JP2016134659A - Overlay tunnel control system and overlay tunnel control method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an overlay tunnel control system which allows for overlay tunnel connection with a plurality of virtual server groups, regardless of the configuration or specification of devices in a network, an overlay tunnel control method.SOLUTION: An overlay tunnel control system 301 generates an overlay tunnel by not using a device for overlay tunnel provided in a data center, but using a device for virtual overlay tunnel 101 to be generated in the data center.SELECTED DRAWING: Figure 6

Description

  The present invention automatically performs an overlay tunnel connection to a virtual server group configured by combining a data center constituted by a plurality of different vendors and apparatuses and a plurality of virtual servers operating on the plurality of data centers. The present invention relates to an overlay tunnel control system.

  In a conventional data center, when connecting a plurality of virtual servers operating in a single data center, a function of connecting virtual servers using a technique called overlay tunnel is provided. The overlay tunnel is also called “Layer 2 Networks over Layer 3 Networks”, and is a method of configuring a Layer 2 network such as an Ether protocol on a Layer 3 network such as an IP protocol. By the overlay tunnel, it becomes possible to assign a free IP address that does not depend on a physical network configuration state to a plurality of virtual servers (for example, see Non-Patent Document 1).

IETF. org. “VXLAN: A Framework for Overlaying Virtualized Layer 2 Networks over Layer 3 Networks”, April, 2014.

  However, in the conventional data center, in order to connect a plurality of virtual servers operating on a plurality of data centers through an overlay tunnel via a WAN (Wide Area Network) such as the Internet, a dedicated device (hereinafter, referred to as a dedicated device) , An overlay tunnel compatible device) is required, and the data centers that can be supported are limited. Furthermore, the overlay tunnel setting method using a protocol such as VXLAN is different for each apparatus and for each vendor and is not unified.

  In addition, a cloud operator who operates a data center does not disclose internal information such as devices constituting the data center to other cloud operators. If it is a virtual server group that uses only a plurality of data centers operated by a single cloud operator, the cloud operator itself can grasp all internal information such as the devices that make up each data center. . On the other hand, in order to connect a combination of virtual servers running on the data centers of different cloud operators to each other via an overlay tunnel, the cloud operator grasps the internal information of other cloud operators' data centers. Therefore, it is necessary to disclose the internal information of the data center owned by the cloud operator to the outside.

  In a conventional overlay tunnel control system, an overlay tunnel connection is generated between a plurality of data centers, but communication path control between a plurality of virtual servers communicating using the generated overlay tunnel is not performed. Therefore, it is necessary for the user who uses the virtual server to manually control the communication path between the virtual servers.

  In a conventional overlay tunnel control system, an overlay tunnel connection is generated between a plurality of data centers, but communication path control between a plurality of virtual servers communicating using the generated overlay tunnel is not performed. Therefore, it is necessary for the user who uses the virtual server to manually control the communication path between the virtual servers.

  In the conventional overlay tunnel control system, when an overlay tunnel is created, an overlay tunnel compatible device that can withstand the minimum bandwidth is created initially. However, when the number of virtual servers that use the overlay tunnel increases, the necessary bandwidth is reduced. Therefore, an overlay tunnel compatible device that can withstand a larger band is generated, and the connection is switched from the old overlay tunnel compatible device to the newly generated overlay tunnel compatible device. In addition, when the file of the overlay tunnel compatible device is updated or the function is expanded, the same connection switching from the old overlay tunnel compatible device to the newly generated overlay tunnel compatible device occurs.

  In the conventional overlay tunnel control system, since it is necessary to exchange the setting information necessary for generating the overlay tunnel between the overlay tunnel compatible devices, after connecting all the overlay tunnel connection devices, A communication process for exchanging authentication information and encryption key for overlay tunnel connection occurs.

  The problems in the conventional overlay tunnel control system described above are summarized as follows.

(Problem 1)
In the current data center, since it is necessary to introduce a dedicated device in order to generate an overlay tunnel in the form of a WAN, the architecture of the data center device configuration is limited.
(Problem 2)
Since the overlay tunnel setting method is different for each device and for each vendor, when the overlay tunnel control system uses the same function of multiple devices, when creating a control program so that it can support different control methods for each device, It is necessary to create all the specifications of each device.
(Problem 3)
The control program produced by the above method must be rewritten to a control program that reflects the device specifications every time the data center device specifications (control method) change.
(Problem 4)
When a new device is added to the data center, it is always necessary to grasp the specifications of the device and add the control amount of the new device to the control program.
(Problem 5)
The overlay tunnel control system must always grasp internal information such as addition and deletion of devices in a plurality of data centers operated by a plurality of cloud providers.
(Problem 6)
The cloud business operator who operates the data center needs to disclose the internal information of the data center possessed by the cloud business operator to the outside so that the overlay tunnel control system and other cloud business operators can use it.
(Problem 7)
In order to automatically generate a connection between a plurality of virtual servers via the WAN by the overlay tunnel, not only the overlay tunnel generation but also the setting of the communication path between the virtual servers must be automated at the same time.
(Problem 8)
Since each device constituting the network including the overlay tunnel compatible device is set to have a large buffer in order to ensure reliability, an accumulated delay corresponding to the number of devices occurs in the order of milliseconds. When the overlay tunnel connection is switched between devices, communication is cut off until all communication packets accumulated in the buffer are processed.
(Problem 9)
When creating an overlay tunnel between multiple overlay tunnel compatible devices, it is necessary to individually exchange the information required for generation between all overlay tunnel compatible devices, so the frequency of information exchange increases as the number of devices increases. The time until the completion of overlay tunnel generation increases.

  Therefore, an object of the present invention is to provide an overlay tunnel control system and an overlay tunnel control method that can solve the problems 1 to 9.

  To achieve the above object, the overlay tunnel control system according to the present invention generates a virtual overlay tunnel compatible device having a function equivalent to that of a conventional overlay tunnel compatible device in a data center when generating an overlay tunnel. It was.

Specifically, an overlay tunnel control system according to the present invention is an overlay tunnel control system for connecting virtual servers generated in each of a plurality of data centers physically connected by a transmission line by an overlay tunnel. ,
An image file is transmitted to two data centers connected by an overlay tunnel to generate a virtual overlay tunnel compatible device, an overlay tunnel connecting the virtual overlay tunnel compatible devices is generated, and the transmission suitable as a communication path A virtual overlay tunnel compatible apparatus control program for determining a line and connecting the virtual servers generated in the two data centers with an overlay tunnel;
A virtual server connection control program for monitoring whether or not communication is possible between the virtual servers connected by an overlay tunnel by the virtual overlay tunnel compatible device control program;
It is characterized by providing.

The overlay tunnel control method according to the present invention is an overlay tunnel control method for connecting virtual servers generated in each of a plurality of data centers physically connected by a transmission line by an overlay tunnel,
An image file is transmitted to two data centers connected by an overlay tunnel to generate a virtual overlay tunnel compatible device, an overlay tunnel connecting the virtual overlay tunnel compatible devices is generated, and the transmission suitable as a communication path A virtual overlay tunnel-compatible device control procedure for determining a line and connecting the virtual servers generated in the two data centers with an overlay tunnel;
A virtual server connection control procedure for monitoring whether or not communication is possible between the virtual servers that the virtual overlay tunnel compatible device control program has connected via an overlay tunnel;
It is characterized by performing.

  In the present invention, a virtual overlay tunnel-compatible device having a certain vendor / device specification is generated in the data center regardless of the internal configuration of the data center, and an overlay tunnel connection is made using the device. For this reason, according to the present invention, it is not essential that an overlay tunnel compatible device is provided in the data center. That is, according to the present invention, it is not necessary to limit the internal configuration of the data center. Therefore, the present invention can solve Problem 1.

The virtual overlay tunnel compatible device control program of the overlay tunnel control system according to the present invention is:
Overlay tunnel setting information for storing the same virtual overlay tunnel compatible device in a plurality of the data centers and updating the overlay tunnel setting information according to the result of the generation of the overlay tunnel It has a memory part.

  The overlay tunnel control method according to the present invention stores overlay tunnel setting information for generating the same virtual overlay tunnel compatible device in a plurality of the data centers, and the overlay tunnel setting information according to the result of the overlay tunnel generation. The method further comprises an overlay tunnel setting information storing procedure for updating the overlay tunnel setting information.

  According to the present invention, since a virtual overlay tunnel-compatible device having a certain vendor / device specification is generated in the data center, the specifications for each device and each vendor are unified, and common control becomes possible. As a result, the creation of specifications for each vendor and device when creating a control program can be greatly reduced. Therefore, the present invention can solve Problem 2.

  Furthermore, since the present invention only needs to follow the change in the device specifications of the virtual overlay tunnel compatible device, the cost for grasping the internal configuration of the data center and the specifications of a plurality of devices can be reduced and the control program can be rewritten. Can also be reduced. Therefore, the present invention can solve Problem 3.

  Further, according to the present invention, for the same reason as described above, even when a new device is added to the data center, the present invention eliminates the need for grasping the specifications of the new device and adding the control amount of the new device to the control program. Therefore, the present invention can solve Problem 4.

  In addition, since the present invention enables common control for virtual overlay tunnel compatible devices even when the internal configuration of the data center is changed, the overlay tunnel control system grasps changes in the internal configuration of the data center. There is no need to do. Therefore, the present invention can solve Problem 5.

  Further, according to the present invention, since the overlay tunnel control system does not need to grasp the internal information of the data center, the inquiry of the internal information from the overlay tunnel control system to the data center does not occur. There is no need to disclose the internal information to the outside (the internal information can be kept secret). Therefore, the present invention can solve the problem 6.

  In addition, since the present invention generates a virtual overlay tunnel compatible device having a certain vendor / device specification in the data center, it is necessary to exchange setting information required for generating the overlay tunnel between the virtual overlay tunnel compatible devices. There is no. Therefore, the present invention can solve Problem 9.

  The virtual overlay tunnel compatible apparatus control program of the overlay tunnel control system according to the present invention includes a path control unit that automatically sets the communication path between the virtual servers.

  The overlay tunnel control method according to the present invention is characterized in that the communication path between the virtual servers is automatically set by the virtual overlay tunnel compatible device control procedure.

  Since the route control unit of the present invention automates the route setting between virtual servers simultaneously with the generation of the overlay tunnel, comprehensive automation of the overlay tunnel connection via the WAN between the data centers can be realized. Therefore, the present invention can solve the problem 7.

  The virtual overlay tunnel compatible device control program of the overlay tunnel control system according to the present invention is configured to switch at least one of the virtual overlay tunnel compatible device and the relay device on the communication path when switching the overlay tunnel connection between the virtual servers. One buffer amount is changed.

  In the overlay tunnel control method according to the present invention, when switching the overlay tunnel connection between the virtual servers, overlay tunnel switching is performed in which at least one buffer amount of the virtual overlay tunnel compatible device and the relay device on the communication path is changed. It further has a procedure.

  The present invention can reduce the communication delay when switching the overlay tunnel and increasing / decreasing the number of virtual overlay tunnel compatible devices by changing the buffer amount of the device when switching the overlay tunnel connection. Therefore, the present invention can solve Problem 8.

  The present invention can provide an overlay tunnel control system and an overlay tunnel control method that can solve the problems 1 to 9.

It is a figure explaining the environment which applies the overlay tunnel control system relevant to this invention. It is a figure explaining the overlay tunnel control system relevant to this invention. It is a figure explaining the virtual server program of the overlay tunnel control system relevant to this invention. It is a figure explaining the overlay tunnel corresponding | compatible apparatus control program of the overlay tunnel control system relevant to this invention. 5 is a flowchart illustrating an operation of the overlay tunnel control system related to the present invention. It is a figure explaining the overlay tunnel control system which concerns on this invention. It is a figure explaining the virtual overlay tunnel corresponding apparatus control program of the overlay tunnel control system which concerns on this invention. 5 is a flowchart illustrating an operation of the overlay tunnel control system according to the present invention. 5 is a flowchart illustrating an operation of the overlay tunnel control system according to the present invention. It is a figure explaining the overlay tunnel control system which concerns on this invention. It is a figure explaining the overlay tunnel control system which concerns on this invention. It is the flowchart which showed the process sequence of the communication buffer control part of the overlay tunnel control system which concerns on this invention.

  Embodiments of the present invention will be described with reference to the accompanying drawings. The embodiments described below are embodiments of the present invention, and the present invention is not limited to the following embodiments. In the present specification and drawings, the same reference numerals denote the same components.

(Related form)
In the technology related to the present invention, an overlay tunnel compatible device in the data center is required to generate an overlay tunnel connection via the WAN. For this reason, the overlay tunnel control system needs to confirm whether an overlay tunnel compatible device exists in the data center. Furthermore, it is necessary to store in advance various types of information such as vendor specifications and operation methods necessary for the overlay tunnel control system to control the target overlay tunnel device.

  FIG. 1 is a schematic diagram of an assumed environment of an application destination in a related art overlay tunnel control system. 1 is merely an example, and the environment to which the present invention is applied is not limited to the assumed environment of FIG. The present invention is also applicable to a connection form in which a plurality of data centers are connected by multicast. Each of the virtual server # 1 and the virtual server # 2 operates on a data center constituted by a plurality of different vendors and devices. Data center # 1 is operated by cloud operator A, and data center # 2 is operated by cloud operator B. In addition, communication between the data center # 1 and the data center # 2 needs to go through a WAN (Internet). As a result, the virtual server # 1 and the virtual server # 2 are connected via the WAN in order to connect with the overlay tunnel.

  FIG. 2 is a schematic diagram of a network configuration example including an overlay tunnel control system 300 using related technology in the assumed environment of FIG. The network configuration in FIG. 2 is merely an example, and the overlay tunnel control system 300 is not limited to the network configuration example in FIG. In order to connect two different data centers that are geographically distributed using an overlay tunnel via a WAN (Internet), the overlay tunnel compatible device # 1 in the data center # 1 has a data In the center # 2, the overlay tunnel compatible device # 2 operates. The overlay tunnel compatible device 300 has a function of setting a tunnel protocol such as VXLAN for generating an overlay tunnel between overlay tunnel compatible devices. The overlay tunnel control system 300 includes a virtual server connection control program 10 and an overlay tunnel compatible device control program 20. The overlay tunnel control system 300 performs function setting and information acquisition provided by the overlay tunnel compatible device. A transmission line 51 in FIG. 2 is a line through which data transmission between the virtual server # 1 and the virtual server # 2 is actually performed, and an overlay tunnel is generated via the WAN and encrypted on the overlay tunnel. The data is transmitted. The control line 52 in FIG. 2 transmits / receives a command group for controlling the overlay tunnel compatible device # 1, overlay tunnel compatible device # 2, virtual server # 1, and virtual server # 2 from the overlay tunnel control system 300. It is a line.

  FIG. 3 is a module configuration example of the virtual server connection control program 10 in FIG. The module configuration in FIG. 3 is merely an example, and the virtual server connection control program 10 is not limited to the module configuration example in FIG. The virtual server connection control program 10 includes a connection information storage unit 11, a monitoring information storage unit 12, a virtual server connection unit 13, and an external communication unit 14. The connection information storage unit 11 stores connection information between a plurality of virtual servers and connection information between the virtual servers and the overlay tunnel compatible device. The monitoring information storage unit 12 stores monitoring information of the virtual server. The external communication unit 14 has a direct interface to the virtual server and the overlay tunnel compatible device, and executes communication connection processing. In addition, the external communication unit 14 receives input of information of two virtual servers that are a start point and an end point of connection. The virtual server connection unit 13 receives input of information on two virtual servers that are the start and end points of the connection from the external communication unit, reads the connection information between the current virtual servers from the connection information storage unit 11, The control unit 13a performs control for connecting two virtual servers. The virtual server connection unit 13 receives the monitoring information of the connection status of the two virtual servers from the external communication unit 14, determines the success or failure of the connection, and then updates the connection information in the connection information storage unit 11 To do.

  FIG. 4 is a module configuration example of the overlay tunnel compatible apparatus control program 20 in FIG. The module configuration of FIG. 4 is merely an example, and the overlay tunnel compatible device control program 20 is not limited to the module configuration example of FIG. The overlay tunnel compatible device control program 20 includes a data center internal information storage unit 21, a vendor / device individual information storage unit 22, an overlay tunnel setting information storage unit 23, an overlay tunnel compatible device control unit 24, and an external communication unit 25. . The data center internal information storage unit 21 stores internal configuration information such as devices and networks constituting each data center. The vendor / device individual information storage unit 22 stores individual information such as specifications and setting methods of each device provided by a plurality of vendors. The overlay tunnel setting information storage unit 23 stores various setting information such as parameters set in the overlay tunnel compatible device. The external communication unit 25 has a direct interface to the overlay tunnel compatible device, and executes control such as generation, change, and deletion of the overlay tunnel. In addition, the external communication unit 25 accepts input of information on two data centers serving as a start point and an end point of connection. The overlay tunnel compatible device control unit 24 receives the information of the two overlay tunnel compatible devices serving as the start and end points of the connection and the data center information from the external communication unit 25, and then receives the data center internal information storage unit. 21 confirms whether overlay tunnel connection devices are provided at the data center at the start and end of the overlay tunnel connection. When it is confirmed that the overlay tunnel compatible device is provided, the overlay tunnel compatible device control unit 24 sets the vendor and device specifications of the overlay tunnel tunnel compatible device to the vendor / device individual information storage unit 22. Check the configuration parameters and configuration commands required for inquiries and overlay tunnel connection creation. The overlay tunnel compatible device control unit 24 reads the current overlay tunnel compatible device setting information from the overlay tunnel setting information storage unit 23 and then needs to generate the overlay tunnel connection acquired from the vendor / device individual information storage unit 22. Based on the setting parameters and setting commands, the overlay tunnel generation unit performs control for connecting two overlay tunnel compatible devices. The overlay tunnel compatible device control unit 24 receives the execution result of the control of the two overlay tunnel compatible devices from the external communication unit 25, determines the success or failure of the overlay tunnel generation, and stores the overlay tunnel setting information. The overlay tunnel setting information of the unit 23 is updated.

  FIG. 5 is a flowchart at the start of overlay tunnel connection by the overlay tunnel control system 300. The flowchart in FIG. 5 is merely an example, and the overlay tunnel compatible device control program 20 does not limit the operation at the start of overlay tunnel connection to the flowchart in FIG. In “input of information of two virtual servers serving as start and end points of overlay tunnel connection (step S501)”, an ID number that can identify the two virtual servers serving as the start point and end point of overlay tunnel connection, and each virtual server An ID number that can identify the data center in which the server is operating is input to the overlay tunnel control system 300. The input may be input by an operator, or the start point and the end point may be automatically selected and input by a determination program possessed by a device connected to the network. It is assumed that the two virtual servers are already operating normally on the data center. In “confirm whether overlay tunnel compatible devices are provided in the two data centers that perform overlay tunnel connection (step S502)”, the overlay tunnel compatible device control program 20 uses the input data center ID number as a basis. It is checked with the data center internal information storage unit 21 in FIG. 4 whether an overlay tunnel compatible device capable of generating an overlay tunnel connection is provided in the target data center (step S503). If there is no overlay tunnel compatible device in the target data center, error processing (step S509) is performed, notification that overlay tunnel generation has failed is made, and the flowchart ends. If there is an overlay tunnel compatible device in the target data center, “confirm whether the vendor / device individual information of the target overlay tunnel compatible device is registered in the overlay tunnel compatible device control program 20 (step S504)” Proceed to In step S504, the overlay tunnel compatible device control program 20 confirms whether the information of the target overlay tunnel compatible device is stored in the vendor / device individual information storage unit 22 of FIG. If no information about the target overlay tunnel compatible device is stored in the vendor / device individual information storage unit 22 of FIG. 4 (“No” in step S505), error processing (step S509) is performed, and then the overlay tunnel is processed. Notify that the generation has failed and end the flowchart. If information on the target overlay tunnel compatible device is stored (“Yes” in step S505), “overlay tunnel connection generation between two overlay tunnel compatible devices by the overlay tunnel compatible device control program 20 (step S506). ) ". In step 506, the overlay tunnel compatible device control program 20 in FIG. 4 executes two locations based on the individual information such as the specifications and setting methods of the overlay tunnel compatible device acquired from the vendor / device individual information storage unit 22 in FIG. Create an overlay tunnel connection between overlay tunnel capable devices. In the “confirmation of overlay tunnel connection between virtual servers by the virtual server connection control program 10 (step S507)”, the virtual server connection control program 10 in FIG. 3 uses the information in the monitoring information storage unit 12 in FIG. Whether or not the virtual server at the start point and the end point can normally communicate on the generated overlay tunnel is checked for communication using, for example, an OAM technique such as Ping. If the communication confirmation cannot be obtained (“No” in step S508), error processing (step S509) is performed, notification that the generation of the overlay tunnel has failed, and the flowchart ends. If the communication confirmation has been obtained (“Yes” in step S508), it is notified that the generation of the overlay tunnel has been normally completed, and the flowchart is ended.

(Embodiment 1)
In this embodiment, in order to generate an overlay tunnel connection via the WAN, when the overlay tunnel control system generates an overlay tunnel, a “virtual overlay tunnel device having a function equivalent to the overlay tunnel compatible device in the data center” Is generated in the data center. For this reason, the overlay tunnel control system does not need to check whether an overlay tunnel compatible device exists in the data center. Furthermore, the overlay tunnel control system only needs to store the specifications and operation methods of the vendor / device of the virtual overlay tunnel compatible device that can be generated by itself.

FIG. 6 is a schematic diagram of a network configuration example including the overlay tunnel control system 301 of the present embodiment in the assumed environment of FIG. The overlay tunnel control system 301 is an overlay tunnel control system for connecting virtual servers generated in each of a plurality of data centers physically connected by a transmission line 51 through an overlay tunnel,
An image file is transmitted to two data centers connected by an overlay tunnel to generate a virtual overlay tunnel compatible device, an overlay tunnel connecting the virtual overlay tunnel compatible devices is generated, and the transmission suitable as a communication path A virtual overlay tunnel compatible device control program 30 for determining a line and connecting the virtual servers generated in the two data centers with an overlay tunnel;
A virtual server connection control program 10 for monitoring whether or not communication is possible between the virtual servers connected by an overlay tunnel by a virtual overlay tunnel compatible device control program 30;
It is characterized by providing.

  The network configuration in FIG. 6 is merely an example, and the overlay tunnel control system 301 is not limited to the network configuration example in FIG. The overlay tunnel control system 301 uses the overlay tunnel described in FIG. 2 to connect between two different geographically dispersed data centers via the WAN (Internet). There is no need to provide a tunnel-compatible device. FIG. 6 shows a case where the data center at the start point and the end point for performing the overlay tunnel connection includes an “overlay tunnel non-compatible device” that does not have the capability for overlay tunnel connection. In the overlay tunnel control system 301, the “virtual overlay tunnel compatible device 101” generated in the data center by the overlay tunnel control system 301 operates in the data center # 1 and the data center # 2. The virtual overlay tunnel compatible apparatus 101 has the same function as the overlay tunnel compatible apparatus in FIG. The overlay tunnel control system 301 cannot use an overlay tunnel incompatible device in the data center to generate an overlay tunnel connection, but instead uses the virtual overlay tunnel compatible device 101 to Create overlay tunnels between data centers. The overlay tunnel control system 301 includes a virtual server connection control program 10 and a virtual overlay tunnel compatible device control program 30. The overlay tunnel control system 301 sets functions provided by the virtual overlay tunnel compatible apparatus 101 and acquires information. The transmission line 51 in FIG. 6 is a line through which data transmission between the virtual server # 1 and the virtual server # 2 is actually performed, and an overlay tunnel is generated via the WAN and encrypted on the overlay tunnel. The data is transmitted. The control line 52 in FIG. 6 transmits / receives a command group for controlling the virtual overlay tunnel compatible device # 1, the virtual overlay tunnel compatible device # 2, the virtual server # 1, and the virtual server # 2 from the overlay tunnel control system 301. It is a line for.

  The virtual server connection control program 10 in FIG. 6 is the same as the module configuration of the virtual server connection control program 10 described in FIG.

  FIG. 7 is a module configuration example of the virtual overlay tunnel compatible device control program 30. The module configuration in FIG. 7 is merely an example, and the virtual overlay tunnel compatible device control program 30 is not limited to the module configuration example in FIG. The virtual overlay tunnel compatible device control program 30 includes an image file storage unit 31, an overlay tunnel setting information storage unit 23, a virtual overlay tunnel compatible device control unit 34, and an external communication unit 25.

  The overlay tunnel setting information storage unit 23 stores overlay tunnel setting information for generating the same virtual overlay tunnel compatible device in a plurality of the data centers, and the overlay tunnel is set according to the result of the generation of the overlay tunnel. Update configuration information.

  The virtual overlay tunnel compatible device control unit 34 includes a route control unit 34d. The path control unit 34d automatically sets a communication path between virtual servers.

  The virtual overlay tunnel compatible device control unit 34 includes a communication buffer control unit 34a. The communication buffer control unit 34a changes at least one buffer amount of the virtual overlay tunnel compatible device and the relay device on the communication path when switching the overlay tunnel connection between the virtual servers.

  The image file storage unit 31 stores an image file of the virtual overlay tunnel compatible apparatus 101. The virtual server into which the image file of the virtual overlay tunnel compatible apparatus 101 has been read operates as the virtual overlay tunnel compatible apparatus 101 in the data center. The overlay tunnel setting information storage unit 23 stores various setting information such as parameters set in the virtual overlay tunnel compatible apparatus 101. The external communication unit 25 has a direct interface to the virtual overlay tunnel compatible apparatus 101, and executes control such as generation, change, and deletion of the overlay tunnel. In addition, the external communication unit 25 accepts input of information on two data centers serving as a start point and an end point of connection. The virtual overlay tunnel compatible device generation unit 34b of the virtual overlay tunnel compatible device control unit 34 receives the input of the data center information of the start point and the end point, and then the virtual overlay tunnel compatible device 101 stored in the image file storage unit 31. The image file is sent to the data center. The data center generates the virtual overlay tunnel compatible device 101 based on the received image file. When it is confirmed that the virtual overlay tunnel compatible device 101 has been normally generated on the data center, the virtual overlay tunnel compatible device control unit 34 reads the current virtual overlay tunnel compatible device 101 from the overlay tunnel setting information storage unit 23. Then, the overlay tunnel generation unit 34c performs control for connecting the two virtual overlay tunnel compatible devices 101. The virtual overlay tunnel compatible device control unit 34 receives the execution result of the control of the two virtual overlay tunnel compatible devices 101 from the external communication unit 25, determines the success or failure of the overlay tunnel generation, and then determines the overlay tunnel. The overlay tunnel setting information in the setting information storage unit 23 is updated. When it is confirmed that the overlay tunnel has been successfully generated, the path control unit 34d performs path control between the two virtual servers in cooperation with the virtual server connection control program 10 in FIG. The communication buffer control unit 34a controls the communication buffer of each network device existing on the communication path between the virtual overlay tunnel compatible device 101 in FIG. 6 and the data center.

  FIG. 8 is a flowchart at the start of overlay tunnel connection by the overlay tunnel control system 301. The flowchart in FIG. 8 is merely an example, and the virtual overlay tunnel compatible apparatus control program 30 does not limit the operation at the start of overlay tunnel connection to the flowchart in FIG. In “input of information of two virtual servers serving as start and end points of overlay tunnel connection (step S801)”, an ID number for identifying the two virtual servers serving as the start point and end point of overlay tunnel connection, and each virtual server An ID number that can identify the data center in which the server is operating is input to the overlay tunnel control system 301 in FIG. The input may be input by an operator, or the start point and the end point may be automatically selected and input by a determination program possessed by a device connected to the network. It is assumed that the two virtual servers are already operating normally on the data center. In “Generation of virtual overlay tunnel compatible device to start and end data centers by virtual overlay tunnel compatible device control program 30 (step S802)”, virtual overlay tunnel compatible device control program 30 receives the ID number of the input data center. Based on the above, the virtual overlay tunnel compatible device generation unit 34b is instructed to generate the virtual overlay tunnel compatible device 101 in the target data center. After the virtual overlay tunnel compatible device 101 is generated in the target data center, the process proceeds to “Generate overlay tunnel connection between two overlay tunnel compatible devices by the virtual overlay tunnel compatible device control program (step S803)”. In step S803, the virtual overlay tunnel compatible device control program 30 generates an overlay tunnel connection between the two virtual overlay tunnel compatible devices 101, and “path between two virtual servers by the virtual overlay tunnel compatible device control program 30” is generated. The process proceeds to “Control (Step S804)”. In step S804, the virtual overlay tunnel compatible apparatus control program 30 automatically performs path control after determining an appropriate communication path in the overlay tunnel connection between two virtual servers to the path control unit 34d. , “Confirm communication of overlay tunnel connection between virtual servers by virtual server connection control program (step S805)”. In step S805, the virtual server connection control program 10 described in FIG. 3 can normally communicate with the start and end virtual servers on the generated overlay tunnel based on the information in the monitoring information storage unit 12. Or, for example, communication confirmation is performed using an OAM technique such as Ping. If the communication confirmation cannot be obtained ("No" in step S806), the error processing (step S807) is performed, then notification that the overlay tunnel generation has failed is made, and the flowchart ends. When the communication confirmation is obtained (“Yes” in step S806), it is notified that the overlay tunnel generation has been normally completed, and the flowchart is ended.

(Difference between related technology and embodiment)
In the following, differences in configuration between the related technology and the embodiment (hereinafter referred to as difference C) will be described.
In the related art, a function necessary for generating an overlay tunnel is realized by using an “overlay tunnel compatible device” provided in advance in the data center. On the other hand, in the present embodiment, this is realized by using the “virtual overlay tunnel compatible device 101” generated in the data center by the overlay tunnel control system 301.

  In the related technology, it is necessary for the “data center internal information storage unit 21” of the overlay tunnel control system 300 to store and manage data center internal information such as what kind of overlay tunnel compatible device each data center has. There is. On the other hand, in this embodiment, the overlay tunnel control system 301 does not need to store and manage data center internal information.

  In the related technology, it is necessary for the “vendor / device individual information storage unit 22” to store and manage different vendor / device individual information depending on the vendor and device specifications of each overlay tunnel compatible device. On the other hand, in this embodiment, the overlay tunnel control system 301 does not need to store and manage vendor / device individual information.

  In the present embodiment, the “image file storage unit 31” stores image file information of the virtual overlay tunnel compatible device 101 necessary for the overlay tunnel control system 301 to generate the virtual overlay tunnel compatible device 101 in the data center. Need to manage. On the other hand, in the related art, the overlay tunnel control system 300 does not need to store and manage image file information.

  In this embodiment, since the virtual overlay tunnel compatible device 101 needs to be generated in the data center, the “virtual overlay tunnel compatible device generation unit 34b” is required in the virtual overlay tunnel compatible device control program 30. On the other hand, in the related technology, the overlay tunnel control system 300 does not include the virtual overlay tunnel compatible device generation unit 34b.

  In this embodiment, in order for the overlay tunnel control system 301 to provide a function of automatically setting a communication path between virtual servers, the virtual overlay tunnel compatible apparatus control program 30 includes a “path control unit 34d”. On the other hand, in the related technology, since the route control between the virtual servers is manually realized, the overlay tunnel control system 300 does not include the route control unit 34d.

  In this embodiment, in order to avoid communication delay and communication disconnection at the time of overlay tunnel switching, the virtual overlay tunnel compatible apparatus control program 30 includes a “communication buffer control unit 34a”. On the other hand, since the related technology does not have a function of avoiding communication delay and communication interruption at the time of switching the overlay tunnel, the overlay tunnel control system 300 does not include the communication buffer control unit 34a.

(Remarkable effect of this embodiment)
In this embodiment, when realizing an overlay tunnel connection between two different data centers, there is no guarantee that all the data centers are provided, and there is a possibility that the specifications are different for each vendor and device. Do not use “overlay tunnel compatible device”. In this embodiment, the “virtual overlay tunnel compatible apparatus 101” generated in the data center by the overlay tunnel control system 301 is used. In this embodiment, a virtual overlay tunnel-compatible device 101 having a certain vendor / device specification is generated in the data center regardless of the internal configuration of the data center, and an overlay tunnel connection is made using the device. For this reason, in this embodiment, it is not essential that an overlay tunnel compatible device is provided in the data center (the internal configuration of the data center is not limited).

  Furthermore, in the related technology, when using the same function of multiple overlay tunnel compatible devices, it is necessary to create all the specifications of each device when creating a control program so that it can support different control methods for each vendor and device. there were. On the other hand, since the overlay tunnel control system 301 of this embodiment can make all the virtual overlay tunnel compatible devices 101 generated in a plurality of data centers have the same vendor / device specification, it can be set for each device or each vendor. The specifications can be unified. As a result, the creation of specifications for each vendor and device when creating a control program can be greatly reduced.

  In the related art, every time the specification (control method) of the overlay tunnel compatible device in the data center is changed, the overlay tunnel compatible device control program 20 must be rewritten to reflect the device specification. On the other hand, in the present embodiment, it is only necessary to follow the change in the device specification of the virtual overlay tunnel compatible device 101. Therefore, the cost for grasping the internal configuration of the data center and the device specification is reduced, and the virtual overlay tunnel compatible device The frequency of rewriting the control program 30 can also be reduced.

  For the same reason, even when a new device is added to the data center, in the present embodiment, it is not necessary to grasp the device specifications and add the control amount of the new device to the virtual overlay tunnel compatible device control program 30.

  In the related technology, the overlay tunnel control system 300 must always grasp internal information such as addition and deletion of devices of a plurality of data centers operated by a plurality of cloud operators. On the other hand, in the present embodiment, since the overlay tunnel control system 301 does not need to grasp the internal information of the data center, an inquiry of internal information from the overlay tunnel control system 301 to the data center does not occur. However, it is not necessary to disclose the data center internal information to the outside (the internal information can be kept secret).

  In the related art, it is possible to automatically create an overlay tunnel between two data centers, but a path between virtual servers using the overlay tunnel connection is manually set. On the other hand, in this embodiment, the route control unit 34d automates the route setting between the virtual servers simultaneously with the generation of the overlay tunnel, and it is possible to realize comprehensive automation of the overlay tunnel connection via the WAN between the data centers. It is.

  In the present embodiment, when the communication buffer control unit 34a switches the communication path (tunnel), the buffer amount of the apparatus on the communication path is changed, so that when the overlay tunnel is switched or the virtual overlay tunnel compatible apparatus 101 is increased or decreased. Communication delays and communication interruptions can be avoided.

  In this embodiment, the overlay tunnel control system 301 centrally manages information necessary for generating an overlay tunnel, and exchanges control messages by appropriately transmitting and receiving between the overlay tunnel control system 301 and the virtual overlay tunnel compatible device 101. The number of times can be reduced.

(Problems caused by no difference C in related technology)
In the related technology, a mechanism for automatically generating and controlling the virtual overlay tunnel compatible apparatus 101 used in the present embodiment in the data center has not been established. For this reason, it is difficult to automate overlay tunnel connection generation by the virtual overlay tunnel compatible apparatus 101.

  In the related technology, a mechanism for connecting the virtual server and the virtual overlay tunnel compatible device 101 has not been established. For this reason, they have no connectivity with each other (the communication paths are separated and do not interfere with each other). In this embodiment, the path control unit 34d connects the virtual server and the virtual overlay tunnel compatible apparatus 101 when controlling the path between the virtual servers.

  In the related art, a route control means for interconnecting three or more data centers through an overlay tunnel has not been established. For this reason, a permanent loop of communication packets is likely to occur, causing a network failure.

  In the related art, a procedure (flow) for controlling the communication buffer of the virtual overlay tunnel compatible apparatus 101 and each network apparatus on the communication path at the time of overlay tunnel connection switching is not established. For this reason, overlay tunnel connection switching cannot be completed until the communication buffer of each device becomes empty (causes a communication delay).

(Ingenuity that enables this embodiment to have a difference C)
FIG. 9 is a flowchart for automatic generation of the virtual overlay tunnel compatible apparatus 101. In the present invention, the virtual overlay tunnel compatible device control program 30 establishes a mechanism for automatically generating the virtual overlay tunnel compatible device 101, thereby realizing the automatic overlay tunnel connection generation by the virtual overlay tunnel compatible device 101. Note that the flowchart of FIG. 9 is merely an example, and the virtual overlay tunnel compatible device control program 30 does not limit the operation of the virtual overlay tunnel compatible device 101 during automatic generation to the flowchart of FIG. In “input of data center information for generating virtual overlay tunnel compatible device 101 (step S901)”, an ID number that can identify the data center for generating virtual overlay tunnel compatible device 101 is input to overlay tunnel control system 301 in FIG. Entered. The input may be input by an operator, or the start point and the end point may be automatically selected and input by a determination program possessed by a device connected to the network. In “Registering an image file of the virtual overlay tunnel compatible device 101 in the target data center by the virtual overlay tunnel compatible device generation unit (step S902)”, the virtual overlay tunnel compatible device generation unit 34b reads from the image file storage unit 31. The image file information is sent to the data center for registration. The data center stores the received image file in the data center. In the “virtual overlay tunnel corresponding device generation unit 34b in the target data center generation instruction for the virtual overlay tunnel compatible device to the target data center (step S903)”, the virtual overlay tunnel corresponding device generation unit 34b To generate a virtual server for the virtual overlay tunnel compatible apparatus 101. In “Reading and starting image file of virtual overlay tunnel compatible device to generated virtual server (step S904)”, the generated virtual server reads the image file information of virtual overlay tunnel compatible device 101 stored in the data center. Perform startup processing. In “virtual overlay tunnel compatible device starts normally (step S905)”, the operation of the activated virtual overlay tunnel compatible device 101 is checked. If the normal operation cannot be confirmed (“No” in step S905), error processing (step S906) is performed and the overlay tunnel control system 301 is notified that the generation of the virtual overlay tunnel compatible device 101 has failed. Then, the flowchart ends. When the activation confirmation is obtained (“Yes” in step S905), the overlay tunnel control system 301 is notified that the generation of the virtual overlay tunnel compatible apparatus 101 has been normally completed, and the flowchart ends.

(Embodiment 2)
FIG. 10 is a schematic diagram of a network configuration example including the overlay tunnel control system 301 of the present embodiment.
The network in FIG. 10 realizes a separation function of a plurality of overlay tunnels that are not connected to each other. Note that the schematic diagram of FIG. 10 is merely an example, and the overall configuration when realizing the separation function between a plurality of overlay tunnels is not limited to FIG. On the overlay tunnel A of FIG. 10, the virtual server A1 and the virtual server A2 communicate with each other. On the other hand, on the overlay tunnel B of FIG. 10, the virtual server B1 and the virtual server B2 communicate with each other. Since the overlay tunnel A and the overlay tunnel B have no connectivity with each other, the virtual server A1 and the virtual server A2 cannot communicate with the virtual server B1 and the virtual server B2 (communication paths are separated in the two overlay tunnel connections) Is guaranteed). When a plurality of overlay tunnels are generated using the virtual overlay tunnel compatible apparatus 101, a mechanism for guaranteeing the above-described separation function between a plurality of overlay tunnel connections is as follows.

  First, the overlay tunnel control system 301 generates virtual overlay tunnel compatible devices 101 in each data center as many as the number of overlay tunnels having no connectivity. Each virtual overlay tunnel compatible apparatus 101 controls only a single overlay tunnel, and the single virtual overlay tunnel compatible apparatus 101 does not control a plurality of overlay tunnels. With this contrivance, it is possible to reduce the complexity of maintenance operation when a plurality of overlay tunnels are controlled by the single virtual overlay tunnel compatible apparatus 101. In addition, since the virtual overlay tunnel compatible device 101 itself operates as a program that operates on the virtual server (because it is virtualized), only the required number of virtual overlay tunnel compatible devices 101 (according to demand) is required. Can be generated on demand. Due to this property, the present embodiment can minimize the capital investment in the data center for overlay tunnel connection without matching the maximum demand. In this embodiment, when a single virtual server uses a plurality of overlay tunnels, the overlay tunnel control system 301 automatically assigns IP addresses so that IP addresses used in the plurality of overlay tunnels do not overlap. Has a mechanism to control allocation.

(Embodiment 3)
FIG. 11 is a diagram illustrating a configuration example when loop communication occurs when three or more data centers are interconnected by an overlay tunnel. In the first and second embodiments, it is possible to realize overlay tunnel connection by combining a plurality of data centers. However, when three or more data centers are used, as shown in FIG. When connecting to, the communication path is closed (it becomes a loop configuration). Due to the nature of the overlay tunnel being an L2 connection, in such a loop configuration, communication packets are permanently routed between virtual servers. Repeated transfer of endless communication packets causes an overload condition between the data center and the WAN. Therefore, in the present embodiment, the route control unit 34d in FIG. 7 uses the communication route control technology such as STP (Spanning Tree Protocol) or OpenFlow to connect the route between the virtual servers on the overlay tunnel. A communication path is automatically set at the time of generation. As a result, even in a loop configuration in which three or more data centers are connected by an overlay tunnel as shown in FIG. 11, communication paths between virtual servers are automatically set appropriately to enable communication.

(Embodiment 4)
FIG. 12 is a flowchart showing a processing procedure of the communication buffer control unit 34a of the overlay tunnel control system 301. In this embodiment, when the virtual overlay tunnel compatible device control program 30 generates an overlay tunnel, the communication buffer control unit 34a requests the virtual overlay tunnel compatible device # 1 serving as the start point of the overlay tunnel connection to reduce the buffer size. Send. Upon receiving the buffer size reduction request, the virtual overlay tunnel compatible device # 1 transmits all the communication packets remaining in the device (clears the buffer), and then the virtual overlay tunnel compatible device # 1 communicates the buffer size (communication). The amount of packets stored in the device and temporarily stored is changed to a minimum size. Although this processing temporarily increases the packet transfer processing load of the virtual overlay tunnel compatible apparatus # 1, the communication delay can be reduced by improving the packet transfer speed. The virtual overlay tunnel compatible device # 1 changes its own buffer size, and similarly transmits a buffer size reduction request to the next connection destination relay node # 1. Similarly, the buffer size is reduced for the relay node # 2 and the virtual overlay tunnel compatible device # 2 that is the end point of the connection. After the buffer sizes of all the devices on the communication path are set to the minimum value, the virtual overlay tunnel compatible device control program 30 makes a tunnel switching request to the virtual overlay tunnel compatible device # 1 and the virtual overlay tunnel compatible device # 2. To switch the overlay tunnel connection. After confirming that the switching of the overlay tunnel connection has been completed normally, the virtual overlay tunnel compatible apparatus # 1 restores its own buffer size, and similarly buffers the next connection destination relay node # 1. Send a size reduction release request. Similarly, the buffer size reduction is canceled for the relay node # 2 and the virtual overlay tunnel compatible device # 2 which is the end point of the connection. With this ingenuity, this embodiment reduces the communication delay when switching over overlay tunnels and when increasing or decreasing the number of virtual overlay tunnel compatible devices by changing the buffer amount of the communication path device when switching the overlay tunnel connection. be able to.

[Purpose of the invention]
The present invention does not use an overlay tunnel compatible device provided in a data center when generating an overlay tunnel connection via a WAN between virtual servers operating on a plurality of data centers, but does not use an overlay tunnel control system provided in the data center. Utilizes a virtual overlay tunnel compatible device that it generates in the data center. The present invention relates to a mechanism for automatically generating a virtual overlay tunnel compatible device in a data center, a mechanism for separating a plurality of overlay tunnels, a mechanism for automatically setting a communication path between virtual servers, and a communication buffer for a network device when an overlay tunnel is generated. By using a mechanism for controlling the system, it is possible to develop the related technology to the present invention.

[Effect of the invention]
The present invention does not use an overlay tunnel compatible device provided in the data center, but uses a virtual overlay tunnel compatible device generated in the data center by the overlay tunnel control system. Therefore, in the present invention, the internal configuration of the target data center is not limited, and it is not necessary to disclose the internal configuration of the data center to the overlay tunnel control system. In the present invention, it is not necessary to modify the overlay tunnel control system in accordance with addition, change, deletion, etc. of the overlay tunnel compatible device in the data center. Furthermore, in the present invention, the vendor and device specific specifications of the virtual overlay tunnel compatible device can be easily unified, so that it is not necessary to create the vendor and device specific specifications in the overlay tunnel control system.

10: Virtual server connection control program 11: Connection information storage unit 12: Monitoring information storage unit 13: Virtual server connection unit 13a: Control unit 13b: Monitoring unit 14: External communication unit 20: Overlay tunnel compatible device control program 21: Data center Internal information storage unit 22: Vendor / device individual information storage unit 23: Overlay tunnel setting information storage unit 24: Overlay tunnel compatible device control unit 25: External communication unit 30: Virtual overlay tunnel compatible device control program 31: Image file storage unit 34 : Virtual overlay tunnel compatible device controller 34a: Communication buffer controller 34b: Virtual overlay tunnel compatible device generator 34c: Overlay tunnel generator 34d: Route controller 51: Transmission line 52: Control line 101: Virtual overlay tunnel compatible device 300 , 301: Oh Valley tunnel control system

Claims (8)

An overlay tunnel control system for connecting virtual servers generated in each of a plurality of data centers physically connected by a transmission line by an overlay tunnel,
An image file is transmitted to two data centers connected by an overlay tunnel to generate a virtual overlay tunnel compatible device, an overlay tunnel connecting the virtual overlay tunnel compatible devices is generated, and the transmission suitable as a communication path A virtual overlay tunnel compatible apparatus control program for determining a line and connecting the virtual servers generated in the two data centers with an overlay tunnel;
A virtual server connection control program for monitoring whether or not communication is possible between the virtual servers connected by an overlay tunnel by the virtual overlay tunnel compatible device control program;
An overlay tunnel control system comprising: The virtual overlay tunnel compatible device control program is:
Overlay tunnel setting information for storing the same virtual overlay tunnel compatible device in a plurality of the data centers and updating the overlay tunnel setting information according to the result of the generation of the overlay tunnel The overlay tunnel control system according to claim 1, further comprising a storage unit. The virtual overlay tunnel compatible device control program is:
The overlay tunnel control system according to claim 1, further comprising a path control unit that automatically sets the communication path between the virtual servers. The virtual overlay tunnel compatible device control program is:
4. When switching the overlay tunnel connection between the virtual servers, at least one buffer amount of the virtual overlay tunnel compatible device and the relay device on the communication path is changed. The overlay tunnel control system described in 1. An overlay tunnel control method for connecting virtual servers generated in each of a plurality of data centers physically connected by a transmission line by an overlay tunnel,
An image file is transmitted to two data centers connected by an overlay tunnel to generate a virtual overlay tunnel compatible device, an overlay tunnel connecting the virtual overlay tunnel compatible devices is generated, and the transmission suitable as a communication path A virtual overlay tunnel-compatible device control procedure for determining a line and connecting the virtual servers generated in the two data centers with an overlay tunnel;
A virtual server connection control procedure for monitoring whether or not communication is possible between the virtual servers that the virtual overlay tunnel compatible device control program has connected via an overlay tunnel;
An overlay tunnel control method comprising:   Overlay tunnel setting information storage for storing overlay tunnel setting information for generating the same virtual overlay tunnel compatible device in a plurality of data centers and updating the overlay tunnel setting information according to the result of generation of the overlay tunnel 6. The overlay tunnel control method according to claim 5, further comprising a procedure. In the virtual overlay tunnel compatible device control procedure,
7. The overlay tunnel control method according to claim 5, wherein the communication path between the virtual servers is automatically set.   The overlay tunnel switching procedure for changing at least one buffer amount of the virtual overlay tunnel compatible device and the relay device on the communication path when switching the overlay tunnel connection between the virtual servers. Item 8. The overlay tunnel control method according to any one of Items 5 to 7.

Images