JP2015142344A - Communication system, control device, communication node, control information setting method and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To enable efficient work for confirming the consistency of control information in a centralized control network.SOLUTION: The communication system includes: a control device which controls a communication node by setting control information to the communication node; and a control node which processes a reception packet according to the control information set by the control device. The control device embeds identification information, enabling identifying the setting period of the control information, into a predetermined area in the control information. The communication node maintains the control information in the state of including the identification information.

Description

  The present invention relates to a communication system, a control device, a communication node, a control information setting method, and a program, and in particular, a communication system, a control device, a communication node, and a communication device that realize communication by the control device setting control information in the communication node. The present invention relates to a control information setting method and program.

  Patent Document 1 discloses an example of a network system using OpenFlow. In OpenFlow, a control device called an OpenFlow controller (hereinafter “OFC”) communicates by setting a kind of control information called a flow entry or the like in a communication node called an OpenFlow switch (hereinafter “OFS”). Is realized.

  Details of OpenFlow are described in Non-Patent Documents 1 and 2. In Non-Patent Document 2, a Cookie field for storing identification information called Cookie is provided in a flow entry, and the Cookie field can be specified when a flow entry is operated by a controller (Non-Patent Document 2). (Refer to “A.3.4 Modify State Messages” in Document 2). In Patent Document 1, a flow identifier for identifying a flow is stored in the Cookie field and used for identifying a sampling target flow.

  Patent Document 2 describes a configuration in which, in a database system that is duplicated by an active system and a standby system, the active database and the standby database perform synchronization and matching using a sequence number assigned to the data at the time of update. It is disclosed.

International Publication No. 2012/098786 JP 2010-152591 A

Nick McKeown and 7 others, “OpenFlow: Enabling Innovation in Campus Networks”, [online], [searched on January 22, 2014], Internet <URL: http://archive.openflow.org/documents/ openflow-wp-latest.pdf> “OpenFlow Specification” Version 1.1.0 Implemented (Wire Protocol 0x02), [online], [January 22, 2014 search], Internet <URL: http://archive.openflow.org/ documents / openflow-spec-v1.1.0.pdf>

  The following analysis is given by the present invention. In a communication system having a control device such as the OpenFlow, it is a problem to maintain consistency between control information held by the control device and control information set in the communication node. For example, a failure may occur in the physical link between the control device and the communication node, and the control information set from the control device may not be set correctly in the communication node. As a result, there is a possibility that necessary control information is not set in the communication node in the communication node, resulting in packet loss, or in some cases, a packet loop. The same problem can also occur when the control device is made redundant into an active system (active system) and a standby system (standby system).

  As a method for confirming the consistency between entries such as the control information entry, there is a method in which a sequence number that is incremented at the time of data update is given and collated with each other, as in Patent Document 2. However, in OpenFlow, as in Non-Patent Document 2, the specification of a switch suitable for the OpenFlow controller is determined in detail, and it is not limited to providing a dedicated area for storing a sequence number. It becomes necessary to define even a dedicated message for reading.

  Further, even if it is accepted that the sequence numbers as described above are accepted, there is a problem in how the control information is collated and compared. For example, when all the control information is collated comprehensively, there is a problem that it takes time depending on the number of communication nodes and the number of control information held by each communication node.

  It is an object of the present invention to provide a communication system, a control device, a communication node, a control information setting method, and a program capable of improving the efficiency of checking the consistency of control information in the centralized control network.

  According to a first aspect, comprising: a control device that controls the communication node by setting control information in the communication node; and a communication node that processes a received packet according to the control information set from the control device. The control device embeds identification information capable of specifying a set time of the control information in a predetermined area in the control information, and the communication node holds the control information in a state including the identification information. A communication system is provided.

  According to the 2nd viewpoint, the control apparatus and communication node which are used for an above-described communication system are provided.

  According to a third aspect, the control device creates control information including identification information that can specify a setting time of the control information, and the control device includes control information including the identification information in a communication node. And a control information setting method characterized by the following. This method is linked to a specific machine called a control device that controls a communication node by setting control information in the communication node.

  According to the fourth aspect, a process of creating control information including identification information that can specify a setting time of control information in a computer constituting the control device, and control information including the identification information in a communication node A program for executing the setting process is provided. This program can be recorded on a computer-readable (non-transient) storage medium. That is, the present invention can be embodied as a computer program product.

  According to the present invention, by using identification information that can specify the setting timing of control information, it is possible to efficiently check the consistency of control information in a centralized control type network.

It is a figure which shows the structure of the 1st Embodiment of this invention. It is a figure which shows the deformation | transformation structure of the 1st Embodiment of this invention. It is a figure which shows the structure of the communication system of the 2nd Embodiment of this invention. It is a block diagram which shows the detailed structure of the communication system of the 2nd Embodiment of this invention. It is a figure for demonstrating the production | generation method of the Cookie value of the 2nd Embodiment of this invention. It is a flowchart showing operation | movement of OFC (operation system) of the 2nd Embodiment of this invention. FIG. 4 is a diagram illustrating a state where a new entry is added in the state of FIG. 3. It is a figure for demonstrating operation | movement (at the time of failure occurrence) of the communication system of the 2nd Embodiment of this invention. It is a flowchart showing operation | movement of OFC (standby system) of the 2nd Embodiment of this invention. It is a figure for demonstrating another example of the matching process of the flow entry by OFC (standby system) of the 2nd Embodiment of this invention. It is a figure for demonstrating another example of the matching process of the flow entry by OFC (standby system) of the 2nd Embodiment of this invention. It is a figure which shows the structure of the identification information used in the 3rd Embodiment of this invention. It is a figure for demonstrating the example of the matching process of the flow entry using the priority in the 3rd Embodiment of this invention. It is a figure for demonstrating another example of the matching process of the flow entry using the priority in the 3rd Embodiment of this invention.

[First Embodiment]
In the embodiment, as shown in FIG. 1, the present invention includes a control device 10 that controls the communication node 20 by setting control information in the communication node 20, and the control information set by the control device 10. This can be realized by a communication system including a communication node 20 that processes received packets. More specifically, the control device 10 embeds identification information (T1, T2 in FIG. 1) that can specify the set time of the control information in a predetermined area in the control information. The communication node 20 holds the control information in a state including the identification information.

  In this way, with the identification information as a clue, the process of confirming the out-of-synchronization from the control information set in the communication node 20 near the timing when a network failure or the like has occurred (for example, the time zone corresponding to the identification information T2). You can start. As a result, loss of synchronization between the control device 10 and the communication node 20 can be recovered early.

  In FIG. 1, the example used for confirming the loss of synchronization between the control device 10 and the communication node 20 has been described. For example, as illustrated in FIG. 2, the control information set in the communication node 20 from the control device 10. A configuration in which a verification device 30 for receiving the signal is provided can be preferably employed. According to the configuration of FIG. 2, the verification device 30 can confirm the loss of synchronization instead of the control device 10. Further, the verification apparatus 30 can also perform analysis using the identification information when performing failure analysis, operation verification of the control apparatus 10, and the like.

[Second Embodiment]
Subsequently, a plurality of OFCs are prepared as control devices for redundancy, one of them is operated as an active system (active system), and the other apparatus is set as a standby system (standby system). The second embodiment will be described in detail with reference to the drawings.

  FIG. 3 is a diagram schematically showing the configuration of the second exemplary embodiment of the present invention. Referring to FIG. 3, an OFC (active system) 100A that operates as an active system, an OFC (standby system; second control device) 100B that can operate in place of the active system, and one or more OFSs 200A to 200C are connected. The configuration shown is shown. In the following description, the OFC (active system) 100A and the OFC (standby system) 100B are described as “OFC100” unless otherwise distinguished. Similarly, the OFS 200A to 200C are described as “OFS 200” when they are not particularly distinguished.

  The OFC (active system) 100A instructs flow control by setting a flow entry to the OFS 200. The OFS 200 updates the received frame (packet) based on the flow entry set from the OFC 100, forwards it to another OFS 200, or discards it.

  Further, the OFC (active system) 100A notifies the OFC (standby system) 100B of the flow entry itself set in the OFS 200 or its contents. The OFC (standby system) 100B retains the received flow entry, and when the OFC (active system) 100A cannot continue operation due to a failure, it takes over the operation based on the retained flow entry.

  FIG. 4 is a detailed configuration diagram of the OFC 100 and the OFS 200. The OFC (active system) 100A includes an OFS control unit 110A and a flow entry management table 120A (the same applies to the OFC (standby system) 100B). The OFS 200 includes a flow entry processing unit 210 and a flow table 220.

  The OFS control unit 110A of the OFC (active system) 100A operates in accordance with an instruction from a user or a predetermined control policy, and “updates of the flow entry management table 120A” and “operation contents (addition, change or change of flow entry to the OFS 200)”. Delete) ”and“ notification (synchronization) of flow entry update contents to OFC (standby system) 100B ”.

  The OFS control unit 110B of the OFC (standby system) 100B stores the flow entry received from the OFC (active system) 100A in the flow entry management table 120B.

  The flow entry processing unit 210 of the OFS 200 stores the flow entry received from the OFC (active system) 100A in the flow table 220.

The flow entries 121A and 121B in the flow entry management table 120 and the flow entry 221 in the flow table 220 have information on cookie, match condition, and action.
The match condition is information for determining whether a frame (packet) input to the OFS 200 conforms to this flow entry. Action is information indicating the processing content applied to a frame (packet) that matches the matching condition. Cookie is identification information of control information (flow entry) generated when the OFC 100 sets a flow entry in the OFS 200. In the present embodiment, it is assumed that the Cookie of Non-Patent Document 2 is used, and that a Cookie can be specified to acquire and operate a flow entry.

  FIG. 5 is a diagram illustrating an example of a cookie value generation rule by the OFC 100. In the example of FIG. 5, a cookie value that can specify the set time of the flow entry is generated by increasing the cookie value at intervals of T seconds starting from the specific time. In addition, when the upper limit value of the cookie value is determined and becomes (N−1), processing for returning the cookie value to the initial value (0) is performed at the next timing. In this way, the length of the cookie value can be suppressed to a predetermined number of bits.

  In the case of the Cookie value generation rule shown in FIG. 5, the time obtained from the OS (Operating System) is divided by N × T seconds, and the remainder is further divided by T (the remainder is rounded down) to obtain the Cookie value. Can do. Thereby, it is possible to obtain a Cookie value that changes in the range of 0 to (N−1) in units of T seconds starting from the UNIX (registered trademark) epoch time.

  Note that “N” in the cookie value generation formula is a number that can be taken by a predetermined cookie value, and is also a number that divides the flow entry set in the OFS 200. The flow entry matching process between the OFC 100 and the OFS 200 is performed for each N that is a division unit. When N is increased, the number of OpenFlow messages used for acquisition from the OFS 200 increases in one flow entry matching process. On the other hand, if N is reduced, the number of OpenFlow messages can be reduced, but the number of flow entries having the same Cookie value increases. It is necessary to tune the magnitude of N in consideration of these.

  Similarly, “T”, which is the update time interval of the cookie value, is also a value for distributing a large number of flows so as not to have the same cookie value. A large number of flow entries may be set in a specific time zone, and if the cookie values of each flow entry are not well distributed, a large number of flow entries may be acquired at the same time, and the flow entry matching process may take a long time. . As the setup performance of the flow entry to the OFS 200 increases, the number of flow entries that can be set in a certain period increases. Therefore, in order to distribute the cookie values, it is necessary to reduce the update time interval T. Therefore, it is necessary to tune the value of T in consideration of these.

  Referring to FIG. 4 again, the OFC (active system) 100A, the OFC (standby system) 100B, and the OFS 200 hold the same flow entries 121A, 121B, and 221 due to the flow entry setting and the notification between the OFCs 100. When the OFS 200A receives a frame (packet) that matches the match condition M1, the OFS 200A applies the process A1 to the frame (packet). Since the Cookie value of each flow entry corresponds, the flow entry difference (out of synchronization) can be detected by specifying the Cookie value and collating the flow entries.

  Note that each unit (processing means) of the OFC (control device) and OFS (communication node) shown in FIG. 4 is a computer that causes the computer constituting these devices to execute the above-described processes using the hardware. It can also be realized by a program.

  Next, the operation of the present embodiment will be described in detail with reference to the drawings with respect to a method for high-speed collation processing of the flow entry. FIG. 6 is a flowchart showing the operation of the OFC (active system) 100A when a flow entry setting trigger occurs. As a flow entry setting opportunity, in addition to a user instruction shown in S11 of FIG. 6, reception of a flow entry setting request from OFS, operation of a flow entry in accordance with a predetermined communication policy, and the like can be cited.

  Referring to FIG. 6, first, when receiving an instruction from the user (step S11), the OFC (active system) 100A confirms whether or not to add or change a flow entry according to the content (step S12). .

  When adding a flow entry or changing a flow entry (Yes in step S12), the OFC (active system) 100A calculates a cookie value to be given to the flow entry to be added or updated to the OFS 200 (step S13). On the other hand, when deleting a flow entry, it is not necessary to calculate a cookie value, and the process proceeds to step S13.

  In the present embodiment, the cookie value is also updated when the flow entry is updated. However, the modification request of the OpenTable Spec FlowTableModification message of Non-Patent Document 2 does not allow the update of the cookie. . On the other hand, since the Cookie update is permitted in the Add request of the FlowTableModification message, in this embodiment, when the flow entry is updated, the Add request of the FlowTableModification message is added to the flow before the update. Perform overwriting. As described above, in this embodiment, it is assumed that OFS 200 supports the update of cookie with the Add request of the FlowTableModification message, but other dedicated messages are defined (vendor definition message) and the cookie is updated. It is good to do.

  Next, the OFS control unit 110A of the OFC (active system) 100A performs “update of the flow entry management table 120A”, “instruction of the operation content (addition, change, or deletion) of the flow entry to the OFS 200” and “OFC (standby) System) 100B notification of flow entry update contents (synchronization) ".

  FIG. 7 shows a state in which the flow entries 122A, 122B, and 222 having the match condition M2 and the action A2 are further generated and set in each device in the state of FIG. Further, in the example of FIG. 7, the cookie value “2” is calculated using the above-described equation, and is set in the Cookie field of each flow entry.

  FIG. 8 shows a state in which the OFC (active system) 100A subsequently fails and the OFC (standby system) 100B and OFS 200 are connected.

  When a failure occurs in the OFC (active system) 100A and the OFC (standby system) 100B takes over control in place of the OFC (active system) 100A, the OFC (standby system) 100B performs the processing (flow entry of FIG. 9). Alignment processing) is performed.

  Referring to FIG. 9, when the OFC (standby system) 100B detects that a failure has occurred in the OFC (active system) 100A (step S21), it takes over control of the OFS on behalf of the OFC (active system) 100A. The OFS 200 is connected (step S22).

  Next, the OFS control unit 110B of the OFC (standby system) 100B calculates a cookie value from the current time using the same method as when adding or updating a flow (S12 in FIG. 6) (step S23).

  Next, the OFC (standby system) 100B starts collating the flow entry for each division unit from the calculated Cookie value (step S24).

  Subsequently, the OFS control unit 110B of the OFC (standby system) 100B performs flow entry matching processing with the OFS 200. Here, as shown in FIG. 5, since the flow entry is divided into N and registered in the OFS 200, the collation process is performed N times for each division unit.

  First, the OFC (standby system) 100B acquires a flow entry of the corresponding cookie value from the OFS 200 (step S25).

  Next, the OFC (standby system) 100B extracts the difference between the acquired flow entry and the flow entry in the flow entry management table 120B of the OFC (standby system) 100B (step S26).

  When the difference is extracted in the previous step, the OFC (standby system) 100B instructs the OFS 200 to operate the flow entry so as to be consistent with its own flow entry based on the extracted flow entry (step S27). ).

  Next, the OFC (standby system) 100B updates from the newest time to the oldest time corresponding to the cookie value. In the example shown in FIG. 5, the time is traced back from the Cookie value 5 at the time when the OFC (standby system) 100B and the OFS 200 are connected to 4, 3, 2,. . . Update the cookie value in the direction of. When the cookie value is 0, the next value is (N-1) which is the maximum value of the cookie value.

  Next, the OFC (standby system) 100B confirms whether or not the cookie value has made one turn (step S29). If the cookie value does not make one turn (No in step S29), the process returns to step S25 and the same matching process is repeated. In this way, the processes in steps S25 to S28 are repeated until the cookie value goes around once and becomes “5” again.

  If the cookie value has made one turn (Yes in step S29), a series of processing is completed.

  Here, the operation when the difference is extracted in steps S25 to S28 will be described in more detail with reference to FIG.

  It is assumed that a failure has occurred in the OFC (active system) 100A at the timing of the cookie value “4” in FIG. As a result, the flow entry setting instruction transmitted from the OFC (active system) 100A to the OFS 200 at the timing of the cookie value “4” in FIG. 5 does not reach the OFS 200, and the Cookie value is displayed on the OFC 100 side as shown in FIG. It is assumed that the flow entry 124A and 124B of “4”, the match condition M4, and the action A4 are set, while the corresponding flow entry is not set in the flow table 220 of the OFS 200A.

  As described above, collation starts with the OFC (standby system) 100B at the time of the cookie value “5” at which the failure is detected. At this time, there is a flow entry corresponding to both the OFC (standby system) 100 and the OFS 200A. No difference is detected.

  However, when the flow entry is acquired from the OFS 200A by specifying the next cookie value “4”, the flow entry 124B having the cookie value “4” existing in the flow entry management table 120B of the OFC (standby system) 100B becomes the flow of the OFS 200A. Since it does not exist in the table 220, it is extracted as a difference. In this case, the OFC (standby system) 100B instructs the OFS 200A to set the cookie value “4”, the match condition M4, and the action A4 flow entry.

  The OFC (standby system) 100B similarly continues the flow entry matching process, but there is no difference between the Cookie values 3 to 1. When the cookie value becomes 0, the OFC (standby system) 100B extracts a flow entry having a cookie value “0” that does not exist on the own device side as a difference. In this case, the OFC (standby system) 100B instructs the OFS 200A to delete the cookie value “0”, the match condition M2, and the flow entry of the action A2. Similarly, the OFC (standby system) 100B continues the flow entry matching process, but there is no difference between the Cookie values (N−1) to 6. When the above is completed, a series of alignment processes are completed.

  Finally, the significance of exhaustively performing the matching process by making the Cookie value go around once will be described. As described above, when the configuration is such that a cookie value is calculated when a flow entry is added or changed, and a flow entry is added, there is a flow entry mismatch between the OFC 100 and the OFS 200 at a timing separated from the occurrence of an OFC failure. It is also assumed that it will occur. For example, as shown in FIG. 10, the instruction to delete the flow entry B with the cookie value “5” has been transmitted to the OFC (standby system) 100B, but the OFS 200 has an instruction to delete the flow entry B due to a link failure or the like. Suppose that it was not transmitted. In this case, although the corresponding flow entry B remains in the OFS 200, the OFC (standby system) 100B deletes the corresponding entry from the flow entry management table 120B on the assumption that the flow entry B has been normally deleted and updated. End up.

  As shown in FIG. 10, the remaining flow entry B generated at such a timing has a cookie value “2” at the time of adding a flow. Therefore, it is detected in the matching process starting from the cookie value “5” of the failure occurrence time. Can not. However, as shown in FIG. 11, by performing the comprehensive matching process by making the cookie value make one round, the matching process with the cookie value “2” is not performed on the OFC (standby system) 100B side but on the OFS 200A. Only the flow entries that exist are extracted as differences. In response to this, the OFC (standby system) 100B instructs the OFS 200A to delete the flow entry B having the cookie value “2” extracted as the difference.

  As described above, according to the present embodiment, it is effective if the mismatch of the flow information between the OFC 100 and the OFS 200 that occurs at the time of failure of the active OFC can be resolved at high speed. The reason is that when creating or updating a flow entry, identification information that can specify the setting (update) time of the flow entry is stored in the Cookie field, and the new flow entry is given priority as much as possible based on the value of the Cookie field. It is in the configuration to verify.

[Third Embodiment]
Next, a description will be given of a third embodiment in which flow priority information is further embedded in identification information typified by the above-described Cookie value and is referred to during matching processing. Since the present embodiment can be realized with the same configuration as that of the second embodiment, the difference will be mainly described below.

  FIG. 12 is a diagram showing a configuration example of identification information (Cookie value) used in the present embodiment. In the example of FIG. 12, the upper predetermined bits of the identification information (Cookie value) are used as a storage area for flow type information, and the remaining lower bits are used as a storage area for time information indicating when the addition or change is performed. In this embodiment, in addition to the time information indicating when the flow entry is added or changed, the matching process using the flow type information is performed.

  FIG. 13 shows an example in which the matching process is performed with priority given to the flow type P1 having a higher priority using the flow type information. After that, as in the second embodiment, the OFC (standby system) 100B performs the matching process in the order of time information. In this way, it is possible to prioritize the flow type P1 having a high priority and perform the matching process.

  FIG. 14 shows an example in which the matching process is performed in the order of time information as in the second embodiment, but the matching process is omitted depending on the flow type. In this way, it is possible to prioritize the flow type P1 having a high priority and perform the matching process.

  In FIG. 13 and FIG. 14, after the matching process for the flow type P1 is completed, the flow type with the next highest priority (for example, the flow type Q1) may be the target of the matching process, or It is also possible to apply the matching process to all the flow types.

  Although the embodiments of the present invention have been described above, the present invention is not limited to the above-described embodiments, and further modifications, substitutions, and adjustments are possible without departing from the basic technical idea of the present invention. Can be added. For example, the network configuration, the configuration of each element, and the expression form of a message shown in each drawing are examples for helping understanding of the present invention, and are not limited to the configuration shown in these drawings.

  Further, for example, in the above-described embodiment, it has been described that the alignment process is performed when a failure occurs in the OFC (active system) 100A and the control is switched to the OFC (standby system) 100B, but a plurality of control devices (OFC) However, the present invention is not limited to the configuration in which the control device is made redundant. For example, the OFC 100 confirms the consistency of the flow entry with the OFS 200 as a periodic inspection every predetermined time, or after interruption or resumption of operation of the control device due to equipment maintenance or network configuration change. Can also be used.

Finally, a preferred form of the invention is summarized.
[First embodiment]
(Refer to the communication system according to the first viewpoint)
[Second form]
In the communication system of the first form,
The said identification information is a communication system produced using the time information updated for every predetermined time.
[Third embodiment]
In the communication system of the first or second form,
further,
A second control device that receives control information set in the communication node from the control device and stands by as a standby system of the control device,
The second control device performs communication matching processing between the communication node and the control information in order from the newest one of the identification information when the second control device starts operation as an active system in place of the first control device. system.
[Fourth form]
In the communication system of the third form,
The identification information is generated to make one round at a predetermined time interval,
The communication system in which the second control device performs matching processing of the identification information in order from the newest one of the identification information until the identification information makes one round.
[Fifth embodiment]
In the communication system of the third or fourth form,
The identification information further includes priority information of control information,
The second control device is a communication system that implements control information matching processing using the priority information in addition to the setting time of the control information.
[Sixth embodiment]
In the communication system according to any one of the third to fifth aspects,
The identification information is stored in a storage area for cookie information in a match condition in the control information,
The second control device is a communication system in which the cookie information is specified from the communication node to acquire the control information and collate with the control information on the own device side.
[Seventh form]
Means for controlling the communication node by setting control information in the communication node;
Means for embedding identification information capable of specifying a set time of the control information in a predetermined area in the control information.
[Eighth form]
Means for processing the received packet in accordance with the control information set from the control device;
Means for transmitting control information corresponding to the identification information in response to a request designating identification information included in the control information from the control device,
A communication node capable of specifying a set time of control information by the identification information.
[Ninth Embodiment]
(Refer to the control information setting method from the third viewpoint)
[Tenth embodiment]
(Refer to the program from the fourth viewpoint above.)
In addition, the said 7th-10th form can be expand | deployed to the 2nd-6th form similarly to the 1st form.

  Each disclosure of the above-mentioned patent document and non-patent document is incorporated herein by reference. Within the scope of the entire disclosure (including claims) of the present invention, the embodiments and examples can be changed and adjusted based on the basic technical concept. Further, various combinations or selections of various disclosed elements (including each element of each claim, each element of each embodiment or example, each element of each drawing, etc.) within the scope of the claims of the present invention. Is possible. That is, the present invention of course includes various variations and modifications that could be made by those skilled in the art according to the entire disclosure including the claims and the technical idea. In particular, with respect to the numerical ranges described in this document, any numerical value or small range included in the range should be construed as being specifically described even if there is no specific description.

10 control device 20 communication node 30 verification device 100, 100A, 100B OFC
110A, 110B OFS control unit 120A, 120B Flow entry management table 200, 200A-200C OFS
210 Flow entry processing unit 220 Flow table 121A to 124A, 121B to 124B, 221 to 223 Flow entry

Claims (10)

A control device for controlling the communication node by setting control information in the communication node;
A communication node that processes a received packet according to the control information set from the control device,
The control device embeds identification information capable of specifying a set time of the control information in a predetermined area in the control information,
The communication node holds the control information in a state including the identification information;
A communication system characterized by the above.   The communication system according to claim 1, wherein the identification information is created using time information updated every predetermined time. further,
A second control device that receives control information set in the communication node from the control device and stands by as a standby system of the control device,
When the second control device starts operation as an active system in place of the first control device, the control information is matched with the communication node in order from the newest identification information. The communication system according to claim 1 or 2, wherein The identification information is generated to make one round at a predetermined time interval,
The communication system according to claim 3, wherein the second control device performs matching processing of the identification information in order from the newest one of the identification information until the identification information makes one round. The identification information further includes priority information of control information,
5. The communication system according to claim 3, wherein the second control device performs a control information matching process using the priority information in addition to the setting time of the control information. The identification information is stored in a storage area for cookie information in a match condition in the control information,
The communication system according to any one of claims 3 to 5, wherein the second control device designates the cookie information from the communication node, acquires the control information, and collates with the control information on the own device side. Means for controlling the communication node by setting control information in the communication node;
Means for embedding identification information capable of specifying a set time of the control information in a predetermined area in the control information. Means for processing the received packet in accordance with the control information set from the control device;
Means for transmitting control information corresponding to the identification information in response to a request designating identification information included in the control information from the control device,
A communication node capable of specifying a set time of control information by the identification information. A step of creating control information including identification information by which the control device can specify the set time of the control information;
The control device sets control information including the identification information in a communication node;
A control information setting method characterized by the above. In the computer constituting the control device,
A process of creating control information including identification information capable of specifying the control information setting time;
Processing for setting control information including the identification information in a communication node;
A program that executes

Images