JP2018032156A - Connection control system of virtual machine and connection control method of virtual machine - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a connection control system of a virtual machine and a connection control method of the virtual machine capable of abstracting the operation of an SPP (Soft Patch Panel) enabling intuitively operation via GUI.SOLUTION: A connection control system 100 of a virtual machine includes: a command generation function part 111 that generates a command to an SPP responding to a GUI operation and issues the command to the SPP; and a command conversion function part 121 which has a management information storage part 123A for storing a relationship among an SPP resource, a port object and a VM (virtual machine) object, and converts the generated command into a command to be fed to the SPP while referring to the management information.SELECTED DRAWING: Figure 1

Description

  The present invention relates to a virtual machine connection control system and a virtual machine connection control method.

  With the background of the advancement of virtualization technology by NFV (Network Functions Virtualization), a system is constructed and operated for each service. In addition, from the form of building a system for each service, the service function is divided into reusable modules and operated on an independent virtual machine (VM: Virtual Machine, container, etc.) environment. In this way, a form called SFC (Service Function Chaining), which is used as necessary to improve operability, is becoming mainstream (see Non-Patent Document 1).

  A method for connecting and linking multiple virtual machines (hereinafter abbreviated as VM as appropriate) is called Inter-VM Communication. In large-scale environments such as data centers, virtual switches are standard for connecting VMs. Has been used. However, since the method has a large communication delay, a faster method has been newly proposed. For example, depending on the method using special hardware called SR-IOV (Single Root I / O Virtualization) or software using Intel DPDK (Intel Data Plane Development Kit) (hereinafter referred to as DPDK) which is a high-speed packet processing library A method or the like has been proposed (see Non-Patent Document 2). DPDK significantly increases packet processing performance and throughput, allowing more time for data plane applications.

  DPDK exclusively uses computer resources such as a CPU (Central Processing Unit) and a NIC (Network Interface Card). For this reason, it is difficult to apply to applications such as SFC that can be flexibly switched in module units. There is SPP (Soft Patch Panel) which is an application for alleviating this (see Non-Patent Document 3). The SPP prepares a shared memory between VMs and allows each VM to directly refer to the same memory space, thereby omitting packet copying in the virtualization tank. Further, DPDK is used to increase the speed of packet exchange between the physical NIC and the shared memory. The SPP can change the input destination and the output destination of the packet by software by controlling the reference destination of the memory exchange of each VM. By doing so, the SPP realizes dynamic connection switching between VMs or between a VM and a physical NIC.

15A and 15B are diagrams for explaining the outline of the SPP. FIG. 15A is a hardware configuration diagram and FIG. 15B is an image diagram of resource management of the SPP.
As illustrated in FIG. 15A, the inter-VM connection device 10 having an SPP is a server that connects each VM 5 and an external network (External Network) 6. The inter-VM connection device 10 includes a physical port 7 for connecting to the external network 6, an SPP 20 controlled by an SPP controller 20a, a router 8, and a VM 5. The VM 5 may be outside the inter-VM connection device 10.
The SPP 20 is a framework for managing DPDK resources, and includes a DPDK application in charge of resource management. The SPP 20 is a VM-to-VM connection function based on DPDK, and can perform transfer processing at a very high speed as compared with conventional temporary switch products.
The SPP controller 20 a is operated by a command line 31 from a control terminal device (Control Terminal) 30. The SPP controller 20a performs resource allocation and path setting for connecting VMs based on connection control by the command line 31.
In the SPP resource management in SPP shown in FIG. 15B, the physical port 7 is “NIC (Network Interface Card)”, and an example of the virtual NW resource allocation of the SPP 20 is “ivshmem, vhost, vSwitch” The VM 5 is represented by “VM”, and the connection (path setting) between “NIC” and the virtual NW resources “ivshmem, vhost, vSwitch” and “VM” is represented by a bold solid line.
SPP can flexibly perform SFC while maintaining the high speed of DPDK.

Internet Engineering Task Force (IETF), J. Halpern, Ed. Ericsson, C. Pignataro, Ed. Cisco, October 2015. Service Function Chaining (SFC) Architecture ”, [online], [searched July 20, 2016] Internet <URL: https://www.ietf.org/rfc/rfc7665.txt> IntelDPDK, [online], [searched July 20, 2016], Internet <URL: http://dpdk.org/> Soft Patch Panel, [online], [Search July 20, 2016], Internet <URL: http://dpdk.org/browse/apps/spp/>

  However, since the SPP requires an operation on the command line, there is a problem that the operation on the command line is complicated. For example, as shown in FIG. 15A, it is considered that complicated operations such as inputting a unique command from the command line 31 have to be performed, which makes operation difficult.

  The present invention has been made in view of such a background. The present invention abstracts the operation of the SPP and provides a virtual machine connection control system and a virtual machine connection control method that can be intuitively operated by a GUI. The issue is to provide.

  In order to solve the above-described problem, the invention according to claim 1 is a connection control system for a virtual machine that operates a plurality of virtual machines, and an SPP server including an SPP that manages resources including the virtual machines; A GUI terminal that cooperates with the SPP server to perform resource allocation and path setting for connecting the virtual machine by a GUI operation, and the GUI terminal controls the GUI operation, and the GUI A command generation function unit that generates a command to the SPP as an abstract command according to an operation, and the SPP server converts the generated abstract command into an SPP command usable by the SPP. A virtual machine connection control system comprising a command conversion function unit for conversion is provided.

  According to a fourth aspect of the present invention, there is provided a virtual machine connection control method executed by a virtual machine connection control system for operating a plurality of virtual machines, the virtual machine connection control system including the virtual machine. An SPP server that includes an SPP that manages resources included therein, and a GUI terminal that cooperates with the SPP server and performs resource allocation and path setting for connecting the virtual machine by a GUI operation. The step of controlling the GUI operation and the step of generating a command to the SPP as an abstract command in response to the GUI operation are executed, and the SPP server executes the generated abstract command as the abstract command. Virtual machine connection characterized by executing a step of converting the SPP into a usable SPP command It was your way.

By doing so, the operation of the SPP can be abstracted and intuitively operated using the GUI. For example, virtual network resources such as DPDK and vhost can be abstracted and a graphical operation can be realized.
Specifically, (1) service functions can be easily added and deleted by GUI operation, and system updating can be facilitated. (2) The operability of the system can be improved by graphically executing VMs and their connection operations and monitoring. (3) By connecting the VMs graphically and monitoring intuitively including intermediate states between VMs, it is possible to speed up the process in development and operation, and accelerate the service provision cycle.

  The command generation function unit may include a first abstraction command of a first abstraction level that causes the port object of the SPP to intervene in a path connecting the virtual machines, Generating a second abstraction command of a second abstraction level having a higher abstraction level than the first abstraction level, which is connected without interposing the port object of the SPP in a path connecting the virtual machines. The virtual machine connection control system is characterized by this.

  By doing in this way, GUI operation according to a user's intention is realizable. For example, at the abstraction level 1, a GUI operation in which an SPP port object is interposed in a path connecting virtual machines among the abstracted SPP resources can be performed. At the abstraction level 2, only the VM and its route can be GUI-operated.

  According to a third aspect of the present invention, there is provided a GUI event monitoring unit in which the command generation function unit monitors an event due to a user's GUI operation and notifies the occurrence of the event, and an object ID and an object state displayed on the GUI An object management unit that holds the command, a command generation unit that generates the abstract command based on a notification from the GUI event monitoring unit, a command transmission unit that sends the generated abstract command to an SPP server, The command conversion function unit includes: a command receiving unit that receives a message to which the abstract command is attached from the command transmission unit of the GUI terminal; and a function for expanding the abstract command into an SPP command. A management information storage unit for storing management information; and referring to the management information, the abstraction command Expand the SPP command was a connection control system of the virtual machine, characterized in that it comprises a command expansion section to be input to the SPP.

  As described above, the command generation function unit controls each unit to generate a command from the configuration change process by the GUI operation, and issues the abstract command generated by the GUI operation to the SPP. The command conversion function unit converts each abstract command into a command to be input to the SPP by controlling each unit. As a result, the operation of the SPP can be abstracted and operated intuitively using the GUI. Furthermore, service functions can be easily added and deleted by GUI operation, system update can be facilitated, and system operability can be improved. In addition, by intuitively monitoring including the intermediate state between VMs, it is possible to speed up the process in development and operation, and accelerate the service provision cycle.

  According to the present invention, it is possible to provide a virtual machine connection control system and a virtual machine connection control method that can abstract the operation of the SPP and intuitively operate the GUI.

It is a block diagram which shows the connection control system of the virtual machine which concerns on embodiment of this invention. It is a figure explaining GUI operation and command generation of a GUI terminal in the connection control system of the virtual machine which concerns on embodiment of this invention, and command issuance to SPP. It is an image figure which shows the connection structural example <comparative example 1: connection structure> by the technique of a nonpatent literature 3. FIG. It is an image figure which shows the connection setting example <comparative example 1: connection setting> by the technique of a nonpatent literature 3. FIG. FIG. 2 is a diagram illustrating <Example 1: connection configuration: abstraction level 1> of the connection control system for a virtual machine according to the embodiment of the present invention, where (a) is a reprint of FIG. 2 and (b) is FIG. It is a figure which shows the connection structure by abstracted SPP displayed on the GUI screen of. It is a figure which shows <Example 1: connection structure: abstraction level 2> of the connection control system of the virtual machine which concerns on embodiment of this invention. It is an image figure which shows the example of a connection change by the technique of a nonpatent literature 3 <comparative example 2: connection change>, (a) shows before the change of a network route, (b) shows after the change of a network route. It is a figure which shows <Example 2: Connection change: Abstraction level 1> of the connection control system of the virtual machine which concerns on embodiment of this invention, (a) is before a network route change, (b) is a network route. It is a figure which shows after a change. It is a figure which shows <Example 2: Abstraction level 2> of the connection control system of the virtual machine which concerns on embodiment of this invention, (a) is before a network path change, (b) is after a network path change. Show. It is a figure which shows <Example 3: Command expansion | deployment: Abstraction level 1> of the connection control system of the virtual machine which concerns on embodiment of this invention, (a) shows before command expansion, (b) shows after command expansion. FIG. It is a figure which shows <Example 3: Command expansion | deployment: Abstraction level 2> of the connection control system of the virtual machine which concerns on embodiment of this invention, (a) shows before command expansion, (b) shows after command expansion. FIG. It is a figure which shows the relationship of the object in the path | route which connects VM and VM, (a) is an object of the technique of a nonpatent literature 3, (b) is an object of the abstraction level 1 of this embodiment, (c). FIG. 4 is a diagram illustrating an object at an abstraction level 2 of the present embodiment. It is a figure which shows an example of the data structure of the resource stored in the management information storage part of the connection control system of the virtual machine which concerns on embodiment of this invention. It is a figure which shows the connection pattern of the resource of the connection control system of the virtual machine which concerns on embodiment of this invention, (a) is connection to VM, (b) is connection to NIC, (c) is connection to port FIG. It is a figure explaining the outline | summary of SPP, (a) is the hardware block diagram, (b) is the image figure of the resource management of the SPP.

A virtual machine connection control system and the like in a mode for carrying out the present invention (hereinafter referred to as “the present embodiment”) will be described below with reference to the drawings.
FIG. 1 is a configuration diagram illustrating a connection control system for a virtual machine according to an embodiment of the present invention. The virtual machine connection control system of this embodiment divides service functions into reusable module units and operates the virtual machine in an independent environment so that it can be used as needed like a component. This is an example applied to SFC to improve operability.
As shown in FIG. 1, the virtual machine connection control system 100 includes a GUI (Graphical User Interface) terminal 110 and an SPP server 120 connected to the network 1 at the back end. The GUI terminal 110 and the SPP server 120 are connected via a router 2, and the router 2 is connected to a network 1 composed of, for example, a WAN (Wide Area Network).

<GUI terminal>
The GUI terminal 110 cooperates with the SPP server 120 to perform resource allocation and path setting for connecting a virtual machine by a GUI operation.
The GUI terminal 110 includes a command generation function unit 111 and a GUI control unit 116. The command generation function unit 111 includes a GUI event monitoring unit 112, an object management unit 113, a command generation unit 114, and a command transmission unit 115.

The command generation function unit 111 generates an abstract command from the GUI operation. Specifically, the command generation function unit 111 generates a command to the SPP 124 of the SPP server 120 as an abstract command in response to a GUI operation (for example, a configuration change process by a GUI operation). Incidentally, the technique of Non-Patent Document 3 is an operation by the command line 31 (see FIG. 15), and there is no one that generates a command from the GUI operation.
Further, as will be described later in each <Example>, the command generation function unit 111 includes a first abstraction command of a first abstraction level in which an SPP port object is interposed in a path connecting virtual machines; A second abstraction command of a second abstraction level having a higher abstraction level than the first abstraction level, which connects without interposing an SPP port object in a path connecting virtual machines, is generated.

The GUI event monitoring unit 112 monitors an event (for example, connection and release of a link between a port and a VM) due to a user's GUI operation, and notifies the command generation unit 114 of the occurrence of the event.
The object management unit 113 holds the object ID (VM, port and link connecting them) displayed on the GUI screen 210 (see FIG. 2) and the object state (whether there is a link, which object is connected, etc.). To do.
The command generation unit 114 generates an abstract command based on the notification from the GUI event monitoring unit 112 and sends it to the command transmission unit 115.
The command transmission unit 115 sends the generated abstract command to the command reception unit 122 of the SPP server 120.
The GUI control unit 116 presents information on the screen using graphic elements, and controls a GUI operation that instructs the position and movement on the screen using a pointing device.

<SPP server>
The SPP server 120 includes a command conversion function unit 121, an SPP 124, and a plurality of virtual machines (VMs) 125. The command conversion function unit 121 includes a command reception unit 122, a command expansion unit 123, and a management information storage unit 123A.
The command conversion function unit 121 converts a command (abstraction command) generated according to the GUI operation into an original SPP command that can be used by the SPP 124. This command conversion is called command expansion. In addition, the command conversion function unit 121 inputs (inputs) a command to the SPP 124.
Note that the command conversion function unit 121 is not included in the SPP based on the technique of Non-Patent Document 3, but is added independently with the command generation function unit 111.
The command receiving unit 122 receives a message with an abstract command from the command transmitting unit 115 of the GUI terminal.

The management information storage unit 123A stores management information for expanding an abstract command into an SPP command. The management information storage unit 123A holds a relationship among SPP resources, port objects, and VM objects. Specifically, the management information storage unit 123A has a data structure (see FIG. 13) for allowing the user to operate SPP resources (NIC, ring) as abstracted port objects and VM objects. An example of the management information will be described later with reference to FIGS.
The command expansion unit 123 refers to the management information storage unit 123A, expands the abstract command into an SPP command, and inputs (inputs) it to the SPP 124.
The SPP 124 manages resources including virtual machines.

<Arrangement of Command Generation Function Unit 111 and Command Conversion Function Unit 121>
In the present embodiment, the GUI terminal 110 includes a command generation function unit 111, and the SPP server 120 includes a command conversion function unit 121. The above arrangement is based on the following reason.
When the GUI terminal 110 is updated, for example, when a GUI operation is performed, the GUI terminal 110 must closely observe the transition of the GUI screen. Specifically, the GUI control unit 116 monitors the GUI operation, and when the GUI operation is performed, the command generation function unit 111 must quickly generate a command from the GUI operation. If the command generation function unit 111 is installed outside the GUI terminal 110 via the network 1, there is a delay from the GUI operation to the generation of the command. For this reason, it is better that the command generation function unit 111 is in the GUI terminal 110. Once the command is generated, there is no delay problem even if the command itself is transmitted to the SPP server 120 via the network 1.
On the other hand, the reason why the command conversion function unit 121 is on the SPP server 120 side is that it can be managed collectively when there are a plurality of GUI terminals 110.

The operation of the virtual machine connection control system 100 configured as described above will be described below.
[Overview]
FIG. 2 is a diagram for explaining GUI operation and command generation of the GUI terminal and command issuance to the SPP in the virtual machine connection control system according to the embodiment of the present invention.
As illustrated in FIG. 2, the GUI terminal 110 includes a command generation function unit 111 and a GUI screen 210 that displays a GUI operation.
The GUI terminal 110 updates and reflects in the GUI based on the resource information (not shown) acquired from the virtual machines VM # 1 to # 5 of the SPP server 120. In FIG. 2, the GUI screen 210 displays ports Port # 1, # 2, virtual machines VM # 1- # 5, a line connecting them, and a module menu 150. Here, the port Port # 1 is a connection point of the load tool A (one of the test modules) (in the DPDK, the end point of the NW is referred to as Port), and the port Port # 2 is a traffic measurement point (of the monitoring module) 1). In addition, white arrows (⇒ marks) in FIG. 2 are pointing points of a pointing device such as a mouse.

2, the connection between VMs is changed by the GUI operation by performing a GUI operation in which the position of the VM or the like on the GUI screen 210 is designated or moved by the pointing point of the pointing device. Is possible.
In addition, the command generation function unit 111 issues a command (abstraction command) to the SPP 124 of the SPP server 120 (see symbol b in FIG. 2).
The SPP server 120 updates and reflects the GUI terminal 110 to the GUI based on the resource information acquired from the virtual machines VM # 1 to # 5 of the SPP server 120 (see symbol c in FIG. 2). Thereby, on the GUI terminal 110 side, the user can operate the SPP resources (NIC, ring) as abstracted port objects and VM objects.

[Application example]
An example using the technique of Non-Patent Document 3 will be described in <Comparative Example>, and an example of this embodiment will be described in <Example>.
<Comparative Example 1>
FIG. 3 is an image diagram showing a connection configuration example <comparative example 1: connection configuration> according to the technique of Non-Patent Document 3. The arrows in FIG. 3 indicate that network resources and the like are connected in this arrow direction.
3 and 4 (described later) used in <Comparative Example 1> are image diagrams for explanation. 3 and 4, when abstraction is not performed (when <Example 1> is not used), when an operation using a GUI is attempted, an SPP object can be expressed in this way. Note that FIG. 5 and FIG. 6 (described later) used in <Example 1> to be described later are diagrams showing operations by an actual GUI. Incidentally, the technique of Non-Patent Document 3 is an operation by a command line to the last, and there is no GUI expression as shown in FIGS.

FIG. 3 is an example of an image when a process in SPP and network resources are expressed as a GUI. For example, the image diagram of FIG. 3 represents the SPP 20 of the inter-VM connection device 10 shown in FIG. 15A as a GUI.
In the connection configuration example by the SPP in FIG. 3, the processes and network resources by the SPP are as follows.
Assume that there are VNF1, VNF2,..., FWD0, FWD1,. The FWD0 to FWD3 are forwarders of the process, and are represented by id: sec1 to id: sec5. The VNF1 to VNF3 are applications that run on the VM of the process, and are expressed as id: sec6 to id: sec8. VNF1, VNF2,... Correspond to, for example, VM5 shown in FIG. FWD0, FWD1,... Are processes that are not shown in FIG. 15A, but are operating in the background, and transferring the network.

  Network resources in the SPP are ring0, ring1,..., NIC0, NIC1,. .. Correspond to the insertion port of the SPP 20 shown in FIG. 15A, and the NIC0, NIC1,... Correspond to the NIC of the physical port 7 shown in FIG.

  In the connection configuration example shown in Fig. 3, R (Received eXchange) of NIC0 is connected to T (Transmit eXchange) of process FWD0, R of FWD0 is connected to T of ring0, and R of ring0 is connected. Connect to T of VNF1. Similarly, connect R of VNF1 to T of ring1 and connect R of ring1 to T of FWD1. Connect R of FWD1 to T of ring2 and connect R of ring2 to T of VNF2. And connect R of VNF2 to T of ring3, and connect R of ring3 to T of FWD2 (FWD2 described by id: sec4). Connect R of FWD2 to T of ring4, and connect R of ring4 to T of VNF3. Then connect R of VNF3 to T of ring5, connect R of ring5 to T of FWD3, and connect R of FWD3 to T of NIC1.

FIG. 4 is an image diagram showing a connection setting example <comparative example 1: connection setting> according to the technique of Non-Patent Document 3.
In the connection setting example of FIG. 4, R of NIC0 is connected to T of FWD0, R of FWD0 is connected to T of ring0, and R of ring0 is connected to T of VNF1. Connect R of VNF1 to T of ring1, connect R of ring1 to T of FWD1, and connect R of FWD1 to T of NIC1.

  To set the network path of FIG. 4, enter the following command: This command input description method conforms to the SPP specification of Non-Patent Document 3. In the following command, sec is a secondary process and describes the processes VNF and FWD in the SPP. Each numerical value is an id of the process or network resource. When the following command is input, connection setting shown in FIG. 4 is performed.

SPP> sec 0 ； add ring 0
SPP> sec 0 ； add ring 1
SPP> sec 1; add ring 0
SPP> sec 1; add ring 1
SPP> sec 2 ； add ring 0
SPP> sec 2 ； add ring 1
SPP> sec 2; patch 0 1
SPP> sec 0 ； patch 0 2
SPP> sec 1; patch 3 1
SPP> sec 2; forward
SPP> sec 1; forward
SPP> sec 0 ； forward

<Example 1>
In the first embodiment, the connection processing (virtual NW resource) of the virtual switch is expressed in an abstract manner. <Example 1> is compared with <Comparative example 1> according to the technique of Non-Patent Document 3.
FIG. 5 is a diagram showing <Example 1: connection configuration: abstraction level 1> of the connection control system for a virtual machine according to the embodiment of the present invention, (a) is a diagram showing FIG. 2 again, (b) ) Is a diagram showing an abstracted SPP connection configuration displayed on the GUI screen 210 of FIG. The virtual switch connection process of FIG. 3 is expressed in an abstract manner as shown in FIG.

  As shown in FIG. 5B, the SPP resource is abstracted and displayed on the GUI screen 210 (see FIGS. 2 and 5A) of the GUI terminal 110. In the connection setting example of FIG. 5, T of NIC0 is connected to port p1, connected to T of VNF1 through p1, R of VNF1 is connected to p2, p2 is connected to p4, and VNF2 is connected through p4. Connect to T. Connect R of VNF2 to p5, connect p5 to p7, and connect to T of VNF3 via p7. Connect R of VNF3 to p8, and connect to R of NIC1 via p8. The objects include ring and NIC, which are collectively called port p.

As can be seen by comparing the connection configuration of <Example 1> with <Comparative Example 1> (see FIG. 3), FIG. 5B shows the process FWD in SPP and the network resource in SPP by abstracting SPP resources. The ring is gone and replaced with port p.
Incidentally, it is the original SPP command that describes each process in the SPP (FWD, VNF, etc.) one by one. However, what is really needed for operation is not the above-mentioned process FWD but the purpose of originally connecting the ring between where and where. In this embodiment, abstraction is performed so as to highlight the purpose to be originally realized. That is, by abstracting, the details of the SPP are hidden from the user.
In FIG. 5 (b), the FWD and the ring are eliminated and are abstracted. In addition to the apparent abstraction (visual abstraction) of not showing an extra thing, the effect of intuitive operability improvement by command abstraction (command simplification) is great.

  In the conventional example (<comparative example 1>), as shown in FIG. 15A, complicated operations such as inputting a unique command from the command line 31 have to be performed. In the first embodiment, the operation of the SPP is abstracted and the GUI operation associated therewith is made possible. Then, a command to the SPP is generated according to the GUI operation. The command generation function unit 111 (see FIGS. 2 and 5A) of the GUI terminal 110 is responsible for generating a command to the SPP in response to a GUI operation. In the present embodiment, since a command to the SPP is generated in response to a GUI operation, it is not necessary to input a command on the command line.

As indicated by a symbol d in FIG. 5B, the command generation unit 114 (see FIG. 1) of the command generation function unit 111 generates an abstract command by a GUI operation. The abstraction command is a command for abstracting the SPP resource. Specific examples of the abstraction command will be described later.
The abstracted SPP resource is reflected by a GUI operation. Specifically, the GUI event monitoring unit 112 of the command generation function unit 111 (see FIG. 1) monitors an event (connection and release of a link between a port and a VM) caused by a user GUI operation, and generates a command when the event occurs. Notification to the unit 114. Further, the object management unit 113 holds the ID and object state (whether there is a link, which object is connected, etc.) of the object (VM, port and link connecting them) displayed on the GUI. The command generation unit 114 generates an abstract command based on the notification from the GUI event monitoring unit 112.

On the other hand, on the SPP server 120 side, in order to absorb the difference between the abstracted expression and the original expression, command conversion (command expansion) for converting the abstract command into the original SPP command is performed.
When returning an abstracted command to the original SPP command, it is impossible to see, for example, which FWD is issued only by the abstracted command. Therefore, in the present embodiment, information indicating which FWD is managed by which port is managed is stored as management information in the management information storage unit 123A (see FIG. 1). The command conversion function unit 121 (see FIG. 1) of the SPP server 120 refers to the management information in the management information storage unit 123A, interprets the issued abstract command, and converts it into the original SPP command.

Next, abstract level 2 having a higher level of abstraction will be described.
The abstraction level 2 is a further abstraction (high degree of abstraction) of the abstraction level 1 (see FIG. 5).
FIG. 6 is a diagram illustrating <Example 1: connection configuration: abstraction level 2> of the connection control system for virtual machines according to the embodiment of the present invention.
As shown in Figure 6, at level 2 abstraction, NIC0 T is connected to VNF1 T, VNF1 R is connected to VNF2 T, VNF2 R is connected to VNF3 T, and VNF3 R is connected. Connect to R on NIC1.

The command generation unit 114 (see FIG. 1) of the command generation function unit 111 generates an abstract level 2 abstract command by a GUI operation. In addition, the command conversion function unit 121 (see FIG. 1) of the SPP server 120 uses an abstract command abstracted at the abstract level 2 to absorb the difference between the abstracted expression and the original expression. Command conversion (command expansion) is performed to convert the command to
As illustrated in FIG. 6, the virtual machine connection control system 100 can allow the user to perform a GUI operation on only the VM and its path among the abstracted SPP resources. In addition, the user can select the degree of abstraction of the GUI.

Here, the user can select whether the abstraction of the GUI is abstract level 1 or abstract level 2. In either case of abstraction level 1 or abstraction level 2, the command generation function unit 111 (see FIG. 2) of the GUI terminal 110 generates a command to the SPP at the corresponding abstraction level according to the GUI operation. To do. Then, the GUI terminal 110 issues a command to the SPP 124 of the SPP server 120 (see symbol b in FIG. 2). Further, the command conversion function unit 121 performs command conversion and input (input) to the SSP that converts the abstract command into the original command. Note that since the SPP 124 operates only with commands that comply with the technology of Non-Patent Document 3, command conversion and input to the SSP is indispensable. However, the command conversion function and the command generation function may be installed anywhere in the connection control system 100 of the virtual machine.
In the above, <Comparative Example 1> using the technique of Non-Patent Document 3 and <Example 1> of the connection setting example of the present embodiment have been described. In <Example 1>, abstraction level 1 and abstraction level 2 having different degrees of abstraction have been described.

Next, an example of a procedure for changing the network route will be described. <Comparative Example 2> using the technique of Non-Patent Document 3 and <Example 2> of the present embodiment corresponding thereto will be described.
<Comparative Example 2>
FIG. 7 is an image diagram showing a connection change example <comparative example 2: connection change> according to the technique of Non-Patent Document 3, wherein (a) shows before the change of the network route, and (b) shows after the change of the network route. An arrow in FIG. 7 indicates that a network resource or the like is connected in the direction of the arrow. FIG. 7 is an example of an image when a process in SPP and network resources are expressed as a GUI.
Note that, as described above, the technique of Non-Patent Document 3 is only an operation by a command line, and does not have a GUI expression as shown in FIG. In FIG. 7, id is described above the VNF block (for example, id: sec4 is described above the VNF1 block in FIG. 7A). This id is described in the SPP (id in the SPP). And is described here for convenience of explanation (the same applies to the respective drawings hereinafter).

  Before the connection change in FIG. 7 (a), R of NIC0 is connected to T of FWD0, R of FWD0 is connected to T of ring0, and R of ring0 is connected to T of VNF1. R of VNF1 is connected to T of ring1 and R of ring1 is connected to T of FWD1. R of FWD1 is connected to T of ring2, R of ring2 is connected to T of FWD3, and R of FWD3 is connected to T of NIC1.

  After the connection change in Fig. 7 (b), the R of ring2 is connected to the T of VNF2 (see symbol e in Fig. 7 (b); see the white arrow), and the path that connects the R of VNF2 to the T of ring3 is added Then, add a path connecting R of ring3 to T of FWD3 (see symbol g in Fig. 7 (b)).

In order to set the change of the network path in FIG. 7, the following command is input.
SPP> sec 2; patch 2 5
SPP> sec 5 ； add ring 3
SPP> sec 3; add ring 3
SPP> sec 5; patch 2 5
SPP> sec 5; patch 5 3
SPP> sec 3; patch 5 3

<Example 2>
<Example 2> expresses a virtual switch connection process (virtual NW resource) in an abstract manner compared to <Comparative Example 2> according to the technique of Non-Patent Document 3.
FIG. 8 is a diagram illustrating <Example 2: connection change: abstraction level 1> of the virtual machine connection control system according to the embodiment of the present invention, in which (a) is before the network path is changed, and (b). Indicates after the network path is changed.
Before the connection change in Fig. 8 (a), connect NIC0 R to port p1, connect to VNF1 T through p1, connect VNF1 R to p2, connect p2 to p3, and p3 Is connected to R of NIC1.
Here, as understood from <Example 2> (see FIG. 8A) compared to <Comparative Example 2> (see FIG. 7A), the process VNF and the network resource ring disappear, and the port p Has been replaced.

  After the connection change in FIG. 8 (b), the output of p3 is connected to T of VNF2 (see symbol h in FIG. 8 (b); see the white arrow), and a path for connecting R of VNF2 to p4 is added ( 8), a path connected to R1 of NIC1 via p4 is added (see symbol j in FIG. 8B).

In order to set the change of the network route in FIG. 8, the following abstraction level 1 abstraction command is input.
SPP> port3 → vnf2
SPP> vnf2 → port4
SPP> port4 → NIC1
As described above, in <Embodiment 2: Abstraction level 1>, commands are also abstracted along with the abstraction of GUI. The abstracted command (abstract command of abstraction level 1) is expanded into the original SPP command by the command conversion function unit 121 (see FIG. 1) (see FIG. 10 described later).

Next, abstract level 2 having a higher level of abstraction will be described.
FIG. 9 is a diagram illustrating <Example 2: abstraction level 2> of the connection control system for a virtual machine according to the embodiment of the present invention, where (a) is before the network path is changed, and (b) is the network path. After the change.
The abstraction level 2 is a further abstraction (high degree of abstraction) of the abstraction level 1 (see FIG. 8).
As shown in FIG. 9A, before abstraction level 2 connection change, T of NIC0 is connected to T of VNF1, and R of VNF1 is connected to R of NIC1.

  As shown in FIG. 9 (b), after the abstraction level 2 connection is changed, NIC1's R is connected to VNF2's T (see symbol k in FIG. 9 (b); white arrow), and VNF2's R is changed. A route connected to T of NIC1 is added (see reference numeral 1 in FIG. 9B).

In order to set the change of the network path in FIG. 9, the following abstraction level 2 abstraction command is input.
SPP> vnf1 → vnf2
SPP> vnf2 → NIC1
As described above, in <Embodiment 2: Connection change: Abstraction level 2>, a command is also abstracted along with the abstraction of the GUI. The abstracted command (abstraction command of abstraction level 2) is expanded into the original SPP command by the command conversion function unit 121 (see FIG. 1) (see FIG. 11 described later).
In the above, <Comparative Example 2> using the technique of Non-Patent Document 3 and <Example 2: Connection change> of the present embodiment have been described. In <Example 2: Connection change>, abstraction level 1 and abstraction level 2 having different degrees of abstraction have been described.

<Example 3>
<Embodiment 3> describes command expansion in the connection change.
FIG. 10 is a diagram illustrating <Example 3: command expansion: abstraction level 1> of the connection control system for a virtual machine according to the embodiment of the present invention, where (a) is before command expansion and (b) is a command. Shown after expansion.
FIG. 10 shows an example of command expansion in switching from port → vnf1 to port1 → port2.
Before command change (abstract command) in FIG. 10A, before switching, NIC0 T is connected to P1 and connected to VNF1 via p1 (symbol m in FIG. 10A; broken arrow) VNF1 is connected to p2 and connected to R of NIC1 via p2.
Before the command expansion (abstraction command) in FIG. 10A, after the connection is switched, the output of p1 is switched to p2 across VNF1 (see symbol n in FIG. 10A).
The abstract command (abstract level 1) is expanded into the original SPP command.

After command expansion (SPP command) in Fig. 10 (b), before switching, connect NIC0 T to ring1 T, ring1 R to FWD1 T, and FWD1 R to ring2 T They are connected (reference o in FIG. 10B; see broken arrow), and R of ring2 is connected to T of VNF1. R of VNF1 is connected to T of ring3, R of ring3 is connected to T of FWD2, and R of FWD2 is connected to T of ring4. R of ring4 is connected to R of NIC1.
After the command expansion (SPP command) in FIG. 10B, after switching, FWD1 R is switched to ring3 T across ring2 and VNF1 (see symbol p in FIG. 10B).

The command expansion in switching from port1 → vnf1 to port1 → port2 in FIG. 10 is as follows.
Input command (abstraction command: abstraction level 1)
SPP> port1 → port2
Is expanded into the following SPP command.
SPP> sec 1; del ring 2
SPP> sec 1; add ring 3
SPP> sec 1; patch 2 3
The “sec 1” is a notation defined by the SPP.

FIG. 11 is a diagram illustrating <Example 3: command expansion: abstraction level 2> of the connection control system for a virtual machine according to the embodiment of the present invention, where (a) is before command expansion and (b) is a command. Shown after expansion.
FIG. 11 shows an example of command expansion in switching from port1 → vnf1 to port1 → port2.
Before the command expansion (abstraction command: abstraction level 2) in FIG. 11 (a) and before reconnection, T of NIC0 is connected to VNF1, VNF1 is connected to VNF2 (symbol q in FIG. 11 (a)) ; See broken arrow), VNF2 is connected to R of NIC1.
Before the command expansion in FIG. 11A (abstraction command: abstraction level 2), after reconnection, VNF1 is connected so as to be connected to R of NIC1 (see symbol r in FIG. 11B).
The abstract command (abstract level 2) is expanded into an abstract command (abstract level 1).

After command expansion in Fig. 11 (b) (abstraction command: abstraction level 1), before switching, connect NIC0 T to p1, connect pNF to VNF1, and connect VNF1 to p2. , P2 is connected to VNF2 (symbol s in FIG. 11B; see broken line arrow), VNF2 is connected to p3, and is connected to R of NIC1 via p3.
After the command expansion in FIG. 11B (abstraction command: abstraction level 1), VNF1 is switched to p3 across p2 and VNF2 (see symbol t in FIG. 11B).

Command expansion in vnf1 → NIC1 reconnection in FIG. 11A (abstraction command: abstraction level 2) and command expansion in vnf1 → NIC1 reconnection in FIG. 11B (abstraction command: abstraction level) 1) is as follows.
Input command (abstraction command: abstraction level 2)
SPP> vnf1 → NIC1
Is converted into the following abstract command (abstract level 2 → abstract level 1).
SPP> port2 remove vnf2
SPP> port3 remove vnf2
SPP> port2 → port3
FIG. 11 shows an example in which an abstract command (abstraction level 2) is expanded into an abstract command (abstraction level 1). However, an abstract command (abstraction level) is obtained in the same manner as in FIG. It is also possible to expand 2) to the original SPP command.

[Object relationships]
Next, the relationship between objects in a path connecting VMs will be described.
FIG. 12 is a diagram illustrating the relationship between objects in a path connecting VMs to each other. (A) is an object of the technology (existing technology) of Non-Patent Document 3, and (b) is an abstraction of the present embodiment. Level 1 object, (c) shows an abstract level 2 object of the present embodiment.
In the technique of Non-Patent Document 3 shown in FIG. 12A, an object FWD (DPDK process) and an object Ring (DPDK resource) are included in the simplest path connecting VMs to VMs. In the technique of Non-Patent Document 3, a minimum set of objects FWD and Ring is necessary even for the simplest route.
In the abstraction level 1 of the present embodiment shown in FIG. 12B, only the object Port enters the path connecting VM and VM.
In the abstraction level 2 of the present embodiment shown in FIG. 12C, there is no object in the path connecting VM and VM.
The virtual machine connection control system 100 (see FIG. 1) grasps the relationship between the above objects.

Resource data structure
Next, the data structure of the resource will be described.
FIG. 13 is a diagram illustrating an example of a data structure of resources stored in the management information storage unit 123A (see FIG. 1).
In the resource data structure shown in FIG. 13, the port ports to which the respective data belong belong to the vm data structure as follows.

  The object which is the port port has the following as another data structure.

  The port port has rx and tx, and here, rx: {resource_id: yyy}, tx: {resource_id: zzz}. resource_id is the original id of the SPP. By having this resource_id in the data structure of vm, for example, it is possible to cope with a case where a VM is directly connected to a VM (see FIG. 12C).

[Resource connection pattern]
Next, resource connection patterns will be described.
FIG. 14 is a diagram showing a connection pattern of resources, where (a) shows a connection to a VM, (b) shows a connection to a NIC, and (c) shows a connection to a port.
For example, in the resource data structure of FIG. 13, vm has this resource_id, so that it is possible to connect to the VM shown in FIG. That is, as shown in FIG. 14 (a), when switching VM (id: v1) to VM (id: v2), first, to which port of VM (id: v1) has a data structure? Check if it is a corresponding operation. Here, since VM (id: v1) is an operation corresponding to Port (id: p1), it is seen where Port (id: p1) is connected. Here, Port (id: p1) is connected to VM (id: v2). When switching VM (id: v1) to VM (id: v2), the connection destination is traced from the data structure of the resource, and a command is issued for switching.
The same applies to the connection to the NIC (see FIG. 14B) and the connection to the port (see FIG. 14C).

As described above, the connection control system 100 (see FIG. 1) of the virtual machine according to the present embodiment cooperates with the SPP server 120 including the SPP that manages resources including the virtual machine and the virtual machine. And a GUI terminal 110 that performs resource allocation and path setting for connecting to each other by a GUI operation. The GUI terminal 110 also includes a command generation function unit 111 that generates a command to the SPP as an abstract command in response to a GUI operation. The SPP server 120 includes a command conversion function unit 121 that converts the generated abstract command into an SPP command usable by the SPP.
In particular, the virtual machine connection control system 100 generates a command (abstraction command) to the SPP in response to a GUI operation, and issues a command to the SPP, and an SPP resource (NIC, ring). ) And a management information storage unit 123A having a data structure for allowing the user to operate as an abstracted port object and VM object, and holding the relationship between the SPP resource, the port object, and the VM object, and the management information is referred to And a command conversion function unit 121 that converts the generated command (abstraction command) into a command to be input to the SPP.

In this way, by generating a command from the configuration change process by the GUI operation and converting it to a command to be input to the SPP, the operation of the SPP can be abstracted and intuitively operated by the GUI. For example, virtual network resources such as DPDK and vhost can be abstracted and a graphical operation can be realized.
Specifically, (1) service functions can be easily added and deleted by GUI operation, and system updating can be facilitated. (2) The operability of the system can be improved by graphically executing VMs and their connection operations and monitoring. (3) By connecting the VMs graphically and monitoring intuitively including intermediate states between VMs, it is possible to speed up the process in development and operation, and accelerate the service provision cycle.

  As described above, the SPP can flexibly perform SFC while maintaining the high speed of DPDK, but the operation using the command line 31 (see FIG. 15) is complicated. That is, complicated operations such as inputting a unique command from the command line 31 have to be performed, which makes operation difficult. On the other hand, in the present embodiment, it is possible to operate intuitively by GUI operation while taking advantage of the above advantages of the SPP and eliminating the operation of the command line 31 which is a problem of the SPP.

  In this embodiment, the command generation function unit 111 also connects the first abstraction command of the first abstraction level that interposes the SPP port object in the path connecting the virtual machines and the path connecting the virtual machines. And a second abstraction command of a second abstraction level having a higher abstraction level than the first abstraction level, which is connected without interposing an SPP port object.

  By doing in this way, GUI operation according to a user's intention is realizable. For example, at the abstraction level 1, a GUI operation in which an SPP port object is interposed in a path connecting virtual machines among the abstracted SPP resources can be performed. At the abstraction level 2, only the VM and its route can be GUI-operated. Further, the user can select the degree of abstraction of the GUI. By abstracting in this way, it is possible to hide details of the SPP from the user.

  In this embodiment, the command generation function unit 111 monitors an event (connection and release of a link between a port and a VM) by a user GUI operation, and notifies the command generation unit 114 when an event occurs. 112, an object management unit 113 that holds IDs and object states (whether there are links, which objects are connected, etc.) of objects (VMs, ports and links connecting them) displayed on the GUI, and GUI event monitoring The command generation unit 114 generates an abstract command based on the notification from the unit 112 and sends the abstract command to the command transmission unit 115, and the command transmission unit 115 transmits the abstract command to the command reception unit 122 of the server. In addition, the command conversion function unit 121 receives a message from the command transmission unit 115 of the GUI terminal 110, and a management information storage unit stores management information for expanding an abstract command into an SPP command. 123A, and a command expansion unit 123 that expands an abstract command into an SPP command with reference to management information and sends the command to the SPP.

  As described above, the command generation function unit 111 generates a command (abstract command) from the configuration change process by the GUI operation by controlling each unit, and issues the command generated by the GUI operation to the SPP. The command conversion function unit 121 controls each unit to convert this abstract command into a command to be input to the SPP. As a result, the operation of the SPP can be abstracted and operated intuitively using the GUI. Furthermore, service functions can be easily added and deleted by GUI operation, system update can be facilitated, and system operability can be improved. In addition, by intuitively monitoring including the intermediate state between VMs, it is possible to speed up the process in development and operation, and accelerate the service provision cycle.

Of the processes described in the above embodiment, all or part of the processes described as being performed automatically can be performed manually, or the processes described as being performed manually can be performed. All or a part can be automatically performed by a known method. In addition, the processing procedures, control procedures, specific names, and information including various data and parameters shown in the above-described document and drawings can be arbitrarily changed unless otherwise specified.
Further, each component of each illustrated apparatus is functionally conceptual, and does not necessarily need to be physically configured as illustrated. That is, the specific form of distribution / integration of each device is not limited to the one shown in the figure, and all or a part of the distribution / integration may be functionally or physically distributed in arbitrary units according to various loads or usage conditions. Can be integrated and configured.

  Each of the above-described configurations, functions, processing units, processing means, and the like may be realized by hardware by designing a part or all of them with, for example, an integrated circuit. Further, each of the above-described configurations, functions, and the like may be realized by software for interpreting and executing a program that realizes each function by the processor. Information such as programs, tables, and files for realizing each function is stored in a memory, a hard disk, a recording device such as an SSD (Solid State Drive), an IC (Integrated Circuit) card, an SD (Secure Digital) card, an optical disk, etc. It can be held on a recording medium.

DESCRIPTION OF SYMBOLS 1 Network 2 Router 100 Virtual machine connection control system 110 GUI terminal 111 Command generation function part 112 GUI event monitoring part 113 Object management part 114 Command generation part 115 Command transmission part 116 GUI control part 120 SPP server 121 Command conversion function part 122 Command Reception unit 123 Command expansion unit 123A Management information storage unit 124 SPP
125 Virtual Machine (VM)
150 Module menu 210 GUI screen VM Virtual machine (object)
Port port (object)
NIC, ring SPP resource (object)

Claims (4)

A virtual machine connection control system for operating a plurality of virtual machines,
An SPP server comprising an SPP (Soft Patch Panel) for managing resources including the virtual machine;
A GUI terminal that cooperates with the SPP server to perform resource allocation and path setting for connecting the virtual machine by GUI (Graphical User Interface) operation,
The GUI terminal is
A GUI control unit for controlling the GUI operation;
A command generation function unit that generates a command to the SPP as an abstract command in response to the GUI operation;
The SPP server
A virtual machine connection control system comprising: a command conversion function unit that converts the generated abstract command into an SPP command usable by the SPP. The command generation function unit
A first abstraction command at a first abstraction level for interposing the SPP port object in a path connecting the virtual machines;
Generating a second abstraction command of a second abstraction level having a higher abstraction level than the first abstraction level, which is connected without interposing the SPP port object in a path connecting the virtual machines. The virtual machine connection control system according to claim 1, wherein: The command generation function unit
A GUI event monitoring unit that monitors an event caused by a user GUI operation and notifies the occurrence of the event;
An object management unit that holds the object ID and object state displayed on the GUI;
A command generation unit that generates the abstract command based on a notification from the GUI event monitoring unit;
A command transmission unit that sends the generated abstract command to an SPP server,
The command conversion function unit
A command receiving unit for receiving a message to which the abstract command is attached from the command transmitting unit of the GUI terminal;
A management information storage unit for storing management information for expanding the abstraction command into an SPP command;
The virtual machine connection control system according to claim 1, further comprising: a command expansion unit that expands the abstraction command into an SPP command with reference to the management information and inputs the command to the SPP. A virtual machine connection control method executed by a virtual machine connection control system for operating a plurality of virtual machines,
The virtual machine connection control system includes an SPP server including an SPP (Soft Patch Panel) that manages resources including the virtual machine, and resource allocation and path setting for connecting the virtual machine in cooperation with the SPP server. A GUI terminal for performing GUI (Graphical User Interface) operation,
The GUI terminal is
Controlling the GUI operation;
Generating a command to the SPP as an abstract command in response to the GUI operation;
The SPP server
The virtual machine connection control method, comprising: converting the generated abstract command into an SPP command usable by the SPP.

Images