JP2013008320A - Network system, redundancy method, failure detector and failure detection program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To quickly detect a failure about a network.SOLUTION: A physical machine transmits a control message for conduction confirmation with a network apparatus through virtual environment on the physical machine, detects that a failure occurs in a communication path when response to the control message satisfies a predetermined condition, and notifies a controller that the occurrence of the failure is detected. The controller executes migration of virtual environment with the virtual environment included in the physical machine as a migration source and virtual environment included in another physical machine under the control of the controller as a migration destination, and reflects setting information of the virtual environment of the migration source on the virtual environment of the migration destination.

Description

  The present invention relates to a network system, a redundancy method, a failure detection device, and a failure detection program.

  In recent years, technologies for mutually connecting a plurality of bases (for example, “next-generation corporate network cooperation technology”) have been proposed. According to such technology, for example, VPNs (Virtual Private Networks) of each company are connected to each other, and a collaborative space is formed between different companies. Recently, a technology called Cloud Computing has appeared. In cloud computing, various resources such as software, hardware, and data are stored in a server device on a network, and a user is provided with a service by accessing the server device.

  Cloud computing may be applied with virtualization technology that operates at least one virtual machine on a physical machine. In other words, each server apparatus that may be connected to the network includes a plurality of virtual machine environments as one aspect. The virtualization technology for operating such a virtual machine is to divide physical hardware logically and operate an OS (Operating System) for each of the divided hardware, as if there were multiple physical machines. It is a technology that operates as if it were a physical machine. For example, by applying a virtualization technology to a server device on a network, the server device can be operated as if it were a plurality of server devices, and services can be individually provided to a plurality of companies.

  FIG. 9 is a diagram illustrating a configuration example of a physical network to which the virtualization technology according to the related art is applied. FIG. 10 is a diagram illustrating a configuration example of a logical network to which the virtualization technology according to the related art is applied.

  For example, as shown in FIG. 9, in a physical network according to the conventional technology, a physical machine X, a physical machine Y, a virtual switch controller, a virtual machine controller, a switch, and a router are connected. Note that the numbers of physical machines, switches, routers, and the like are not limited to those illustrated.

Each physical machine includes, for example, at least one virtual machine, a virtual switch, and a hypervisor (or a virtual machine monitor, a virtual monitor, and a virtualized OS). For example, the physical machine X includes a virtual machine A ₁ , a virtual machine B ₁ , a virtual switch X, and a hypervisor. Similarly, the physical machine Y includes a virtual machine A ₂ , a virtual machine B ₂ , a virtual switch Y, and a hypervisor.

In the above configuration, each physical machine is a server device including a virtual environment that provides a service to a user. For example, the virtual machine A ₁ and the virtual machine A ₂ are virtual environments that provide services to the user “A”, and the virtual machine B ₁ and the virtual machine B ₂ are provided to the user “B”. This is a virtual environment that provides services. Each virtual switch is software such as a virtual L2 switch that switches communication by a virtual machine on a physical machine including its own virtual switch. Each hypervisor controls, for example, a virtual machine on a physical machine including its own hypervisor.

  Also, the virtual switch controller, for example, centrally manages the virtual switch software on each physical machine and monitors the virtual switch. Further, the virtual machine controller, for example, centrally manages virtual machine resources on each physical machine and monitors the virtual machine. The monitoring target of the virtual machine controller may further include a hypervisor. Each switch is a physical L2 switch for switching communication on the network. Each router is a physical router that routes packets on the network.

As a result, the provider providing cloud computing defines a logical switch for each user as shown in FIG. 10, and reflects the setting in the physical layer so that the communication is isolated for each customer. Are operating. For example, for the user “A”, as shown in the left side of FIG. 10, a logical switch A is defined, and the virtual machine A ₁ , A virtual machine A ₂ , a logical switch A, and a router A are configured. Similarly, for the user “B”, as shown on the right side of FIG. 10, the logical switch B is defined, and the virtual machine B _{1 is set} so that the communication is isolated for the user “B”. , A virtual machine B ₂ , a logical switch B, and a router B are configured.

  For such a network-related failure, for example, when the link between the virtual switch and the virtual machine is disconnected, or when the virtual switch itself stops, the failure is detected by the virtual switch controller. The

“Nikkei Communication February 15, 2010 issue”, pp. 62-65

  However, the conventional technique has a problem that a failure related to the network may not be detected. In the prior art, the virtual switch controller does not monitor traffic in a virtual machine for each user. For this reason, in the prior art, a virtual machine user reports when a silent failure that disconnects a virtual machine due to a virtual switch software bug or a host OS bug that cannot be detected by the virtual switch controller occurs. Until failure is detected.

  Accordingly, the present invention has been made in view of the above, and an object thereof is to provide a network system, a redundancy method, a failure detection device, and a failure detection program that can quickly detect a failure related to a network. And

  In order to solve the above-described problems and achieve the object, a network system according to the present invention includes a network including a physical machine including a virtual environment including a virtual machine and / or a virtual switch, and a controller that manages the physical machine. In the system, the physical machine sends a control message for confirming continuity between its physical machine and a network device connected to the physical machine to the network device via the virtual environment. A control message transmission unit that transmits the response to the control message transmitted by the control message transmission unit when the response from the network device satisfies a predetermined condition; Detects that a failure has occurred in the communication path with the network device, A failure detection notification unit for notifying the controller that a life has been detected, and when the physical machine is notified of the occurrence of a failure by the physical machine, the controller includes a virtual A migration execution unit that executes migration of a virtual environment using a migration environment as a migration source and a virtual environment that is included in another physical machine that is different from the own physical machine, and the migration executed by the migration execution unit Accordingly, a setting information reflecting unit for reflecting the setting information of the migration source virtual environment to the migration destination virtual environment.

  According to one aspect of the network system, the redundancy method, the failure detection apparatus, and the failure detection program according to the present invention, it is possible to quickly detect a failure related to the network.

FIG. 1 is a diagram illustrating a failure detection method according to the first embodiment. FIG. 2 is a diagram illustrating a configuration example of a virtual machine type network system according to the first embodiment. FIG. 3 is a diagram illustrating a configuration example of a virtual machine type logical network according to the first embodiment. FIG. 4 is a diagram for explaining the failure detection process and the migration process. FIG. 5 is a sequence diagram illustrating an example of a flow of failure detection processing and migration processing according to the first embodiment. FIG. 6 is a diagram illustrating a configuration example of a Linux (registered trademark) module type network system. FIG. 7 is a diagram illustrating a configuration example of a Linux (registered trademark) module type logical network. FIG. 8 is a diagram showing that the failure detection program according to the present invention is specifically realized using a computer. FIG. 9 is a diagram illustrating a configuration example of a physical network to which the virtualization technology according to the related art is applied. FIG. 10 is a diagram illustrating a configuration example of a logical network to which the virtualization technology according to the related art is applied.

  Exemplary embodiments of a network system, a redundancy method, a failure detection apparatus, and a failure detection program according to the present invention will be described below with reference to the accompanying drawings. In addition, this invention is not limited by the following examples.

[Fault detection method]
The failure detection method according to the first embodiment will be described with reference to FIG. FIG. 1 is a diagram illustrating a failure detection method according to the first embodiment.

  For example, as shown in FIG. 1, in the failure detection method according to the first embodiment, a failure detection monitoring function is used. For example, as indicated by a solid arrow in FIG. 1, the failure detection monitoring function transmits a control message for confirming continuity between a physical machine and a network device such as a switch or a router connected to the physical machine. .

  Specifically, the physical machine includes a virtual switch, a hypervisor, a host OS, and the like, and when sending such a control message, the virtual port of the connected virtual switch, the virtual switch, the NIC (Network Interface Card) of the physical machine, the physical Via an L2 (Layer 2) switch, a physical L3 switch, a physical router, and the like. Further, in the transmission of the control message, ping (Packet Internet Groper) or the like is executed as one aspect. In FIG. 1, the functions of the hypervisor and the host OS may be integrated.

  The failure detection monitoring function detects that a failure has occurred in the communication path between the physical machine and the network device when the response from the network device satisfies the specified condition for the transmitted control message. Then, it notifies the virtual switch controller or the like that the occurrence of the failure has been detected. As the predetermined condition, for example, there is no response for a certain period of time, the response interval is extremely different from normal (for example, extremely slow response time, etc.), and the response is intermittent. In other words, even if it is not completely disconnected, if it is considered that there is a sign of disconnection that is included in the predetermined condition, this predetermined condition is set so that a failure is detected in the communication path. Also good. Further, for example, a predetermined condition set in a storage unit (not shown) may be read and used for detection.

  In FIG. 1, the failure detection monitoring function may be arranged in each virtual machine on the physical machine. In such a case, the control message is transmitted via the virtual NIC of the virtual machine. As a result, the monitoring targets by the failure detection monitoring function are, for example, virtual NICs of virtual machines, virtual ports of virtual switches, virtual switches, NICs of physical machines, physical L2 switches, physical L3 switches, physical routers, and the like.

  That is, in the failure detection method according to the first embodiment, the occurrence of a failure is detected by transmitting a control message for continuity confirmation to the communication path by the virtual machine on the physical machine. Compared with the prior art that cannot be detected, the failure can be detected quickly. In other words, in the failure detection method according to the first embodiment, in order to detect a silent failure or the like, a control message is transmitted to a network device connected to the physical machine via a virtual switch that switches communication by the virtual machine. Therefore, it is possible to quickly detect a failure. Further, in the failure detection method according to the first embodiment, assuming that the NICs of the physical switch, router, and physical machine are normal, a virtual communication path in the physical machine, that is, failure detection in the physical machine. It is possible to detect a failure in a virtual communication path between the monitoring function and the physical machine NIC.

[Virtual Machine Type Network System Configuration According to Embodiment 1]
Next, a virtual machine type network system configuration according to the first embodiment will be described with reference to FIGS. 2 and 3. FIG. 2 is a diagram illustrating a configuration example of a virtual machine type physical network according to the first embodiment. FIG. 3 is a diagram illustrating a configuration example of a virtual machine type logical network according to the first embodiment.

  For example, as illustrated in FIG. 2, in the virtual machine network according to the first embodiment, the physical machine 100, the physical machine 110, the controller 150, the switch 10, the router 11, the switch 12, and the router 13 are included. Connected. Hereinafter, the switch 10, the router 11, the switch 12, and the router 13 may be referred to as “network devices”. Note that the numbers of physical machines, switches, routers, and the like are not limited to those illustrated.

The physical machine 100 includes, for example, a virtual machine A ₁ 101, a virtual machine B ₁ 102, a monitoring virtual machine 103, a virtual switch 104, and a hypervisor 105. Similarly, the physical machine 110 includes, for example, a virtual machine A ₂ 111, a virtual machine B ₂ 112, a monitoring virtual machine 113, a virtual switch 114, and a hypervisor 115. The controller 150 includes, for example, a virtual switch controller 151 and a virtual machine controller 152. The monitoring virtual machine 103 and the monitoring virtual machine 113 are examples of the failure detection monitoring function shown in FIG.

  In the above configuration, the switch 10 or the switch 12 is, for example, a physical L2 switch that switches communication on the network. The router 11 or the router 13 is, for example, a physical router that routes packets on the network.

The physical machine 100 or the physical machine 110 is a server device including a virtual environment that provides a service to a user. For example, the virtual machine A ₁ 101 and the virtual machine A ₂ 111 are virtual environments that provide services to the user “A”, and the virtual machine B ₁ 102 and the virtual machine B ₂ 112 are user “A”. B ”is a virtual environment that provides a service.

For example, the monitoring virtual machine 103 performs ping at a predetermined time interval in order to confirm the continuity of the communication path by the virtual machine A ₁ 101 or the virtual machine B ₁ 102. More specifically, in order to detect which virtual machine has a failure in the communication path, the monitoring virtual machine 103 uses a ping whose source is an IP (Internet Protocol) address used for each virtual machine. Execute. Note that the process of executing ping using the IP address used for each virtual machine as a transmission source is applied when a fault detection monitoring function is provided in each virtual machine. On the other hand, in the configuration of FIG. 1 in which the failure detection monitoring function is independent or FIG. 6 to be described later, one unused unused IP address among the subnets held corresponding to each user. Confirmation of continuity is performed. In short, when the failure detection monitoring function exists independently of the virtual machine, it is preferable to use an address different from the virtual machine address.

Then, the monitoring virtual machine 103 has a failure in the communication path by the virtual machine A ₁ 101 or the virtual machine B ₁ 102 when the response from the network device satisfies a predetermined condition with respect to the executed ping. Is detected. Examples of the predetermined condition include that there is no response for a certain period of time, that the response interval is extremely different from normal, and that the response is intermittent. Thereafter, the monitoring virtual machine 103 notifies the controller 150 that a failure has been detected. Note that the processing by the monitoring virtual machine 113 is the same as the processing by the monitoring virtual machine 103, and thus the description thereof is omitted here. Hereinafter, a case where a failure is detected by the monitoring virtual machine 103 will be described as an example.

  The virtual switch 104 or the virtual switch 114 is software such as a virtual L2 switch that switches communication by a virtual machine on a physical machine including its own virtual switch. For example, the hypervisor 105 or the hypervisor 115 controls a virtual machine on a physical machine including its own hypervisor.

  For example, the virtual switch controller 151 centrally manages software of the virtual switch 104 and the virtual switch 114 and monitors these virtual switches. Further, for example, when the monitoring virtual machine 103 or the monitoring virtual machine 113 is notified of the occurrence of a failure, the virtual switch controller 151 transfers the failure detection notification to the virtual machine controller 152. In addition, the virtual switch controller 151 executes the migration of the virtual environment using the virtual environment such as the virtual switch 104 included in the physical machine 100 as the migration source and the virtual environment included in the physical machine 110 as the migration destination. Here, the migration destination may be a physical machine managed by the controller 150, that is, any physical machine (not shown) under the control of the controller 150. Further, the virtual switch controller 151 reflects the setting information of the virtual environment such as the virtual switch 104 that is the migration source in the virtual environment of the physical machine 110 that is the migration destination in accordance with the migration of the virtual environment. The migration by the virtual switch controller 151 is performed using a storage communication line as one aspect.

For example, the virtual machine controller 152 receives a notification of failure detection from the virtual switch controller 151. The virtual machine controller 152 uses a virtual environment such as the virtual machine A ₁ 101 and the virtual machine B ₁ 102 included in the physical machine 100 as a migration source, and uses a virtual environment included in the physical machine 110 as a migration destination. Run the migration. Here, the migration destination may be a physical machine managed by the controller 150, that is, any physical machine (not shown) under the control of the controller 150. The virtual machine controller 152 also sends virtual environment setting information such as the virtual machine A ₁ 101 and the virtual machine B ₁ 102 that are the migration source to the virtual environment of the physical machine 110 that is the migration destination in accordance with the migration of the virtual environment. To reflect. Thereafter, the virtual machine controller 152 shuts down the physical machine 100 that is the notification source of the failure occurrence. The migration by the virtual machine controller 152 is performed using a storage communication line as one aspect. In addition, after the physical machine 100 is shut down, the failure location is repaired by a system administrator or the like. When repairing a failure location, information on which virtual machine has caused a failure may be used.

  Further, the migration process by the virtual switch controller 151 and the virtual machine controller 152 is executed for other physical machines managed by the virtual machine controller 152. In such a migration process, a combination of a virtual machine and a virtual switch included on the same physical machine has a migration destination on the same physical machine.

  With the configuration of the physical network, a provider who provides cloud computing defines a logical switch for each user as shown in FIG. In addition to operating with the settings reflected, a failure detection monitoring function is introduced for each physical machine that contains virtual machines.

For example, for the user “A”, as shown in the left side of FIG. 3, a logical switch A is defined, and the virtual machine A ₁ , A virtual machine A ₂ , a logical switch A, and a router A are configured, and a failure detection monitoring function A is also configured. Similarly, for the user “B”, as shown on the right side of FIG. 3, a logical switch B is defined, and the virtual machine B _{1 is set} so that the communication is isolated for the user “B”. A virtual machine B ₂ , a logical switch B, and a router B are configured, and a failure detection monitoring function B is also configured.

[Fault detection processing and migration processing]
Next, the failure detection process and the migration process will be described with reference to FIG. FIG. 4 is a diagram for explaining the failure detection process and the migration process. The failure detection processing mainly refers to processing by the monitoring virtual machine as a failure detection monitoring function, and the migration processing mainly refers to processing by the controller 150. Hereinafter, a case where a failure occurs in a communication path by the virtual machine A ₁ 101 or the virtual machine B ₁ 102 included in the physical machine 100 will be described as an example.

(Fault detection processing)
For example, as shown in (1) of FIG. 4, the monitoring virtual machine 103 includes network devices such as a physical L2 switch and a physical router via a virtual switch 104 formed by a virtual machine A ₁ 101 and a virtual machine B ₁ 102. In order to check the continuity of the communication path between the virtual machines A ₁ 101 and B ₁ 102, pings are executed at predetermined intervals. Then, the monitoring virtual machine 103 has a failure in the communication path by the virtual machine A ₁ 101 or the virtual machine B ₁ 102 when the response from the network device satisfies a predetermined condition with respect to the executed ping. And the virtual switch controller 151 is notified that the occurrence of the failure has been detected. The predetermined conditions include, for example, that there is no response for a certain period of time, that the response interval is extremely different from normal, and that the response is intermittent.

(Migration process)
Further, as illustrated in (2) of FIG. 4, when the virtual switch controller 151 receives a failure detection notification from the monitoring virtual machine 103, the virtual switch controller 151 transfers the failure detection notification to the virtual machine controller 152. Further, as shown in (3) of FIG. 4, when the virtual machine controller 152 is notified of the failure occurrence detection from the virtual switch controller 151, the virtual machine controller 152 changes the virtual environments of the virtual machine A ₁ 101 and the virtual machine B ₁ 102. The migration of the virtual environment is executed using the virtual environment included in the physical machine 110 as the migration destination as the migration source. As a result, a virtual environment of the virtual machine A ₁ 101 and the virtual machine B ₁ 102 is newly configured in the physical machine 110. In addition, in accordance with the migration of the virtual environment, the virtual machine controller 152 sends the virtual environment setting information of the virtual machine A ₁ 101 and the virtual machine B ₁ 102 that are the migration source to the virtual environment of the physical machine 110 that is the migration destination. To reflect.

  Further, as illustrated in (4) of FIG. 4, the virtual switch controller 151 executes migration of the virtual environment using the virtual environment of the virtual switch 104 as the migration source and the virtual environment included in the physical machine 110 as the migration destination. . Further, the virtual switch controller 151 reflects the virtual environment setting information of the virtual switch 104 that is the migration source to the virtual environment of the physical machine 110 that is the migration destination in accordance with the migration of the virtual environment. Further, the virtual machine controller 152 shuts down the physical machine 100 that is the notification source of the failure occurrence, as shown in (5) of FIG.

[Processing Sequence According to Embodiment 1]
Next, the flow of failure detection processing and migration processing according to the first embodiment will be described with reference to FIG. FIG. 5 is a sequence diagram illustrating an example of a flow of failure detection processing and migration processing according to the first embodiment.

For example, as shown in FIG. 5, the monitoring virtual machine 103 transmits a control message for confirming continuity between the physical machine 100 and the network device (step S101). In the transmission of the control message, as one mode, ping using the IP address used for communication between the virtual machine A ₁ 101 and the virtual machine B ₁ 102 as the transmission source is executed via the virtual switch 104. The monitoring virtual machine 103 detects the occurrence of a failure by detecting that a failure has occurred in the communication path when the response from the network device satisfies a predetermined condition for the transmission of the control message. Is notified to the virtual switch controller 151 (step S102). The predetermined conditions include, for example, that there is no response for a certain period of time, that the response interval is extremely different from normal, and that the response is intermittent.

  When the virtual switch controller 151 receives a failure detection notification from the monitoring virtual machine 103, the virtual switch controller 151 transfers the received failure detection notification to the virtual machine controller 152 (step S103). Then, the virtual switch controller 151 executes the migration of the virtual environment using the virtual environment such as the virtual switch 104 as the migration source and the virtual environment included in the physical machine 110 as the migration destination (step S104). Thereafter, the virtual switch controller 151 reflects the virtual environment setting information of the virtual switch 104 that is the migration source in the virtual environment of the physical machine 110 that is the migration destination in accordance with the migration of the virtual environment such as the virtual switch 104 ( Step S105).

In addition, when a failure detection notification is transferred from the virtual switch controller 151, the virtual machine controller 152 uses the virtual environment such as the virtual machine A ₁ 101 and the virtual machine B ₁ 102 as a migration source and is included in the physical machine 110. Migration of the virtual environment is executed using the virtual environment as the migration destination (step S106). Then, in accordance with the migration of the virtual environment of the virtual machine A ₁ 101 and the virtual machine B ₁ 102, the virtual machine controller 152 receives the virtual environment setting information of the virtual machine A ₁ 101 and the virtual machine B ₁ 102 that are the migration source. This is reflected in the virtual environment of the physical machine 110 that is the migration destination (step S107). Thereafter, the virtual machine controller 152 shuts down the physical machine 100 in which the failure is detected (step S108).

[Effects of Example 1]
As described above, in the network system, the physical machine 100 executes ping on the communication path of the virtual machine, detects that a failure has occurred on the communication path of the virtual machine when there is no response, and detects the failure. This is notified to the controller 150. In addition, when notified of the occurrence of a failure from the physical machine 100, the controller 150 uses a virtual environment such as a virtual machine and a virtual switch included in the physical machine 100 as a migration source, and other controllers under the control of the controller 150. Using the virtual environment of the physical machine as the migration destination, the virtual environment is migrated and various setting information is reflected. As a result, the network system can quickly detect a failure related to the network and can suppress the stagnation of the service to the user.

  The embodiments of the network system including the physical machine and the controller according to the present invention have been described so far, but may be implemented in various different forms other than the above-described embodiments. Therefore, different embodiments in (1) Linux (registered trademark) module type, (2) configuration, and (3) program will be described.

(1) Linux (registered trademark) module type In the above embodiment, a virtual machine type network (physical network) system or a logical network has been described as an example. However, it may be realized by a Linux (registered trademark) module type. .

  FIG. 6 is a diagram illustrating a configuration example of a Linux (registered trademark) module type network system. FIG. 7 is a diagram illustrating a configuration example of a Linux (registered trademark) module type logical network. In FIG. 6, the same components as those in the virtual machine type network system configuration according to the first embodiment are denoted by the same reference numerals. That is, the processing by each component is the same as that in the first embodiment, and thus detailed description thereof is omitted. The monitoring module 103 corresponds to the monitoring virtual machine 103, and the monitoring module 113 corresponds to the monitoring virtual machine 113.

  For example, each virtual machine in FIG. 6 communicates via each virtual switch as in the first embodiment. Accordingly, the monitoring module 103 or the monitoring module 113 executes ping at a predetermined time interval, for example, to confirm the continuity of the communication path by each virtual machine. As in the first embodiment, in the execution of ping, continuity confirmation is performed using one unused unused IP address among the subnets held corresponding to each user. Then, the monitoring module 103 or the monitoring module 113 detects that a failure has occurred in the communication path of the corresponding virtual machine when a response from the network device satisfies a predetermined condition with respect to the executed ping. As the predetermined condition, for example, there is no response for a certain period of time, the response interval is extremely different from normal, and the response is intermittent. In this detection, similarly to the first embodiment, it is possible to detect a silent failure or the like in each virtual switch. Thereafter, the monitoring module 103 or the monitoring module 113 notifies the controller 150 that a failure has been detected.

  With the configuration of the physical network, a provider who provides cloud computing defines a logical switch for each user as shown in FIG. In addition to operating with the settings reflected, a failure detection monitoring function is introduced for each physical machine that contains virtual machines. Further, the configuration of the logical network is the same as that of the first embodiment, and thus the description thereof is omitted.

(2) Configuration In addition, for information including processing procedures, control procedures, specific names, various data, parameters, and the like shown in the document and drawings, etc. (for example, processing procedures executed by the controller 150), It can be changed arbitrarily unless otherwise specified. For example, the migration process executed by the virtual switch controller 151 and the virtual machine controller 152 may appropriately change the order of the processing procedures. Taking FIG. 5 as an example, either step S104 and step S105 and step S106 and step S107 may be processed first. However, step S108 is executed after the processing of step S104 to step S107 is completed. Such migration is preferably, for example, live migration (LM). For live migration, see “Kazuo Moriwaka, Ryuichiro Tsuruno, Kouhei Maeda,“ KVM Thorough Introduction to Linux (registered trademark) Kernel Virtualization Platform Construction Guide ”, July 7, 2010, p. 162 "etc.

  Each component of the illustrated physical machine 100 and controller 150 is functionally conceptual, and does not necessarily need to be physically configured as illustrated. In other words, the specific form of distribution / integration of each device is not limited to the one shown in the figure, and all or a part thereof may be functionally or physically distributed or arbitrarily distributed in arbitrary units according to various burdens or usage conditions. Can be integrated. For example, a virtual switch controller 151 that manages and monitors virtual switches and a virtual machine controller 152 that manages and monitors physical machines may be integrated as a “virtual environment controller” that manages and monitors virtual switches and virtual machines. .

  When there are three or more physical machines managed by the virtual machine controller 152, the migration process is executed so that the virtual machines are distributed over a plurality of physical machines in consideration of the load state of each physical machine. The At this time, the virtual switch controller 151 and the virtual machine controller 152 cooperate to migrate the combination of the virtual machine and the virtual switch onto the same physical machine.

  Further, the present invention is not limited to not stopping the provision of the virtual environment service by migration when a failure is detected. For example, when the detection of the occurrence of a failure is notified by the physical machine, the controller 150 switches the virtual environment included in the physical machine to an alternative means, and the virtual environment setting information before the switching according to the switched virtual environment May be reflected in the virtual environment after switching. For example, when a fault is detected, the controller replaces the virtual switch by regenerating the virtual switch or preparing an alternative virtual switch in advance, and the virtual switch after switching the setting information before switching. Reflect as setting information.

  Each processing function performed by the physical machine 100 or the controller 150 is realized by a CPU and a program that is analyzed and executed by the CPU, or as hardware by wired logic. Can be realized.

(3) Program FIG. 8 is a diagram showing that the failure detection program according to the present invention is specifically realized using a computer. As illustrated in FIG. 8, the computer 1000 includes, for example, a memory 1001, a CPU 1002, a hard disk drive interface 1003, a disk drive interface 1004, a serial port interface 1005, a video adapter 1006, and a network interface 1007. These units are connected by a bus 1008.

  As illustrated in FIG. 8, the memory 1001 includes a ROM 1001a and a RAM 1001b. The ROM 1001a stores a boot program such as BIOS (Basic Input Output System). The hard disk drive interface 1003 is connected to the hard disk drive 1009 as illustrated in FIG. The disk drive interface 1004 is connected to the disk drive 1010 as illustrated in FIG. For example, a removable storage medium such as a magnetic disk or an optical disk is inserted into the disk drive 1010. The serial port interface 1005 is connected to, for example, a mouse 1011 and a keyboard 1012 as illustrated in FIG. The video adapter 1006 is connected to a display 1013, for example, as illustrated in FIG.

  Here, as illustrated in FIG. 8, the hard disk drive 1009 stores, for example, an OS (Operating System) 1009a, an application program 1009b, a program module 1009c, and program data 1009d. That is, the failure detection program according to the present invention is stored in, for example, the hard disk drive 1009 as a program module 1009c in which a command executed by the computer 1000 is described. Specifically, the hard disk drive 1009 stores a program module 1009c in which a control message transmission procedure for executing processing similar to that of the monitoring virtual machine 103 and the like described in the above embodiment and a failure detection notification procedure are described. . Further, data used for processing by the failure detection program, such as data stored in a predetermined storage unit of the physical machine, is stored as program data 1009d in, for example, the hard disk drive 1009. The CPU 1002 reads the program module 1009c and program data 1009d stored in the hard disk drive 1009 to the RAM 1001b as necessary, and executes a control message transmission procedure and a failure detection notification procedure.

  Note that the program module 1009c and the program data 1009d related to the failure detection program are not limited to being stored in the hard disk drive 1009, but are stored in, for example, a removable storage medium and read out by the CPU 1002 via the disk drive 1010 or the like. May be. Alternatively, the program module 1009c and the program data 1009d related to the failure detection program are stored in another computer connected via a network (LAN (Local Area Network), WAN (Wide Area Network), etc.), and the network interface 1007 is stored. Via the CPU 1002.

100 Physical machine 101 Virtual machine A ₁
102 Virtual machine B ₁
103 monitoring virtual machine 104 virtual switch 105 hypervisor 150 controller 151 virtual switch controller 152 virtual machine controller

Claims (6)

A network system including a physical machine including a virtual environment including a virtual machine and / or a virtual switch, and a controller that manages the physical machine,
The physical machine is
A control message transmission unit for transmitting a control message for confirming continuity between the own physical machine and the network device connected to the own physical machine to the network device via the virtual environment;
When a response from the network device to the control message transmitted by the control message transmission unit satisfies a predetermined condition, a failure occurs in a communication path between the physical machine including the virtual environment and the network device. A failure detection notification unit that detects the occurrence of a failure and notifies the controller that a failure has been detected, and
The controller is
When notified of the occurrence of a failure by the physical machine, the virtual environment included in the own physical machine is set as the migration source, and the virtual environment included in another physical machine different from the own physical machine is set as the migration destination. As a migration execution unit that executes migration of the virtual environment,
A network system, comprising: a setting information reflecting unit that reflects the setting information of the migration source virtual environment in the migration destination virtual environment according to the migration executed by the migration executing unit.   The control message transmission unit transmits the control message having an IP address used for each virtual environment included in the physical machine as a transmission source to the network device. The network system described. A redundancy method executed by a physical machine including a virtual environment including a virtual machine and / or a virtual switch and a controller that manages the physical machine,
In the physical machine,
A control message transmission step of transmitting a control message for confirming continuity between the own physical machine and the network device connected to the own physical machine to the network device via the virtual environment;
When a response from the network device to the control message transmitted by the control message transmission step satisfies a predetermined condition, a failure occurs in a communication path between the physical machine including the virtual environment and the network device. A failure detection notification step for detecting the occurrence of a failure and notifying the controller that a failure has been detected,
In the controller,
When notified of the occurrence of a failure by the physical machine, the virtual environment included in the own physical machine is set as the migration source, and the virtual environment included in another physical machine different from the own physical machine is set as the migration destination. As a migration execution process for executing the migration of the virtual environment,
A redundancy method, comprising: a setting information reflecting step of reflecting setting information of the migration source virtual environment in the migration destination virtual environment according to the migration executed by the migration executing step. A failure detection apparatus including a virtual environment including a virtual machine and / or a virtual switch,
A control message transmission unit that transmits a control message for confirming continuity between the self-failure detection device and the network device connected to the self-failure detection device to the network device via the virtual environment. When,
When a response from the network device to the control message transmitted by the control message transmitter satisfies a predetermined condition, a communication path between the own failure detection device including the virtual environment and the network device A failure detection device comprising: a failure detection notification unit that detects that a failure has occurred and notifies a controller that manages the failure detection device of the device that the failure has been detected.   A failure detection program for causing a computer to function as the failure detection apparatus according to claim 4. A network system including a physical machine including a virtual environment including a virtual machine and / or a virtual switch, and a controller that manages the physical machine,
The physical machine is
A control message transmission unit for transmitting a control message for confirming continuity between the own physical machine and the network device connected to the own physical machine to the network device via the virtual environment;
When a response from the network device to the control message transmitted by the control message transmission unit satisfies a predetermined condition, a failure occurs in a communication path between the physical machine including the virtual environment and the network device. A failure detection notification unit that detects the occurrence of a failure and notifies the controller that a failure has been detected, and
The controller is
A virtual environment switching unit that switches the virtual environment included in the own physical machine to an alternative when the physical machine is notified of the occurrence of a failure;
A network system, comprising: a setting information reflecting unit that reflects setting information of a virtual environment before switching in the virtual environment after switching according to the virtual environment switched by the virtual environment switching unit.

Images