.
4. The control apparatus according to the claim 3 , the processor instructs to execute the function in response to change of the physical node processing the communication data transmitted by the terminal node.
5. A communication method for a network system, wherein the network system including a physical node, a control apparatus and a virtual network on a physical network including the physical node, comprising;
communicating the control apparatus which manages a relationship between a virtual node on the virtual network and a terminal node communication with the virtual node,
executing a function of the virtual node in response to instruction from the control apparatus when the physical node received a data; wherein, the function is associated with the terminal node of the data source.
6. The communication method according to the claim 5 , the instruction is created in response to the change of the physical node through which the communication data transmitted by the terminal node passes.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US16/034,981 US20180324274A1 (en) | 2010-12-28 | 2018-07-13 | Information system, control apparatus, method of providing virtual network, and program |
Applications Claiming Priority (5)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
JP2010292014 | 2010-12-28 | ||
JP2010-292014 | 2010-12-28 | ||
PCT/JP2011/080181 WO2012090996A1 (en) | 2010-12-28 | 2011-12-27 | Information system, control device, virtual network provision method and program |
US201313976721A | 2013-06-27 | 2013-06-27 | |
US16/034,981 US20180324274A1 (en) | 2010-12-28 | 2018-07-13 | Information system, control apparatus, method of providing virtual network, and program |
Related Parent Applications (2)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US13/976,721 Continuation US10044830B2 (en) | 2010-12-28 | 2011-12-27 | Information system, control apparatus, method of providing virtual network, and program |
PCT/JP2011/080181 Continuation WO2012090996A1 (en) | 2010-12-28 | 2011-12-27 | Information system, control device, virtual network provision method and program |
Publications (1)
Publication Number | Publication Date |
---|---|
US20180324274A1 true US20180324274A1 (en) | 2018-11-08 |
Family
ID=46383089
Family Applications (2)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US13/976,721 Expired - Fee Related US10044830B2 (en) | 2010-12-28 | 2011-12-27 | Information system, control apparatus, method of providing virtual network, and program |
US16/034,981 Abandoned US20180324274A1 (en) | 2010-12-28 | 2018-07-13 | Information system, control apparatus, method of providing virtual network, and program |
Family Applications Before (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US13/976,721 Expired - Fee Related US10044830B2 (en) | 2010-12-28 | 2011-12-27 | Information system, control apparatus, method of providing virtual network, and program |
Country Status (6)
Country | Link |
---|---|
US (2) | US10044830B2 (en) |
EP (1) | EP2661026A4 (en) |
JP (3) | JP5534037B2 (en) |
KR (2) | KR101644766B1 (en) |
CN (2) | CN103283187B (en) |
WO (1) | WO2012090996A1 (en) |
Families Citing this family (25)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20130003745A1 (en) * | 2010-03-24 | 2013-01-03 | Kouichi Nishimura | Information system, control device, method of managing virtual network, and program |
US9185056B2 (en) | 2011-09-20 | 2015-11-10 | Big Switch Networks, Inc. | System and methods for controlling network traffic through virtual switches |
CN102571433B (en) * | 2012-01-11 | 2014-07-30 | 华为技术有限公司 | Method and device for showing network paths |
US9019967B2 (en) * | 2012-07-30 | 2015-04-28 | Dell Products L.P. | VLAN advertisement and automated configuration |
JP5992245B2 (en) * | 2012-08-06 | 2016-09-14 | 日本電信電話株式会社 | Virtual machine migration system and method |
JP5909688B2 (en) * | 2012-09-06 | 2016-04-27 | パナソニックIpマネジメント株式会社 | Communication device, transfer control method, and transfer control program |
EP2896166A4 (en) | 2012-09-13 | 2016-05-11 | Nec Corp | Information processing apparatus, configuration method, communication system, and program |
JP5967221B2 (en) * | 2012-12-19 | 2016-08-10 | 日本電気株式会社 | Communication node, control device, communication system, packet processing method, communication node control method, and program |
JP6032026B2 (en) * | 2013-01-24 | 2016-11-24 | 富士通株式会社 | Relay program, relay method, and relay processing apparatus |
US10263848B2 (en) | 2013-03-20 | 2019-04-16 | Wolting Holding B.V. | Compiler for and method for software defined networks |
EP3043519B1 (en) | 2013-10-18 | 2019-08-28 | Huawei Technologies Co., Ltd. | Method, controller, forwarding device, and network system for forwarding packets |
KR101460048B1 (en) * | 2013-10-24 | 2014-11-11 | 에스케이텔레콤 주식회사 | Method and apparatus for control of dynamic service chaining by using tagging |
EP3059909B1 (en) * | 2013-11-22 | 2018-03-21 | Huawei Technologies Co., Ltd. | Method, apparatus and system for controlling forwarding of service data in virtual network |
JP2015138987A (en) * | 2014-01-20 | 2015-07-30 | 日本電気株式会社 | Communication system and service restoration method in communication system |
WO2015133327A1 (en) | 2014-03-07 | 2015-09-11 | 日本電気株式会社 | Network system, inter-site network cooperation control device, network control method, and program |
WO2015144257A1 (en) * | 2014-03-24 | 2015-10-01 | Telefonaktiebolaget L M Ericsson (Publ) | A method to provide elasticity in transport network virtualisation |
CN103997513B (en) * | 2014-04-21 | 2017-08-01 | 北京邮电大学 | A kind of programmable virtual network service system |
US10411989B2 (en) | 2014-09-22 | 2019-09-10 | Wolting Holding B.V. | Compiler for and method of software defined networking, storage and compute determining physical and virtual resources |
US10355940B2 (en) | 2014-09-22 | 2019-07-16 | Wolting Holding B.V. | Compiler for and method of software defined networking, storage and compute performing operations |
US10778506B1 (en) | 2017-11-30 | 2020-09-15 | Open Invention Network Llc | Coordinated switch of activity in virtual network function components |
KR101982230B1 (en) * | 2018-07-06 | 2019-08-28 | 고려대학교 산학협력단 | Flow Rule Virtualization Apparatus and Method thereof in Programmable Network Virtualization |
US11627080B2 (en) * | 2019-01-18 | 2023-04-11 | Vmware, Inc. | Service insertion in public cloud environments |
CN110474978B (en) * | 2019-08-13 | 2022-07-08 | 未鲲(上海)科技服务有限公司 | Virtual message processing party scheduling method and device, computer equipment and storage medium |
US11108643B2 (en) * | 2019-08-26 | 2021-08-31 | Vmware, Inc. | Performing ingress side control through egress side limits on forwarding elements |
JP2021182689A (en) * | 2020-05-19 | 2021-11-25 | 富士通株式会社 | Switch identification method and switch identification program |
Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20070180188A1 (en) * | 2006-02-02 | 2007-08-02 | Akira Fujibayashi | Virtual path storage system and control method for the same |
US20100232290A1 (en) * | 2009-03-13 | 2010-09-16 | Patrick Choy Ming Wong | Methods And Systems For Managing Network Traffic Within A Virtual Network System |
US20100257263A1 (en) * | 2009-04-01 | 2010-10-07 | Nicira Networks, Inc. | Method and apparatus for implementing and managing virtual switches |
US20120155467A1 (en) * | 2010-12-17 | 2012-06-21 | Guido Appenzeller | Methods for configuring network switches |
Family Cites Families (14)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
KR100272108B1 (en) | 1998-10-13 | 2000-11-15 | 윤종용 | Ieee1394 virtual network generating method and controller |
EP1164754B1 (en) * | 2000-06-15 | 2006-05-17 | Telefonaktiebolaget LM Ericsson (publ) | Methods and arrangements in a telecommunications system |
JP4244872B2 (en) | 2004-07-09 | 2009-03-25 | ソニー株式会社 | Information processing apparatus and method, and program |
US20070237161A1 (en) | 2006-04-05 | 2007-10-11 | Yokogawa Electric Corporation | Multiple logical node apparatus |
US20080189769A1 (en) | 2007-02-01 | 2008-08-07 | Martin Casado | Secure network switching infrastructure |
US20090328193A1 (en) * | 2007-07-20 | 2009-12-31 | Hezi Moore | System and Method for Implementing a Virtualized Security Platform |
WO2009104400A1 (en) * | 2008-02-22 | 2009-08-27 | 日本電気株式会社 | Information processing device, information processing system, setting program transmitting method, and server setting program |
US8565218B2 (en) * | 2008-06-05 | 2013-10-22 | Hewlett-Packard Development Company, L.P. | Flow path discovery in network to guarantee multiple metric QoS constraints |
WO2010037420A1 (en) * | 2008-10-02 | 2010-04-08 | Nokia Siemens Networks Oy | Routing method in a scalable network and processing element |
JP2010200026A (en) * | 2009-02-25 | 2010-09-09 | Nippon Telegr & Teleph Corp <Ntt> | Traffic control method, system and program for logic network |
US8868818B2 (en) * | 2009-03-03 | 2014-10-21 | Quantum Corporation | Method for associating physical address with logical communication address in a media library assembly |
US9203747B1 (en) * | 2009-12-07 | 2015-12-01 | Amazon Technologies, Inc. | Providing virtual networking device functionality for managed computer networks |
US8594100B2 (en) * | 2010-03-31 | 2013-11-26 | International Business Machines Corporation | Data frame forwarding using a distributed virtual bridge |
JP5710928B2 (en) * | 2010-10-07 | 2015-04-30 | 株式会社日立製作所 | Network system, virtual network management method, and router |
-
2011
- 2011-12-27 KR KR1020157020325A patent/KR101644766B1/en active IP Right Grant
- 2011-12-27 CN CN201180063353.0A patent/CN103283187B/en not_active Expired - Fee Related
- 2011-12-27 EP EP11854027.7A patent/EP2661026A4/en not_active Withdrawn
- 2011-12-27 US US13/976,721 patent/US10044830B2/en not_active Expired - Fee Related
- 2011-12-27 CN CN201910242507.0A patent/CN110086701A/en active Pending
- 2011-12-27 JP JP2012550969A patent/JP5534037B2/en not_active Expired - Fee Related
- 2011-12-27 WO PCT/JP2011/080181 patent/WO2012090996A1/en active Application Filing
- 2011-12-27 KR KR1020137019914A patent/KR101581093B1/en active IP Right Grant
-
2014
- 2014-04-25 JP JP2014091785A patent/JP5590262B2/en not_active Expired - Fee Related
- 2014-04-25 JP JP2014091786A patent/JP5590263B2/en not_active Expired - Fee Related
-
2018
- 2018-07-13 US US16/034,981 patent/US20180324274A1/en not_active Abandoned
Patent Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20070180188A1 (en) * | 2006-02-02 | 2007-08-02 | Akira Fujibayashi | Virtual path storage system and control method for the same |
US20100232290A1 (en) * | 2009-03-13 | 2010-09-16 | Patrick Choy Ming Wong | Methods And Systems For Managing Network Traffic Within A Virtual Network System |
US20100257263A1 (en) * | 2009-04-01 | 2010-10-07 | Nicira Networks, Inc. | Method and apparatus for implementing and managing virtual switches |
US20120155467A1 (en) * | 2010-12-17 | 2012-06-21 | Guido Appenzeller | Methods for configuring network switches |
Also Published As
Publication number | Publication date |
---|---|
JP5590262B2 (en) | 2014-09-17 |
WO2012090996A1 (en) | 2012-07-05 |
EP2661026A4 (en) | 2014-06-11 |
CN103283187B (en) | 2019-05-10 |
CN110086701A (en) | 2019-08-02 |
KR101581093B1 (en) | 2015-12-30 |
JPWO2012090996A1 (en) | 2014-06-05 |
JP5534037B2 (en) | 2014-06-25 |
JP5590263B2 (en) | 2014-09-17 |
KR20130099221A (en) | 2013-09-05 |
US10044830B2 (en) | 2018-08-07 |
EP2661026A1 (en) | 2013-11-06 |
JP2014135776A (en) | 2014-07-24 |
CN103283187A (en) | 2013-09-04 |
JP2014158289A (en) | 2014-08-28 |
US20130282867A1 (en) | 2013-10-24 |
KR20150092351A (en) | 2015-08-12 |
KR101644766B1 (en) | 2016-08-01 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US20180324274A1 (en) | Information system, control apparatus, method of providing virtual network, and program | |
JP5850471B2 (en) | COMMUNICATION SYSTEM, CONTROL DEVICE, NODE CONTROL METHOD, AND PROGRAM | |
US9692650B2 (en) | Control apparatus, communication system, communication method, and program | |
JP5994851B2 (en) | Transfer device control device, transfer device control method, communication system, and program | |
US8837286B2 (en) | Communication system, flow control device, flow table updating method, and program | |
WO2011087085A1 (en) | Calculator, network connection switching method, and program | |
JP5585660B2 (en) | Communication system, control device, processing rule setting method and program | |
US10645006B2 (en) | Information system, control apparatus, communication method, and program | |
US9397956B2 (en) | Communication system, control device, forwarding node, and control method and program for communication system | |
JP2013545320A (en) | COMMUNICATION SYSTEM, CONTROL DEVICE, COMMUNICATION METHOD, AND PROGRAM | |
JPWO2014136864A1 (en) | Packet rewriting device, control device, communication system, packet transmission method and program | |
US10171352B2 (en) | Communication system, node, control device, communication method, and program | |
US10069648B2 (en) | Communication system, control apparatus, communication control method and program | |
JP5534033B2 (en) | Communication system, node, packet transfer method and program | |
US20190007279A1 (en) | Control apparatus, communication system, virtual network management method, and program | |
WO2014104277A1 (en) | Control apparatus, communication system, communication node control method and program | |
US20150381775A1 (en) | Communication system, communication method, control apparatus, control apparatus control method, and program | |
US20190089674A1 (en) | Communication system, flow control apparatus, flow processing apparatus, and control method | |
JP5854488B2 (en) | Communication system, control device, processing rule setting method and program | |
JP2016225933A (en) | Control device, control method for relay device, program, and communication system |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
STPP | Information on status: patent application and granting procedure in general |
Free format text: DOCKETED NEW CASE - READY FOR EXAMINATION |
|
STPP | Information on status: patent application and granting procedure in general |
Free format text: NON FINAL ACTION MAILED |
|
STCB | Information on status: application discontinuation |
Free format text: ABANDONED -- FAILURE TO RESPOND TO AN OFFICE ACTION |