JP2010124129A - Virtual computer transmission method, system, management device, and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a virtual computer transmission method, a system, a management device, and a program for transferring a packet addressed to a virtual address to a physical computer of a destination by controlling a network topology after the virtual computer is moved. <P>SOLUTION: A second physical computer to be a destination allocates a virtual layer 2 address of the virtual computer to a physical interface of the second physical computer, transmits a packet toward a branching switch between the second physical computer and a first physical computer 1 in a layer 2 network, has a switch comprising the layer 2 network learn the virtual layer 2 address, and returns the address to a physical layer 2 address, and allocates it to the physical interface of the second physical computer. The first physical computer to be an origin of movement moves the virtual computer toward a layer 3 address of the second physical computer. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to a virtual machine transmission method, system, management apparatus, and program.

  A virtual computer is a computer created virtually and operates in a physical computer. The virtual machine is a unit that includes an OS (Operating System) and applications. The virtual computer uses a processor mounted on the physical computer in time division, uses a disk of the physical computer in area division, and uses the memory of the physical computer as virtual storage.

  There is a technique for moving a virtual machine between different physical computers via a network (see, for example, Patent Documents 1 and 2). According to this technology, a virtual computer that is operating on a migration source physical computer is temporarily stopped, and virtual resource state information is retained. The source physical computer transmits the virtual resource state information together with the virtual computer to the destination physical computer. The destination physical computer restarts the virtual computer from the state stopped by the source physical computer. As a result, the virtual machine continues to be operated even after movement.

  There is also a technology that includes a management server that manages virtual machines and manages the movement of virtual machines between a plurality of physical computers (see, for example, Patent Document 3). According to this technology, the virtual machine is moved by dynamic migration without being temporarily stopped. “Dynamic migration” means that the virtual machine is not temporarily stopped and restarted during movement. This is realized by repeating the differential copy of the memory data of the operating virtual machine between the migration source physical computer and the migration destination physical computer.

JP-A-10-283210 JP 2006-72591 A Special table 2007-536657 gazette

  After moving the virtual machine, it is assumed that the switch arranged in the network has already learned the virtual MAC address of the virtual machine under the destination physical machine in the route table. Otherwise, after the virtual machine has moved, the packet destined for the virtual machine will be transferred to the source physical computer.

  However, none of the above-described conventional techniques has been studied for path control (change of network topology) in a switch arranged in a network between a source physical computer and a destination physical computer. . In addition, existing virtual machines are assumed to move only within a layer 3 subnet at most. Therefore, the case where the virtual machine moves beyond the layer 3 subnet has not been studied.

  Therefore, the present invention provides a virtual computer transmission method and system in which a packet whose destination is a virtual layer 2 address and a layer 3 address is transferred to a destination physical computer by controlling the network topology after the virtual computer has moved. An object is to provide a management apparatus and a program.

According to the present invention, a plurality of physical computers connected to a layer 2 network logically configured in a tree shape by a plurality of switches, and a management apparatus that manages virtual computers operating on the physical computers are provided. Regarding the system, the physical computer has a physical layer 2 address and a layer 3 address in a physical interface connected to the layer 2 network, and the virtual computer has a virtual layer 2 address and a layer 3 address in the virtual interface, A virtual machine transmission method for moving a virtual machine running on a first physical computer to a second physical computer after movement,
A first step in which a second physical computer assigns a virtual layer 2 address of the virtual computer to a physical interface of the second physical computer;
A second step in which the second physical computer transmits a packet to a branching switch between the second physical computer and the first physical computer in the layer 2 network, and causes the switch constituting the layer 2 network to learn the virtual layer 2 address. When,
A third step in which the second physical computer assigns the physical interface of the second physical computer back to the physical layer 2 address;
The first physical computer has a fourth step of moving the virtual computer toward the layer 3 address of the second physical computer.

According to another embodiment of the virtual machine transmission method of the present invention,
When the first physical computer and the second physical computer are connected to different layer 2 networks across the layer 3 subnet,
A first physical computer creating a layer 3 tunnel with a layer 3 address of a second physical computer;
A second physical computer creating a layer 3 tunnel with the layer 3 address of the first physical computer;
A second physical computer associating a virtual interface of the virtual computer with a layer 3 tunnel;
The first physical computer associating the route control to the layer 3 address of the virtual computer with the entrance address of the layer 3 tunnel;
It is also preferable that the first physical computer has a step of moving the virtual computer toward the layer 3 address of the second physical computer.

According to another embodiment of the virtual computer transmission method of the present invention, for the second step, the second physical computer is:
When the layer 3 address of the branch switch is specified, a ping (Packet Internet Groper) packet is transmitted to the layer 3 address,
When the layer 3 address of the branch switch is not specified, it is also preferable to transmit an Ethernet OAM Continuity Check (CC) or Loop Back (LB) message to the physical address of the branch switch.

  According to another embodiment of the virtual computer transmission method of the present invention, the system further includes a management device, and the management device branches between the first physical computer and the second physical computer in the layer 2 network. It is also preferable to search for a switch and send a control message to execute the first step to the fourth step to the first physical computer and the second physical computer.

According to the present invention, for a system having a plurality of physical computers connected to a layer 2 network that is logically configured in a tree structure by a plurality of switches, the physical computer is physically connected to a physical interface connected to the layer 2 network. The virtual machine has a layer 2 address and a layer 3 address, the virtual machine has a virtual layer 2 address and a layer 3 address in the virtual interface, and the virtual machine running on the first physical computer before the movement is A virtual machine transmission system for moving to a second physical computer after movement,
The second physical computer is
An address spoofing means for assigning a virtual layer 2 address of the virtual machine to the physical interface of the second physical computer;
Learning packet transmitting means for transmitting a packet toward a branch switch between the first physical computer in the layer 2 network and for causing the switch constituting the layer 2 network to learn a virtual layer 2 address;
Address recovery means for assigning the physical interface of the second physical computer back to the physical layer 2 address;
The first physical computer has a virtual computer transmission means for moving the virtual computer toward the layer 3 address of the second physical computer.

According to another embodiment of the virtual computer transmission system of the present invention, when the first physical computer and the second physical computer are connected to different layer 2 networks across the layer 3 subnet,
The first physical computer is
Tunnel generating means for generating a layer 3 tunnel with the layer 3 address of the second physical computer;
Tunnel control means for associating the route control to the layer 3 address of the virtual machine with the entrance address of the layer 3 tunnel;
The second physical computer is
Tunnel generating means for generating a layer 3 tunnel with the layer 3 address of the first physical computer;
Tunnel allocation means for associating the virtual interface of the virtual machine with the layer 3 tunnel;
It is also preferable that the virtual computer transmission means move the virtual computer toward the layer 3 address of the second physical computer.

According to another embodiment of the virtual machine transmission system of the present invention,
The learning packet transmission means
When the layer 3 address of the branch switch is specified, a ping packet is transmitted to the layer 3 address,
When the layer 3 address of the branch switch is not specified, it is also preferable to transmit an Ethernet OAM Continuity Check (CC) or Loop Back (LB) message to the physical layer 2 address of the branch switch.

According to the present invention, for a system having a plurality of physical computers connected to a layer 2 network that is logically configured in a tree structure by a plurality of switches, the physical computer is physically connected to a physical interface connected to the layer 2 network. The virtual machine has a layer 2 address and a layer 3 address, the virtual machine has a virtual layer 2 address and a layer 3 address in the virtual interface, and the virtual machine running on the first physical computer before the movement is A management device to be moved to the second physical computer after the movement,
Branch switch search means for searching for a branch switch between the first physical computer and the second physical computer for the layer 2 network;
Address spoofing control means for transmitting a control message to the second physical computer in order to assign a virtual layer 2 address of the virtual computer to the physical interface of the second physical computer;
Address learning control means for transmitting a control message to the second physical computer so that the second physical computer transmits a packet toward the branch switch and causes the switch in the layer 2 network to learn the virtual layer 2 address. When,
Address recovery control means for transmitting a control message to the second physical computer to assign the physical interface of the second physical computer back to the physical layer 2 address;
The first physical computer has virtual computer movement control means for transmitting a control message to the first physical computer in order to move the virtual computer toward the layer 3 address of the second physical computer. To do.

According to the present invention, for a system having a plurality of physical computers connected to a layer 2 network that is logically configured in a tree structure by a plurality of switches, the physical computer is physically connected to a physical interface connected to the layer 2 network. The virtual machine has a layer 2 address and a layer 3 address, the virtual machine has a virtual layer 2 address and a layer 3 address in the virtual interface, and the virtual machine running on the first physical computer before the movement is A program for causing a computer mounted in a management apparatus to be moved to a second physical computer after movement,
Branch switch search means for searching for a branch switch between the first physical computer and the second physical computer for the layer 2 network;
Address spoofing control means for transmitting a control message to the second physical computer in order to assign a virtual layer 2 address of the virtual computer to the physical interface of the second physical computer;
Address learning control means for transmitting a control message to the second physical computer so that the second physical computer transmits a packet toward the branch switch and causes the switch in the layer 2 network to learn the virtual layer 2 address. When,
Address recovery control means for transmitting a control message to the second physical computer to assign the physical interface of the second physical computer back to the physical layer 2 address;
The first physical computer causes the computer to function as virtual computer movement control means for transmitting a control message to the first physical computer in order to move the virtual computer toward the layer 3 address of the second physical computer. Features.

  According to the virtual machine transmission method, system, management apparatus, and program of the present invention, after the virtual machine moves, the packet whose destination is the virtual layer 2 address and the layer 3 address is changed by controlling the network topology. To the physical computer.

  Hereinafter, the best mode for carrying out the present invention will be described in detail with reference to the drawings.

  FIG. 1 is a system configuration diagram for moving a virtual machine within a layer 3 subnet.

  According to the system of FIG. 1, a plurality of physical computers 1 are connected to a layer 2 network configured by a plurality of switches 4. The layer 2 network is, for example, Ethernet (registered trademark), and is logically configured in a tree shape without forming a loop. The management device 3 is also connected to the layer 2 network and manages the virtual computer 2 operating on the physical computer 1.

  According to FIG. 1, the virtual machine 2 is operating on the first physical machine 1 that is the migration source. The virtual computer 2 is assigned a virtual MAC (Media Access Control) address (layer 2 address) and a virtual IP (Internet Protocol) address (layer 3 address). The virtual MAC address is a 24-bit address generated randomly, and the upper 12 bits are a vendor ID of the virtual machine.

  The physical computer 1 is connected to the switch 4 by a physical NIC (Network Interface Card). The physical computer 1 is also given a physical MAC address and an IP address. The physical computer 1 further includes a virtual bridge unit having a virtual interface (vif: virtual interface), and the virtual bridge unit is connected to the physical NIC. The virtual MAC address of the virtual machine 2 is mapped to the virtual interface. The virtual bridge unit functions as a switch between the virtual computer 2 and the physical NIC.

  The virtual computer 2 has moved from the first physical computer 1 that is the movement source to the second physical computer 1 that is the movement destination. After moving, the virtual machine 2 switches the connection destination of the virtual MAC address to the virtual interface of the second physical computer 1. Thereby, the virtual machine 2 can transmit and receive packets on the second physical machine 1.

  FIG. 2 is a sequence diagram for moving a virtual machine within a layer 3 subnet.

(S0) The management device 3 has a network topology database and accumulates switch topology information in the layer 2 network. The management device 3 can search for a branch switch between the first physical computer and the second physical computer in the layer 2 network using the network topology database. The “branch switch” means a switch that becomes a branch point by following an upper layer switch as viewed from the first physical computer and the second physical computer. The management device 3 searches for the IP address and MAC address of the branch switch.

  If the management device 3 cannot find a branch switch without having a network topology database, the tree-shaped root switch of the tree may be selected as the branch switch. When the layer 2 network is configured by a spanning tree, the switch with the smallest bridge ID is the root switch.

  Examples of virtual machines include Xen (registered trademark) and VMware (registered trademark). Xen was researched at the University of Cambridge, released under the GNU (General Public License), and is currently being developed by XenSource. In Xen, a unit of a virtual machine is called a “domain”. The VMware is developed by VMware, and the physical computer is referred to as “host OS” and the virtual computer is referred to as “guest OS”.

In the case of Xen, the virtual MAC address is registered in the following setting file.
kernel = '/boot/vmlinuz-2.6.24-19-xen'
ramdisk = '/boot/initrd.img-2.6.24-19-xen'
memory = '128'
root = '/ dev / xvda2 ro'
disk = ['tap: aio: /vm/domains/vm001/swap.img,xvda1,w',
'tap: aio: /vm/domains/vm001/disk.img,xvda2,w',]
name = 'vm001'
vif = ['ip = 192.168.10.111, mac = 00: 16: 3E: A8: A0: 88, bridge = xenbr1']
on_poweroff = 'destroy'
on_reboot = 'restart'
on_crash = 'restart'
extra = '2 console = xvc0'
Here, “vif” represents a virtual interface, “ip = 192.168.10.111” represents a virtual IP address, and “mac = 00: 16: 3E: A8: A0: 88” represents a virtual MAC address. “Bridge = xenbr1” represents the name of the virtual bridge.

In the case of VMware, the virtual MAC address is registered in the following setting file.
ide0: 0.redo = ""
ide1: 0.startConnected = "TRUE"
ethernet0.addressType = "generated"
uuid.location = "56 4d ab 6d a7 e8 64 c2-c3 cc f8 35 65 f4 b9 1e"
uuid.bios = "56 4d ab 6d a7 e8 64 c2-c3 cc f8 35 65 f4 b9 1e"
ethernet0.generatedAddress = "00: 0c: 29: f4: b9: 1e"
ethernet0.generatedAddressOffset = "0"
tools.syncTime = "FALSE"
Here, ethernet0.generatedAddress = “00: 0c: 29: f4: b9: 1e” represents the virtual MAC address.

  The setting file including the virtual MAC address is stored in the shared disk of the physical computer on which the virtual computer is operating, and is also managed by the management device 3.

(S1) The second physical computer assigns the virtual MAC address of the virtual computer 2 to the physical interface of the second physical computer. That is, the second physical computer is misrepresented as a virtual MAC address. The second physical computer may be executed when an address spoofing control message is received from the management device 3.

For example, in the case of Linux (registered trademark), the second physical computer can be misrepresented as a virtual MAC address by executing the following command.
# ifdown eth0 (stop eth0 interface)
# ifconfig eth0 hw ether 00: 16: 3E: A8: A0: 88 (spoofed as a virtual MAC address)
# ifup eth0 (start up eth0 interface)

(S2) The second physical computer transmits a packet toward the branch switch. The source MAC address of this packet is a virtual MAC address. The switch that relays the packet updates the route table based on the virtual MAC address. As a result, the virtual MAC address can be learned by the switches constituting the layer 2 network. Note that the second physical computer may be executed when a learning packet transmission control message is received from the management device 3.

  Here, when the layer 3 address of the branch switch is specified, a ping (Packet Internet Groper) packet is transmitted to the layer 3 address. The ping packet is an ICMP 32-byte packet transmitted toward the IP address of the counterpart physical computer, and diagnoses connectivity and response time. On the other hand, if the layer 3 address of the branch switch is not specified, an Ethernet OAM Continuity Check (CC) or Loop Back (LB) message for connectivity check is transmitted to the physical address of the branch switch. .

(S3) The second physical computer assigns the physical interface of the second physical computer back to the physical MAC address. Note that the second physical computer may be executed when an address restoration control message is received from the management device 3.

(S4) The first physical computer moves the virtual computer 2 toward the IP address (layer 3 address) of the second physical computer. The first physical computer may be executed when a control message instructing movement of the virtual computer 2 from the management apparatus 3 is received.

For example, in the case of Xen, the virtual machine 2 is moved from the first physical computer (ip = 192.168.10.2) to the second physical computer (ip = 192.168.10.3) by executing the following command: Can do.
$ ssh -l root 192.168.10.2 (Log in to the source physical computer)
# xm migrate --live vm01 192.168.10.3
(Move virtual machine vm01 to the second physical machine)

  According to the present invention, before the virtual computer 2 moves to the second physical computer, each switch 4 of the layer 2 network has already learned the virtual MAC address of the virtual computer 2 in the route table. Therefore, the packet destined for the virtual machine 2 reaches the second physical machine via the layer 2 network.

  FIG. 3 is a system configuration diagram for moving a virtual machine across a layer 3 subnet.

  According to the system of FIG. 3, the first physical computer is connected to the second physical computer via a plurality of routers 5. Therefore, as in the system of FIG. 2, the network topology after the migration of the virtual machine cannot be changed only by the path control for the switch of the layer 2 network. Therefore, according to the present invention, a layer 3 tunnel is generated between the first physical computer and the second physical computer. Then, the first physical computer associates the route control to the virtual computer with the entrance address of the layer 3 tunnel.

For example, in the case of Linux, the first physical computer generates an IP tunnel by giving the following command and assigns an entrance address to the tunnel.
# ip tunnel add netR2 mode gre remote 192.168.20.3 local 192.168.0.3
(Create a GRE tunnel)
# ip link set netR2 up (enable tunnel)
# ip addr add 10.10.10.1 dev netR2 (assign an address to the tunnel)
Here, the address “10.10.10.1” is assigned to the tunnel netR2.

Similarly, the second physical computer also generates an IP tunnel by executing the following command and assigns an entrance address to the tunnel.
# ip tunnel add netR1 mode gre remote 192.168.0.3 local 192.168.20.3
(Create a GRE tunnel)
# ip link set netR1 up (Tunnel enabled)
# ip addr add 10.10.10.2 dev netR1 (assigns an address to the tunnel)
Here, the address “10.10.10.2” is assigned to the tunnel netR1.

Next, for example, in the case of Xen, the first physical computer connects the tunnel to the virtual bridge xenbr1 by executing the following command.
# / etc / xen / scripts / network-bridge start vifnum = 1 bridge = xenbr1 netdev = netR1

Then, the first physical computer moves the virtual computer 2 toward the layer 3 address of the second physical computer via the tunnel. For example, in the case of Xen, the virtual machine 2 is moved from the first physical computer (ip = 192.168.10.2) to the second physical computer (ip = 192.168.10.3) by executing the following command: Can do.
$ ssh -l root 192.168.10.2 (Log in to the source physical computer)
# xm migrate --live vm01 192.168.10.3
(Move virtual machine vm01 to the second physical machine)

  FIG. 4 is a functional configuration diagram of the physical computer in the present invention.

  According to FIG. 4, the physical computer 1 includes a communication interface unit 10 connected to the switch 4, an address spoofing unit 11, a learning packet transmission unit 12, an address restoration unit 13, a virtual computer transmission unit 14, a virtual computer The computer receiving unit 15, the tunnel generating unit 16, the tunnel address assigning unit 17, the virtual bridge unit 18, the control message receiving unit 19, and the tunnel route control unit 1A are included. These functional components are realized by executing a program that causes a computer installed in the physical computer to function.

  The address spoofing unit 11 assigns a virtual MAC address of the virtual computer to the physical interface of the second physical computer. The address spoofing unit 11 may be executed by a control message from the management device 3 received by the control message receiving unit 19.

  The learning packet transmission unit 12 transmits a packet toward the branch switch in the layer 2 network, and causes the switch configuring the layer 2 network to learn the virtual MAC address. Note that the learning packet transmitter 12 may be executed by a control message from the management device 3 received by the control message receiver 19.

  The branch switch IP address and physical MAC address may be received from the management device 3. When the IP address of the branch switch is specified, a ping packet is transmitted to the IP address. On the other hand, when the layer 3 address of the branch switch is not specified, an Ethernet OAM Continuity Check (CC) or Loop Back (LB) message is transmitted to the physical MAC address of the branch switch.

  The address recovery unit 13 assigns the physical interface of the second physical computer back to the physical MAC address. Note that the learning packet transmitter 12 may be executed by a control message from the management device 3 received by the control message receiver 19.

  The virtual machine transmission unit 14 transmits the virtual machine 2 toward the IP address of the physical computer that is the movement destination.

  The virtual machine transmission unit 14 receives the virtual machine 2 from the physical computer that is the movement source.

  The tunnel generation unit 16 generates a layer 3 (IP) tunnel when connected to the counterpart physical computer beyond the layer 3 subnet.

  The tunnel address assignment unit 17 assigns the tunnel entrance address generated by the tunnel generation unit 16 to the virtual bridge unit 18.

  The virtual bridge unit 18 functions as a switch between the virtual interface and the physical NIC. The virtual interface is mapped to the virtual MAC address of the virtual machine 2.

  The control message receiving unit 19 receives the control message from the management device 3 and controls the address spoofing unit 11, the learning packet transmission unit 12, the address restoration unit 13, and the tunnel generation unit 16.

  The tunnel route control unit 1A associates the route control to the virtual machine with the entrance address of the layer 3 tunnel generated by the tunnel generation unit 16 and the entrance address of the layer 3 tunnel. As a result, the first physical computer routes the packet for the virtual computer 2 to the second physical computer via the layer 3 tunnel.

  FIG. 5 is a functional configuration diagram of the management apparatus according to the present invention.

  The management device 3 in FIG. 5 includes a communication interface unit 30 connected to the layer 3 network, an address spoofing control unit 31, a learning packet transmission control unit 32, an address recovery control unit 33, a virtual machine migration control unit 34, A branch switch search unit 35, a network topology database 36, a tunnel generation control unit 37, and a tunnel address allocation control unit 38. These functional components are realized by executing a program that causes a computer installed in the management apparatus 3 to function.

  The address spoofing control unit 31 transmits a control message to the second physical computer in order to assign the virtual MAC address of the virtual computer to the physical interface of the second physical computer.

  The learning packet transmission control unit 32 sends a control message to the second physical computer so that the second physical computer transmits the packet to the branch switch and causes the switch in the layer 2 network to learn the virtual MAC address. Send.

  The address recovery control unit 33 transmits a control message to the second physical computer so that the physical interface of the second physical computer is assigned back to the physical MAC address.

  The virtual computer migration control unit 34 transmits a control message to the first physical computer so that the first physical computer moves the virtual computer toward the layer 3 address of the second physical computer.

  When the switch between the first physical computer and the second physical computer is in the layer 3 subnet, the branch switch search unit 35 uses the network topology database 36 to perform the first physical computer and the second physical computer for the layer 2 network. Search for branch switch with other physical computers.

  The network topology database 36 stores topology information of switches between the first physical computer and the second physical computer.

  When the space between the first physical computer and the second physical computer exceeds the layer 3 subnet, the tunnel generation control unit 37 transmits a control message to generate a tunnel to both physical computers.

  The tunnel address assignment control unit 38 transmits a control message so as to associate the generated tunnel entrance address with the virtual machine.

  As described above in detail, according to the virtual machine transmission method, system, management apparatus, and program of the present invention, a packet whose destination is a virtual address is controlled by controlling the network topology after the virtual machine has moved. And transferred to the destination physical computer.

  In the various embodiments of the present invention described above, various changes, modifications, and omissions in the scope of the technical idea and the viewpoint of the present invention can be easily made by those skilled in the art. The above description is merely an example, and is not intended to be restrictive. The invention is limited only as defined in the following claims and the equivalents thereto.

FIG. 3 is a system configuration diagram for moving a virtual machine in a layer 3 subnet. It is a sequence diagram which moves a virtual machine within a layer 3 subnet. It is a system configuration diagram for moving a virtual machine across a layer 3 subnet. It is a functional block diagram of the physical computer in this invention. It is a functional block diagram of the management apparatus in this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Physical computer 10 Communication interface part 11 Address spoofing part 12 Learning packet transmission part 13 Address restoration part 14 Virtual computer transmission part 15 Virtual computer reception part 16 Tunnel generation part 17 Tunnel address allocation part 18 Virtual bridge part 19 Control message reception part 1A Tunnel Route control unit 2 Virtual computer 3 Management device 30 Communication interface unit 31 Address spoofing control unit 32 Learning packet transmission control unit 33 Address recovery control unit 34 Virtual computer migration control unit 35 Branch switch search unit 36 Network topology database 37 Tunnel generation control unit 38 Tunnel address allocation control unit 4 Switch 5 Router

Claims (9)

For a system having a plurality of physical computers connected to a layer 2 network logically configured in a tree structure by a plurality of switches, and a management device for managing a virtual computer running on the physical computer, the physical computer Has a physical layer 2 address and a layer 3 address in a physical interface connected to the layer 2 network, and the virtual machine has a virtual layer 2 address and a layer 3 address in a virtual interface, A virtual computer transmission method for moving a virtual computer running on one physical computer to a second physical computer after movement,
A first step in which a second physical computer assigns the virtual layer 2 address of the virtual computer to a physical interface of the second physical computer;
A second physical computer transmits a packet to a branch switch with the first physical computer in the layer 2 network, and causes the switch constituting the layer 2 network to learn the virtual layer 2 address. A second step;
A third step in which the second physical computer assigns the physical interface of the second physical computer back to the physical layer 2 address;
A virtual machine transmission method, comprising: a fourth step in which the first physical computer moves the virtual computer toward a layer 3 address of the second physical computer. When the first physical computer and the second physical computer are connected to different layer 2 networks across the layer 3 subnet,
A first physical computer creating a layer 3 tunnel with a layer 3 address of a second physical computer;
A second physical computer creating a layer 3 tunnel with the layer 3 address of the first physical computer;
A second physical computer associating the virtual interface of the virtual computer with the layer 3 tunnel;
A first physical computer associating route control to a layer 3 address of the virtual computer with an entrance address of the layer 3 tunnel;
The virtual machine transmission method according to claim 1, further comprising a step of causing the first physical computer to move the virtual computer toward a layer 3 address of the second physical computer. For the second step, the second physical computer
When the layer 3 address of the branch switch is specified, a ping (Packet Internet Groper) packet is transmitted to the layer 3 address,
The Ethernet OAM Continuity Check (CC) or Loop Back (LB) message is transmitted to the physical address of the branch switch when the layer 3 address of the branch switch is not specified. 3. The virtual machine transmission method according to 2. The system further includes a management device,
The management device
Searching for a branch switch between the first physical computer and the second physical computer in the layer 2 network;
The virtual message according to any one of claims 1 to 3, wherein a control message for executing the first step to the fourth step is transmitted to the first physical computer and the second physical computer. Computer transmission method. For a system having a plurality of physical computers connected to a layer 2 network logically configured in a tree structure by a plurality of switches, the physical computer has a physical layer 2 address and a physical interface connected to the layer 2 network. The virtual machine has a virtual layer 2 address and a layer 3 address in the virtual interface, and the virtual machine running on the first physical machine before the migration is A virtual machine transmission system for moving to a second physical computer,
The second physical computer is
Address spoofing means for assigning the virtual layer 2 address of the virtual machine to the physical interface of the second physical machine;
Learning packet transmitting means for transmitting a packet to a branching switch with the first physical computer in the layer 2 network, and for causing the switch constituting the layer 2 network to learn the virtual layer 2 address;
Address recovery means for assigning the physical interface of the second physical computer back to the physical layer 2 address;
The first physical computer includes a virtual computer transmission unit that moves the virtual computer toward a layer 3 address of the second physical computer. When the first physical computer and the second physical computer are connected to different layer 2 networks across the layer 3 subnet,
The first physical computer is
Tunnel generating means for generating a layer 3 tunnel with the layer 3 address of the second physical computer;
Tunnel control means for associating route control to the layer 3 address of the virtual machine with the entrance address of the layer 3 tunnel;
The second physical computer is
Tunnel generating means for generating a layer 3 tunnel with the layer 3 address of the first physical computer;
Tunnel allocation means for associating the virtual interface of the virtual machine with the layer 3 tunnel;
6. The virtual machine transmission system according to claim 5, wherein the virtual machine transmission unit moves the virtual machine toward a layer 3 address of a second physical computer. The learning packet transmitting means includes
When the layer 3 address of the branch switch is specified, a ping packet is transmitted to the layer 3 address,
The Ethernet OAM Continuity Check (CC) or Loop Back (LB) message is transmitted to the physical layer 2 address of the branch switch when the layer 3 address of the branch switch is not specified. The virtual machine transmission system according to 5 or 6. For a system having a plurality of physical computers connected to a layer 2 network logically configured in a tree structure by a plurality of switches, the physical computer has a physical layer 2 address and a physical interface connected to the layer 2 network. The virtual machine has a virtual layer 2 address and a layer 3 address in the virtual interface, and the virtual machine running on the first physical machine before the migration is A management device to be moved to the second physical computer,
Branch switch search means for searching for a branch switch between the first physical computer and the second physical computer for the layer 2 network;
Address spoofing control means for transmitting a control message to the second physical computer to assign the virtual layer 2 address of the virtual computer to the physical interface of the second physical computer;
The second physical computer transmits a packet toward the branch switch, and transmits a control message to the second physical computer to cause the switch in the layer 2 network to learn the virtual layer 2 address. Address learning control means;
Address recovery control means for transmitting a control message to the second physical computer to assign the physical interface of the second physical computer back to the physical layer 2 address;
The first physical computer has virtual computer movement control means for transmitting a control message to the first physical computer in order to move the virtual computer toward the layer 3 address of the second physical computer. Management device. For a system having a plurality of physical computers connected to a layer 2 network logically configured in a tree structure by a plurality of switches, the physical computer has a physical layer 2 address and a physical interface connected to the layer 2 network. The virtual machine has a virtual layer 2 address and a layer 3 address in the virtual interface, and the virtual machine running on the first physical machine before the migration is A program for causing a computer mounted on a management device to be moved to a second physical computer to function,
Branch switch search means for searching for a branch switch between the first physical computer and the second physical computer for the layer 2 network;
Address spoofing control means for transmitting a control message to the second physical computer to assign the virtual layer 2 address of the virtual computer to the physical interface of the second physical computer;
The second physical computer transmits a packet toward the branch switch, and transmits a control message to the second physical computer to cause the switch in the layer 2 network to learn the virtual layer 2 address. Address learning control means;
Address recovery control means for transmitting a control message to the second physical computer to assign the physical interface of the second physical computer back to the physical layer 2 address;
The first physical computer causes the computer to function as virtual computer movement control means for transmitting a control message to the first physical computer in order to move the virtual computer toward the layer 3 address of the second physical computer. A program for a management device characterized by

Images