JP2017195438A - Communication management method, communication management program, and information processing apparatus - Google Patents

Abstract

PROBLEM TO BE SOLVED: To specify a connection configuration of a virtual network constructed in a physical machine, in a simpler way.SOLUTION: The communication management method is executed by a computer having a plurality of physical network interfaces. The communication management method includes processing of: transmitting, by a first virtual machine of a plurality of virtual machines operating on the computer, a transmission request of a broadcast packet to a second virtual machine of the above virtual machines; receiving, by one of a plurality of virtual network interfaces of the first virtual machine, the broadcast packet transmitted by the second virtual machine; and registering an identifier of the second virtual machine, in association with an identifier of a physical network interface corresponding to a virtual switch connected to the virtual network interface having received the broadcast packet, out of a plurality of virtual switches operating on the computer.SELECTED DRAWING: Figure 2

Description

  The present invention relates to a technique for managing communication in a virtual network.

  A virtual machine operating in a physical machine is virtually connected to another virtual machine and a physical NIC (Network Interface Card) via a virtual network built in the physical machine, and the other virtual machine and a device outside the physical machine. Communicate with the etc.

  The connection configuration of a virtual network built in a physical machine becomes more complex as the size of the virtual network increases. With regard to specifying the connection configuration of a virtual network, a document discloses a technique for collecting packets transmitted and received between virtual machines and analyzing traffic and routes.

JP 2012-4781 A

  However, this technique is based on the premise that a monitoring device is provided separately from a physical machine that operates a virtual machine or the like.

  In one aspect, an object of the present invention is to provide a technique for specifying a connection configuration of a virtual network built in a physical machine in a simpler manner.

  The communication management method according to the present invention is a computer having a plurality of physical network interfaces, and a packet output from a virtual network interface of a plurality of virtual machines operating on the computer is out of a plurality of virtual switches operating on the computer. It is executed in a computer that is transmitted from a physical network interface corresponding to the one virtual switch via one virtual switch. In this communication management method, the first virtual machine among the plurality of virtual machines transmits a broadcast packet transmission request to the second virtual machine among the plurality of virtual machines, and the second virtual machine The broadcast packet transmitted by the first virtual machine is received by one of the virtual network interfaces of the first virtual machine, and is connected to the virtual network interface that has received the broadcast packet among the plurality of virtual switches. And a process of registering the identifier of the second virtual machine in association with the identifier of the first physical network interface corresponding to the identified virtual switch.

  In one aspect, a connection configuration of a virtual network built in a physical machine can be specified by a simpler method.

FIG. 1 is a hardware configuration diagram of the information processing apparatus. FIG. 2 is a diagram illustrating a virtual network constructed in the information processing apparatus. FIG. 3 is a functional block diagram of the management VM. FIG. 4 is a functional block diagram of the VM. FIG. 5 is a diagram illustrating a processing flow of processing executed by the management VM. FIG. 6 is a diagram illustrating a processing flow of processing executed by the VM. FIG. 7 is a diagram illustrating an example of forwarding a broadcast packet. FIG. 8 is a diagram illustrating a processing flow of processing executed by the management VM. FIG. 9 is a diagram for explaining the state transition of the management table stored in the first management table storage unit. FIG. 10 is a diagram for explaining the state transition of the management table stored in the first management table storage unit. FIG. 11 is a diagram for explaining the state transition of the management table stored in the first management table storage unit. FIG. 12 is a diagram for explaining the state transition of the management table stored in the first management table storage unit. FIG. 13 is a diagram illustrating a processing flow of processing executed by the management table processing unit of the management VM. FIG. 14 is a diagram illustrating an example of data stored in the first management table storage unit. FIG. 15 is a diagram illustrating an example of data stored in the second management table storage unit. FIG. 16 is a diagram illustrating an example of notification to the administrator.

  FIG. 1 shows a hardware configuration diagram of the information processing apparatus 1 according to the present embodiment. The information processing apparatus 1 includes, for example, a memory 11 that is a RAM (Random Access Memory), a CPU (Central Processing Unit) 12, an HDD (Hard Disk Drive) 13, and NICs # 1 to #n (n is a natural number). Have. The CPU 12 is connected to the memory 11, the HDD 13 is connected to the CPU 12, and the NICs # 1 to #n are connected to the CPU 12. NICs # 1 to #n are physical NICs. In the example of FIG. 1, the HDD 13 is used, but other storage devices (for example, SSD (Solid State Drive) or flash memory) may be used.

  FIG. 2 shows a virtual network constructed in the information processing apparatus 1 of the present embodiment. In the information processing apparatus 1, VMs (Virtual Machines) # 1 to #m (m is a natural number), a management VM 120, and vSWs (virtual SWitch) # 1 to #n are hypervisors (that is, processes of virtualization software). ) Run on.

  Each of the VMs # 1 to #m has one or a plurality of vNICs (virtual network interface cards). The management VM 120 has vNICs # 1 to #n. The management VM 120 and the VMs # 1 to #m are virtually connected via the management virtual network 110. Each vNIC is assigned a unique MAC address. Note that there is no limitation on the number of vNICs each VM has.

  Each of the vSWs # 1 to #n is virtually connected to one or a plurality of vNICs. Each of vSWs # 1 to #n is virtually connected to one NIC. In the present embodiment, there is a one-to-one correspondence between vSW and NIC.

  The dashed rectangle represents the control range of the hypervisor.

  FIG. 3 shows a functional block diagram of the management VM 120. The management VM 120 includes a control unit 121, a network processing unit 122, a management table processing unit 123, a first management table storage unit 124, a second management table storage unit 125, and vNICs # 1 to #n. The control unit 121, the network processing unit 122, the management table processing unit 123, and the vNICs # 1 to #n are realized by loading a program stored in the HDD 13 into the memory 11 and executing it on the CPU 12. The first management table storage unit 124 and the second management table storage unit 125 are provided in the HDD 13, for example.

  The control unit 121 executes processing or the like according to the contents of a packet (in this embodiment, an IP (Internet Protocol) packet) received from the network processing unit 122. The network processing unit 122 executes processing for controlling packet transmission / reception by the vNICs # 1 to #n. The management table processing unit 123 generates, updates, and deletes the management table stored in the first management table storage unit 124, and the management table and the second management stored in the first management table storage unit 124. A process of comparing with the management table stored in the table storage unit 125 is executed. The first management table storage unit 124 stores a management table representing the connection configuration specified by the processing of the management VM 120. The second management table storage unit 125 stores a management table representing a connection configuration designated in advance by an administrator.

  FIG. 4 shows a functional block diagram of the VMs # 1 to #m. The VMs # 1 to #m include a control unit 131, a network processing unit 132, and one or a plurality of vNICs (vNIC # 1 and vNIC # 2 in the example of FIG. 4). The control unit 131, the network processing unit 132, and the vNIC # 1 and vNIC # 2 are realized by loading a program stored in the HDD 13 into the memory 11 and executing it on the CPU 12.

  The control unit 131 executes processing according to the content of the packet received from the network processing unit 132. The network processing unit 132 executes processing for controlling transmission and reception of packets by one or a plurality of vNICs.

  Next, the operation of the information processing apparatus 1 will be described with reference to FIGS.

  First, in a state where VM # 1 to #m and vSW # 1 to #n are operating in the information processing apparatus 1, the hypervisor activates the management VM 120 (FIG. 5: Step S1).

  The control unit 121 of the management VM 120 that has started operation determines whether there is a vNIC whose connection destination NIC is unknown among the vNICs of the VMs # 1 to #m (step S3). If there is no vNIC whose connection destination NIC is unknown (step S5: No route), the process ends.

  On the other hand, when there is a vNIC whose connection destination NIC is unknown (step S5: Yes route), the control unit 121 of the management VM 120 issues an instruction to start packet capture in each vNIC of the management VM 120. (Step S7).

  In response to an instruction from the control unit 121, the network processing unit 122 of the management VM 120 causes each vNIC of the management VM 120 to start packet capture (step S9). In response to this, each vNIC of the management VM 120 starts capturing the transmitted / received packet.

  The control unit 121 of the management VM 120 gives an instruction for causing a VM (hereinafter referred to as a target VM) having a vNIC whose connection destination NIC is unknown (hereinafter referred to as a target VM) to transmit a broadcast packet from the target vNIC. The data is output to the network processing unit 122 (step S11).

  In response to an instruction from the control unit 121, the network processing unit 122 of the management VM 120 transmits a broadcast packet transmission request to the target VM via the management virtual network 110 (step S13). The broadcast packet transmission request includes designation of the target vNIC.

  The management virtual network 110 is a virtual network used when the management VM 120 and the VMs # 1 to #m communicate with each other for maintenance or the like. On the other hand, the virtual network for which the connection configuration is specified in the present embodiment is used for other purposes (for example, for VM # 1 to #m to notify a device external to the information processing device 1) ) A virtual network used for communication.

  Here, a process executed by the target VM that has received a broadcast packet transmission request will be described with reference to FIG.

  First, the network processing unit 132 of the target VM receives a broadcast packet transmission request from the management VM 120 and outputs it to the control unit 131 (FIG. 6: step S41).

  When receiving the broadcast packet transmission request, the control unit 131 of the target VM outputs an instruction for transmitting the broadcast packet from the target vNIC specified in the transmission request to the network processing unit 132 (step S43).

  The network processing unit 132 of the target VM transmits a broadcast packet from the target vNIC in response to an instruction from the control unit 131 (step S45). Then, the process ends.

  For example, as illustrated in FIG. 7, it is assumed that the target VM is VM # 3 and the target vNIC is vNIC # 1 of VM # 3. When VM # 3 transmits a broadcast packet from vNIC # 1, vSW # 1 receives the broadcast packet, vSW # 1 is vNIC # 1 of VM # 1, vNIC # 1 of VM # 2, vNIC # 1 of management VM 120 And forward the broadcast packet to NIC # 1. As a result, the management VM 120 can receive the broadcast packet as a response to the transmission request.

  Returning to the description of FIG. 5, the network processing unit 122 of the management VM 120 receives a broadcast packet transmitted from the target vNIC of the target VM by any one of the vNICs # 1 to vNIC # n of the management VM 120 (steps). S15).

  The network processing unit 122 of the management VM 120 notifies the control unit 121 of the identifier of the vNIC that received the broadcast packet and the source MAC address included in the broadcast packet (step S17). The processing shifts to the description of step S19 in FIG.

  Shifting to the description of FIG. 8, the control unit 121 of the management VM 120 receives the identifier of the vNIC that has received the broadcast packet and the transmission source MAC address included in the broadcast packet from the network processing unit 122 (step S <b> 19), and the memory 11. To store.

  The control unit 121 of the management VM 120 outputs an instruction for stopping packet capture in each vNIC of the management VM 120 to the network processing unit 122 (step S21).

  In response to an instruction from the control unit 121, the network processing unit 122 of the management VM 120 causes each vNIC of the management VM 120 to stop packet capture (step S23).

  The control unit 121 of the management VM 120 compares the MAC address stored in the memory 11 with the MAC address of the target vNIC acquired from the hypervisor (step S25). Since the hypervisor manages the MAC address of each vNIC in each VM, for example, the corresponding MAC address can be acquired by notifying the hypervisor of the identifier of the target vNIC. Since this process is well known, detailed description thereof is omitted here.

  The control unit 121 of the management VM 120 determines whether the MAC address stored in the memory 11 matches the MAC address of the target vNIC acquired from the hypervisor (step S27). If the MAC address stored in the memory 11 and the MAC address of the target vNIC acquired from the hypervisor do not match (step S27: No route), the process proceeds to step S3 in FIG.

  On the other hand, when the MAC address stored in the memory 11 matches the MAC address of the target vNIC acquired from the hypervisor (step S27: Yes route), the control unit 121 of the management VM 120 executes the following processing. Specifically, the control unit 121 of the management VM 120 outputs an instruction for updating the management table stored in the first management table storage unit 124 to the management table processing unit 123 (step S29). This instruction includes the identifier of the vSW connected to the vNIC that has received the broadcast packet, the identifier of the target VM, the identifier of the target vNIC, and the MAC address.

  In response to an instruction from the control unit 121, the management table processing unit 123 of the management VM 120 associates the identifier of the target VM with the identifier of the vSW connected to the vNIC that has received the broadcast packet and the identifier of the NIC corresponding to the vSW. And the identifier and MAC address of the target vNIC are stored in the first management table storage unit 124 (step S31). Then, the process proceeds to step S3 in FIG.

  As described above, the processing is executed until there is no vNIC whose connection destination NIC is unknown, and the management table stored in the first management table storage unit 124 is completed. As a result, the management table stored in the first management table storage unit 124 can be compared with the management table stored in advance in the second management table storage unit 125.

  Here, the state transition of the management table stored in the first management table storage unit 124 will be described with reference to FIGS. 9 to 12.

  FIG. 9 shows a management table in the initial state. In the initial state, the NIC to which the vNIC of each VM is connected is not known at all. As described above, in this embodiment, vSW and NIC correspond one-to-one, but information about this correspondence is acquired from the hypervisor and written in the management table.

  FIG. 10 shows a state where the connection destination of the vNIC of VM # 1 and the vNIC of VM # 2 is specified. In FIG. 10, vSW # 1 is connected to NIC # 1 (MAC address is AAA), and vNIC # 1 (MAC address is aaa) of VM # 1 and vNIC # 1 (MAC address of VM # 2) to vSW # 1. Is shown to be connected to bbb). Also, it is shown that vSW # 2 is connected to NIC # 2 (MAC address is BBB), and vNIC # 2 (MAC address is ccc) of VM # 2 is connected to vSW # 2.

  Then, as a result of the transmission of the broadcast packet as shown in FIG. 7, the connection destination of the vNIC of VM # 3 is specified, and the management table transitions to the state shown in FIG. In FIG. 11, vNIC # 1 (MAC address is ddd) of VM # 3 is connected to vSW # 1, and vNIC # 2 (MAC address is eee) of VM # 3 is connected to vSW # 2. It is shown.

  Finally, the connection destination of each vNIC of each VM is specified, and the management table is in the state shown in FIG. The format of the management table stored in the second management table storage unit 125 is the same as the format of the management table stored in the first management table storage unit 124.

  Next, processing executed by the management table processing unit 123 of the management VM 120 after executing the processing described with reference to FIGS. 5 to 12 will be described with reference to FIGS.

  First, the management table processing unit 123 of the management VM 120 compares the management table stored in the first management table storage unit 124 with the management table stored in the second management table storage unit 125 (FIG. 13 :). Step S51).

  The management table processing unit 123 of the management VM 120 determines whether or not the management table stored in the first management table storage unit 124 is the same as the management table stored in the second management table storage unit 125 (step). S53). When the management table stored in the first management table storage unit 124 and the management table stored in the second management table storage unit 125 are the same (step S53: Yes route), the process ends.

  On the other hand, when the management table stored in the first management table storage unit 124 and the management table stored in the second management table storage unit 125 are not the same (step S53: No route), the management of the management VM 120 The table processing unit 123 generates data indicating the difference between the two, and transmits a notification including the generated data to the administrator's terminal (step S55). Then, the process ends.

  For example, assume that the data shown in FIG. 14 is stored in the first management table storage unit 124 and the data shown in FIG. 15 is stored in the second management table storage unit 125. In this case, since there is a difference between the data on the third line and the data on the sixth line, for example, data indicating the difference between the two is generated, and a notification including the generated data is sent to the administrator. Sent to the terminal.

  By executing the processing as described above, the connection configuration of the virtual network constructed in the physical machine can be specified by a simple method without providing a monitoring device or the like.

  Also, if the actual connection configuration and the connection configuration specified by the administrator are different, a notification is sent to the administrator's terminal so that the administrator can restore the desired connection configuration. Become. As a result, problems such as packet loss and excessive traffic in a specific NIC can be prevented.

  Although one embodiment of the present invention has been described above, the present invention is not limited to this. For example, the functional block configuration of the information processing apparatus 1 described above may not match the actual program module configuration.

  Further, the configuration of each table described above is an example, and the configuration as described above is not necessarily required. Further, in the processing flow, the processing order can be changed if the processing result does not change. Further, it may be executed in parallel.

  The present embodiment can also be applied to a case where a physical port used by an application is specified.

  Further, when the number of vNICs included in each of the VMs # 1 to #m is 1, the vNIC identifier may not be registered in the management table in the first management table storage unit 124.

  The embodiment of the present invention described above is summarized as follows.

  The communication management method according to the present embodiment is a computer having a plurality of physical network interfaces, and a plurality of virtual switches in which packets output from virtual network interfaces of a plurality of virtual machines operating in the computer are operated in the computer It is executed in a computer transmitted from a physical network interface corresponding to the one virtual switch through one virtual switch. In this communication management method, the first virtual machine (for example, the management VM 120 in the embodiment) among the plurality of virtual machines is changed to (A) the second virtual machine (for example, the implementation VM) in the plurality of virtual machines. A broadcast packet transmission request to (VM # 1 to #m) in the configuration, and (B) the broadcast packet transmitted by the second virtual machine is transmitted to a plurality of virtual network interfaces of the first virtual machine. (C) a virtual switch connected to the virtual network interface that has received the broadcast packet is identified from among the plurality of virtual switches, and the first corresponding to the identified virtual switch is received. In association with the identifier of the first physical network interface Including the process of registering the identifier of the machine.

  By executing such processing, the connection configuration of the virtual network constructed in the computer can be specified.

  Each of the virtual machines other than the first virtual machine among the plurality of virtual machines may have a plurality of virtual network interfaces. In the communication management method, the first virtual machine specifies the first virtual network interface used by the second virtual machine for transmitting the broadcast packet based on the transmission source address included in the broadcast packet (D). Processing may be further performed. Then, in the process of registering the identifier of the second virtual machine, the identifier of the first virtual network interface may be further registered in association with the identifier of the first physical network interface.

  Even when each of the plurality of virtual machines has a plurality of virtual network interfaces, the connection configuration of the virtual network can be specified.

  Also, in the communication management method, the first virtual machine (E) performs a process of determining whether or not the source address included in the broadcast packet matches the address assigned in advance to the second virtual machine. Further, it may be executed. Then, when the source address included in the broadcast packet matches the address assigned to the second virtual machine, a process of registering the identifier of the second virtual machine may be executed.

  When there is a possibility that a virtual machine other than the second virtual machine may transmit a packet to the first virtual machine, it is possible to prevent erroneous registration.

  In the communication management method, the first virtual machine determines whether the (F) second virtual machine is the same as a virtual machine designated in advance as a virtual machine that uses the first physical network interface. (G) When the second virtual machine is not the same as the virtual machine designated in advance, it may further include a process of outputting data indicating that the connection is incorrect.

  An incorrect connection configuration causes problems such as packet loss and excessive traffic. However, if the processing described above is executed, such problems can be prevented from occurring.

  A program for causing a computer to execute the processing according to the above method can be created. The program can be a computer-readable storage medium such as a flexible disk, CD-ROM, magneto-optical disk, semiconductor memory, or hard disk It is stored in a storage device. The intermediate processing result is temporarily stored in a storage device such as a main memory.

  The following supplementary notes are further disclosed with respect to the embodiments including the above examples.

(Appendix 1)
A computer having a plurality of physical network interfaces, wherein a packet output from a virtual network interface of a plurality of virtual machines operating on the computer passes through one virtual switch of the plurality of virtual switches operating on the computer. A communication management method executed in a computer transmitted from a physical network interface corresponding to the one virtual switch,
A first virtual machine of the plurality of virtual machines is
A broadcast packet transmission request is transmitted to a second virtual machine among the plurality of virtual machines,
Receiving the broadcast packet transmitted by the second virtual machine at any one of a plurality of virtual network interfaces of the first virtual machine;
A virtual switch connected to the virtual network interface that has received the broadcast packet is identified from among the plurality of virtual switches, and is associated with an identifier of a first physical network interface corresponding to the identified virtual switch. Register the identifier of virtual machine 2
A communication management method for executing processing.

(Appendix 2)
Each of the virtual machines other than the first virtual machine among the plurality of virtual machines has a plurality of virtual network interfaces,
The first virtual machine is
Identifying a first virtual network interface used by the second virtual machine to transmit the broadcast packet based on a source address included in the broadcast packet;
Perform further processing,
In the process of registering the identifier of the second virtual machine,
Further registering the identifier of the first virtual network interface in association with the identifier of the first physical network interface;
The communication management method according to attachment 1.

(Appendix 3)
The first virtual machine is
Determining whether a source address included in the broadcast packet matches an address assigned in advance to the second virtual machine,
Perform further processing,
When the source address included in the broadcast packet matches the address assigned to the second virtual machine, a process of registering the identifier of the second virtual machine is executed.
The communication management method according to attachment 2.

(Appendix 4)
The first virtual machine is
Determining whether the second virtual machine is the same as a virtual machine designated in advance as a virtual machine using the first physical network interface;
If the second virtual machine is not the same as the pre-designated virtual machine, output data indicating that the connection is incorrect;
The communication management method according to supplementary note 1, wherein the processing is further executed.

(Appendix 5)
A computer having a plurality of physical network interfaces, wherein a packet output from a virtual network interface of a plurality of virtual machines operating on the computer passes through one virtual switch of the plurality of virtual switches operating on the computer. To the computer transmitted from the physical network interface corresponding to the one virtual switch,
A broadcast packet transmission request is transmitted to another virtual machine among the plurality of virtual machines,
The broadcast packet transmitted by the other virtual machine is received by any one of a plurality of virtual network interfaces,
A virtual switch connected to the virtual network interface that has received the broadcast packet is identified from among the plurality of virtual switches, and the second virtual switch is associated with an identifier of a physical network interface corresponding to the identified virtual switch. Register machine identifiers,
A communication management program that executes processing.

(Appendix 6)
An information processing apparatus having a plurality of physical network interfaces,
Multiple virtual machines,
A plurality of virtual switches each executing a process of outputting a packet output from a virtual network interface of the plurality of virtual machines to a corresponding physical network interface;
Run
A first virtual machine of the plurality of virtual machines is
A broadcast packet transmission request is transmitted to a second virtual machine among the plurality of virtual machines, and the broadcast packet transmitted by the second virtual machine is transmitted to the plurality of virtual machines included in the first virtual machine. A communication unit that receives at one of the virtual network interfaces among the network interfaces;
A virtual switch connected to the virtual network interface that has received the broadcast packet is identified from among the plurality of virtual switches, and the second virtual switch is associated with an identifier of a physical network interface corresponding to the identified virtual switch. A registration unit for registering an identifier of the machine,
Information processing device.

(Appendix 7)
An information processing apparatus having a plurality of physical network interfaces,
Multiple virtual machines,
A plurality of virtual switches each executing a process of outputting a packet output from a virtual network interface of the plurality of virtual machines to a corresponding physical network interface;
Run
A first virtual machine of the plurality of virtual machines is
A broadcast packet transmission request is transmitted to a second virtual machine among the plurality of virtual machines, and the broadcast packet transmitted by the second virtual machine is transmitted to the plurality of virtual machines included in the first virtual machine. A first communication unit that receives at any one of the network interfaces;
A virtual switch connected to the virtual network interface that has received the broadcast packet is identified from among the plurality of virtual switches, and the second virtual switch is associated with an identifier of a physical network interface corresponding to the identified virtual switch. A registration unit for registering machine identifiers;
Have
The second virtual machine is
A second communication unit configured to transmit the broadcast packet when the transmission request is received from the first virtual machine;
Information processing device.

1 Information processing apparatus 11 Memory 12 CPU 13 HDD
110 Virtual network for management 120 Management VM
121 Control Unit 122 Network Processing Unit 123 Management Table Processing Unit 124 First Management Table Storage Unit 125 Second Management Table Storage Unit 131 Control Unit 132 Network Processing Unit

Claims (6)

A computer having a plurality of physical network interfaces, wherein a packet output from a virtual network interface of a plurality of virtual machines operating on the computer passes through one virtual switch of the plurality of virtual switches operating on the computer. A communication management method executed in a computer transmitted from a physical network interface corresponding to the one virtual switch,
A first virtual machine of the plurality of virtual machines is
A broadcast packet transmission request is transmitted to a second virtual machine among the plurality of virtual machines,
Receiving the broadcast packet transmitted by the second virtual machine at any one of a plurality of virtual network interfaces of the first virtual machine;
A virtual switch connected to the virtual network interface that has received the broadcast packet is identified from among the plurality of virtual switches, and is associated with an identifier of a first physical network interface corresponding to the identified virtual switch. Register the identifier of virtual machine 2
A communication management method for executing processing. Each of the virtual machines other than the first virtual machine among the plurality of virtual machines has a plurality of virtual network interfaces,
The first virtual machine is
Identifying a first virtual network interface used by the second virtual machine to transmit the broadcast packet based on a source address included in the broadcast packet;
Perform further processing,
In the process of registering the identifier of the second virtual machine,
Further registering the identifier of the first virtual network interface in association with the identifier of the first physical network interface;
The communication management method according to claim 1. The first virtual machine is
Determining whether a source address included in the broadcast packet matches an address assigned in advance to the second virtual machine,
Perform further processing,
When the source address included in the broadcast packet matches the address assigned to the second virtual machine, a process of registering the identifier of the second virtual machine is executed.
The communication management method according to claim 2. The first virtual machine is
Determining whether the second virtual machine is the same as a virtual machine designated in advance as a virtual machine using the first physical network interface;
If the second virtual machine is not the same as the pre-designated virtual machine, output data indicating that the connection is incorrect;
The communication management method according to claim 1, further comprising executing processing. A computer having a plurality of physical network interfaces, wherein a packet output from a virtual network interface of a plurality of virtual machines operating on the computer passes through one virtual switch of the plurality of virtual switches operating on the computer. To the computer transmitted from the physical network interface corresponding to the one virtual switch,
A broadcast packet transmission request is transmitted to another virtual machine among the plurality of virtual machines,
The broadcast packet transmitted by the other virtual machine is received by any one of a plurality of virtual network interfaces,
A virtual switch connected to the virtual network interface that has received the broadcast packet is identified from among the plurality of virtual switches, and the second virtual switch is associated with an identifier of a physical network interface corresponding to the identified virtual switch. Register machine identifiers,
A communication management program that executes processing. An information processing apparatus having a plurality of physical network interfaces,
Multiple virtual machines,
A plurality of virtual switches each executing a process of outputting a packet output from a virtual network interface of the plurality of virtual machines to a corresponding physical network interface;
Run
A first virtual machine of the plurality of virtual machines is
A broadcast packet transmission request is transmitted to a second virtual machine among the plurality of virtual machines, and the broadcast packet transmitted by the second virtual machine is transmitted to the plurality of virtual machines included in the first virtual machine. A communication unit that receives at one of the virtual network interfaces among the network interfaces;
A virtual switch connected to the virtual network interface that has received the broadcast packet is identified from among the plurality of virtual switches, and the second virtual switch is associated with an identifier of a physical network interface corresponding to the identified virtual switch. A registration unit for registering an identifier of the machine,
Information processing device.

Images