JP2016152426A - Controller, communication system, management method and program of virtual network - Google Patents

Abstract

PROBLEM TO BE SOLVED: To facilitate the consistent setting, and the like, to each physical node of the control information, incident to update of a virtual network.SOLUTION: A controller includes virtual network update receiving means, virtual network construction means for constructing a virtual network corresponding to the update version of the virtual network, by setting control information having priority higher than that of the control information before update, to at least a physical node corresponding to the updated virtual network, according to the update content of the virtual network, virtual network information management means for managing the information of the virtual network to which the version information indicating the number of times of update is added, roll back processing means for deleting or nullifying the information of the virtual network having new version information at a given opportunity, and entry deletion means for deleting the control information having a priority corresponding to that version from the physical node, at the opportunity of deletion or nullification of the information of the virtual network.SELECTED DRAWING: Figure 1

Description

  The present invention relates to a control device, a communication system, a virtual network management method, and a program, and more particularly, to a control device, a communication system, a virtual network management method, and a program that provide a virtual network to a user.

  Patent Document 1 refers to a transfer path configured by transfer nodes, a virtual network path information storage unit that stores a correspondence relationship with the virtual network, and the virtual network path information storage unit. And a virtual network control unit that identifies a virtual network that is affected by a change in the state of an arbitrary forwarding node, and discloses a control device that can present the affected part on the virtual network to the user ing.

  In Patent Document 2, a virtual network configuration information storage unit that stores a configuration of a virtual network configured by packet forwarding nodes, a virtual endpoint on the virtual network, and an endpoint that stores the endpoints of the packet forwarding node in association with each other An information storage unit, a control unit that controls packet transfer on the virtual network by the packet transfer node with reference to information stored in the virtual network configuration information storage unit and the endpoint information storage unit, respectively, Virtual endpoint addition rule that defines the correspondence between the value of a predetermined field in the packet header and the connection position of the virtual endpoint on the virtual network when a packet is received from a source not connected to the virtual endpoint On the basis of the addition of a virtual endpoint to the virtual network and a new error to the endpoint information storage unit. Controller having a virtual network updating unit that performs add and birds, and has been disclosed.

  Patent Document 3 discloses a service that uses an operation support service (OSS) client and a template interactively and non-interactively instead of interactively providing a service in real time in a network device using a graphical user interface (GUI). The concept of template-driven service provisioning that provides is disclosed (paragraph 0386).

  Patent Document 4 discloses a method for visualizing a virtual network of a computer system using open flow technology. Also, paragraph 0002 of Patent Document 5 discloses that a network controller of a software-defined network (SDN) creates and maintains a view of the network state and allows access to the view of the network state.

  Patent Document 6 discloses a network service plan provisioning system for proposing a network service plan to a user. Patent Document 7 discloses a unified policy management system for an organization including a central policy server and a policy enforcer at a remote location. Patent Document 8 discloses a utility meter comprising a processor configured to initiate a reboot / rookback of a utility meter using a firmware instruction set when it is determined that the network interface is inoperable. ing.

International Publication No. 2011/118585 International Publication No. 2013/062070 Special table 2003-534748 gazette International Publication No. 2013/118690 Special table 2014-526225 gazette Special table 2014-502066 gazette JP 2005-65305 A JP, 2014-130585, A

  The following analysis is given by the present invention. As described in Patent Documents 1 and 2, with the spread of OpenFlow and SDN, a virtual network can be easily constructed. Along with this, there is a user need to change the parameters of the virtual network. These virtual network parameters include network topology, route, ACL (access control list) policy, hardware configuration such as switch / router, bandwidth (link bandwidth, maximum bandwidth, threshold), routing table / flow table, port status ( up / down), queue length, service chain (NFV (Network Function Virtualization)), and the like.

  However, if the parameters of the virtual network described above are randomly changed, for example, when a problem occurs in the contents after the change, it becomes difficult to restore the original contents. Therefore, it is necessary to prepare for backup of control information set in each physical node in advance. In order for the virtual network to function correctly, it is necessary to set consistent contents for each physical node. Therefore, it may be necessary to delete or invalidate conflicting setting information.

  It is an object of the present invention to provide a control device, a communication system, a virtual network management method, and a program that can contribute to facilitating the setting of consistent control information to each physical node accompanying the above-described update of the virtual network. And

  According to the first aspect, the virtual network update accepting means for accepting the update content of the virtual network provided to the user, and according to the update content of the virtual network, at least the physical node corresponding to the updated virtual network, By setting control information having higher priority than control information before update, virtual network construction means for constructing a virtual network corresponding to the updated version of the virtual network, and version information indicating the number of times of update are added. Virtual network information management means for managing the information of the virtual network, rollback processing means for deleting or invalidating virtual network information whose version information is new from the virtual network information management means at a predetermined opportunity, and Delete virtual network information or In response to Enabling the entry deletion means for deleting the control information having a priority corresponding to the version from the physical node controller provided is provided.

  According to a second aspect, there is provided a communication system including the control device described above and a physical node that operates based on control information set by the control device.

  According to the third aspect, the step of receiving the update content of the virtual network provided to the user, and the control before the update to at least the physical node corresponding to the updated virtual network according to the update content of the virtual network By setting control information having a higher priority than information, a step of constructing a virtual network corresponding to the updated version of the virtual network, and information on the virtual network to which version information indicating the number of times of the update is added A step of managing, a step of deleting or invalidating information of the virtual network whose version information is new from the information of the virtual network to be managed, and a deletion or invalidation of the information of the virtual network. Priority corresponding to the version from the physical node One the method for deleting the control information, management method of the virtual network including a is provided. The method is tied to a specific machine, a control device that provides a virtual network to the user.

According to the fourth aspect, the process before accepting the update contents of the virtual network provided to the user, and the control before the update to at least the physical node corresponding to the updated virtual network according to the update contents of the virtual network. By setting control information having a higher priority than the information, a process of constructing a virtual network corresponding to the updated version of the virtual network, and information on the virtual network to which version information indicating the number of times of the update is added With the process to manage, the process of deleting or invalidating the virtual network information with new version information from the information of the virtual network to be managed, and the deletion or invalidation of the information of the virtual network Control information having a priority corresponding to the version is deleted from the physical node. The process and to a computer program to be executed by the control device for managing the virtual network is provided. This program can be recorded on a computer-readable (non-transient) storage medium. That is, the present invention can be embodied as a computer program product.
Each element of the control device, the communication system, the virtual network management method, and the program described above contributes to solving the above-described problems.

  ADVANTAGE OF THE INVENTION According to this invention, it becomes possible to contribute to simplification of the setting etc. of the consistent control information to each physical node accompanying the update of a virtual network.

It is a figure which shows the structure of one Embodiment of this invention. It is a figure for demonstrating operation | movement of one Embodiment of this invention. It is a figure which shows the structure of the communication system of the 1st Embodiment of this invention. It is a figure which shows the detailed structure of the control node of the 1st Embodiment of this invention. It is a figure which shows an example of the virtual network information stored in the database of the control node of the 1st Embodiment of this invention. It is a figure which shows the correspondence of the virtual network comprised by the control node of the 1st Embodiment of this invention, and a node. It is a figure which shows the example by which the virtual network information of the database of the control node of the 1st Embodiment of this invention was updated. It is an image figure of version update of the virtual network in the 1st Embodiment of this invention. It is a figure which shows the example of a database update (new entry creation) using the template in the 1st Embodiment of this invention. It is an image figure of creation processing of a virtual network using a template in a 1st embodiment of the present invention. It is a figure which shows the example of a database update (version update) using the template in the 1st Embodiment of this invention. It is a figure which shows the detailed structure of the control node of the 2nd Embodiment of this invention. It is a figure which shows the example of a database update (deletion of an old version entry) in the 2nd Embodiment of this invention. It is an image figure of deletion of the virtual network of the old version in the 2nd Embodiment of this invention. It is a figure which shows the detailed structure of the control node of the 3rd Embodiment of this invention. It is a figure which shows the example of a database update (rollback process) in the 3rd Embodiment of this invention. It is an image figure of the rollback process of the virtual network in the 3rd Embodiment of this invention. It is a figure which shows the structure of the communication system of the 4th Embodiment of this invention. It is a figure which shows the detailed structure of the management node of the 4th Embodiment of this invention. It is a figure which shows an example of the network operation management policy which can be set from the management node of the 4th Embodiment of this invention. It is a figure which shows an example of the setting screen of the network operation management policy to the virtual network information in the management node of the 4th Embodiment of this invention. It is a figure for demonstrating the whole operation | movement of the communication system of the 4th Embodiment of this invention. It is a figure which shows the structure of the communication system of the 5th Embodiment of this invention. It is a figure which shows the detailed structure of OpenFlowController and OpenFlowSwitch of the 5th Embodiment of this invention. It is a figure which shows an example of the flow entry which OpenFlowController of the 5th Embodiment of this invention sets to OpenFlowSwitch. It is an image figure of the virtual network comprised by the OpenFlowController of the 5th Embodiment of this invention. It is a figure for demonstrating the deformation | transformation embodiment of the 5th Embodiment of this invention. It is a figure which shows the structure of the communication system of the 6th Embodiment of this invention. It is a figure which shows the state by which the service chain was comprised by the control node of the 6th Embodiment of this invention. It is a figure for demonstrating the setting change process of the service chain by the control node of the 6th Embodiment of this invention. It is a figure which shows the example of a database update (service chain setting change) in the 6th Embodiment of this invention. It is an image figure of the switching of the service chain by the service chain setting change in the 6th Embodiment of this invention. It is a figure which shows the example of a database update (entry service chain entry deletion) in the 6th Embodiment of this invention. It is an image figure of deletion of the service chain of the old version in the 6th Embodiment of this invention. It is a figure which shows the example of a database update (rollback process) in the 6th Embodiment of this invention. It is an image figure of the rollback process of the service chain in the 6th Embodiment of this invention.

  First, an outline of an embodiment of the present invention will be described with reference to the drawings. Note that the reference numerals of the drawings attached to this summary are attached to the respective elements for convenience as an example for facilitating understanding, and are not intended to limit the present invention to the illustrated embodiment.

  As shown in FIG. 1, the embodiment of the present invention can be realized by a control device 10 </ b> A including a virtual network update accepting unit 11 and a virtual network construction unit 12. More specifically, the virtual network update receiving unit 11 receives the update contents of the virtual network provided to the user from the network administrator or the user himself / herself. The virtual network construction unit 12 sets the control information having higher priority than the control information before the update to at least the physical node corresponding to the updated virtual network according to the update contents of the virtual network. Build a virtual network that reflects network updates.

  For example, as shown in FIG. 1, in a state where a virtual network VN1 having an upper limit transfer rate (bandwidth) of 10 Mbps is provided, the virtual network update accepting unit 11 changes the upper limit transfer rate (bandwidth) to 100 Mbps. It is assumed that the update contents have been accepted. In this case, the virtual network construction means 12 gives priority (priority) higher than the control information (priority = Low) before the update to the (physical) node corresponding to the updated virtual network according to the update contents of the virtual network. Control information having degree = High) is set. As a result, a virtual network VN2 having an upper limit transfer rate (bandwidth) of 100 Mbps reflecting the updated contents of the virtual network is constructed. By setting control information (instructing packet transfer) with high priority in the same procedure, it becomes possible to create a link between the nodes of the virtual network.

  As described above, according to the present invention, it is possible to update a virtual network by setting control information having different priorities to a plurality of (physical) nodes. As will be described later, in the present invention, if the control information with high priority is deleted, the virtual network can be returned to the content before the update. In addition, when it is desired to make a space in the control information storage area of each (physical) node, it is possible to delete control information with a low priority.

[First Embodiment]
Next, a first embodiment of the present invention will be described in detail with reference to the drawings. FIG. 3 is a diagram illustrating the configuration of the communication system according to the first embodiment of this invention. Referring to FIG. 3, a configuration is shown in which a plurality of nodes (physical nodes) 111 to 118 that are connected to each other and constitute a network 120 and a control node 100 that controls these nodes 111 to 118 are connected. A broken line in FIG. 3 indicates a control channel between the control node 100 and the nodes 111 to 118.

  FIG. 4 is a diagram illustrating a detailed configuration of the control node according to the first embodiment of this invention. Referring to FIG. 4, a control node 100 including a path setting unit 101, a node management unit 102, a database 103, and a control unit 104 is illustrated.

  In response to a request from the control unit 104, the route setting unit 101 calculates the routes of the nodes 111 to 118 corresponding to the route between arbitrary end points of the virtual network based on the topology information of the network 120 stored in the database 103. To do.

  The node management unit 102 creates control information for causing the nodes on the route calculated by the route setting unit 101 to execute packet transfer and accompanying processing along the route, and to each node via the control unit 104, Control information having a priority specified by the control unit 104 is set. Also, the node management unit 102 inquires the node about the presence / absence of the failure of the node, the state of the resource, the data statistics state (bandwidth usage state), and the like to the node via the control unit 104 as necessary. May be performed. The collected results may be stored in the database 103 as node information, or may be held by the node management unit 102 itself.

  In the present embodiment, control information for realizing different versions of the virtual network is set in one node. For this reason, when a wild card is used as a match condition, control information corresponding to an old version of the virtual network may be applied. For this reason, a check function for consistency between the old and new control information may be added to the node management unit 102.

  The database 103 is a database that stores information on the network 120 in which the nodes 111 to 118 are arranged, and virtual network information including the configuration and parameters of the virtual network configured using the resources of the network 120. The database 103 may store control information with priority set for each node corresponding to the virtual network information.

  The control unit 104 communicates with the nodes 111 to 118 on the network 120 and provides a virtual network by setting control information in these nodes 111 to 118. When the control unit 104 receives the update contents of the virtual network from the network administrator or the user, the control unit 104 updates the virtual network information in the database 103 and also updates the updated virtual network to the path setting unit 101 and the node management unit 102. Requests the setting of control information with priority for realizing the above.

  FIG. 5 is a diagram illustrating an example of virtual network information stored in the database 103. The example of FIG. 5 shows a state where two virtual networks, a virtual network 131 and a virtual network 132, are set. In the example of FIG. 5, the virtual network 131 includes nodes 112, 113, 114, and 115 of the network 120, and the maximum bandwidth (upper limit transfer rate) is 100 Mbps. In the version field, “1” is set. Similarly, the virtual network 132 includes nodes 116 and 117 of the network 120, and the maximum bandwidth (upper limit transfer rate) is 100 Mbps. In the version field, “1” is set. In this embodiment, this version number is used as the priority of the control information set in the node, and the version having a large version is handled as a high priority. Therefore, the database 103 also functions as a virtual network information management unit that manages the priority given to the control information in association with the version of the virtual network.

  FIG. 6 is a diagram showing a correspondence relationship between the virtual networks 131 and 132 and the nodes 111 to 118. In the initial stage, as shown in FIG. 5, since the information of the virtual network with version = 1 is set, the control information with priority = 1 is set in the node of FIG. In the following description, it is assumed that a virtual network 131-N is described as a version N virtual network, and priority = N is given to control information for realizing a version N virtual network.

  Next, the operation of this embodiment will be described in detail with reference to the drawings. In the following description, it is assumed that the virtual network information in the database 103 of the control node 100 has been updated as shown in FIG. First, regarding the virtual network 131, it is assumed that an operation for raising the maximum bandwidth from 100 Mbps to 200 Mbps is performed without changing the topology. In this case, as shown in the virtual network 131-2 in FIG. 8, the control node 100 sets the control information (priority = 2) having higher priority than the virtual network 131-1 to the node, so that the version 2 A virtual network 131-2 is constructed. The update contents for the virtual network 131 only increase the maximum bandwidth from 100 Mbps to 200 Mbps. However, as the maximum bandwidth is 200 Mbps, recalculation is performed in the path setting unit 101 and the node management unit 102, and each node is updated. The control information set in 112-115 is also updated.

  Similarly, regarding the virtual network 132, it is assumed that a topology change operation has been performed. Also in this case, as shown in the virtual network 132-2 in FIG. 8, the control node 100 sets the control information (priority = 2) having higher priority than the virtual network 132-1 to the version 2 version. A virtual network 132-2 is constructed. In addition, since the updated content for the virtual network 132 changes the topology, in this case as well, recalculation is performed by the path setting unit 101 and the node management unit 102, and new control information is set in each of the nodes 114 to 117. Is done.

  By doing so, a new version of the virtual network is constructed corresponding to the update contents of the virtual network shown in FIG. Since the control information for realizing the virtual network is applied based on the priority, consistency is ensured. In addition, when the virtual network is updated and the control information is rewritten as described in the background art, the virtual network information and control information of the old version will be lost. It is possible to hold virtual network information and control information.

  By providing a template to the user, the above-described virtual network construction and update processing can be further facilitated. FIG. 9 is a diagram for explaining processing when a template is used when a new virtual network is constructed.

  For example, as shown in the right column of FIG. 9, a table storing templates that serve as templates in a virtual network is prepared in advance. Such a template can be created in advance by the network administrator based on the contents of the contract with the user and the charge plan.

  The user selects a virtual network that meets his requirements from the template shown in the right column of FIG. By doing in this way, as shown in FIG. 10, the user can construct | assemble a virtual network easily.

  Also, the virtual network can be updated using the template described above. For example, the user selects a virtual network in which the maximum bandwidth of template No. 2 is 200 Mbps from the template shown in the right column of FIG. 11 and registers it as a new entry for the virtual network 131 in the database 103. By doing so, it is possible to perform an update process equivalent to the update contents of the virtual network 131 of FIG. 8 (no topology change, change the maximum bandwidth to 200 Mbps).

  In the examples of FIGS. 9 and 11, only two templates are shown for the sake of simplicity, but it is preferable to prepare a large number of templates. In this case, it is preferable to add a virtual network ID currently used from the user name, and to add a template search function using nodes included in the calculated virtual network as search keys. Alternatively, the control node 100 may store a template usage history for each user and present a template related to the template used last time as a version upgrade candidate or the like.

[Second Embodiment]
Next, a second embodiment in which an old version virtual network deletion function is added to the first embodiment will be described. FIG. 12 is a diagram illustrating a detailed configuration of a control node according to the second embodiment of this invention. The difference from the control node 100 of the first embodiment shown in FIG. 4 is that an entry deletion unit 1041 is added in the control unit 104a. Since other configurations and operations are the same as those in the first embodiment, the following description will focus on differences from the first embodiment.

  The entry deletion unit 1041 deletes old version virtual network information that is no longer used due to version update from the database 103. As an opportunity for the deletion of the old version of the virtual network information by the entry deletion unit 1041, there may be a case where a predetermined period after the version is updated, a case where traffic corresponding to the predetermined period is zero, and the like.

  Next, the operation of this embodiment will be described. FIG. 13 is a diagram showing an example of database update (deletion of old version entries) in the second embodiment of the present invention. The entry deletion unit 1041 deletes the old version of the virtual network information when conditions such as the elapse of the predetermined period and the traffic corresponding to the predetermined period are zero are satisfied.

  When the version is deleted, the control unit 104a requests the node management unit 102 to delete the control information set in each node. Upon receiving the request, the node management unit 102 deletes the control information corresponding to the corresponding old version of the virtual network 131-1, as shown in FIG. This request for deletion can be made by referring to the control information already set for each node managed by the node management unit 102 and specifying the control information to be deleted by the node management unit 102. Alternatively, the node management unit 102 and the node may interact to specify the set control information corresponding to the corresponding version. In the example of FIG. 14, only the virtual network 131-1 is deleted, but the virtual network 132-1 can also be deleted in the same manner.

  Thereby, for example, in the case of the example in FIG. 14, old control information is deleted from the nodes 112 to 115. As a result, according to the present embodiment, it is possible to release the resources of the nodes 112 to 115, that is, the control information storage area used for the old virtual network.

[Third Embodiment]
Next, a third embodiment in which a rollback processing function for a virtual network before update is added to the first embodiment will be described. FIG. 15 is a diagram illustrating a detailed configuration of a control node according to the third embodiment of this invention. The difference from the control node 100 of the first embodiment shown in FIG. 4 is that a rollback processing unit 1042 is added in the control unit 104b. Since other configurations and operations are the same as those in the first embodiment, the following description will focus on differences from the first embodiment.

  When a predetermined rollback execution condition is satisfied, the rollback processing unit 1042 deletes the latest version of the virtual network information in the database 103 and performs a process of rolling back to the second newest version of virtual network information. Examples of the rollback execution condition include a virtual network, its constituent nodes, link failure detection, and an explicit user instruction.

  Next, the operation of this embodiment will be described. FIG. 16 is a diagram illustrating a database update example (rollback process) according to the third embodiment of the present invention. When the above rollback execution condition is satisfied, the rollback processing unit 1042 deletes the latest version of the virtual network information.

  When the version is deleted, the control unit 104b requests the node management unit 102 to delete the control information set in each node. Upon receiving the request, the node management unit 102 deletes the control information corresponding to the latest version of the virtual network 132-2 as shown in FIG. This request for deletion can be made by referring to the control information already set for each node managed by the node management unit 102 and specifying the control information to be deleted by the node management unit 102. Alternatively, the node management unit 102 and the node may interact to specify the set control information corresponding to the corresponding version. In the example of FIG. 16, only the virtual network 132-2 is deleted, but the virtual network 131-2 can also be deleted and rolled back in the same manner.

  Thereby, for example, it is possible to prevent the virtual network 132 from being affected by the failure of the link between the nodes 115 to 117 as shown in FIG. In the examples of FIGS. 16 and 17, the latest version of the virtual network and its control information have been described as being deleted. However, it is not necessary to physically delete the virtual network, and processing such as invalidation is performed while leaving the corresponding entry. May be. In this way, when the failure of the link between the nodes 115-117 is recovered, it is possible to quickly return to the virtual network 132-2.

[Fourth Embodiment]
Next, a fourth embodiment in which a virtual network management function is added to the configuration of the first embodiment will be described. FIG. 18 is a diagram showing a configuration of a communication system according to the fourth exemplary embodiment of the present invention. The difference from the communication system of the first embodiment shown in FIG. 3 is that a management node 140 is added to the control node 100. Since other configurations and operations are the same as those in the first embodiment, the following description will focus on differences from the first embodiment.

  FIG. 19 is a diagram illustrating a detailed configuration of a management node according to the fourth embodiment of this invention. Referring to FIG. 19, a management node 140 including a user interface 141, a setting unit 142, and a communication interface 145 is illustrated.

  The setting unit 142 includes a condition setting unit 143 and a policy setting unit 144. The policy setting unit 144 is means for accepting and holding the setting of the network operation management policy as shown in FIG. Policy No. 1 in FIG. The network operation management policy No. 1 is a policy that deletes an old version of a virtual network when either a predetermined period of time elapses or the traffic volume = 0 is established. Policy No. 1 in FIG. The network operation management policy No. 2 is a policy of executing a virtual network rollback process when a failure of the virtual network is detected.

  The condition setting unit 143 receives a setting of a network operation policy to be applied to the virtual network of the user from the user via the user interface 141, and requests the control node 100 to update the database 103. FIG. 21 is a diagram illustrating an example of a setting screen for a network operation management policy for a virtual network by the condition setting unit 143. In the example of FIG. 21, a policy for deleting an old virtual network and a policy for performing rollback at the time of failure are already set for the virtual network 132 on condition that 10 hours have passed since the creation of the latest version. Note that the application policy is preferably selected using a drop-down list or the like as shown in the upper part of FIG.

  The communication interface 145 is a means for mediating communication between the management node 140 and the control node 100.

  In addition to the network operation management policy setting function described above, the management node 140 as shown in FIG. 19 has a virtual network update content acceptance function as described in the first to third embodiments, an old version. The virtual network deletion condition and rollback execution condition acceptance function may be provided.

  Next, the operation of this embodiment will be described. FIG. 22 is a diagram for explaining the overall operation of the communication system according to the fourth embodiment of this invention. As shown in FIG. 22, first, the management node 140 receives an input (selection) of a (network) operation management policy from the user (balloon 1 in FIG. 22).

  Next, the management node 140 sets the (network) operation management policy that has received the input (selection) to the corresponding virtual network information in the database 103 of the control node 100 (balloon 2 in FIG. 22).

  The control node 100 performs operation (deletion, rollback, etc.) of the virtual network according to the set (network) operation management policy (balloon 3 in FIG. 22).

  As described above, according to the present embodiment, the operation after setting the virtual network can be left to the control node 100. The example of the network operation management policy is not limited to the example of FIG. For example, instead of the rollback process to the previous generation version, the virtual network of the oldest generation version may be restored. In addition, regarding deletion of an old virtual network, exception processing such as not subject to deletion of an initial version of a virtual network may be defined.

[Fifth Embodiment]
Next, a fifth embodiment configured using the open flow described as the background art will be described in detail with reference to the drawings. FIG. 23 is a diagram showing a configuration of a communication system according to the fifth exemplary embodiment of the present invention. The difference from the communication system of the first embodiment shown in FIG. 3 is that the nodes 111 to 118 are replaced with OpenFlowSwitch 211 to 218, and the control node 100 is replaced with OpenFlowController 200. Since the basic configuration and operation are the same as those in the first embodiment, the following description will focus on differences from the first embodiment.

  FIG. 24 is a diagram illustrating a detailed configuration of the OpenFlow Controller 200 and the OpenFlow Switches 211 to 218 that function as control nodes in the fifth embodiment of the present invention. The difference from the control node 100 of the first embodiment shown in FIG. 4 is that the control unit 204 communicates with OpenFlowSwitch 211-218 using the OpenFlow protocol, and the control information flows to the flow table 2112 of OpenFlowSwitch 211-218. It is a point stored as an entry.

  The OpenFlowSwitch 211 includes a control unit 2111, a flow table 2112, and a communication interface 2113.

  FIG. 25 is a diagram illustrating an example of a flow entry held in the OpenFlowSwitch flow table 2112. As shown in FIG. 25, the flow entry is provided with a PRIORITY field, and the priority can be set. The symbol “*” in the flow entry in FIG. 25 indicates that a wild card is set.

  When receiving a packet from the communication interface 2113, the control unit 2111 of the OpenFlow Switch 211 selects a flow entry having a value suitable for the received packet from the flow table 2112, and selects the one having the highest PRIORITY field value, and the contents of the ACTION field. Process the packet according to

  For example, when MAC TYPE = IP, a destination IP address of 172.16.0.0/16, an IP Protocol of TCP, and a destination port of 80 are received, the control unit 2111 receives the packet shown in FIG. The version 3 flow entry above is selected. On the other hand, when the same packet is received in the state where the version 3 flow entry is deleted, triggered by the rollback processing described above, the version 2 flow entry with the next highest priority is selected.

  Also in this embodiment, an entry deletion unit and a rollback processing unit can be added to the OpenFlow Controller 200 that functions as a control node, as in the second and third embodiments. FIG. 26 is an image diagram of a virtual network configured by the OpenFlow Controller 200. In the example of FIG. 26, the flow network having the priority illustrated in FIG. 25 is set in the OpenFlowSwitch corresponding to each virtual network, so that different versions of the virtual network are constructed. As described in the second and third embodiments, an old version of the virtual network 231-1 is deleted by deleting a flow entry corresponding to the old version of the virtual network 231-1 from the OpenFlowSwitch 212 to 215 at a predetermined opportunity. Can be deleted. In addition, when a failure occurs, the rollback process can be realized by deleting the flow entry corresponding to the latest version of the virtual network 231-2 from the OpenFlowSwitch 212, 213.

  As described above, the present invention can be easily realized using the OpenFlow mechanism.

  In the above description, the example applied to the open flow has been described, but the communication system to which the present invention can be applied is not limited to the open flow. For example, even in a switch that supports non-open flows, as shown in FIG. 27, a time stamp field is provided in the existing transfer table 2112a, and an entry with a new date and time can be handled as an entry with high priority. Of course, the field is not limited to the time stamp field, and a Priority field similar to that shown in FIG. 25 may be provided, or a value usable as a priority may be set in another existing field.

[Sixth Embodiment]
Next, details of the sixth embodiment for realizing the update of the service chain represented by connecting the virtual network function provided to the user by giving priority to the control information will be described with reference to the drawings. Explained. FIG. 28 is a diagram showing a configuration of a communication system according to the sixth exemplary embodiment of the present invention. The difference from the communication system of the first embodiment shown in FIG. 3 is that the control object of the control node 300 is not a virtual network constituted by the nodes 111 to 118, but a service chain (NFV) in the network function virtualization (NFV). (Forwarding graph). Since the basic configuration and operation of the control node are the same as those in the first embodiment, the following description will focus on differences from the first embodiment.

  FIG. 29 shows the connection of the node (tunnel endpoint) 311, the firewall (FW-1) 312, the Deep Packet Inspection (DPI-1) 313, the network address translation (NAT-1) 314, and the node 318 by the control node 300. It is a figure which shows the state by which the made service chain 330-1 was comprised. In the present embodiment, service chain information is stored in the database 103 of the control node 300 instead of the virtual network information of the first embodiment.

  In the state of FIG. 29, it is possible to change the path from which the user traffic flows by changing the settings from the control node 300 to the node 311 and the NAT-2 317. In addition, as shown in FIG. 31, the service chain version is updated by updating the service chain path information stored in the database 103 to FW2 315, DPI-2 316, and NAT-2 317. When the service chain version is updated, the control node 300 switches the path by setting control information with higher priority to the physical node corresponding to the updated service chain.

  FIG. 32 is a diagram showing a route after the version update of the service chain. As shown in FIG. 32, the user traffic flows along the route of the updated service chain 330-2 by updating the version of the service chain.

  As described above, the present invention can also be applied to service chain (forwarding graph) updating in network function virtualization (NFV).

  In the present embodiment as well, the old service chain can be deleted or rolled back as in the second and third embodiments.

  FIG. 33 is a diagram illustrating a state in which the control node 300 deletes the old service chain entry from the service chain information in the database 103 at a predetermined opportunity. By doing so, it is possible to realize the deletion of the old service chain as shown in FIG.

  FIG. 35 shows that the control node 300 deletes the entry of the corresponding service chain from the service chain information in the database 103 when a failure of the network function on the service chain (for example, DPI-2 316 in FIG. 35) occurs. It is a figure which shows the state which carried out. As described above, the service chain rollback processing as shown in FIG. 36 can be realized.

  In addition, each part (processing means) of the control node and the management node shown in FIGS. 1, 2, 4, 12, 15, 19, 24, etc. is used for the computer constituting these devices by using the hardware. It can also be realized by a computer program that executes each process.

  Although the embodiments of the present invention have been described above, the present invention is not limited to the above-described embodiments, and further modifications, substitutions, and adjustments are possible without departing from the basic technical idea of the present invention. Can be added. For example, the network configuration, the configuration of each element, and the expression form of a message shown in each drawing are examples for helping understanding of the present invention, and are not limited to the configuration shown in these drawings.

Finally, a preferred form of the invention is summarized.
[First embodiment]
(Refer to the control device according to the first viewpoint)
[Second form]
In the control device of the first form,
The virtual network construction means includes
A database that stores information of the virtual network to which the version information is added, and that functions as the virtual network information management means;
A path setting unit that refers to information stored in the database and determines a packet transfer path on the network configured by the physical nodes;
A node management unit configured to set control information for constructing the virtual network in a node on the path.
[Third embodiment]
In the control device of the first or second form,
The rollback processing means is a control device that deletes virtual network information triggered by either the elapse of a predetermined time from the update or the absence of traffic for a predetermined time.
[Fourth form]
In the control device according to any one of the first to third aspects,
Update the virtual network by deleting or invalidating the control information with the highest priority, triggered by a rollback instruction from the user or the occurrence of a failure in the virtual network constructed reflecting the updated contents of the virtual network A control device that realizes rollback of content.
[Fifth embodiment]
(Refer to the communication system according to the second viewpoint)
[Sixth embodiment]
(Refer to the virtual network management method from the third point of view)
[Seventh form]
(Refer to the computer program according to the fourth aspect above)
In addition, the said 5th-7th form can be expand | deployed to the 2nd-4th form similarly to the 1st form.

  It should be noted that the disclosures of the above patent documents are incorporated herein by reference. Within the scope of the entire disclosure (including claims) of the present invention, the embodiments and examples can be changed and adjusted based on the basic technical concept. Various combinations or selections of various disclosed elements (including each element of each claim, each element of each embodiment or example, each element of each drawing, etc.) are possible within the scope of the disclosure of the present invention. It is. That is, the present invention of course includes various variations and modifications that could be made by those skilled in the art according to the entire disclosure including the claims and the technical idea. In particular, with respect to the numerical ranges described in this document, any numerical value or small range included in the range should be construed as being specifically described even if there is no specific description.

10A Control device 11 Virtual network update acceptance means 12 Virtual network construction means 100, 300 Control node 101, 201 Path setting unit 102, 202 Node management unit 103, 203 Database 104, 104a, 104b, 204 Control unit 111-118 node (physical node)
120, 220 Network 131, 131-1, 131-2, 132, 132-1, 132-2, 231-1, 231-2, Virtual network 140 Management node 141 User interface 142 Setting unit 143 Condition setting unit 144 Policy setting Part 145 Communication interface 200 OpenFlow Controller
211-218 OpenFlowSwitch
311 and 318 Nodes 312 and 315 Firewall (FW)
313, 316 Deep Packet Inspection (DPI)
314, 317 Network address translation (NAT)
330-1, 330-2 Service chain 1041 Entry deletion unit 1042 Rollback processing unit 2111 Control unit 2112 Flow table 2112a Transfer table 2113 Communication interface

Claims (7)

Virtual network update accepting means for accepting virtual network update content provided to the user;
Corresponding to the updated version of the virtual network by setting control information having a higher priority than the control information before the update to the physical node corresponding to the updated virtual network according to the update contents of the virtual network A virtual network construction means for constructing a virtual network;
Virtual network information management means for managing virtual network information to which version information indicating the number of updates is added;
Rollback processing means for deleting or invalidating virtual network information with new version information from the virtual network information management means at a predetermined opportunity;
Entry deletion means for deleting control information having a priority corresponding to the version from the physical node when the virtual network information is deleted or invalidated,
A control device comprising: The virtual network construction means includes
A database that stores information of the virtual network to which the version information is added, and that functions as the virtual network information management means;
A path setting unit that refers to information stored in the database and determines a packet transfer path on the network configured by the physical nodes;
The control apparatus according to claim 1, further comprising: a node management unit that sets control information for constructing the virtual network in a node on the path.   3. The control device according to claim 1, wherein the rollback processing unit deletes virtual network information when a predetermined time elapses from the update or when there is no traffic for a predetermined time.   Update the virtual network by deleting or invalidating the control information with the highest priority, triggered by a rollback instruction from the user or the occurrence of a failure in the virtual network constructed reflecting the updated contents of the virtual network The control device according to claim 1, which realizes content rollback.   A communication system comprising: the control device according to claim 1; and a physical node that operates based on control information set by the control device. Receiving a virtual network update provided to the user;
Corresponding to the updated version of the virtual network by setting control information having a higher priority than the control information before the update to the physical node corresponding to the updated virtual network according to the update contents of the virtual network Building a virtual network;
Managing virtual network information to which version information indicating the number of updates is added;
A step of deleting or invalidating virtual network information with new version information from the virtual network information to be managed at a predetermined opportunity;
A step of deleting control information having a priority corresponding to the version from the physical node, triggered by deletion or invalidation of information of the virtual network;
Management method of virtual network including A process of accepting a virtual network update provided to the user;
Corresponding to the updated version of the virtual network by setting control information having a higher priority than the control information before the update to the physical node corresponding to the updated virtual network according to the update contents of the virtual network The process of building a virtual network;
A process for managing information of a virtual network to which version information indicating the number of times of update is added;
A process of deleting or invalidating virtual network information whose version information is new from the virtual network information to be managed at a predetermined opportunity;
Processing to delete control information having a priority corresponding to the version from the physical node, triggered by deletion or invalidation of information of the virtual network;
A computer program to be executed by a control device that manages a virtual network.

Images