JP2016192660A - Network system, network control method, control device, and operation management device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a network system, a network control method, a control device, and an operation management device, capable of optimizing configuration of a virtual network function.SOLUTION: A control device (11): monitors virtual components (VMM, VM, VNF) on a physical server and physical components (SV, 21A, 21B, 21C) on a network; manages at least one virtual network function (VNF) operating on a physical server according to network topology information regarding the components; stores operation policy with configured control conditions; and executes setting control for solving a problem of at least one of a virtual component and a physical component if problem occurrence is determined, at least at one component, at least on one layer, working on physical severs (31, 32) according to the control conditions of the operation policy.SELECTED DRAWING: Figure 18

Description

  The present invention relates to a network system including a virtual network function, and more particularly to a network control method, control apparatus, and operation management apparatus.

  In the current communication system, various network functions (Network Function: NF) such as BRAS (Broadband Remote Access Server), NAT (Network Address Translation), router, and firewall are realized by dedicated hardware equipment (appliance). Yes. For this reason, when starting up a new network service, the network operator is forced to introduce a new dedicated heartware device, and requires a large cost such as a device purchase cost and an installation space. In view of such a situation, in recent years, a technique (virtual network function virtualization) in which a network function executed by a hardware device is virtually executed by software has been studied (Non-Patent Document 1). As an example of network service virtualization, Patent Document 1 discloses a method of constructing a plurality of virtual routers on a communication node device and dynamically allocating resources of these virtual routers according to communication quality. .

  In addition, a technique for providing various network services by transmitting a communication flow to a communication path in which a plurality of virtual network functions (VNFs) are combined has been studied (for example, see Non-Patent Document 2). .

JP 2012-175418 A

Network Functions Virtualization-Update White Paper, October 15-17, 2013 at the “SDN and OpenFlow World Congress”, Frankfurt-Germany (http://portal.etsi.org/NFV/NFV_White_Pater2.pdf)

ETSI GS NFV 001 v1.1.1 (2013-10) “Network Functions Virtualisation (NFV); Use Cases” (http://docbox.etsi.org/ISG/NFV/Open/Published/gs_NFV001v010101p%20-%20Use%20Cases .pd

  In the above-described patent document and non-patent document, the VNF arrangement and the path between the VNFs are managed. However, the VNF arrangement determined in this way does not always optimize the throughput of the entire system. For example, if the physical server itself on which the VNF operates is in an overload state, the performance of the VNF is degraded. Thus, the throughput of the entire system cannot be optimized without considering the lower layer in which each VNF operates.

  For example, an actual VNF is activated on a virtual machine (VM), a VM is generated and managed on a virtual machine monitor (VMM), and the VMM is mounted on a physical server. Therefore, the actual network service goes through not only the VNF but also the physical layer, VM, VMM, etc., which are lower layers thereof. If, for example, a failure or an overload condition occurs in at least one of the VNF and its lower layers, the performance of the network service is degraded, and the performance of the entire system is degraded.

  Therefore, an object of the present invention is to provide a network system, a network control method, and a control apparatus that can optimize the arrangement of virtual network functions.

A network control device according to the present invention is a device for controlling a network, monitors the status of virtual components on a physical server included in the network and the physical components of the network, and based on network topology information related to these components. Management means for managing at least one virtual network function operating on the physical server; storage means for storing an operation policy in which control conditions are set; and at least operating on the physical server according to the control conditions of the operation policy Control means for executing setting control for solving the problem on at least one of the virtual component and the physical component when it is determined that a problem has occurred in at least one component in one layer; And wherein the Rukoto.
The network control method according to the present invention is a method for controlling a network, in which a management unit monitors a virtual component on a physical server included in the network and a physical component of the network, and includes network topology information related to these components. And managing at least one virtual network function operating on the physical server based on the management policy, storing an operation policy in which a control condition is set in a storage unit, and the control unit on the physical server according to the control condition of the operation policy. When it is determined that a problem has occurred in at least one component in at least one operating layer, setting control for solving the problem is performed on at least one of the virtual component and the physical component. To.
A network system according to the present invention includes a control device that controls a network, and an operation management device that manages the network via the control device, wherein the operation management device sets an operation policy in the control device, At least one virtual network function in which the control device monitors the status of the virtual components on the physical server included in the network and the physical components of the network, and operates on the physical server based on network topology information regarding these components And when the virtual component and the physical component are determined to have occurred in at least one component in at least one layer operating on the physical server in accordance with the control conditions of the operational policy. And a control means for executing a setting control to solve the problem for at least one of the bets, and having a.
A network operation management apparatus according to the present invention is an operation management apparatus in the network system, and means for setting a virtual component on the physical server, a requirement condition of the physical component of the network, and the operation policy in the control apparatus; And a means for displaying an extended service chain configured by the control device and comprising the virtual network function, the virtual component, and the physical component on a display unit.
A program according to the present invention is a program for causing a computer to function as a network control device, which monitors a virtual component on a physical server included in a network and a physical component of the network, and based on network topology information regarding these components. A function for managing at least one virtual network function operating on a physical server, a function for storing an operation policy in which a control condition is set in a storage means, and at least an operation on the physical server according to the control condition of the operation policy When it is determined that a problem has occurred in at least one component in one layer, setting control for solving the problem is performed on at least one of the virtual component and the physical component Characterized in that to achieve the ability to the computer.

  According to the present invention, optimal arrangement of virtual network functions on a network can be realized.

FIG. 1 is a system configuration diagram showing an example of a network implementing an embodiment of the present invention. FIG. 2 is a schematic network diagram for explaining a schematic operation of the network system according to the first embodiment of the present invention. FIG. 3 is a block diagram showing a schematic configuration of the control device according to the first embodiment of the present invention. FIG. 4 is a diagram illustrating a data configuration example of a database provided in the control device according to the first embodiment. FIG. 5 is a block diagram showing a schematic configuration of the server in the first embodiment. FIG. 6 is a schematic network diagram for explaining the schematic operation of the network system according to the second embodiment of the present invention. FIG. 7 is a diagram illustrating a data configuration example of a database provided in the control device according to the second embodiment. FIG. 8 is a sequence diagram showing the operation of the network system according to the second embodiment. FIG. 9 is a schematic network diagram for explaining the schematic operation of the network system according to the embodiment 2-1 of the present invention. FIG. 10 is a schematic network diagram for explaining a schematic operation of the network system according to the embodiment 2-2 of the present invention. FIG. 11 is a schematic network diagram for explaining a schematic operation of the network system according to the embodiment 2-3 of the present invention. FIG. 12 is a schematic network diagram for explaining the schematic operation of the network system according to the embodiment 2-4 of the present invention. FIG. 13 is a schematic network diagram for explaining the schematic operation of the network system according to the third embodiment of the present invention. FIG. 14 is a schematic network diagram for explaining a schematic operation of the network system according to the embodiment 3-1 of the present invention. FIG. 15 is a schematic network diagram for explaining a schematic operation of the network system according to the embodiment 3-2 of the present invention. FIG. 16 is a schematic network diagram for explaining a schematic operation of the network system according to the fourth embodiment of the present invention. FIG. 17 is a sequence diagram showing the operation of the network system according to the fourth embodiment. FIG. 18 is a schematic network diagram for explaining a schematic operation of the network system according to the fifth embodiment of the present invention. FIG. 19 is a block diagram showing a schematic configuration of an operation management apparatus in the network system according to the fifth embodiment. FIG. 20 is a diagram schematically showing a display screen which is an example of network visualization by the operation management apparatus in the fifth embodiment. FIG. 21 is a diagram schematically showing a display screen which is an example of service chain visualization by the operation management apparatus in the fifth embodiment. FIG. 22 is a diagram schematically showing a display screen which is another example of service chain visualization by the operation management apparatus in the fifth embodiment. FIG. 23 is a block diagram showing a schematic configuration of a control device according to the sixth embodiment of the present invention. FIG. 24 is a block diagram showing a schematic configuration of a physical switch in the sixth embodiment. FIG. 25 is a block diagram showing a schematic configuration of a server in the sixth embodiment. FIG. 26 is a schematic system configuration diagram for explaining the open flow technique employed in the sixth embodiment. FIG. 27 is a format diagram schematically showing the configuration of entries stored in the flow table in FIG.

A. Outline of Embodiment According to the embodiment of the present invention, not only the virtual network function (VNF) but also each component in the lower layer is regarded as one “node” constituting the network service. Therefore, the network service can be managed based on a path that provides a network service including the VNF and its lower layer nodes (hereinafter referred to as an extension path). By managing in consideration of resources of a layer different from VNF, it is possible to optimize network services in accordance with reality. The outline of the embodiment of the present invention will be described below with reference to the network system shown in FIG.

<System configuration>
As shown in FIG. 1, the control device 10 controls a network 20 including a physical node such as a physical switch and a server capable of providing VNF, and controls the arrangement and setting of the VNF based on an extended path described later. The network 20 includes a plurality of physical nodes and n (n: an integer of 1 or more) physical servers SV1 to SVn, which are connected to adjacent physical nodes or physical servers by physical links. The control device 10 may be provided in a network operation management device. In the following description, the physical servers SV1 to SVn may be simply referred to as “servers”.

  Each server has a multi-layer configuration including a virtual network function (VNF) layer, a VM layer that starts VNF, a VM management layer that generates and manages VMs, and a physical layer that implements the VM management function Can do. Here, it is assumed that one or more VNFs constituting the network service can be arranged in the physical servers SV1 to SVn, respectively.

<Extended path>
As described above, when each server has a multi-layer configuration, for example, a network service including one or more types of VNFs is not only a VNF of each server, but also a physical layer, a VM layer, and a VM that are lower layers. It can be considered as an extended path via the management layer. The control device 10 manages the component resources of all layers including the VNF based on such an extended path.

  For example, if a failure or an overload condition occurs in at least one of VNF and its lower layers, the control device 10 can identify the failure or overload condition in the node of the extended path, Appropriate measures against overload conditions can be taken.

  More specifically, when a problem such as a failure or an overload state occurs in a certain layer, control for solving the problem can be performed in the same layer or a lower layer. For example, when a failure or an overload condition occurs in a VNF or VM of a server, it is possible to take measures such as starting a new VM or limiting the bandwidth in the physical layer in the upstream node. Also, if a failure or overload occurs in a physical link or physical server, change the network service path to avoid the location of the failure or overload and start the same VNF on another server can do. Such problem solving control can also be performed on a policy basis using a management tool.

  By managing using the extended path in this way, it is possible to optimize the throughput of the entire system. Hereinafter, the embodiment of the present invention will be described in detail by taking the multilayer configuration shown in FIG. 1 as an example. The VM management layer node is also called a virtual machine manager VMM (Virtual Machine Manager) or a hypervisor.

1. 1. First Embodiment 1.1) System Configuration As shown in FIG. 2, the network system according to the first embodiment of the present invention includes a control device 10 and a network 20 controlled by the control device 10, and the description is simplified. In addition, it is assumed that the network 20 includes two physical nodes N1 and N2 and a server 30 disposed therebetween.

  The server 30 includes a physical layer component SV for connecting to an adjacent node through a physical link, a VM management layer component VMM, a VM layer component VM, and a VNF layer component VNF that is a network function. It has a layer structure. That is, in the server 30, a plurality of virtual software (VMM, VM, VNF) are hierarchically started on the physical layer component SV. Therefore, as described above, the virtual network function VNF in this example is handled as one extended path having the physical nodes N1, N2, the physical link, and the layer components SV, VMM, and VM of the server 30 as nodes.

<Control device>
As illustrated in FIG. 3, the control device 10 according to the present embodiment includes an extended path setting unit 101, a node management unit 102, a database 103, a control unit 104, and a recording device (not shown). Resource information and node information are collected, and path and node settings are controlled to optimize network services in the network 20 based on the extended path.

  The extended path setting unit 101 refers to the database 103 and sets an extended path that connects nodes necessary for configuring a specific network service. The node management unit 102 manages each node constituting the extended path, that is, a physical resource and a virtual resource such as a physical switch, a virtual appliance, and a virtual machine. The database 103 stores network topology information about components and parameter information such as usage status and request conditions of each component.

  The control unit 104 obtains the monitoring information of the physical link and the physical node of the network 20 and each of the component nodes described above to configure the database 103, and the network including the extended path setting unit 101, the node management unit 102 and the database 103 described above Control service management operations. Here, the monitoring information of each component node is resource information indicating the state of each node, for example, load information such as communication volume, CPU usage rate, bandwidth occupancy rate, availability information indicating whether or not it is usable.

  The same functions as those of the extended path setting unit 101, the node management unit 102, and the control unit 104 can also be realized by executing a program stored in a memory (not shown) on a CPU (Central Processing Unit) or a computer. .

<Database>
As shown in FIG. 4, the database 103 stores information on components of each layer, that is, information on physical nodes and virtual nodes to be managed. The stored information includes network topology information (component and component information) and parameter information thereof. The parameter information is information indicating the usage state, availability of use, request conditions, and the like of each component, and can be updated each time monitoring information is acquired. An example of component information and parameter information corresponding to each component is as follows.

If the component is a physical link, the connection relationship is component information, and the resource information of the node (for example, communication band, used band, free band, etc.) is parameter information.
If the component is a physical switch, the node identification information is component information, and the resource information (for example, availability information) of the node is parameter information.
If the component is a server, the node identification information is component information, and the resource information of the node (for example, load information such as CPU usage rate, memory usage rate, or memory free capacity) is parameter information.
If the component is a virtual machine VM, the node identification information is component information, and the resource information (communication band, used band, free band, etc.) of the node is parameter information.
If the component is a virtual machine monitor (hypervisor), the node identification information is component information, and the resource information of the node (for example, load information such as CPU usage rate, memory usage rate, or memory free capacity) is parameter information. is there.
If the component is a virtual network function (VNF), the node identification information is component information, and resource information of the node (for example, required network communication bandwidth, required server or VM CPU request information, etc.) Parameter information.

<Server>
As illustrated in FIG. 5, the server 30 includes a control unit 131, a VMM 132, a node state monitor 133, and a storage device that provides a memory (not shown). The VMM 132 generates and manages a plurality of virtual machines VM1, VM2,... That can execute a plurality of VNFs. The node state monitor 133 monitors each component state (node state) in the VNF layer, the VM layer, the VMM layer, and the physical server layer, and stores the monitoring information. The control unit 131 transmits monitoring information to the control device 10 periodically or in response to a request from the control device 10. At that time, the monitoring information or the difference may be transmitted to the control device 10 only when some difference occurs in the monitoring information. It is also possible to detect whether there is a problem such as a failure of each node or a problem such as overload information in the server 30 and notify the monitoring information together with the detection information. However, in the system in which the server 30 transfers the received packet to the control apparatus 10 and the control apparatus 10 analyzes the packet to monitor the component state, the server 30 does not need the node state monitor 133.

  The same functions as those of the control unit 131, the VMM 132, the VM, the VNF, and the node state monitor 133 are realized by executing a program stored in a memory (not shown) on the CPU (Central Processing Unit) or the computer of the server 30. You can also.

1.2) Operation The control unit 104 of the control device 10 monitors and acquires the status of each of the layer components SV, VMM, VM and VNF of the server 30 as well as the physical nodes N1 and N2 and the physical link as monitoring information. The monitored information is stored in the database 103 in the format illustrated in FIG.

  The extended path setting unit 101 of the control device 10 refers to the database 103 and sets a path (extended path) that connects nodes necessary for configuring a specific network service. The node management unit 102 manages the physical resources and virtual resources of the extended path composed of the nodes in the plurality of layers with reference to the database 103. When the occurrence of a problem such as a failure or an overload state is detected in a certain node according to the management result of the node management unit 102, the control unit 104 can cope with each node so as to solve the problem of the node.

1.3) Effect As described above, according to the first embodiment of the present invention, the network service can be realized by the optimum route by managing the network service based on the extension path considering the lower layer resources of the VNF. . Furthermore, the control device 10 can change the setting of the node or the server so that the network service is optimized based on the monitoring information of each node in the extended path.

2. Second Embodiment In the network system according to the second embodiment of the present invention, in the same way as in the first embodiment described above, in addition to the management based on the extended path considering the lower layer resources of VNF, the problem occurring in a certain layer In order to solve this problem, it is possible to change the settings for the nodes in the same layer or in different layers.

  For example, when a problem such as a failure or an overload state occurs in an upper node (for example, a VNF layer node) constituting an extended path, a node lower than the layer of the node (for example, a VM layer node or a physical layer node) is controlled. Can solve the problem. Hereinafter, the second embodiment will be described in detail with reference to FIGS.

2.1) System Configuration As shown in FIG. 6, the network system according to the second embodiment of the present invention includes a control device 10 and a network 20 controlled by the control device 10, and the network 20 includes physical switches 21A, 21B and 21C, a server 31 disposed between the physical switches 21A and 21C, and a server 32 disposed between the physical switches 21C and 21B. In the network 20, it is assumed that the physical switch 21A is an edge switch.

  The server 31 has a multi-layer configuration including a physical layer component SV1, a VM management layer component VMM1, a VM layer component VM1, and a VNF layer component VNF1. That is, in the server 31, a plurality of virtual software (VMM1, VM1, VNF1) are hierarchically activated on the physical layer component SV1. Similarly, the server 32 has a multi-layer configuration including a physical layer component SV2, a VM management layer component VMM2, a VM layer component VM2, and a VNF layer component VNF2, on the physical layer component SV2. A plurality of virtual software (VMM2, VM2, and VNF2) are hierarchically activated.

  Each of the virtual network functions VNF1 and VNF2 in this example includes a physical switch 21A, a physical link, each layer component of the server 31 (SV1 / VMM1 / VM1 / VNF1), a physical link, a physical switch 21C, a physical link, and a server 32. Each of the layer components (SV2 / VMM2 / VM2 / VNF2) is treated as a node included in an extended path having a node.

  The control device 10 has the same configuration and function as the first embodiment shown in FIG. That is, the control unit 104 acquires monitoring information from each node and stores it in the database 103. When the node management unit 102 detects a problem in a certain node, the control unit 104 detects the occurrence of a problem in the same layer or another layer. Change the settings for the node.

  As shown in FIG. 7, the database 103 in this embodiment stores network topology information (components and component information) corresponding to the system configuration shown in FIG. 6 and its parameter information. The data structure is the same as that of the first embodiment shown in FIG.

  Also, the servers 31 and 32 have the same configuration as the server 30 shown in FIG.

2.2) Operation As shown in FIG. 8, the node state monitor 133 of the servers 31 and 32 monitors the state of each component (node) (operation S201), and transmits the monitoring information of each node to the control device 10. (Operation S202). As described above, the monitoring information or the difference may be transmitted to the control device 10 only when some difference occurs in the monitoring information, and the presence / absence of the problem of each node in the servers 31 and 32 may be determined. The monitoring information may be notified together with information indicating whether there is a problem.

  The control device 10 that has acquired the monitoring information updates the database 103 with the monitoring information, and when a certain problem such as a failure or an overload occurs in a certain node, determines a node setting for solving the problem ( Operation S203), setting processing is executed (Operation S204 or S205).

  For example, when the control device 10 notifies the physical switch of the setting information, processing such as packet discard, bandwidth limitation, and path switching is executed in the physical switch (Operation S204). Further, when the control device 10 notifies the server 31 or 32 of the setting information, processing such as new VNF activation and memory increase for VNF is executed in the server (operation S205). Hereinafter, a specific example of this embodiment will be described in detail using the system shown in FIG. 6 as an example.

<Example 2-1>
According to the embodiment 2-1 of the present invention, a problem that has occurred in a node in a certain layer is solved by an edge node that is upstream from the problem occurrence node. For example, if an overload state occurs in a VNF node of a certain server, the overload state can be eliminated by restricting traffic to the VNF at an edge node.

  As shown in FIG. 9, the control device 10 acquires monitoring information of each node from the network 20 (operation S202), and a problem such as a failure or an overload state has occurred in the VNF2 node based on the extended path as described above. Is detected. If this state remains, processing such as discarding is performed after the packet reaches the VNF2 node. Therefore, the control device 10 transmits a setting for solving a problem such as a failure or an overload state to the physical switch 21A serving as an edge node of traffic to the VNF 2 (operation S203). As a result, traffic control such as packet discard, bandwidth limitation, and path switching for the traffic to the VNF 2 is executed in the physical switch 21A (operation S204). Since the traffic is reduced at the edge switch 21A, the load on the VNF1 and VNF2 nodes can be reduced.

<Example 2-2>
According to the embodiment 2-2 of the present invention, when an overload problem occurs in a node of a certain layer, the overload problem is solved by newly starting a node having the same function in the layer.

  As shown in FIG. 10, the control device 10 acquires monitoring information of each node from the network 20 (operation S202), and detects that an overload problem has occurred in the VNF2 node based on the extended path as described above. Suppose that In this case, as long as the processing capacity of the VM2 node is not affected, the control device 10 instructs the server 32 that is starting the VNF2 to start a new VNF2 having the same function (operations S203 and S205). Thereby, the processing capability of the VNF2 node is increased, and the overload state of the VNF2 layer can be eliminated.

  Similarly, if the VM2 node is in an overload state, the control device 10 has a new function having the same function on the VMM2 layer with respect to the server 32 that is starting the VM2 as long as the processing capacity of the VMM2 node is not affected. By starting up VM2 and VNF2, the load on the original VM2 node can be reduced.

<Example 2-3>
According to Embodiment 2-3 of the present invention, when an overload problem occurs in a node of a certain layer, the processing capacity is improved by increasing the allocated memory of the node, and the overload problem is solved.

  As shown in FIG. 11, the control apparatus 10 acquires monitoring information of each node from the network 20 (operation S202), and detects that an overload problem has occurred in the VNF2 node based on the extended path as described above. Suppose that In this case, the control device 10 instructs the server 32 to increase the memory or capacity allocated to the VNF 2 as long as the processing capacity of the VM 2 node is not affected (operations S203 and S205). Thereby, the processing capability of the VNF2 node is increased, and the overload state of the VNF2 layer can be eliminated.

  Similarly, if the VM2 node is in an overload state, the control device 10 instructs to increase the memory or capacity allocated to the VM2 as long as the processing capacity of the VMM2 node is not affected (operations S203 and S205). As a result, the processing capacity of the VM2 node increases, and the overload state of the VM2 layer can be eliminated.

<Example 2-4>
The embodiment 2-4 of the present invention is a modification of the first embodiment described above, and solves a problem that has occurred in a node of a certain layer at the nearest physical node upstream of the problem occurrence node.

  In FIG. 12, when the occurrence of a failure or an overload state is detected in the VNF 2 node of the server 32 based on the extended path as described above, the control device 10 performs the following operation on the physical switch 21 </ b> C closest to the server 32. By limiting the traffic to the VNF 2, the overload state can be eliminated (operation S203).

3. Third Embodiment In the network system according to the third embodiment of the present invention, in the same way as in the first embodiment described above, in addition to the management based on the extended path considering the lower layer resources of VNF, the problem occurring in a certain layer In order to solve the problem, the network service path is changed so as to avoid the node by changing the setting of the physical switch on the upstream side of the node where the problem has occurred. Hereinafter, the third embodiment will be described in detail with reference to FIGS.

3.1) System Configuration As shown in FIG. 13, the network system according to the third embodiment of the present invention includes a control device 10 and a network 20 controlled by the control device 10, and the network 20 includes physical nodes N1 to N3, It is assumed that the currently used server 31 arranged between the physical nodes N1 and N2 and another server 33 arranged between the physical nodes N1 and N3 are included. The servers 31 and 33 have the same multi-layer configuration as in the above-described embodiment, and at least the VNF 1 node and the VM 1 node having the same function are activated in the VNF layer and the VM layer.

3.2) Operation In FIG. 13, it is assumed that the VNF1 traffic is processed by the VNF1 of the server 31, and a problem such as a failure or an overload state has occurred in the VNF1 node and its lower nodes (operation S301). The control device 10 acquires monitoring information of each node from the network 20 (operation S302), and as described above, a problem such as a failure or an overload state occurs in the VNF1 layer and its lower layers of the server 31 based on the extended path. Is detected. In this case, the control device 10 changes the setting of the upstream physical node N1 so as to change the traffic path to the VNF1 node to the server 33 (operation S303). As a result, the path switching for the traffic to the VNF 2 is executed in the physical node N1 (operation S304), and the same network service is provided through the server 33 in which the VNF 1 having the same function as the server 31 is activated.

  In order to generate the same VNF 1 and VM 1 as the active server 31 in the server 33, for example, a migration technique can be used. Further, switching of the traffic path in the physical node N1 may be realized by a load balancer of the physical node N1. In this case, a setting change instruction from the control device 10 is issued to the load balancer. Hereinafter, specific examples of the present embodiment will be described with reference to FIGS.

<Example 3-1>
As shown in FIG. 14, the network system according to the embodiment 3-1 of the present invention includes a control device 10 and a network 20 controlled by the control device 10, and the network 20 includes physical switches 21A, 21B, 21C, 21D, and 21E. A server 31 disposed between the physical switches 21A and 21C, a server 32 disposed between the physical switches 21C and 21B, a server 33 disposed between the physical switches 21A and 21D, and the physical switch 21D. And the server 34 disposed between 21E and 21E. Furthermore, in the network 20, it is assumed that the physical switch 21A is an edge switch, and the physical switch 21A is provided with a load balancer LB physically or virtually.

  The servers 31 to 34 have the same multi-layer configuration as in the above-described embodiment. In the servers 31 and 33, the VNF1 node and the VM1 node having the same function are activated at least in the VNF layer and the VM layer. In this case, it is assumed that the VNF 2 node and the VM 2 node having the same function are activated at least in the VNF layer and the VM layer.

  Each of the virtual network functions VNF1 and VNF2 in this example includes a physical switch 21A, a physical link, each layer component of the server 31 (SV1 / VMM1 / VM1 / VNF1), a physical link, a physical switch 21C, a physical link, and a server 32. Each of the layer components (SV2 / VMM2 / VM2 / VNF2) is treated as a node included in an extended path having a node. Similarly, each of the virtual network functions VNF1 and VNF2 after path switching includes a physical switch 21A, a physical link, each layer component of the server 33 (SV3 / VMM3 / VM1 / VNF1), a physical link, a physical switch 21D, a physical link, Each layer component (SV4 / VMM4 / VM2 / VNF2) of the server 34 is treated as a node included in an extended path having a node as a node.

  The control device 10 has the same configuration and function as the first embodiment shown in FIG. That is, the control unit 104 acquires monitoring information from each node of the network 20 and stores the monitoring information in the database 103. When the node management unit 102 detects a problem occurrence in a node, Change the path switching setting for the load balancer.

  In FIG. 14, it is assumed that the VNF2 traffic is processed by the VNF2 of the server 32, and a problem such as a failure or an overload state has occurred in the VNF2 node and its lower nodes (operation S301). The control device 10 acquires monitoring information of each node from the network 20 (operation S302), and generates a problem such as a failure or an overload state in the VNF2 layer and its lower layers of the server 32 based on the extended path as described above. Detect. In this case, the control device 10 changes the setting to the load balancer LB of the edge switch 21A so as to change all or part of the traffic to the VNF2 node to the path on the server 33 and 34 side (operation S303). . As a result, at the edge switch 21A, at least a part of the routes to the traffic to the VNF 2 is switched (operation S304), and a problem occurs through the servers 33 and 34 in which the VNF 1 and VNF 2 having the same function as the servers 31 and 32 are generated. The same network service as before can be configured.

<Example 3-2>
As shown in FIG. 15, the network system according to the embodiment 3-2 of the present invention has the same configuration as that of the embodiment 3-1 described above. However, the physical switch 21 other than the edge switch is physically or virtually arranged. It is assumed that a load balancer LB is provided. In addition, the servers 31 to 34 have the same multi-layer configuration as the above-described embodiment, and in the servers 32 and 34, at least the VNF layer and the VM layer have the same function of the VNF 2 node and the VM 2 node. .

  Each of the virtual network functions VNF1 and VNF2 in this example includes a physical switch 21A, a physical link, each layer component of the server 31 (SV1 / VMM1 / VM1 / VNF1), a physical link, a physical switch 21C, a physical link, and a server 32. Each of the layer components (SV2 / VMM2 / VM2 / VNF2) is treated as a node included in an extended path having a node. Similarly, each of the virtual network functions VNF1 and VNF2 after path switching includes a physical switch 21A, a physical link, each layer component of the server 31 (SV1 / VMM1 / VM1 / VNF1), a physical link, a physical switch 21C, a physical link, Each layer component (SV4 / VMM4 / VM2 / VNF2) of the server 34 is treated as a node included in an extended path having a node as a node.

  The control device 10 has the same configuration and function as the first embodiment shown in FIG. That is, the control unit 104 acquires monitoring information from each node of the network 20 and stores it in the database 103. When the node management unit 102 detects a problem occurrence in a node, the control unit 104 Change the path switching setting for the load balancer of the physical switch in the previous stage.

  In FIG. 15, it is assumed that the VNF2 traffic is processed by the VNF2 of the server 32, and a problem such as a failure or an overload state has occurred in the VNF2 node and its lower nodes (operation S301). The control device 10 acquires monitoring information of each node from the network 20 (operation S302), and generates a problem such as a failure or an overload state in the VNF2 layer and its lower layers of the server 32 based on the extended path as described above. Detect. In this case, the control device 10 changes the setting to the load balancer LB of the physical switch 21C located in the preceding stage of the server 32 so that all or part of the traffic to the VNF2 node is changed to the path on the server 34 side. Perform (operation S303). Thereby, in the physical switch 21C, path switching for all or part of the traffic to the VNF 2 is executed (operation S304), and before the problem occurs through the servers 33 and 34 in which the VNF 1 and VNF 2 having the same function as the server 32 are generated. The same network service can be configured.

4). Fourth Embodiment A system according to a fourth embodiment of the present invention is applicable to a 3GPP system.

  As shown in FIG. 16, according to the present embodiment, the control device 10 described above corresponds to an MME (Mobile Management Entity), and the VNF described above corresponds to a P-GW (Packet Data Network Gateway). That is, as shown in the figure, the servers 31 and 32 generate a P-GW function in the VNF layer, and the connection of nodes in each layer of the P-GW / VM / VMM / SV constitutes an extended path.

  In FIG. 16, the user terminal UE is wirelessly connected to the base station eNB, and tunnels (GTP (GPRS (GPRS)) are set between the base station eNB and the S-GW (Serving Gateway) and between the S-GW and the P-GW. Packet communication can be performed with an external network (packet data network) through a tunneling protocol. As described above, the MME control device 10 collects monitoring information from the network system and stores it in the database 103. Based on the extended path, a problem such as a failure or an overload state is detected in a node of a certain layer. Then, it instructs the S-GW to change the tunnel. Hereinafter, a case where a problem such as a failure or an overload state occurs in the currently used P-GW (1) and the traffic path of the user terminal UE is changed will be described.

  In FIG. 17, in the state where the tunnel (1) is set between the S-GW and the P-GW (1) and the server 31 provides the P-GW (1) as the virtual network function VNF, the P- It is assumed that a failure or an overload state is detected in the GW (1) and its lower layer node (operation S301), and failure / overload information is notified to the MME (operation S302).

  When the MME receives the failure / overload information from the server 31, the MME refers to the database 103 of the control device 10 and executes P-GW relocation (operation S303). The MME notifies the S-GW of the P-GW relocation setting information, and the S-GW changes the tunnel TEID (Tunnel Endpoint Identifier) or IP address from the P-GW (1) of the server 31 to the P-GW of the server 32 accordingly. Change to (2) (operation S304). Thus, the tunnel (2) between the S-GW and the P-GW (2) is set, and the traffic of the user terminal UE is changed to a path through the P-GW (2).

  As described above, according to the present embodiment, in the 3GPP system, it is possible to perform management based on the extended path considering the lower layer resources of VNF (P-GW). If a problem occurs in a certain layer, the virtual network function path is avoided so as to avoid the server 31 by changing the tunnel setting for the switch (S-GW) in the previous stage of the server 31 in which the problem has occurred. Can be changed.

5. Fifth Embodiment According to the fifth embodiment of the present invention, the operation policy is set in the control device that controls the network 20, and the control device is the same as that in the first to fourth embodiments described above according to the operation policy. Perform network control. For example, if a node of a predetermined layer in the extended path is a load greater than or equal to a predetermined value, an operation policy is set in the control device to execute processing such as bandwidth limitation of traffic passing through the node and route change to avoid the node. it can.

5.1) System Configuration As shown in FIG. 18, in the network system according to the fifth embodiment of the present invention, the operation management apparatus 40 sets an operation policy for the control apparatus 11, and the control apparatus 11 performs networking according to the operation policy. 20 is controlled. The control device 11 has basically the same configuration and function as the control device 10 shown in FIG. 3, but the operation policy is stored in a storage device (not shown), and the control unit 104 executes control with reference to the operation policy. Is different from the first to fourth embodiments. Since other configurations and functions are the same as those in the first to fourth embodiments described above, the same reference numerals as those in FIG. The control device 11 may be provided in the operation management device 40.

  In FIG. 18, when the operator sets an operation policy in the operation management apparatus 40, the control apparatus 11 controls the network 20 according to the operation policy set in the operation management apparatus 40. As described above, the control device 11 updates the database 103 by collecting monitoring information from each node of the network 20. When it is detected according to the operation policy that a problem such as a failure or an overload state has occurred in a certain node, the control device 11 sets a process for solving the problem for a node other than the node in which the problem has occurred. The node set by the control device 11 solves the problem by executing the processing set for the corresponding packet.

Examples of operation policy control target parameters are as follows.
-VNF, VM, VMM, and physical server availability (CPU and / or memory availability, usage, usage, power consumption, etc.).
・ Communication bandwidth, usage bandwidth, usage rate, traffic volume, etc. of physical links and virtual links.
-Network service communication bandwidth, bandwidth used, usage rate, traffic volume, etc.
When these parameters exceed or fall below a predetermined threshold, the control device 11 determines that a problem has occurred in the node and executes processing for solving the problem on the network 20.

5.2) Operation Management Device In FIG. 19, the operation management device 40 includes a virtual link setting unit 401, a request condition and policy setting unit 402, an interface 403, and a user interface 404. Part. The user interface 404 includes an information input unit such as a keyboard and an information display unit such as a monitor, and virtual link setting by the operator, request condition setting and operation policy setting, and visualization of expansion node arrangement on the network determined by the control device 11 , And so on.

  The virtual link setting unit 401 generates a virtual link from a network service (also referred to as “service chain” in the present embodiment) input by the operator through the user interface 404. The request condition and policy setting unit 402 includes a request condition setting unit 405 and a policy setting unit 406, and generates a request condition and an operation policy for configuring a service chain based on an operator input. Hereinafter, the operation of the operation management apparatus 40 according to the present embodiment will be described with reference to FIGS.

4.3) Visualization of Extended Path As illustrated in FIG. 20, the operation management screen 500 displayed on the user interface 404 is divided into an input window 500a and a network display window 500b. The input window 500a displays a service chain input field 501, a plurality of request condition input fields 502, and an operation policy input field 503, and the network display window 500b displays the physical topology and virtual nodes of the network to be managed. Is displayed. For example, the operation management apparatus 40 acquires topology information and virtual node information from the database 103 of the control apparatus 11, and displays the physical configuration of the network and the configuration of the virtual node based on the acquired information.

  In FIG. 20, in the network topology illustrated in the network display window 500b, each of the network nodes A and B is connected to the servers A, B, and C by physical links. Each server can arrange three virtual network functions VNF_A, VNF_B, and VNF_C, and VMs and VMMs of lower layers of each VNF are displayed as virtual nodes. Hereinafter, in order to simplify the description, it is assumed that VNF_A is activated on the server (A) and the same VM (B) and VNF_B are activated on the servers (B) and (C), respectively.

As shown in FIG. 21, it is assumed that the operator inputs the following service chain in the service chain input field 501 through the user interface 404:
A Ｖ VNF_A ⇔ VNF_B Ｂ B.
Further, it is assumed that the communication bandwidth required for the network, the CPU / memory capacity required for the server and the VM are respectively input to the request condition input field 402, and the following operation policy is input to the operation policy input field 503. : “If the CPU usage rate of the server is greater than 80%, the service chain setting is changed or the route is changed.”

The request condition and policy setting unit 402 transmits the request condition and the operation policy to the control device 11 and sets them. Based on the request condition and operation policy set by the operation management device 40, the control device 11 generates, for example, the following extended path virtual links VL1, VL2, and VL3 and transmits them to the operation management device 40.
VL1: Start point = NW node (A); End point = VNF_A
VL2: start point = VNF_A; end point = VNF_B (server B)
VL3: Start point = VNF_B (server B); End point = NW node (B)

  As shown in FIG. 21, the operation management apparatus 40 displays the virtual links VL1, VL2, and VL3 of the extended path on the network display window 500b. In this state, it is assumed that the VNF_B node is overloaded and the CPU usage rate of the server (B) exceeds 80%.

  When the control device 11 detects that the CPU usage rate of the server (B) exceeds 80% based on the monitoring information from the VNF_B node, the VM (B) node, the VMM (B) node, and the physical server (B) node. The failure management information of the VNF_B node is notified to the operation management device 40, and the operation management device 40 displays the failure occurrence of the VNF_B node in the network display window 500b.

Subsequently, the control device 11 changes the switch setting of the node (A) in the previous stage of the server (B) while referring to the database 103, and for example, as shown in FIG. VL1, VL4, and VL5 are generated and transmitted to the operation management apparatus 40.
VL1: Start point = NW node (A); End point = VNF_A
VL2: start point = VNF_A; end point = VNF_B (server C)
VL3: Start point = VNF_B (server C); End point = NW node (B)

  Thus, even if a failure occurs in the VNF_B node on the server (B) and its lower nodes, the problem of the extended path route is solved by changing the setting of the node (A) in the previous stage of the server (B). Can be changed as follows.

  Note that the same functions as the virtual link setting unit 401 and the request condition and policy setting unit 402 of the operation management apparatus 40 have a processor (CPU: Central Processing Unit) that executes a program, a ROM (Read Only Memory) that holds a program, and It can also be realized by a storage device such as a RAM (Random Access Memory) that holds information.

6). Sixth Embodiment A control device according to a sixth embodiment of the present invention determines a network service route in the network based on the extended path according to each of the above-described embodiments, and the communication flow is transferred along the route. Control physical switches and servers. Hereinafter, the sixth embodiment will be described in detail with reference to FIGS. 23 to 27.

6.1) System Configuration As shown in FIG. 23, in the control device 12 according to the sixth embodiment of the present invention, the function of the switch control unit 105 is added to the control unit 104 of the control device 11 shown in FIG. Since other basic configurations and functions are the same as those in the above embodiment, the description thereof is omitted.

  As illustrated in FIG. 24, the physical switch 21 a that is a network node in the sixth embodiment includes a data transfer unit 211, a path information database 212, and an interface 213 for communicating with the control device 12. The physical switch 21 a receives data including a condition for identifying a flow belonging to the network service and a packet transfer destination of the flow from the control device 12 and stores the data in the route information database 212. The data transfer unit 211 identifies a packet of a flow belonging to the network service according to the conditions and transfer destination information stored in the route information database 212 and transfers the packet to a corresponding transfer destination (node or server).

  As illustrated in FIG. 25, the server 30a according to the sixth embodiment switches a communication flow between a plurality of virtual machines VM for executing a plurality of VNFs and a plurality of virtual machines VM and adjacent network nodes. Virtual switch 310 to perform.

  The virtual switch 310 can be regarded as one switch of the network topology in the present embodiment, and includes a data transfer unit 311, a path information database 312, and an interface 313 for communicating with the control device 12. The virtual switch 310 receives data including a condition for identifying a flow belonging to the network service and a packet transfer destination of the flow from the control device 12 and stores the data in the path information database 312. The data transfer unit 311 identifies whether a packet received from an adjacent network server or one virtual machine VM is a flow belonging to a network service according to the conditions and transfer destination information stored in the path information database 312. Transfer to the corresponding transfer destination (virtual machine VM or network server). Therefore, if a packet is transferred between virtual machines VMs in one server, a network service can be configured without transferring it to an external network node.

  As described above, the control device 12, the physical switch 21a, and the server 30a include a processor (CPU: Central Processing Unit) that executes a program for controlling each operation, a ROM (Read Only Memory) that holds a program, It can also be realized by a storage device such as a RAM (Random Access Memory) that holds information.

  As described above, a centralized control type network architecture system in which the control device 12 sets information including a condition for identifying a flow belonging to a network service and a packet transfer destination of the flow is, for example, an open flow (OpenFlow). It can be realized by I2RS (Interface to the Routing System), ForCES (Forwarding and Control Element Separation) and the like. Hereinafter, an example of using the OpenFlow as an implementation example of the control device 12 and the physical switch 21a / server 30a is shown.

6.2) Open flow Open flow recognizes communication as an end-to-end flow, and performs path control, failure recovery, load balancing, etc. in units of flow. Here, the flow is, for example, a series of communication packet groups having predetermined attributes, and in this embodiment, refers to a flow belonging to a set network service. Hereinafter, OpenFlow will be described using the network shown in FIG. 26 as an example.

  In FIG. 26, OpenFlow Switches 601, 602, and 603 are network switches adopting the OpenFlow technology, and correspond to the physical switch 21 a or the virtual switch 310 of the server 30 a in this embodiment. An open flow controller 604 is an information processing apparatus that controls the open flow switches 601, 602, and 603, and corresponds to the control apparatus 12 in this embodiment.

  Each OpenFlow switch 601, 602, 603 is configured with a secure channel (Secure Channel) 605 between the OpenFlow controller 604 and communicates with the OpenFlow controller 604 through the secure channel 605. The OpenFlow controller 604 sets a flow table (Flow Table) 606 of the OpenFlow switches 601, 602, and 603 via the secure channel 605. The secure channel 605 is a communication path between the OpenFlow switches 601, 602, and 603 and the controller 604, and has been treated to prevent eavesdropping or falsification of communication.

  FIG. 27 shows a configuration example of each entry (flow entry) in the flow table 606 provided in each open flow switch 601, 602, 603. The flow entry includes a match field (Match Fields) that defines a matching rule for matching with information (for example, destination IP address, VLAN ID, etc.) included in the header of the packet received by the switch, and statistical information for each packet flow. Field (Counters), and an action field (Action) that defines how to process a packet that matches the matching rule.

  When the open flow switches 601, 602, and 603 receive the packet, they refer to the flow table 606. The open flow switches 601, 602, and 603 search for a flow entry that matches the header information of the received packet. When an entry that matches the header information of the received packet is found, the OpenFlow switches 601, 602, and 603 process the received packet according to the processing method defined in the action field of the found entry. The processing method is defined, for example, as “forwarding a received packet from a predetermined port”, “discarding the received packet”, or “rewriting part of the header of the received packet and transferring to a predetermined port”. Has been.

  On the other hand, when no entry matching the header information of the received packet is found, the OpenFlow switches 601, 602, 603, for example, transfer the received packet to the OpenFlow controller 604 through the secure channel 605, and Requests the setting of a flow entry that defines how to process received packets.

  The open flow controller 604 determines a received packet processing method, and sets a flow entry including the determined processing method in the flow table 606. Thereafter, the OpenFlow switches 601, 602, and 603 process subsequent packets belonging to the same flow as the received packet according to the set flow entry.

6.3) Effect According to the sixth embodiment of the present invention, the network service path is determined based on the extended path as in the first to fifth embodiments, and the communication flow is transferred along the path. Thus, the network node or server is controlled as described above, so that an optimal VNF arrangement can be made in consideration of the communication characteristics and communication performance of the underlay network.

  In particular, by configuring a plurality of virtual machines that respectively execute a plurality of VNFs in the server 30a so that they can be switched by a virtual switch, the path switching of the network node and the switching of the virtual machines in the server can be controlled equally. For example, collective control using open flow technology becomes possible.

  The present invention can be used in a system in which a virtual network function (VNF) is arranged on a network.

10, 11, 12 Control device 20 Network 21, 21A-21E Physical switch 30, 30a, 31-34 Server 40 Operation management device 101 Extended path setting unit 102 Node management unit 104 Control unit 105 Switch control unit 131 Control unit 132 VMM
133 Node state monitor 211 Data transfer unit 212 Path information database 213 Interface 401 Virtual link setting unit 402 Request condition and policy setting unit 403 Interface 404 User interface 405 Request condition setting unit 406 Policy setting unit

Claims (38)

A device for controlling a network,
Management that monitors the status of the virtual components on the physical server included in the network and the physical components of the network, and manages at least one virtual network function operating on the physical server based on network topology information related to these components Means,
Storage means for storing an operation policy in which control conditions are set;
When it is determined that a problem has occurred in at least one component in at least one layer operating on the physical server in accordance with the control conditions of the operation policy, the problem is determined for at least one of the virtual component and the physical component. Control means for executing setting control to be solved;
A network control apparatus comprising:   The network control apparatus according to claim 1, wherein the management unit monitors a state of a virtual component for each layer on the physical server.   The network control apparatus according to claim 1, wherein the control condition is a condition for determining whether or not a load parameter of a component in the network exceeds a predetermined value.   The network control apparatus according to claim 1, wherein the control unit performs the setting control on a component in the same layer as the layer in which the problem has occurred or in a different layer. .   When the problem occurs in any layer of the physical server, the control unit controls the traffic to the component in which the problem has occurred with respect to the component located upstream from the physical server. The network control apparatus according to claim 1, wherein setting control is executed.   The network control apparatus according to claim 5, wherein a component located upstream from the physical server executes packet discard, bandwidth limitation, and / or path switching for the traffic.   The network control device according to claim 5 or 6, wherein the component located upstream from the physical server is a physical switch located in a preceding stage of the physical server or a physical switch located at an edge of the network.   The component located upstream from the physical server is provided with a load balancer, and the control unit executes the setting control for the load balancer. The network control device described.   The said control means performs the said setting control so that the processing capability of the component of the layer in which the said problem generate | occur | produces when the said problem generate | occur | produces in any layer of the said physical server. The network control device according to any one of 1-4.   The network control device according to claim 9, wherein a component having the same function as that of the layer in which the problem has occurred is newly activated.   The network control apparatus according to claim 9, wherein an allocation resource for a component of a layer in which the problem has occurred is increased.   The network control apparatus according to claim 1, wherein the network topology information is information related to an extended path including a virtual component of the virtual network function and a virtual component of a lower layer thereof.   13. The network control apparatus according to claim 12, wherein the management unit manages a network service including the virtual network function based on the extended path. A method of controlling a network,
At least one virtual network function in which management means monitors the status of the virtual components on the physical server included in the network and the physical components of the network, and operates on the physical server based on network topology information related to these components Manage
Store the operation policy in which the control conditions are set in the storage means,
When it is determined that a problem has occurred in at least one component in at least one layer operating on the physical server in accordance with the control condition of the operation policy, the control unit applies to at least one of the virtual component and the physical component To execute setting control to solve the above problem,
A network control method.   The network control method according to claim 14, wherein the management unit monitors a state of a virtual component for each layer on the physical server.   16. The network control method according to claim 14, wherein the control condition is a condition for determining whether or not a load parameter of a component in the network exceeds a predetermined value.   The network control method according to claim 16, wherein the control unit performs the setting control on a component in a layer that is the same as or different from the layer in which the problem has occurred.   When the problem occurs in any layer of the physical server, the control unit controls the traffic to the component in which the problem has occurred with respect to the component located upstream from the physical server. 18. The network control method according to claim 16, wherein setting control is executed.   19. The network control method according to claim 18, wherein a component located upstream from the physical server executes packet discard, bandwidth limitation and / or path switching for the traffic.   The network control method according to claim 18 or 19, wherein the component located upstream from the physical server is a physical switch located in a preceding stage of the physical server or a physical switch located at an edge of the network.   The component located upstream from the physical server is provided with a load balancer, and the control unit executes the setting control for the load balancer. The network control method described.   The said control means performs the said setting control so that the processing capability of the component of the layer in which the said problem generate | occur | produces when the said problem generate | occur | produces in any layer of the said physical server. The network control method according to 16 or 17.   23. The network control method according to claim 22, wherein a component having the same function as that of the layer in which the problem has occurred is newly activated.   23. The network control method according to claim 22, wherein an allocation resource for a component of a layer in which the problem occurs is increased.   The network control method according to any one of claims 16 to 24, wherein the network topology information is information related to an extended path composed of a virtual component of the virtual network function and a virtual component of a lower layer thereof.   26. The network control method according to claim 25, wherein the management unit manages a network service including the virtual network function based on the extended path. A control device for controlling the network;
An operation management device for managing the network via the control device;
Have
The operation management device sets an operation policy in the control device,
The control device is
Management that monitors the status of the virtual components on the physical server included in the network and the physical components of the network, and manages at least one virtual network function operating on the physical server based on network topology information related to these components Means,
When it is determined that a problem has occurred in at least one component in at least one layer operating on the physical server in accordance with the control conditions of the operation policy, the problem is determined for at least one of the virtual component and the physical component. Control means for executing setting control to be solved;
A network system comprising:   28. The network system according to claim 27, wherein the management unit monitors a state of a virtual component for each layer on the physical server.   29. The network system according to claim 27 or 28, wherein the control condition is a condition for determining whether or not a load parameter of a component in the network exceeds a predetermined value.   30. The network system according to claim 29, wherein the control unit executes the setting control for components in the same layer as the layer in which the problem has occurred or in a different layer.   When the problem occurs in any layer of the physical server, the control unit controls the traffic to the component in which the problem has occurred with respect to the component located upstream from the physical server. The network system according to claim 29 or 30, wherein setting control is executed.   The said control means performs the said setting control so that the processing capability of the component of the layer in which the said problem generate | occur | produces, when the said problem generate | occur | produces in any layer of the said physical server. The network system according to 29 or 30.   The network system according to any one of claims 29 to 32, wherein the network topology information is information related to an extended path including a virtual component of the virtual network function and a virtual component of a lower layer thereof.   The network system according to claim 33, wherein the management unit manages a network service including the virtual network function based on the extended path. A control device that controls the network monitors at least one of the virtual components on the physical server included in the network and the physical components of the network, and operates on the physical server based on network topology information regarding these components. When it is determined that a problem has occurred in at least one component in at least one layer that operates on the physical server according to the control condition of the operation policy, and manages at least one of the virtual component and the physical component An operation management apparatus that sets an operation policy in the control apparatus and manages the network via the control apparatus in a system that executes setting control that solves the problem with respect to one side,
Means for setting a requirement of the virtual component on the physical server and a physical component of the network and the operation policy in the control device;
Means for displaying, on a display unit, an extended path composed of the virtual network function, the virtual component, and the physical component set by the control device;
An operation management apparatus comprising:   The virtual device for each layer on the physical server and the requirements for the physical component of the network and the operation policy are set in the control device, and the control device monitors the status of the virtual component for each layer on the physical server. The operation management apparatus according to claim 35, wherein:   37. The operation management apparatus according to claim 35, wherein the control condition is a condition for determining whether or not a load parameter of a component in the network exceeds a predetermined value. A program for causing a computer to function as a network control device,
A function of monitoring a virtual component on a physical server included in a network and a physical component of the network, and managing at least one virtual network function operating on the physical server based on network topology information regarding these components;
A function for storing the operation policy in which the control condition is set in the storage means;
When it is determined that a problem has occurred in at least one component in at least one layer operating on the physical server in accordance with the control conditions of the operation policy, the problem is determined for at least one of the virtual component and the physical component. A function to execute the setting control to be solved;
Is implemented on the computer.

Images