JP2017108264A - MAC address table update system and MAC address table update method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To suppress load increase of a CPU and increase of broadcast traffic in MAC address table update of switches.SOLUTION: Upon receiving a frame from a newly accommodated virtual machine, a ToR switch 20a (first switch) of a MAC address table update system 1 transmits a MAC address table update notice to an SDN controller 10 and while using the received MAC address table update notice and topology information, the SDN controller 10 creates new MAC entries suitable for the ToR switch 20a and a high-order switch 20A (second switch) within an L2 domain. The SDN controller 10 then refers to MAC address tables of the ToR switch 20a and the high-order switch 20A, creates and transmits change information of the MAC address tables including addition instructions of the new MAC entries.SELECTED DRAWING: Figure 1

Description

  The present invention relates to a MAC address table updating system and a MAC address table updating method for updating a MAC (Media Access Control) address table of each switch in an L2 (Layer 2) network.

  Resource virtualization has been promoted in order to effectively use physical resources and improve operability in data centers. Resource virtualization means that a physical CPU (Central Processing Unit), a memory, and the like are logically divided and provided for each service or user. Resource virtualization has the advantage of improving the degree of freedom and flexibility of the system. However, as the system scales up, the conventional technology causes the following problems.

  By realizing server virtualization in the data center, a virtual machine can freely move between physical servers. Further, by performing live migration, maintenance work and the like can be executed without stopping the system. In order to realize free movement of a virtual machine such as live migration, it is necessary that the source server and the destination server exist on the same L2 network. When the network becomes large, the broadcast domain also increases in proportion, and the ToR (Top of Rack) switch that accommodates the physical server needs to learn the MAC addresses of all the nodes connected on the L2 network. Therefore, the MAC address table is enlarged. That is, as shown in FIG. 6, a different MAC address is set for each virtual machine. The ToR switch (hereinafter referred to as “ToR SW” in each figure) forwards the frame to the physical NIC of the physical server (hereinafter referred to as “server” in each figure). Rather than forwarding to each virtual machine. Therefore, as the number of virtual machines on the physical server increases, the MAC address table (hereinafter sometimes referred to as “MAC table” in each figure) becomes larger. In this MAC address table, the transmission source MAC address of the received data and the port number of the received port are stored as entries (MAC entries).

When the MAC address table of the ToR switch is enlarged, specifically, the following problem occurs.
(Problem 1) Increase in CPU load due to frequent MAC address table updates (Problem 2) Increase in broadcast traffic

(Problem 1) “Increase in CPU load due to frequent MAC address table update” will be described.
In updating the MAC address table, when each switch receives a frame, it is necessary to search all the entries in its own MAC address table and confirm the presence or absence of the source MAC address of the frame. Therefore, when the MAC address table is frequently updated, the load on the CPU of each switch increases.

(Problem 2) “Increase in broadcast traffic” will be described.
When a virtual machine is moved to a physical server under a switch (ToR switch) and the MAC address table of the switch is updated, the virtual machine sends RARP (Reverse Address Resolution Protocol) to the L2 broadcast domain. Then, the MAC address table of the upper switch is updated. This process increases broadcast traffic and compresses the bandwidth.

  For example, as illustrated in FIG. 7, when the virtual machine X on the physical server “2” moves to the physical server “1”, the virtual machine X transmits RARP to the L2 broadcast domain. Thus, first, the ToR switch “1” that accommodates the virtual machine X receives the RAPP and updates the MAC address table. Then, the ToR switch “1” transmits (transfers) the RAPP to the upper switch of the L2 broadcast domain (hereinafter simply referred to as “SW” in each figure. In FIG. 7, SW “1” and SW “2”). ) To update the MAC address table. Subsequently, the MAC address table of other ToR switches (ToR switch “2” and ToR switch “3” in FIG. 7) connected to the upper switch is updated. When the MAC address table update process increases, the broadcast traffic increases accordingly, and the band is compressed.

The following two methods are listed as typical conventional methods for solving the above problems.
(Method 1) Introduction of high-performance switch An expensive switch having a large MAC address table capacity and high table processing capacity is introduced.
(Method 2) OpenFlow Control by SDN (Software Defined Network) Controller When a virtual machine moves, flow control in OpenFlow is executed (see Non-Patent Document 1).

FIG. 8 is a diagram for explaining flow control by OpenFlow when a virtual machine moves.
As shown in FIG. 8, when the virtual machine X moves from the server “2” to the server “1” (step S1), the virtual machine X transmits a frame to the ToR switch “1” that accommodates itself (step S1). S2). At this time, the RARP is not transmitted from the virtual machine X to the L2 broadcast domain. The ToR switch “1” updates its own MAC address table (step S3), and transmits the update to the SDN controller (step S4). Update information of the MAC address table transmitted from the ToR switch “1” includes, for example, “moving MAC address: XX”, “VLAN ID: 1”, “movement source port numbers: a1, a2”, “movement destination port number: a3”. It is.

The SDN controller that has received the MAC address table update information sets and transmits a flow rule to each upper switch (step S5). For example, for the upper switch “1”, the flow rule is “Match (condition): destination MAC = XX of flow” “Action: (output frame of destination MAC = XX)” is connected to the ToR switch “1”. Port: designated to A1 "is transmitted. For the upper switch “2”, the flow rule “Match (condition): flow destination MAC = XX” and “Action: output port (for frame of destination MAC = XX)” is connected to the ToR switch “1”. Port: designated to B1 "is transmitted.
By doing so, the flow until the MAC address table is updated in each switch is appropriately controlled.

"OpenFlow", Japan Network Information Center, Newsletter No.52, November 2012, [online], [Search on November 27, 2015], Internet <URL: https: //www.nic. ad.jp/en/newsletter/No52/0800.html>

  However, in the conventional (method 1) for solving the above-described problem, the introduction cost increases because the switch is expensive. In (Method 2), it is essential that the switch configuring the network is an OpenFlow compatible switch (OpenFlow switch) and the SDN controller is an OpenFlow compatible controller (OpenFlow controller). OpenFlow allows flow control, but cannot directly update the MAC address table. Therefore, in the case of following the movement of the virtual machine by autonomously updating the MAC address table, it is necessary to update the MAC address table as before, and the fundamental problem is not solved.

  The present invention has been made in view of such a background, and the present invention provides a MAC address table update system and a MAC address table that suppress an increase in CPU load and broadcast traffic when updating the MAC address table of each switch. It is an object to provide an update method.

  In order to solve the above-described problem, the invention according to claim 1 includes a first switch that accommodates the virtual machine by being directly connected to one or more virtual machines on a physical server, and one or more A second switch connected to the first switch for transferring a frame, and connected to each of the one or more first switches and the one or more second switches in an L2 (Layer 2) domain A SDN (Software Defined Network) controller, and when the first switch receives a frame from a newly accommodated virtual machine, the MAC address of the virtual machine is used. A MAC table update unit that updates its own MAC address table, and updates the MAC address table to the SDN controller. MAC table update notification unit that transmits as a MAC address table update notification, and MAC table information notification unit that returns MAC entry information stored in its own MAC address table upon receiving a MAC address table reference request from the SDN controller A MAC table changing unit that receives MAC address table change information from the SDN controller and changes a MAC entry stored in its own MAC address table to a new MAC entry, and the second switch Includes the MAC table information notification unit and the MAC table change unit, and the SDN controller receives the updated MAC address and its port information included in the received MAC address table update notification, and the L2 Domei And the topology information indicating the connection relationship between each of the first switch and the second switch, and for each of the first switch and the second switch, the updated MAC address and its port A MAC table entry creation unit that creates the new MAC entry corresponding to the information, and the MAC address table reference request by referring to the MAC address table of each of the first switch and the second switch. A deletion instruction of a MAC entry including the same MAC address as the new MAC entry stored in the MAC address table in each of the first switch and the second switch; and The MAC address table indicating an additional instruction And a MAC table setting instructing unit for transmitting the change information on the MAC address table.

  According to a second aspect of the present invention, there is provided a first switch that accommodates the virtual machine by being directly connected to one or more virtual machines on a physical server, and the one or more first switches. A MAC address comprising: a second switch connected to transfer a frame; and an SDN controller connected to each of the one or more first switches and the one or more second switches in an L2 domain A method of updating a MAC address of a table updating system, wherein when the first switch receives a frame from a newly accommodated virtual machine, the MAC address table of the virtual machine is updated using the MAC address of the virtual machine. The MAC address table update is sent to the SDN controller as a MAC address table update notification. And the SDN controller includes information on the updated MAC address and its port included in the received MAC address table update notification, the first switch in the L2 domain, and the second And creating new MAC entries corresponding to the updated MAC address and the information of the port for each of the first switch and the second switch using topology information indicating the connection relationship of each of the switches. A MAC address table reference request for requesting reference to the MAC address table to each of the first switch and the second switch, and information on the MAC entry stored in the MAC address table Obtaining the first switch And the MAC address table of each of the second switches, and each of the first switch and the second switch includes the same MAC address as the new MAC entry stored in the MAC address table. Transmitting a MAC address table change information indicating an instruction to delete a MAC entry and an instruction to add the new MAC entry, and the first switch and the second switch have the SDN The MAC address table update method is characterized in that the MAC address table change information is received from the controller, and the step of changing the MAC entry stored in its own MAC address table to the new MAC entry is executed. .

As described above, in the MAC address table update system of the present invention, the MAC address table is updated only by the first switch (ToR switch) that has received a frame from the accommodated virtual machine. Then, other first switches and second switches (higher switches) in the L2 domain need only change the MAC entry using the change information of the MAC address table generated by the SDN controller.
Therefore, each switch (the first switch and the second switch) does not need to update the MAC address table as in the prior art, and can suppress an increase in the processing load on the CPU. Further, since it is not necessary to transmit RARP to the L2 broadcast domain, it is possible to suppress an increase in broadcast traffic. Therefore, even if the system is scaled up, it is not necessary to introduce an expensive switch with a high processing capacity, and a network can be configured with inexpensive switches.

  According to the present invention, it is possible to provide a MAC address table update system and a MAC address table update method that suppress an increase in CPU load and broadcast traffic when updating the MAC address table of each switch.

It is a figure which shows the outline | summary of the whole structure and process of the MAC address table update system which concerns on this embodiment. It is a functional block diagram which shows the structure of the SDN controller which concerns on this embodiment. It is a figure which shows the data structural example of physical topology DB which concerns on this embodiment. It is a functional block diagram which shows the structure of the switch which concerns on this embodiment. It is a flowchart which shows the flow of the process which the MAC address table update system which concerns on this embodiment performs. It is a figure for demonstrating the problem in which a MAC address table is enlarged in a prior art. It is a figure for demonstrating the update method of a MAC address table in a prior art. It is a figure for demonstrating the flow control by OpenFlow when a virtual machine moves.

  Next, the MAC address table update system 1 and the MAC address table update method in a mode for carrying out the present invention (hereinafter referred to as “the present embodiment”) will be described.

<Outline of the invention>
First, an overall configuration of the MAC address table update system 1 and an outline of processing will be described.
FIG. 1 is a diagram showing an overview of the overall configuration and processing of the MAC address table update system 1 according to the present embodiment.
As shown in FIG. 1, the MAC address table update system 1 includes a plurality of ToR switches 20a (first switches) (communication connected to each physical server 30 in which a virtual machine is set) (in FIG. 1, ToR SW “ 1 ”,“ 2 ”,“ 3 ”) and a plurality of upper switches 20A (second switches) (in FIG. 1, SW“ 1 ”,“ 2 ”) connected to each ToR switch 20a, The SDN controller 10 is connected to each ToR switch 20a and each upper switch 20A and is disposed outside the L2 domain.

Here, the ToR switch 20a (first switch) and the upper switch 20A (second switch) are assumed to be L2-compatible switches belonging to the same VLAN (Virtual LAN) in the same L2 domain. In the case where the ToR switch 20a and the upper switch 20A are not distinguished, they will be described as the switch 20.
The SDN controller 10 is an SDN-compatible controller arranged outside the L2 domain, and externally controls the network in the L2 domain. Each switch 20 (ToR switch 20a and upper switch 20A) connected to the SDN controller 10 is also a switch corresponding to SDN.

An outline of processing of the MAC address table update system 1 will be described.
As shown in FIG. 1, the virtual machine X moves from the server “2” to the server “1” according to an instruction from the higher-level operation system or the like (step S10).
The virtual machine X transmits a frame to the ToR switch “1” to which the virtual machine X is directly connected (accommodates itself) (step S11).

Subsequently, the ToR switch “1” that has received the frame updates its own MAC address table 200 based on the received frame (step S12). At this time, the virtual machine X itself does not perform the process of updating the MAC address table 200 of each switch 20 by transmitting RARP to the L2 broadcast domain as in the related art (see FIG. 7), and the virtual machine X itself Only the MAC address table 200 of the ToR switch “1” is updated.
Subsequently, the ToR switch “1” transmits a MAC address table update notification indicating that its own MAC address table 200 has been updated to the SDN controller 10 (step S13).

  Receiving the MAC address table update notification, the SDN controller 10 changes the MAC address table for each of the switches 20 (ToR switch 20a and upper switch 20A) other than the ToR switch “1” that has transmitted the MAC address table update notification ( “New MAC entry” to be described later) is created (step S14) and transmitted to each switch 20.

  Each switch 20 in the L2 domain receives the MAC address table change information from the SDN controller 10 and rewrites its own MAC address table 200 (step S15).

  By doing so, according to the MAC address table update system 1 and the MAC address table update method according to the present embodiment, the MAC address table 200 is updated by the ToR switch that accommodates the virtual machine X that has moved or the like. Only “1”. The other switch 20 only needs to rewrite the MAC entry using the change information of the MAC address table generated by the SDN controller 10. Therefore, unlike the prior art, it is not necessary to search all the entries in its own MAC address table 200 and confirm the presence or absence of the source MAC address, so that the processing load on the CPU in each switch 20 is increased. Can be suppressed. Also, the virtual machine X that has moved or the like does not transmit RARP to the L2 broadcast domain as in the past, and therefore the ToR switch “1” that accommodates the virtual machine X transmits (forwards) RARP to the L2 broadcast domain. It is not necessary to increase the broadcast traffic.

<Configuration of MAC address table update system>
Next, each device (SDN controller 10 and switch 20) constituting the MAC address table update system 1 according to the present embodiment will be described in detail. First, the SDN controller 10 will be described.

≪SDN controller≫
The SDN controller 10 (see FIG. 1) according to the present embodiment is a device that externally controls a network in the L2 domain, collects traffic volume, grasps failure information, and the like, and sets each device based on the information. Manage networks by coordinating with changes and higher-level operation systems.
FIG. 2 is a functional block diagram showing the configuration of the SDN controller 10 according to the present embodiment.
The SDN controller 10 receives the MAC address table update notification from the ToR switch 20a that accommodates the moved virtual machine or the newly set virtual machine, and changes the MAC address table corresponding to each switch 20 (new information) MAC entry) is generated and transmitted. Thereby, the SDN controller 10 rewrites the MAC address table 200 of each switch.

The SDN controller 10 is a computer including control means, communication means, and storage means (not shown).
The communication means includes a communication interface and the like for performing communication connection with each device (such as the switch 20 and a higher-level operation system not shown).
The storage means includes a hard disk, a flash memory, a RAM (Random Access Memory), and the like, and stores a physical topology DB (DataBase) 100 (see FIGS. 2 and 3) described later.

The control unit controls the entire SDN controller 10, and as shown in FIG. 2, the notification receiving unit 11, the notification transmitting unit 12, the physical topology management unit 13, the instruction receiving unit 14, and the device setting unit 15 The MAC table entry creation unit 16 and the MAC table setting instruction unit 17 are configured.
Of the functions provided in the SDN controller 10, functions that are not directly related to the present invention (for example, a route calculation unit, a resource calculation unit, etc.) are not described.

The notification receiving unit 11 receives various notifications from the switches 20 constituting the network.
The notification transmission unit 12 notifies the result of processing by the control means of the SDN controller 10 and information on each switch 20 constituting the network to a higher-level operation system (not shown) (described as “higher-level system” in FIG. 2). To do.

  Based on various notifications from the switch 20, the physical topology management unit 13 creates a database of the physical topology indicating the connection relationship between the switches 20 and holds it as a physical topology DB 100.

FIG. 3 is a diagram illustrating a data configuration example of the physical topology DB 100 according to the present embodiment.
The physical topology DB 100 is information in which the port of the ToR switch 20a is associated with the port of the higher-level switch 20A that is communicatively connected thereto. In this physical topology DB 100, as shown in FIG. 3, the identification number 101 of the ToR switch 20a, the port number 102 of the port of the ToR switch 20a, the identification number 103 of the upper switch 20A facing the ToR switch a, the upper The port number 104 of the port of the switch 20A and the connection state 105 of the upper switch 20A facing the ToR switch 20a are stored. In the connection state 105, “1” is stored when there is a connection, and “0” is stored when there is no connection.
For example, the first line in FIG. 3 is a communication connection between the port of the port number “a1” of the ToR switch “1” and the port of the port number “B1” of the upper switch “2”, and the connection state is “1”. (There is a connection).
With this physical topology DB 100, the SDN controller 10 (physical topology management unit 13) manages the connection relationship (connection state) of the switches 20 in the L2 domain.

Returning to FIG. 2, the instruction receiving unit 14 receives an instruction from the higher-level operation system.
The device setting unit 15 generates a command for each switch 20 based on an instruction (setting change or the like) from the higher-level operation system, and transmits information such as the setting change or the like to each switch 20. In addition, the device setting unit 15 transmits the MAC address table change information (new MAC entry) for each switch 20 instructed by the MAC table setting instruction unit 17 to each switch 20.

  The MAC table entry creating unit 16 receives a MAC address table update notification indicating that the MAC address table 200 has been updated from the ToR switch 20a via the notification receiving unit 11, and sets (new) MAC to each switch 20 Create an entry.

Specifically, the MAC table entry creation unit 16 firstly stores information on “MAC address”, “VLAN ID”, and “addition / destination port” included in the MAC address table update notification received from the ToR switch 20a (hereinafter referred to as these Information is referred to as “update information”).
Here, the “MAC address” is a MAC address of a virtual machine that has been moved by live migration or the like, or a newly set virtual machine MAC address. “VLAN ID” is the ID of the VLAN to which the ToR switch 20a that has transmitted the MAC address table update notification belongs. “Addition / movement destination port” is the port number of the port from which the ToR switch 20a has transmitted the MAC address table update notification.

  Next, the MAC table entry creation unit 16 acquires the topology information of the physical topology DB 100 via the physical topology management unit 13, and the switch 20 connected to the ToR switch 20a that has transmitted the MAC address table update notification. The identification number information and the port number information are read. As a result, the MAC table entry creation unit 16 acquires information on the switches 20 that are connected in the same VLAN (hereinafter, this topology information is referred to as “connection relationship information”).

  The MAC table entry creation unit 16 is located in the L2 domain (and the same VLAN) using the read update information (“MAC address”, “VLAN ID”, “addition / movement destination port”) and connection relation information. A switch 20 other than the switch 20 (ToR switch 20a) that has transmitted the address table update notification is extracted as a switch 20 to be set. Then, the MAC table entry creation unit 16 creates a MAC entry for changing the MAC address table for each switch 20 to be set. Then, the MAC table entry creation unit 16 outputs the MAC entry created for each switch 20 to be set to the MAC table setting instruction unit 17.

  The MAC table setting instruction unit 17 outputs instruction information to the device setting unit 15 so as to set the MAC entry for each switch 20 acquired from the MAC table entry creation unit 16 for the switch 20 to be set.

Specifically, the MAC table setting instructing unit 17 transmits a MAC address table reference request for requesting reference to the MAC address table 200 to each switch 20 to be set, so that the MAC address of each switch 20 is transmitted. Refer to table 200.
Then, the MAC table setting instruction unit 17 searches for each of the referenced MAC address tables 200 whether there is an entry with the same MAC address as the (new) MAC entry acquired from the MAC table entry creation unit 16. To do.

  When there is an entry with the same MAC address, the MAC table setting instruction unit 17 outputs an instruction to delete the entry to the switch 20 including the MAC address table 200 and the MAC table entry creation unit 16 creates it. An instruction to add an entry (new MAC entry) is output to the device setting unit 15 so as to be transmitted to the switch 20 as change information of the MAC address table. On the other hand, when there is no entry with the same MAC address, the MAC table setting instruction unit 17 creates an entry (new MAC address) created by the MAC table entry creation unit 16 for the switch 20 having the MAC address table 200. An entry) addition instruction is output to the apparatus setting unit 15 so as to be transmitted as change information of the MAC address table.

  By doing so, the SDN controller 10 can create (new) MAC entries as change information of the MAC address table 200 suitable for the respective switches 20 and transmit the respective switches 20.

≪Switch≫
Next, the switch 20 according to the present embodiment will be described.
The switch 20 according to the present embodiment is configured by a ToR switch 20a (first switch) and an upper switch 20A (second switch) (see FIG. 1), and is an SDN-compatible switch that transmits and receives a frame in the L2 domain. is there.
FIG. 4 is a functional block diagram showing a configuration of the switch 20 according to the present embodiment.
The switch 20 is a computer including control means, communication means, and storage means (not shown).
The communication means includes a communication interface for establishing communication connection with each device (switch 20 other than itself, virtual server, SDN controller 10 and the like).
The storage means includes a hard disk, flash memory, RAM, and the like, and stores the MAC address table 200 and the like.

The control unit controls the entire switch 20 and includes a notification reception unit 21, a notification transmission unit 22, and a MAC table management unit 23 as shown in FIG.
Of the functions provided in the switch 20, descriptions of functions not directly related to the present invention are omitted.

The notification receiving unit 21 receives information from the switch 20 other than itself, the virtual server, the SDN controller 10, and the like.
In addition, the notification transmission unit 22 outputs a result processed by the MAC table management unit 23 and the like, a frame received from an external device, and the like to a destination device.

  The MAC table management unit 23 is responsible for overall processing relating to addition and update of MAC entries stored in the MAC address table 200. As shown in FIG. 4, the MAC table update unit 231, MAC table update notification unit 232, MAC A table information notifying unit 233 and a MAC table changing unit 234 are included.

When the MAC table update unit 231 receives a frame from the virtual table contained in itself, the MAC table update unit 231 updates the MAC address table 200 based on information such as a transmission source MAC address attached to the frame.
Specifically, if the MAC address that matches the transmission source MAC address is not registered in the MAC entry of the MAC address table 200, the MAC table update unit 231 generates a new MAC entry, and the MAC address table 200 To store. In addition, in the MAC entry of the MAC address that matches the source MAC address, if the information of the different port number is described, the MAC table update unit 231 deletes the MAC entry and then creates a new MAC An entry is generated and stored in the MAC address table 200.

When the MAC table update unit 231 updates the MAC address table 200, the MAC table update notification unit 232 generates a MAC address table update notification and transmits the MAC address table update notification to the SDN controller 10.
As described above, this MAC address table update notification includes the update information of the MAC address table 200 (“MAC address”, “VLAN ID”, “addition / destination port” information).

  When receiving a MAC address table reference request from the SDN controller 10, the MAC table information notifying unit 233 acquires information on the MAC entry stored in the MAC address table 200 and transmits it to the SDN controller 10.

When the MAC table changing unit 234 receives an instruction to delete the MAC entry stored in the MAC address table 200 from the SDN controller 10, the MAC table changing unit 234 deletes the MAC entry.
Furthermore, when a new MAC entry is received from the SDN controller 10 as MAC address table change information, the MAC table changing unit 234 stores the MAC entry in the MAC address table 200.

  Of the functions of the MAC table management unit 23, the ToR switch 20a includes at least a MAC table update unit 231, a MAC table update notification unit 232, a MAC table information notification unit 233, and a MAC table change unit 234. The upper switch 20A includes at least a MAC table information notifying unit 233 and a MAC table changing unit 234.

  In this way, the switch 20 only needs to rewrite the MAC entry using the change information of the MAC address table generated by the SDN controller 10. Therefore, unlike the prior art, it is not necessary to search all the entries in its own MAC address table 200 and confirm the presence or absence of the source MAC address, so that the processing load on the CPU in each switch 20 is increased. Can be suppressed. Further, since the switch 20 (ToR switch 20a) that accommodates the virtual machine X that has moved does not need to transmit (transfer) RARP to the L2 broadcast domain as in the prior art, it suppresses an increase in broadcast traffic. Can do.

<Process flow>
Next, processing executed by the MAC address table update system 1 will be described with reference to FIG.
FIG. 5 is a flowchart showing the flow of processing executed by the MAC address table update system 1 according to this embodiment.

  First, a virtual machine is moved to another physical server 30 by an instruction from a higher-level operation system (not shown) or a new virtual machine is set on the physical server 30 (step S100).

  Subsequently, the moved virtual machine or the newly set virtual machine transmits a frame with its own MAC address to the ToR switch 20a accommodating the virtual machine by unicast (step S101). ).

  The ToR switch 20a (MAC table update unit 231) that has received the frame updates its own MAC address table 200 based on the MAC address of the transmission source attached to the frame (step S102).

  Subsequently, the MAC table update notification unit 232 of the ToR switch 20a that has received the frame from the virtual machine generates a MAC address table update notification and transmits it to the SDN controller 10 (step S103).

  Next, the MAC table entry creation unit 16 of the SDN controller 10 that has received the MAC address table update notification includes information on “MAC address”, “VLAN ID”, and “addition / movement destination port” included in the received MAC address table update notification. (Update information) is read (step S104).

  Then, the MAC table entry creation unit 16 extracts the switch 20 to be set using the read update information and the topology information of the physical topology DB 100 (see FIG. 3) acquired through the physical topology management unit 13. Then, a (new) MAC entry for changing the MAC address table is created for each switch 20 to be set (step S105).

  Subsequently, the MAC table setting instruction unit 17 of the SDN controller 10 refers to the MAC entry of the MAC address table 200 of each switch 20 by transmitting a MAC address table reference request to the switch 20 to be set ( Step S106).

Next, the MAC table setting instruction unit 17 performs the determination process of the next step S107 for each (new) MAC entry created by the MAC table entry creation unit 16.
In step S107, the MAC table setting instruction unit 17 determines whether or not an entry with the same MAC address as the MAC address included in the created (new) MAC entry exists in the MAC address table 200 of the referenced switch 20. Determine.

  Here, if there is an entry with the same MAC address (step S107 → Yes), the MAC table setting instruction unit 17 proceeds to the next step S108. On the other hand, if there is no entry with the same MAC address (step S107 → No), the MAC table setting instruction unit 17 proceeds to the next step S109.

  In step S108, the MAC table setting instructing unit 17 transmits an instruction to delete the entry of the same MAC address in the referenced switch 20 to the switch 20, and sends an instruction to add the created (new) MAC entry to the MAC 20 It is transmitted to the switch 20 as address table change information.

  On the other hand, in step S109, the MAC table setting instruction unit 17 transmits the created (new) MAC entry addition instruction to the switch 20 as the MAC address table change information.

Subsequently, the MAC table changing unit 234 of each switch 20 changes its own MAC address table 200 using the information acquired from the SDN controller 10 (step S110), and ends the update process of the MAC address table 200.
Specifically, the MAC table changing unit 234 of each switch 20 deletes the MAC entry stored in the MAC address table 200 based on the deletion instruction from the SDN controller 10 when the process of step S108 is executed. After that, a new MAC entry is added based on the change information of the MAC address table.
The MAC table changing unit 234 of each switch 20 adds a new MAC entry to the MAC address table 200 based on the MAC address table change information acquired from the SDN controller 10 when the process of step S109 is executed. .

As described above, according to the MAC address table update system 1 and the MAC address table update method according to the present embodiment, the MAC address table 200 is updated by a switch that accommodates a virtual machine that has been moved or newly set. 20 (ToR switch 20a) only. The other switch 20 only needs to rewrite the MAC entry using the change information of the MAC address table generated by the SDN controller 10. Thereby, increase of the processing load of CPU in each switch 20 can be suppressed. Further, unlike the conventional technology, the switch 20 that accommodates the virtual machine that has been moved or newly set does not need to transmit (transfer) the RARP to the L2 broadcast domain, and thus can suppress an increase in broadcast traffic. . Therefore, even in a network environment in which live migration is frequently performed or a large number of new virtual machines are set, it is not necessary to introduce an expensive switch with a high processing capacity, and the inexpensive switch 20 can be used to connect the network. It can be configured.
Further, the SDN controller 10 and the switch 20 of the present invention are not limited to OpenFlow, and the present invention can be implemented as long as the controller and the switch are compatible with SDN, and a highly versatile system can be constructed. it can.

DESCRIPTION OF SYMBOLS 1 MAC address table update system 10 SDN controller 11,21 Notification receiving part 12,22 Notification transmission part 13 Physical topology management part 14 Instruction receiving part 15 Device setting part 16 MAC table entry creation part 17 MAC table setting instruction | indication part 20 Switch 20a ToR Switch (first switch)
20A Upper switch (second switch)
23 MAC table management unit 30 Physical server 100 Physical topology DB
200 MAC address table 231 MAC table update unit 232 MAC table update notification unit 233 MAC table information notification unit 234 MAC table change unit

Claims (2)

A first switch that accommodates the virtual machine by being directly connected to one or more virtual machines on a physical server, and a second switch that is connected to the one or more first switches to transfer a frame And an SDN (Software Defined Network) controller connected to each of the one or more first switches and the one or more second switches in an L2 (Layer 2) domain. A system,
The first switch is
When receiving a frame from a newly accommodated virtual machine, a MAC table update unit that updates its own MAC address table using the MAC address of the virtual machine;
A MAC table update notification unit for transmitting the MAC address table update to the SDN controller as a MAC address table update notification;
Upon receiving a MAC address table reference request from the SDN controller, a MAC table information notifying unit that returns information on the MAC entry stored in its own MAC address table;
A MAC table changing unit that receives MAC address table change information from the SDN controller and changes a MAC entry stored in its own MAC address table to a new MAC entry;
The second switch is
The MAC table information notifying unit, and the MAC table changing unit,
The SDN controller is
Using the updated MAC address and its port information included in the received MAC address table update notification, and topology information indicating the connection relationship between the first switch and the second switch in the L2 domain A MAC table entry creation unit for creating the new MAC entry corresponding to the updated MAC address and information of the port for each of the first switch and the second switch;
By transmitting the MAC address table reference request, the MAC address table of each of the first switch and the second switch is referred to, and the MAC address table is transmitted to each of the first switch and the second switch. MAC table setting instruction for transmitting change information of the MAC address table indicating an instruction to delete a MAC entry including the same MAC address as the new MAC entry and an instruction to add the new MAC entry A MAC address table update system. A first switch that accommodates the virtual machine by being directly connected to one or more virtual machines on a physical server, and a second switch that is connected to the one or more first switches to transfer a frame And an SDN controller connected to each of the one or more first switches and the one or more second switches in an L2 domain, and a MAC address updating method of a MAC address table updating system comprising: ,
The first switch is
When receiving a frame from a newly accommodated virtual machine, using the MAC address of the virtual machine, updating its own MAC address table;
Transmitting the update of the MAC address table to the SDN controller as a MAC address table update notification, and
The SDN controller is
Using the updated MAC address and its port information included in the received MAC address table update notification, and topology information indicating the connection relationship between the first switch and the second switch in the L2 domain Creating a new MAC entry corresponding to the updated MAC address and information of the port for each of the first switch and the second switch;
Transmitting a MAC address table reference request for requesting reference to the MAC address table to each of the first switch and the second switch, and acquiring information on a MAC entry stored in the MAC address table; When,
Referring to the MAC address tables of the first switch and the second switch, respectively, the same as the new MAC entry stored in the MAC address table in each of the first switch and the second switch Transmitting a MAC address table change information indicating an instruction to delete a MAC entry including the MAC address and an instruction to add the new MAC entry, and
The first switch and the second switch are:
The MAC address table update method, comprising: receiving change information of the MAC address table from the SDN controller, and changing a MAC entry stored in its own MAC address table to the new MAC entry. .

Images