JP2020115267A - Virtual machine management device, virtual machine management method, and program - Google Patents

Abstract

To provide a virtual machine management device, a virtual machine management method, and a program which can monitor a state of a virtual machine not via the virtual machine.SOLUTION: A virtual machine management device 1 comprises: a monitoring unit 2 which monitors a storage region 25 possessed by a physical machine 21, corresponding to a virtual storage region 28 constructed in the physical machine 21 and used by a virtual machine 23; and an acquisition unit 3 which acquires state information 30 in a read-only state, the state information representing a state of the virtual machine 23 and the state information being produced when the virtual machine 23 performs writing of data into the storage region 25 via the virtual storage region 28.SELECTED DRAWING: Figure 1

Description

The present invention relates to a virtual machine management device that manages a virtual machine, a virtual machine management method, and a program.

A virtualization technique for building a virtual machine (VM) into a physical machine is known. In such a virtualization technique, in order to monitor the state of the virtual machine, a snapshot representing the state of the virtual machine is acquired from the virtual machine.

As a related technique, Patent Document 1 discloses a restoration device that safely restores a virtual disk of a virtual machine when the virtual machine is infected with a virus. According to the restoration device, the snapshot is acquired from the storage unit in which the virtual disk of the virtual machine is stored.

Japanese Unexamined Patent Publication No. 2015-153298

However, the restoration device disclosed in Patent Document 1 must acquire state information indicating the state of the virtual machine such as a snapshot via the virtual machine. Therefore, when the virtual machine cannot be logged in, or the virtual machine is overloaded, or cannot communicate with the virtual machine, the restoration device cannot acquire the snapshot and cannot monitor the state of the virtual machine.

An example of an object of the present invention is to provide a virtual machine management device, a virtual machine management method, and a program for monitoring the state of a virtual machine without going through the virtual machine.

In order to achieve the above object, a virtual machine management device according to one aspect of the present invention,
A monitoring unit for monitoring the storage area of the physical machine, which corresponds to the virtual storage area used by the virtual machine built in the physical machine;
An acquisition unit that acquires, in a read-only state, state information representing the state of the virtual machine generated when the virtual machine writes data to the storage area via the virtual storage area,
It is characterized by having.

In order to achieve the above object, the virtual machine management method according to one aspect of the present invention is
(A) monitoring a storage area of the physical machine, which corresponds to a virtual storage area used by a virtual machine built in the physical machine,
(B) acquiring, in a read-only state, state information representing the state of the virtual machine generated when the virtual machine writes data to the storage area via the virtual storage area,
It is characterized by having.

Further, in order to achieve the above object, a program according to one aspect of the present invention is
On the computer,
(A) monitoring a storage area of the physical machine, which corresponds to a virtual storage area used by a virtual machine built in the physical machine,
(B) acquiring, in a read-only state, state information representing the state of the virtual machine generated when the virtual machine writes data to the storage area via the virtual storage area,
Is executed.

As described above, according to the present invention, it is possible to monitor the state of a virtual machine without going through the virtual machine.

FIG. 1 is a diagram illustrating an example of a virtual machine management device. FIG. 2 is a diagram showing an example of a physical machine having a virtual machine management device. FIG. 3 is a diagram illustrating an example of a physical machine having a virtual machine management device of a modified example. FIG. 4 is a diagram illustrating an example of an operation of acquiring state information in the virtual machine management device. FIG. 5 is a diagram showing an example of an operation of referring to the state information in the virtual machine management device. FIG. 6 is a diagram illustrating an example of a computer that realizes the virtual machine management device.

(Embodiment)
Hereinafter, embodiments of the present invention will be described with reference to FIGS. 1 to 6.

[Device configuration]
First, the configuration of the virtual machine management device 1 according to the present embodiment will be described with reference to FIG. FIG. 1 is a diagram illustrating an example of the virtual machine management device 1.

The virtual machine management device 1 shown in FIG. 1 is a device that can check the state of a virtual machine without going through the virtual machine. Further, as shown in FIG. 1, the virtual machine management device 1 has a monitoring unit 2 and an acquisition unit 3.

Of these, the monitoring unit 2 monitors the storage area of the physical machine, which corresponds to the virtual storage area used by the virtual machine built in the physical machine. The acquisition unit 3 acquires, in a read-only state, state information representing the state of the virtual machine generated when the virtual machine writes data to the storage area via the virtual storage area (mounted read-only). The state information is, for example, a snapshot.

As described above, in the present embodiment, the virtual machine management device 1 can acquire the state information without the intervention of the virtual machine. Therefore, when the virtual machine cannot log in, or when the virtual machine is overloaded, or the virtual machine is overloaded. The state of the virtual machine can be monitored even when communication with the machine is not possible.

[System configuration]
Next, the configuration of the virtual machine management device 1 according to the present embodiment will be described more specifically with reference to FIG. FIG. 2 is a diagram showing an example of a physical machine having a virtual machine management device. As shown in FIG. 2, the system 20 according to the present embodiment has a physical machine 21 and an information processing device 22.

The physical machine 21 will be described in detail.
The physical machine 21 is a computer used to build the virtual machines 23 (23a, 23b). Specifically, the physical machine 21 builds a virtual machine 23 by executing a VMM (Virtual Machine Monitor) 24. The physical machine 21 is, for example, a server computer having a storage area 25, a communication unit 26, and the like. Further, the physical machine 21 is connected to the information processing device 22 connected to a network or the like via the communication unit 26.

The information processing device 22 is a computer used by an administrator who manages the virtual machine 23. Specifically, the information processing device 22 can access (read and write data) the virtual machine 23 via the communication unit 26 and a virtual communication unit (not shown) of the virtual machine 23.

Specifically, the information processing device 22 transmits to the physical machine 21 an instruction indicating a request for referring to the state information indicating the state of the virtual machine 23. Subsequently, when the information processing device 22 receives from the physical machine 21 a response indicating that the state information can be referred to, the information processing device 22 refers to the state information.

The information processing device 22 converts the status information into outputable output information, causes the output device connected to the information processing device 22 to output the output information, and presents it to the administrator. The output device is, for example, an image display device using a liquid crystal, an organic EL (Electro Luminescence), or a CRT (Cathode Ray Tube). Further, the image display device may include an audio output device such as a speaker. Further, the output device may be a printing device such as a printer.

The virtual machine 23 (23a, 23b) has a virtual OS (Operating System) 27 (27a, 27b), a virtual storage area 28 (28a, 28b), a virtual communication unit, and the like. The virtual machine 23 (23a, 23b) executes an application or the like on the virtual OS 27 (27a, 27b). The virtual OS 27 (27a, 27b) has a virtual file system 29 (29a, 29b).

The virtual machine 23 (23a, 23b) has a virtual storage area 28 (28a, 28b) constructed by the VMM 24 using the storage area 25 of the physical machine 20. Further, the virtual machine 23 (23a, 23b) has a virtual communication unit (not shown) constructed by the VMM 24 using the communication unit 26 included in the physical machine 21.

The virtual file system 29 (29a, 29b) is a function provided by the virtual OS 27 (27a, 27b) used for managing and operating the data stored in the virtual storage area 28 (28a, 28b). Specifically, when the virtual file system 29 stores data in the virtual storage area 28 of the virtual machine 23, the virtual file system 29 accesses the area allocated to each virtual machine 23 of the storage area 25 of the physical machine 21 (data Read and write).

For example, the virtual file system 29 stores state information 30a′ and 30b′ representing snapshots in the virtual storage area 28, as shown in FIG. Then, the state information 30a', 30b' is actually stored in the storage area 25 of the physical machine 21 as the state information 30a, 30b as shown in FIG.

The virtual machine management device 1 will be described in detail.
The monitoring unit 2 is provided in the physical machine 21 and monitors the storage area 25 used by the virtual machine 23 built in the physical machine 21. Specifically, the monitoring unit 2 monitors the area allocated to each virtual machine 23 in the storage area 25.

The acquisition unit 3 is provided in the physical machine 21 and has a file system compatible with the virtual file system 29 used in the virtual machine 23. Specifically, when the monitoring unit 2 detects the writing to the area corresponding to the virtual machine 23, the acquiring unit 3 uses the above-described file system to the area where the newly generated writing is detected. It has a function of acquiring corresponding state information in a read-only state.

Further, when the acquisition unit 3 receives a request for referring to the state of the virtual machine 23 from the information processing device 22 provided outside the physical machine 21, the acquisition unit 3 corresponds to the acquired virtual machine 23. The state information 30 is set in a state in which it can be referred to by the information processing device 22. After that, the acquisition unit 3 transmits to the information processing device 22 a response indicating that the state information can be referred to.

[Modification]
A modified example will be described with reference to FIG. FIG. 3 is a diagram illustrating an example of a physical machine having a virtual machine management device of a modified example.

In the modification, when the plurality of virtual machines 23 use different virtual OSs 27, the acquisition unit 3 has a file system compatible with the virtual file system 29 of each virtual OS 27. Specifically, as shown in FIG. 3, when the virtual file systems 29 of different types are provided, the acquisition unit 3 has a file system corresponding to each virtual file system 29.

For example, consider a case where the virtual machines 23a and 23b illustrated in FIG. 3 have different virtual OSs 27a and 27b, and the virtual file systems 29a and 29b included in the virtual OSs 27a and 27b are different from each other. In such a case, the acquisition unit 3 has a plurality of file systems compatible with different virtual file systems 29a and 29b.

Specifically, when the monitoring unit 2 detects writing to the area corresponding to the virtual machine 23a, the acquisition unit 3 uses a file system compatible with the virtual file system 29a and in the read-only state, The state information 31a corresponding to the area where the writing corresponding to the virtual machine 23a is detected is acquired.

Further, when the monitoring unit 2 detects the writing to the area corresponding to the virtual machine 23b, the acquisition unit 3 uses the file system compatible with the virtual file system 29b to read the virtual machine 23b in the read-only state. The state information 31b corresponding to the area where the writing corresponding to is detected is acquired.

Further, when the acquisition unit 3 receives from the information processing device 22 a request for obtaining permission to refer to the state information 31 corresponding to the virtual machine 23a or 23b, the acquisition unit 3 corresponds to the virtual machine 23a or 23b. The state information 31 to be set is set in a state in which it can be referred to by the information processing device 22. After that, the acquisition unit 3 transmits to the information processing device 22 a response indicating that the state information 31a or 31b can be referred to.

[Device operation]
Next, the operation of the virtual machine management apparatus according to the embodiment of the present invention will be described with reference to FIGS. FIG. 4 is a diagram illustrating an example of an operation of acquiring state information in the virtual machine management device. FIG. 5 is a diagram showing an example of an operation of referring to the state information in the virtual machine management device. In the following description, FIGS. 2 and 3 will be referred to as appropriate. Further, in the present embodiment, the virtual machine management method is implemented by operating the virtual machine management device. Therefore, the description of the virtual machine management method according to the present embodiment will be replaced with the following description of the operation of the virtual machine management apparatus.

The operation for acquiring the state information will be described with reference to FIG.
As shown in FIG. 4, first, the monitoring unit 2 monitors the areas allocated to the virtual machines 23 in the storage area 25 (step A1). Specifically, in step A1, the monitoring unit 2 monitors the storage area 25 corresponding to the virtual storage areas 28a and 28b used by the virtual machines 23a and 23b.

Subsequently, when the monitoring unit 2 detects the writing to the area corresponding to the virtual machine 23 (step A2: Yes), the acquiring unit 3 uses the file system to detect the newly generated writing. The state information 30 corresponding to the area is acquired in the read-only state (step A3). Further, when the monitoring unit 2 does not detect the writing (step A2: No), the process proceeds to step A1 and the monitoring unit 2 continues the monitoring.

Next, the operation when referring to the state information will be described with reference to FIG.
As shown in FIG. 5, first, the acquisition unit 3 receives a request for obtaining permission to refer to the state information 30 of the virtual machine 23 from the information processing device 22 provided outside the physical machine 21 (step B1).

Subsequently, when the acquisition unit 3 receives the request from the information processing device 22, the acquisition unit 3 sets the acquired state information 30 corresponding to the virtual machine 23 to a state in which the information processing device 22 can refer to the information (step B2).

Subsequently, the acquisition unit 3 sets the state in which the state information 30 can be referred to from the information processing device 22, and then transmits a response indicating that the state information can be referred to the information processing device 22 (step B3).

[Modification]
The operation of the modified example will be described.
For example, consider a case where the virtual machines 23a and 23b illustrated in FIG. 3 have different virtual OSs 27a and 27b, and the virtual file systems 29a and 29b included in the virtual OSs 27a and 27b are different from each other. Further, the acquisition unit 3 has a plurality of file systems compatible with different virtual file systems 29a and 29b.

The operation of acquiring the state information of the modification will be described with reference to FIG.
In step A1, the monitoring unit 2 monitors the writing to the area of the storage area 25 used by each of the virtual machines 23a and 23b.

Subsequently, in step A2, when writing to the area of the storage area 25 used by the virtual machine 23a is detected by the monitoring unit 2 (step A2: Yes), the acquisition unit 3 is compatible with the virtual file system 29a. In the read-only state, the state information 31a corresponding to the area in which the writing corresponding to the virtual machine 23a is detected is acquired using the file system having the property.

In addition, in Step A2, when the writing to the area of the storage area 25 used by the virtual machine 23b is detected by the monitoring unit 2 (Step A2: Yes), the acquisition unit 3 is compatible with the virtual file system 29b. Using a certain file system, the state information 31b corresponding to the area in which the writing corresponding to the virtual machine 23b is detected in the read-only state is acquired.

The operation of referring to the state information of the modification will be described with reference to FIG.
In step B1, the acquisition unit 3 receives from the information processing device 22 a request for obtaining permission to refer to the state information 31 corresponding to the virtual machine 23a or 23b.

Subsequently, in step B2, when the request is received from the information processing device 22, the acquisition unit 3 refers to the state information 30a corresponding to the virtual machine 23a or the state information 30b corresponding to the virtual machine 23b from the information processing device 22. Make it ready.

Subsequently, in step B3, the acquisition unit 3 sets a state in which the state information 30a or 30b can be referred to from the information processing device 22, and then transmits a response indicating that the state information 31a or 31b can be referred to. Send to.

[Effects of this Embodiment]
As described above, according to the present embodiment, the state information 30 can be acquired without the intervention of the virtual machine 23. Therefore, when the virtual machine 23 cannot log in, or when the virtual machine 23 is overloaded, or the virtual machine 23 Even when communication with the virtual machine 23 is not possible, the state of the virtual machine 23 can be monitored. For example, the life state of the virtual machine 23 can be monitored.

When referring to the status information 30 such as a snapshot from the information processing device 22 provided outside, the acquisition unit 3 acquires the status information 30 in a read-only state, so that the data stored in the storage area 25 is stored. The destruction of can be suppressed.

[program]
The program according to the embodiment of the present invention may be any program that causes a computer to execute steps A1 to A3 shown in FIG. 4 and steps B1 to B3 shown in FIG. The virtual machine management device and the virtual machine management method according to the present embodiment can be realized by installing and executing this program on a computer. In this case, the processor of the computer functions as the monitoring unit 2 and the acquisition unit 3 and performs processing.

Moreover, the program in the present embodiment may be executed by a computer system constructed by a plurality of computers. In this case, for example, each computer may function as either the monitoring unit 2 or the acquisition unit 3, respectively.

[Physical configuration]
Here, a computer that realizes the virtual machine management apparatus by executing the programs in the embodiments and the modified examples will be described with reference to FIG. FIG. 6 is a block diagram showing an example of a computer that implements virtual machine management according to the embodiment of the present invention and the modification.

As shown in FIG. 6, the computer 110 includes a CPU 111, a main memory 112, a storage device 113, an input interface 114, a display controller 115, a data reader/writer 116, and a communication interface 117. These units are connected to each other via a bus 121 so as to be able to perform data communication with each other. The computer 110 may include a GPU (Graphics Processing Unit) or an FPGA (Field-Programmable Gate Array) in addition to or instead of the CPU 111.

The CPU 111 expands the program (code) according to the present embodiment stored in the storage device 113 into the main memory 112 and executes these in a predetermined order to perform various calculations. The main memory 112 is typically a volatile storage device such as a DRAM (Dynamic Random Access Memory). Further, the program in the present embodiment is provided in a state of being stored in computer-readable recording medium 120. The program in the present embodiment may be distributed on the Internet connected via communication interface 117.

Further, as a specific example of the storage device 113, a semiconductor storage device such as a flash memory can be cited in addition to a hard disk drive. The input interface 114 mediates data transmission between the CPU 111 and an input device 118 such as a keyboard and a mouse. The display controller 115 is connected to the display device 119 and controls the display on the display device 119.

The data reader/writer 116 mediates data transmission between the CPU 111 and the recording medium 120, reads a program from the recording medium 120, and writes a processing result in the computer 110 to the recording medium 120. The communication interface 117 mediates data transmission between the CPU 111 and another computer.

Specific examples of the recording medium 120 include general-purpose semiconductor storage devices such as CF (Compact Flash (registered trademark)) and SD (Secure Digital), magnetic recording media such as a flexible disk, or CD-. An optical recording medium such as a ROM (Compact Disk Read Only Memory) can be given.

[Appendix]
The following supplementary notes are disclosed regarding the above-described embodiment. The whole or part of the exemplary embodiments described above can be represented by (Supplementary Note 1) to (Supplementary Note 12) described below, but the present invention is not limited to the following description.

(Appendix 1)
A monitoring unit for monitoring the storage area of the physical machine, which corresponds to the virtual storage area used by the virtual machine built in the physical machine;
An acquisition unit that acquires, in a read-only state, state information representing the state of the virtual machine generated when the virtual machine writes data to the storage area via the virtual storage area,
A virtual machine management device comprising:

(Appendix 2)
The virtual machine management device according to attachment 1,
The virtual machine management device, wherein the acquisition unit has a file system compatible with a virtual file system used in the virtual machine.

(Appendix 3)
The virtual machine management device according to appendix 1 or 2,
When the acquisition unit receives a request for obtaining permission to refer to the state information of the virtual machine from a device provided outside the physical machine, the acquisition unit corresponds to the virtual machine stored in the storage area. A virtual machine management apparatus, characterized in that the status information is set to a status that the apparatus can refer to.

(Appendix 4)
The virtual machine management device according to any one of appendices 1 to 3,
The virtual machine management device, wherein the state information is a snapshot.

(Appendix 5)
(A) monitoring a storage area of the physical machine, which corresponds to a virtual storage area used by a virtual machine built in the physical machine,
(B) acquiring, in a read-only state, state information representing the state of the virtual machine generated when the virtual machine writes data to the storage area via the virtual storage area,
A virtual machine management method comprising:

(Appendix 6)
The virtual machine management method according to attachment 5,
The virtual machine management method according to the above step (b), comprising a file system compatible with a virtual file system used in the virtual machine.

(Appendix 7)
The virtual machine management method according to attachment 5 or 6,
In the step (b), when a request for obtaining permission to refer to the state information of the virtual machine is received from a device provided outside the physical machine, the virtual storage stored in the storage area is received. A virtual machine management method, characterized in that the state information corresponding to a machine is brought into a state in which the apparatus can refer to the state information.

(Appendix 8)
The virtual machine management method according to any one of appendices 5 to 7,
The virtual machine management method, wherein the status information is a snapshot.

(Appendix 9)
On the computer,
(A) monitoring a storage area of the physical machine, which corresponds to a virtual storage area used by a virtual machine built in the physical machine,
(B) acquiring, in a read-only state, state information representing the state of the virtual machine generated when the virtual machine writes data to the storage area via the virtual storage area,
A program characterized by causing to execute.

(Appendix 10)
The program according to Appendix 9,
A program having a file system compatible with the virtual file system used in the virtual machine in the step (b).

(Appendix 11)
The program according to Appendix 9 or 10,
In the step (b), when a request for obtaining permission to refer to the state information of the virtual machine is received from a device provided outside the physical machine, the virtual storage stored in the storage area is received. A program for making the state information corresponding to a machine into a state that can be referred to from the device.

(Appendix 12)
The program according to any one of appendices 9 to 11,
A program characterized in that the status information is a snapshot.

As described above, according to the present invention, the state of a virtual machine can be monitored without going through the virtual machine. INDUSTRIAL APPLICABILITY The present invention is useful in a field where it is necessary to manage the state of virtual machines.

1 Virtual Machine Management Device 2 Monitoring Unit 3 Acquisition Unit 20 System 21 Physical Machine 22 Information Processing Device 23, 23a, 23b Virtual Machine 24 VMM
25 storage area 26 communication unit 27, 27a virtual OS
110 computer 111 CPU
112 Main Memory 113 Storage Device 114 Input Interface 115 Display Controller 116 Data Reader/Writer 117 Communication Interface 118 Input Equipment 119 Display Device 120 Recording Medium 121 Bus

Claims (12)

A monitoring unit for monitoring the storage area of the physical machine, which corresponds to the virtual storage area used by the virtual machine built in the physical machine;
An acquisition unit that acquires, in a read-only state, state information representing the state of the virtual machine generated when the virtual machine writes data to the storage area via the virtual storage area,
A virtual machine management device comprising: The virtual machine management device according to claim 1, wherein
The virtual machine management device, wherein the acquisition unit has a file system compatible with a virtual file system used in the virtual machine. The virtual machine management device according to claim 1,
When the acquisition unit receives a request for obtaining permission to refer to the state information of the virtual machine from a device provided outside the physical machine, the acquisition unit corresponds to the virtual machine stored in the storage area. A virtual machine management apparatus, characterized in that the status information is set to a status that the apparatus can refer to. The virtual machine management device according to any one of claims 1 to 3,
The virtual machine management device, wherein the state information is a snapshot. (A) monitoring a storage area of the physical machine, which corresponds to a virtual storage area used by a virtual machine built in the physical machine,
(B) acquiring, in a read-only state, state information representing the state of the virtual machine generated when the virtual machine writes data to the storage area via the virtual storage area,
A virtual machine management method comprising: The virtual machine management method according to claim 5, wherein
The virtual machine management method according to the above step (b), comprising a file system compatible with a virtual file system used in the virtual machine. The virtual machine management method according to claim 5 or 6, wherein
In the step (b), when a request for obtaining permission to refer to the state information of the virtual machine is received from a device provided outside the physical machine, the virtual storage stored in the storage area is received. A virtual machine management method, characterized in that the state information corresponding to a machine is brought into a state in which the apparatus can refer to the state information. The virtual machine management method according to any one of claims 5 to 7,
The virtual machine management method, wherein the status information is a snapshot. On the computer,
(A) monitoring a storage area of the physical machine, which corresponds to a virtual storage area used by a virtual machine built in the physical machine,
(B) acquiring, in a read-only state, state information representing the state of the virtual machine generated when the virtual machine writes data to the storage area via the virtual storage area,
A program characterized by causing to execute. The program according to claim 9,
A program having a file system compatible with the virtual file system used in the virtual machine in the step (b). The program according to claim 9 or 10, wherein:
In the step (b), when a request for obtaining permission to refer to the state information of the virtual machine is received from a device provided outside the physical machine, the virtual storage stored in the storage area is received. A program for making the state information corresponding to a machine into a state that can be referred to from the device. The program according to any one of claims 9 to 11,
A program characterized in that the status information is a snapshot.

Images