JP6076275B2 - Communication network routing control cooperation system and method - Google Patents

Description

  The present invention relates to a communication network path control cooperation system and method, and particularly to communication of a terminal connected to a WAN (Wide Area Network) when a network (NW) function is virtualized and provided as a cloud. The present invention relates to a communication network path control cooperation system and method for applying an NW function on a cloud using SDN (Software Defined Networking).

  In current carrier networks, especially fixed networks, functions for providing network services such as Internet access, IPTV (Internet Protocol TV) and VPN (Virtual Private Network) (hereinafter referred to as “NW function”) It is implemented in the form of a router or a dedicated appliance.

  In recent years, NFV (Network Function Virtualization) has been studied in which such an NW function is virtualized and operated on a general-purpose server so that a network service can be provided (see, for example, Non-Patent Document 1).

  When the above NFV is realized, the NW function is implemented and managed on a virtual machine (hereinafter referred to as `` VM ''), and is integrated into a server group or data center to manage the NW function as a cloud. Therefore, flexible allocation of resources and migration (migration) to other physical servers are possible, which can improve equipment efficiency.

  On the other hand, when the NW function is applied to user communications, the current carrier network is configured as an IP network, so the communication path is controlled by IP routing.

  In general, in an IP routing protocol, route control is performed on a flow in which traffic of a plurality of users is collected. Therefore, there is no problem with such route control when the same service is uniformly provided to all users.

  However, in view of the increase in the number of Internet users and the widening of the user group and the needs of individual users are diversifying, it is required to provide services customized for each user.

  For this purpose, a technology that provides different NW functions for each user or service by providing different route control (hereinafter referred to as “service chaining technology”) is required. It is necessary to accommodate millions of users, and it is considered difficult to realize service chaining by route control using the existing IP routing protocol.

  Under such circumstances, use in data centers has begun.

  Studies are underway to apply SDN technology such as OpenFlow (see Non-Patent Document 2, for example) to carrier networks.

  Since OpenFlow can realize path control in units of predefined flows, by defining traffic for each user as a flow, path control can be flexibly changed for each user as described above.

  However, the current OpenFlow is a technology that was first developed for the data center. If it is applied to the number of users on the carrier network scale (millions to tens of millions), it is a hardware that holds the flow information. There are wear restrictions.

  Therefore, it is not practical to replace all current carrier IP networks with OpenFlow.

  In response to such a problem, in Non-Patent Document 3, in the edge router that is the entrance to the carrier wide area network (hereinafter referred to as “WAN”), the flow defined for each user or each service is determined according to the destination. We have proposed a technique for forwarding to a tunnel established between edge routers. With this technology, flexible network control independent of the location of the NW function is realized by creating a tunnel between the end ends and abstracting user communication from the IP network, but the NW function was provided as a cloud. The environment is not assumed. For this reason, when the number of devices and VMs in the cloud increases, the number of devices to be controlled and the amount of signals increase, causing controller scalability.

  To deal with such a problem, the technology of Non-Patent Document 4 has an architecture in which the carrier network and the network of the NW function cloud are controlled by separate controllers (WAN controller, cloud controller) as shown in FIG. Proposal and a cooperation method between controllers. By using this method, the load on each controller to which a large number of terminals are connected is reduced, and scalability is improved as compared with a method in which the whole is controlled by one controller.

  However, in the technique of Non-Patent Document 4 described above, control of the gateway device that becomes the boundary between the WAN and the NW function cloud is newly required when the WAN and the NW function cloud are controlled by separate controllers. Therefore, although the load of each controller is reduced, there is a problem that the number of control target devices and the number of flow entries increase as a whole network.

  As a method for reducing the number of devices to be controlled and the number of flow entries, a method has been proposed in which service chain route information is assigned to a packet as a label (for example, see Non-Patent Document 5).

  This method is similar to the method shown in FIG. 2A by applying the method for assigning a label to the packet as shown in FIG. Compared to the method of setting service chain route information for all switches at the tunnel end points, the number of control target devices and flow entries can be reduced for the entire network for all devices. .

"Network Functions Virtualisation," NFV White Paper, Oct. 22, 2012. http: //portal.etsi.org.NFV/NFV_White_Paper.pdf. "Software-Defined Networking: The New Norm for Networks," ONF White Paper, Open Network Foundation, April 13, 2012.https: //www.opennetworking.org/images/stories/downloads/whitepapaers/wp-sdn-newnorm. pdf. Hisashi Kojima, Hiroyuki Kitada, Naoki Takaya, Yasunori Matsubayashi, "Study on path control method considering virtualization of NW service function," 2012 Shingaku Sogaku Univ., Volume 2, B-6-114, p.114, March 2013. Hisashi Kojima, Hiroyuki Kitada, Naoki Takaya, Yasunori Matsubayashi, "Study of a routing control method considering virtualization of NW service functions," 2012 Shingaku Sogaku Univ., Volume 2, B-7-36, p.133, Sept . 2013. Hisashi Kojima, Hiroyuki Kitada, Naoki Takaya, Yasunori Matsubayashi, "Proposal of Service Chaining Method Considering Virtualization of Network Functions in Carrier Networks" IEICE Tech., Vol.113, no.205, NS2013-73, pp. 13-18, Sept. 2013.

  However, in the method of Non-Patent Document 5, since the WAN controller and the cloud controller abstract each other's information and hold it, the WAN controller gives the path information including the VM information to which the NW function is applied to the packet. There is a problem that can not be done.

  The present invention has been made in view of the above points, and it is possible to reduce the load on the controller, and to reduce the number of control target devices and the total number of flow entries necessary for device control. It is an object to provide a system and method.

According to one aspect, the network function is virtualized and provided as a cloud. For communication of a terminal connected to a WAN (Wide Area Network), the NW function on the cloud is used using SDN (Software Defined Networking). A communication network routing control cooperation system for applying,
On the WAN side
Cloud DB that stores the network (NW) function acquired from the cloud side and information that abstracts the maximum resources, IP address of the gateway (GW) switch, cloud location information,
A WAN controller that creates a first flow entry based on the intra-WAN service chain calculation algorithm based on the information in the cloud DB;
When the flow entry is acquired from the WAN controller, the first flow table is updated, and a packet is received from a terminal connected to the WAN, the location information and service ID of the device are referred to by referring to the first flow table. And an edge switch for transferring the packet to a gateway switch connected to the cloud;
Have
On the cloud side,
The WAN controller is notified of the information that abstracts the NW function and the maximum resource, the IP address of the GW switch, the location information of the cloud, and the second using the service chain calculation algorithm in the cloud that sets the service chain in the cloud. A cloud controller that generates flow entries;
When the flow entry is acquired from the cloud controller, the second flow table is updated, and the packet with the first label is received from the WAN side, the first label of the packet is changed to the first label. A gateway switch that rewrites and transfers with a second label that includes the identifier of the virtual machine (VM) in the cloud and the location information of the function server, with reference to the flow table of FIG.
When a packet with the second label received from the gateway switch is received, the VM communicates with the packet based on the second label of the packet, and the own label in the second label An NW function server that deletes the label, overwrites the destination information of the packet with the location information included in the label next to the deleted label, and
A communication network routing control cooperation system is provided.

  According to one aspect, the controller controls only the gateway GW, and other devices autonomously transfer the packet based on the route information described in the packet. As compared with the conventional method for controlling the controller, the load on the controller can be reduced, and the number of devices to be controlled and the total number of flow entries required for device control can be reduced.

In this example, WAN and cloud are controlled by separate controllers. This is an example in which route information of a service chain is added to a packet. It is a figure which shows the outline | summary of this invention. It is an example of the label and packet in one embodiment of this invention. It is an example of composition of a route control cooperation system in one embodiment of the present invention. It is a functional structural example of the WAN controller in one embodiment of this invention. It is an example of service chain DB in one embodiment of this invention. It is an example of cloud DB in one embodiment of this invention. It is a functional structural example of the edge switch in one embodiment of this invention. It is a functional structural example of the cloud controller in one embodiment of this invention. It is an example of NW function DB in one embodiment of the present invention. It is a functional structural example of the gateway switch in one embodiment of this invention. It is an example of a process of the route calculation function part of the gateway switch in one embodiment of this invention. It is a functional structural example of the NW function server in one embodiment of this invention. It is an example of the process of the path | route calculation function part of the NW function server in one embodiment of this invention. It is a sequence chart of cloud state acquisition in one embodiment of the present invention. It is an example of NW function DB and cloud DB in one embodiment of the present invention. It is a sequence chart at the time of the service contract in one embodiment of this invention. It is an example of the system configuration | structure at the time of the service provision in one embodiment of this invention. It is a sequence chart at the time of service provision in one embodiment of the present invention.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

  In the environment where the WAN and the NW function cloud are managed as separate networks, the present invention assigns a packet to a packet in a gateway (GW) switch in order to perform route control based on the route information attached to the packet. By changing the route information of the existing service chain, a desired NW function is applied to each user or service unit.

  FIG. 3 shows an outline of the present invention. When the NW function is provided as a virtualized cloud, the NW function is provided on the cloud using SDN for communication of a terminal connected to the WAN. Apply. The example of FIG. 6 is an example in which user A subscribes to a firewall (hereinafter referred to as “FW”) service. The WAN controller 110 calculates a route in the WAN 1 and notifies the edge switch 120 of the route. In the WAN 1, the switch 120 puts the gateway service ID and the gateway IP address in the label and transfers the packet. The cloud controller 210 has an algorithm for setting a service chain in the cloud 2 based on the service ID in the packet and the VM information in the cloud 2. In the GW 220, the VM ID and the server IP address are put in the label and the packet is transferred. The server 230 does not have a DB, performs processing using only the header information of the packet, and transmits to the default GW when there is no next destination header.

  First, “service chain information” used below will be described.

  The service chain information is information of a device applied to a packet, a server, a VM, and a service applied to the packet, and is information described as a packet header (label). The label is given outside the IP packet, inside the encapsulation for the tunnel. If there are a plurality of devices and contract services that are routed, a plurality of labels are given to the packet. One label includes location information (for example, IP address) of the device and the like and an identifier (for example, ID and service name) of the device. An example is shown below.

・ Label when applying Firewall (FW) service in “Cloud A”:
"The IP address and FW of the" Cloud A "gateway device"
・ Label when processing with “VMb” of “Server B”:
“IP address of virtual switch of“ Server B ”, VMb”
A label when processing is performed with “VMc” of “Server C” after processing with “VMb” of “Server B”:
“IP address of virtual switch of“ Server B ”, VMb” “IP address of virtual switch of“ Server C ”, VMc”
An example of a specific label and packet structure is shown in FIG. As shown in the figure, the label is composed of a pair of an identifier (FW) and position information (GW), and the packet is composed of an IP address, service chain information, and the address of the destination GW.

  FIG. 5 is a system configuration example according to an embodiment of the present invention. In the example of the figure, a case where there are two NW function clouds is shown, but the present invention is not limited to this example and may be one or three or more.

  The WAN controller 110 and the edge switch 120 are provided on the IP network 100 side, and the cloud controller 210, the gateway switch 220, and the NW function server 230 are provided on the NW function cloud 200 side.

<WAN controller 110>
FIG. 6 shows a functional configuration example of the WAN controller 110.

  The WAN controller 110 includes a service chain DB 111, interfaces 115, 116, and 117, a cloud DB 112, a route calculation unit 113, and an NW control unit 114.

  As shown in FIG. 7, the service chain DB 111 includes an ID for identifying a service chain (service chain ID), a type of a flow to which a network service is applied, and an identifier of the target flow (IP address, TCP / UDP port). Number, input interface number, application type, etc.) and service chain information to be applied to the flow.

  The interface 115 is an interface for referring to and registering the contents of the service chain DB 111. The interface 115 is assumed to be connected with functions and devices for making service contracts, but these functions and devices are outside the scope of the present invention. As an example, a service contract website, a service order system, etc. are assumed.

  As shown in FIG. 8, the cloud DB 112 has an ID (cloud ID) for identifying a cloud network, an IP address of a gateway switch that is a connection point with the WAN in the cloud network, an NW function included in the cloud, Holds the maximum resource of the NW function and the usage amount of the NW function.

  The route calculation unit 113 creates a flow entry by a WAN service chain calculation algorithm based on information in the cloud DB 112 and the service chain DB 111.

  Here, the procedure of the intra-WAN service chain calculation algorithm is shown below.

  1. Get user service contract information and cloud information.

  2. i = 1.

  3. Search for the cloud providing the i-th service and select the cloud with the following priority.

    1) In the same cloud as the i-1th service, if there is a vacancy in the resource usage of the ith service, that cloud is selected.

    2) From the cloud location information, if the i-th service resource usage is free in the cloud closest to the i-th service cloud, select that cloud.

    3) Select the cloud with the least resource usage.

  4). 3. above. The resource usage of the cloud DB 112 corresponding to the combination of the cloud and service selected in is incremented.

  5. If there is a next service chain, increment i and If not, go to 6. Migrate to

  6). A flow entry is created that assigns a cloud combination of the services selected so far to a packet in order.

  7). End.

  The NW control unit 114 controls the edge switches 120, 130, and 140 via the interfaces 117A, 117B,..., 117y according to the flow entry created by the route calculation unit 113, as well as the edge switches 120, 130, and 140, and the cloud It has a function of updating information in the cloud DB 112 based on information notified from the controller 210.

<Edge switch 120>
The WAN edge switch 120 will be described.

  As shown in FIG. 9, the edge switch 120 includes a secure channel 121, a route calculation function unit 122, a flow table 123, a packet processing unit 124, an interface A 125A, an interface B 125B, and an interface C 125C.

  The secure channel 121 communicates with the WAN controller 110 and writes the flow entry received from the WAN controller 110 in the flow table 123.

  The route calculation function unit 122 creates a flow entry based on the service chain information and writes the flow entry in the flow table 123 when a packet to which the service chain information is attached is received.

  Here, the processing procedure of the route calculation function unit 122 is shown below.

  When a packet is received, one of the following processes 1 to 3 is performed. The determination as to whether or not to perform processing is as follows. Perform in order.

  1. When the process of the received packet is described in the flow entry, it is processed based on the flow entry.

  2. When the service chain information is included in the packet, the location information of the first service chain information is overwritten on the destination of the packet and transferred to the destination.

  3. In the above processing, when the destination is itself, the packet information is transmitted to the WAN controller 110 to acquire the flow entry.

  The flow table 123 holds a flow entry describing a packet processing rule.

  The packet processing unit 124 refers to a flow entry in the flow table 123 and processes the packet.

<Cloud controller 210>
FIG. 10 shows a configuration example of the cloud controller 210.

  The cloud controller 210 includes an NW function DB 211, interfaces 212, 215, 216, an NW control unit 213, and a route calculation unit 214.

  As shown in FIG. 11, the NW function DB 211 stores the ID of the VM in the cloud 200, the IP address of the virtual switch in the NW function server 230 to which the VM is connected, the NW function included in the VM, and the VM The maximum resource and resource usage information of the VM are stored.

  The interface 212 is an interface for referring to and registering the contents of the NW function DB 211. It is assumed that functions and devices for managing the VM of the NW function server 230 are connected to the interface 212, but these functions and devices are outside the scope of the present invention. As an example, a cloud management application is assumed.

  The route calculation unit 214 creates a flow entry by the in-cloud service chain calculation algorithm based on the NW function DB 211 and the packet service chain information.

  Here, the procedure of the cloud service chain calculation algorithm will be described.

  1. Service chain information in the packet and NW function information are acquired from the NW function DB 211.

  2. i = 1.

  3. The VM that provides the service included in the i-th label is searched from the NW function DB 211, and the VM is selected with the next priority.

    1) If the resource usage of the i-th VM is available on the same server as the i-1-th VM, select that VM.

    2) Select the VM with the least resource usage.

  In this process, the cloud is selected based on the service ID, cloud ID, and resource usage, but the parameters used for the selection can be freely combined from the service chain information and NW function information described in the packet. (Do not preferentially select VMs in the same server, use only resource usage. A specific service chain preferentially selects any VM in a specific server, etc.)

  4). 3. above. The resource usage amount of the corresponding NW function DB 211 is incremented by the combination of the function server and the VM selected in step.

  5. 2. If the next service ID and cloud ID exist and the cloud ID is its own, increment i and If not, return to 6. Migrate to

  6). Delete the i-th label from the label of the service chain information, and assign the combination of the server ID and VM-ID selected so far to the position of the previously deleted label in order, and then the position information Creates a flow entry that gives the packet a label (no identifier) that is its cloud ID.

  7). End.

  The NW control unit 213 has a function of notifying the WAN controller 110 via the interface 216 by the flow entry created by the route calculation unit 214.

<Gateway switch 220>
As shown in FIG. 12, the gateway switch 220 includes a secure channel 221, a flow table 222, a route calculation function unit 223, a packet processing unit 224, an interface A 225A, an interface B 225B, and an interface C 225C.

  The secure channel 221 communicates with the cloud controller 210 and writes the flow entry received from the cloud controller 210 to the flow table 222.

  The flow table 222 holds a flow entry describing a rule for packet processing.

  When the route calculation function unit 223 receives a packet to which service chain information is attached, it transmits the service chain information to the cloud controller 210 via the secure channel 221 and creates a flow entry based on the service chain information. And writes it in the flow table 222.

  Here, the processing procedure of the route calculation function unit 223 will be described with reference to FIG.

  1. With reference to the service chain information in the packet, when the first position information is itself, the service chain information is transmitted to the cloud controller 210, and the process is terminated (FIG. 13A).

  2. With reference to the service chain information, the first location information is overwritten on the destination of the packet, a flow entry to be transmitted is created, and the packet is processed (FIG. 13B).

  The packet processing unit 224 refers to the flow entry in the flow table 223 and processes the packet.

<NW function server 230>
As illustrated in FIG. 14, the NW function server 230 includes a route calculation function unit 231, a flow table 232, a virtual switch 233, an interface 234, and VMs 235 _{1 to} 235 _z .

  The route calculation function unit 231 creates a flow entry based on the service chain information and writes the flow entry in the flow table 232 when a packet to which the service chain information is attached is received.

  Here, the processing procedure of the route calculation function unit 231 will be described with reference to FIG.

  1. Refers to the service chain information, and the location information extracts its own label from the service chain information, deletes the extracted label from the packet, and then overwrites the location information contained in the next label in Bern to the destination of the packet. Then, a flow entry is created so that the packets are sequentially transferred to the VM 235 included in the extracted label (FIG. 15A).

  2. However, if the identifier is not included in the label next to the deleted label, the flow entry is created so that the label is also transferred after being deleted (FIG. 15B).

  The flow table 232 holds a flow entry describing a packet processing rule.

  The virtual switch unit 233 refers to the flow entry in the flow table 232 and processes a packet that the VM 235 communicates with.

  Next, processing in the above system will be described.

  In the following, when a cloud management application is used to manage the NW function server 230, the cloud controller 210 acquires the state of the VM 235 of the NW function server 230, and the WAN controller 110 acquires the state of each cloud. Show the flow.

  FIG. 16 is a sequence chart of cloud state acquisition according to an embodiment of the present invention.

  Step 101) The cloud management application sends the IP address of the virtual switch, the VM-ID for each VM 235, the NW function, and the maximum resource to the cloud controller 210.

  Step 102) The cloud controller 210 adds the acquired IP address, VM-ID, NW function, and maximum resource of the virtual switch to the NW function DB 211.

  Step 103) The cloud controller 210 performs an abstraction process of the NW function DB 211. As shown in FIG. 17, the abstraction processing adds the maximum resources for each NW function (FW and DPI (Deep Packet Inspection). In the example of FIG. 17, resource usage with VM-IDs 1, 2, and 4 Are added and registered in the cloud DB 112 of the WAN controller 110 in the next step.

  Step 104) The cloud controller 210 sends the NW function of the NW function DB 211 to the WAN controller 110 via the interface 216, the information abstracted from the maximum resource in step 103, and the GW switch 220 stored in advance in the cloud controller 210. The IP address and cloud location information are transmitted to the WAN controller 110.

  Step 105) The WAN controller 110 receives the information (NW function, information abstracted from the maximum resource (maximum resource), the IP address of the GW switch 220, the cloud received by the NW controller 114 from the cloud controller 210 via the interface 116. The cloud DB 112 is updated with the location information).

  Step 106) The route calculation unit 113 of the WAN controller 110 creates a flow entry using the intra-WAN service chain calculation algorithm based on the information in the cloud DB 112 and the service chain DB 111 updated in Step 105.

  Next, processing when a user makes a service contract via a Web site will be described.

  FIG. 18 is a sequence chart of a service contract according to an embodiment of the present invention.

  Step 201) The user transmits information about the type and identifier of the target flow and the contract service from the terminal 101 to the Web site.

  Step 202) The Web site obtains information from the user, and sends the type and identifier of the target flow and information on the contract service to the WAN controller 110.

  Step 203) The WAN controller 110 adds to the service chain DB 111 the type and identifier of the target flow acquired through the interface 115 and information on the contract service.

  Step 204) The route calculation unit 113 of the WAN controller 110 creates a flow entry by the above-described intra-WAN service chain calculation algorithm based on the information in the cloud DB 112 and the service chain DB 111 updated in step 203.

  Step 205) The WAN controller 110 sends the flow entry to the edge switch 120 via the interface 117.

  Step 206) Upon acquiring the flow entry via the interface 125C, the edge switch 120 writes the secure channel 121 to the flow table 123 and updates the flow table 123.

  Next, processing at the time of service provision will be described.

  FIG. 19 is an example of a system configuration at the time of providing a service according to an embodiment of the present invention. FIG. 20 is a sequence chart in the system shown in FIG.

  A process when the terminal A transmits a packet to the Web server in a state where a service contract of applying DPI to the flow when the terminal 101A communicates with the Web server will be described.

Step 301) The terminal 101A sends a packet to the Web server 103, the edge switch 120 _1, based on the flow entry set when a service contract, the service chain information (label) is attached to the packet, DPI of NW functions Is transmitted to the gateway switch 220A connected to the cloud A. In the example of FIG. 20, the gateway switch 220A of the IP address to the destination of the packet, the label "IP address of the gateway switch 220A (GW1), DPI", "edge switch 120 _second IP address (ES2)" is set.

  Step 302) Upon receiving the packet, the gateway switch 220A determines that the destination is its own cloud A from the label information, transmits the label information to the cloud controller 210A, and selects a flow entry for processing the flow. Receive. In the example of FIG. 20, a flow entry that assigns labels “NW function server 230A IP address,“ VM1 ””, “gateway switch 220A IP address, no identifier” and sets the destination of the packet to NW function server 230A. Is set in the gateway switch 220A.

  Step 303) Based on the flow entry, the gateway switch 220A processes the packet and sends it to the NW function server 230A having the DPI NW function.

Step 304) When the virtual switch unit 233 of the NW function server 230A receives the packet, it is determined from the label information ““ NW function server A, VM1 ”” that this packet is applied to the VM 235A (VM1), and the DPI NW function is set. The packet is transferred to the VM 235A (VM1). At this time, also, the label that contains NW feature server 230A deletes the destination of the packet is overwritten with the location information of the next label "edge switch 120 _first IP address (ES1)", the label be deleted, Transfer to VM235 ₁ (VM1).

Step 305) After performing the DPI processing on the packet, VM235 ₁ (VM1) returns the packet to the NW function server 230A, and the NW function server 230A transmits the packet to the gateway switch 220A.

Step 306) The gateway switch 220A receives a packet from the NW function server 230A, the information of the label (IP address, etc.), to set the destination of the packet to edge switch 120 _second IP address, "the edge switch 120 ₂ remove the label IP address (ES2) ", and transmits to the edge switch 120 _2.

  Step 307) The edge switch 1202 transfers the packet to a network port where the Web server 103 exists based on IP routing or the like.

  With the above operation, the NW function (DPI) is applied to the packet from the terminal 101A to the Web server 103 on the Internet 102.

  In the present invention, the processing of each function of the WAN controller 110, the edge switch 120, the cloud controller 210, the gateway switch 220, and the NW function server 230 shown in FIG. It can be installed and executed, or distributed via a network.

  The present invention is not limited to the above-described embodiments, and various modifications and applications are possible within the scope of the claims.

1 WAN
2 Cloud 100 IP network 101 Terminal 101A Terminal A
102 Internet 103 Web Server 110 WAN Controller 111 Service Jane DB
112 Cloud DB
113 path calculation unit 114 NW control unit 115, 116, 117 interface 120 edge switch 121 secure channel 122 path calculation function unit 123 flow table 124 packet processing unit 125A interface A
125B Interface B
125C interface C
200 NW Function Cloud 210 Cloud Controller 230A Cloud Controller A
230B Cloud Controller B
211 NW function DB
212 Interface 213 NW control unit 214 Route calculation unit 215 Interface 220 Gateway switch 221 Secure channel 222 Flow table 223 Route calculation function unit 224 Packet processing unit 225A Interface A
225B Interface B
225C Interface C
230 NW function server 230A NW function server A
230B NW function server B
231 Path calculation function unit 232 Flow table 233 Virtual switch unit 234 Interfaces 235 _{1 to} 235 _z VM (virtual machine)
235A, 235B VM

Claims (7)

A network that virtualizes network functions and provides them as a cloud, and uses SDN (Software Defined Networking) to apply the NW functions on the cloud to terminals connected to the WAN (Wide Area Network) Route control linkage system,
On the WAN side,
Cloud DB that stores the network (NW) function acquired from the cloud side and information that abstracts the maximum resources, IP address of the gateway (GW) switch, cloud location information,
A WAN controller that creates a first flow entry based on the intra-WAN service chain calculation algorithm based on the information in the cloud DB;
When the flow entry is acquired from the WAN controller, the first flow table is updated, and a packet is received from a terminal connected to the WAN, the location information and service ID of the device are referred to by referring to the first flow table. And an edge switch for transferring the packet to a gateway switch connected to the cloud;
Have
On the cloud side,
The WAN controller is notified of the information that abstracts the NW function and the maximum resource, the IP address of the GW switch, the location information of the cloud, and the second using the service chain calculation algorithm in the cloud that sets the service chain in the cloud. A cloud controller that generates flow entries;
When the flow entry is acquired from the cloud controller, the second flow table is updated, and the packet with the first label is received from the WAN side, the first label of the packet is changed to the first label. A gateway switch that rewrites and transfers with a second label that includes the identifier of the virtual machine (VM) in the cloud and the location information of the function server, with reference to the flow table of FIG.
When a packet with the second label received from the gateway switch is received, the VM communicates with the packet based on the second label of the packet, and the own label in the second label An NW function server that deletes the label, overwrites the destination information of the packet with the location information included in the label next to the deleted label, and
A communication network routing control system characterized by comprising: The gateway switch is
If the first label of the packet received from the edge switch does not match the contents of the first flow table, the packet is transmitted to the cloud controller and a flow entry for processing the flow is received. The communication network path control cooperation system according to claim 1, further comprising means for attaching the second label including the location information of the cloud NW function server, the identifier of the VM, and the location information of the gateway switch to the packet. The WAN service chain calculation algorithm is:
Based on the user's service contract information and cloud information, search for the cloud providing the service, select the cloud according to the resource usage of the service, and use the resource corresponding to the combination of the selected cloud and service Creating a first flow entry for determining a quantity and sequentially assigning the selected cloud and service combination to a label;
The in-cloud service chain calculation algorithm is:
From the information of the first label in the packet and the information of the NW function server, refer to the NW function DB and select a VM that provides the service included in the label according to the resource usage of the VM, The sum of the resource usage corresponding to the combination of all the NW function servers included in the first label and the selected VM is obtained, the NW function DB is updated, and the ID of the NW function server and the VM A means for creating the second flow entry for overwriting the first label with a combination of IDs in order as a label, and adding a label whose subsequent location information is its cloud ID to the packet. Item 5. A communication network routing control cooperation system according to item 1. A network that virtualizes network functions and provides them as a cloud, and uses SDN (Software Defined Networking) to apply the NW functions on the cloud to terminals connected to the WAN (Wide Area Network) Route control linkage method,
When the edge switch on the WAN side receives a packet from a terminal connected to the WAN, based on the first flow entry in which the packet processing rule is described, the service ID and the location information of the gateway switch (GW) are included. 1 is attached to the packet, forwarded to the gateway switch,
When the gateway switch receives the packet with the first label, the virtual machine (VM) ID of the network (NW) function server is based on the second flow entry describing the packet processing rule. And the location information of the NW function server is attached to the received packet as a second label and transferred to the NW function server,
The NW function server on the cloud side processes the packet with the second label based on the second label, deletes its own label in the second label, and follows the deleted label. A method for coordinating route control of a communication network, wherein the position information included in the label of the packet is overwritten on the destination of the packet and transferred. The cloud controller on the cloud side
Notify the WAN controller of the abstraction of the NW function and maximum resources, the IP address of the GW switch, and the cloud location information
The WAN controller on the WAN side
The communication network route control cooperation method according to claim 4, wherein the flow entry is generated based on information notified from the cloud controller. In the gateway switch,
When the first label of the packet received from the edge switch does not match the flow entry in the flow table, the packet is transmitted to the cloud controller, the flow entry for processing the flow is received, and the cloud 6. The communication network path control cooperation method according to claim 5, wherein the second label including the location information of the NW function server, the identifier of the VM, and the location information of the gateway switch is attached to the packet. The WAN controller is
Based on the user service contract information and cloud information, the WAN service chain calculation algorithm searches for the cloud that provides the service, selects the cloud according to the resource usage of the service, and selects the selected cloud and Find the resource usage corresponding to the combination of services, create the first flow entry for sequentially assigning the selected cloud and service combination to the label,
The cloud controller is
With the service chain calculation algorithm in the cloud, the service included in the label is provided according to the resource usage of the VM by referring to the NW function DB from the information of the first label in the packet and the information of the NW function server A resource usage amount corresponding to the combination of all the NW function servers included in the first label and the selected VM, and a process of updating the NW function DB. The second flow for overwriting the first label with the combination of the ID of the NW function server and the ID of the VM in order, overwriting the first label, and adding a label whose subsequent location information is its own cloud ID to the packet The communication network routing control method according to claim 5, wherein an entry is created.

Images