JP6267606B2 - Network system, virtualization method, and virtualization program - Google Patents

Description

  The present invention relates to a network system, a virtualization method, and a virtualization program.

  Conventionally, in a CPE (Customer Premises Equipment) area such as a user's home, an IP (Internet Protocol) device such as a PC or a non-IP (Internet Protocol) device such as a home appliance or a sensor device is connected (HNW: Home). Network) construction is widespread. Such an HNW is a LAN (Local Area Network) in the same segment, so that UPnP (Universal Plug and Play) for discovering a connected device by IP broadcast or IP multicast, DLNA (Digital Living Network Alliance), ECHONET, ECHONET Lite , Bonjour, etc. can be easily applied.

  For example, when a device that complies with the above-mentioned standard is connected to the HNW, it is possible to automatically discover the connected device, the service that the device can provide, and the interconnection between devices on the HNW. Therefore, it is possible to greatly reduce the burden on the user concerning the connection setting of various devices connected to the HNW.

  Further, in recent years, HGW (Home Gateway) is used to realize a new service in HNW. For example, the HGW incorporates a control program using OSGi (Open Services Gateway initiative) to realize a service for controlling home appliances and sensor devices on the HNW. As a result, the user or service provider can remotely control the device on the HNW.

  However, as described above, as the services provided to the HNW become higher performance and higher functions, and as the number of services provided increases, the hardware / software performance and function requirements required for the HGW are increased. Conditions increase. Here, when the configuration of the HGW is housed in a single housing and installed in the user's home, when the above-described requirement increases, the user needs to replace the HGW with a specification that satisfies the requirement. There is a great burden on the user.

  Therefore, in recent years, processing and control of non-IP devices (for example, home appliances and sensor devices) in the HNW are not executed by the HGW in the CPE area, and the network function virtualization (NFV) is used to control the Internet. HGW virtualization is known in which protocol conversion or the like is performed on the cloud side (edge area side) connected via the network. The HGW virtualized by NFV (hereinafter referred to as vHGW (virtual home gateway)) realizes the function as an HGW on a general-purpose server virtual machine (VM) prepared in the edge area. The For this reason, in the vHGW, resources related to functions and performance as the HGW can be easily expanded on the virtual machines in the edge area, and various services can be provided to the HNW.

“ETSI GS NFV 001 V1.1.1 (2013-10) Network Functions Virtualisation (NFV); Use Cases”, [searched on August 22, 2014], Internet <URL: http://www.etsi.org/deliver /etsi_gs/NFV/001_099/001/01.01.01_60/gs_NFV001v010101p.pdf>

  In a network service such as a firewall (FW), each terminal can be accommodated in a single FW, and the FW can be dynamically selected. For this reason, virtualized FW (hereinafter referred to as vFW (virtual Firewall)) can be gradually increased or decreased as the number of terminals increases or decreases. However, as for vHGW, since terminals and vHGWs are 1: 1 (fixed) in principle, immediate response is required for increase / decrease in the number of terminals.

  FIG. 8 is a block diagram illustrating a conventional network system 200. As shown in FIG. 8, in the network system 200, a plurality of terminals 201 in the CPE area are connected to each of the vHGWs on the virtual machine 203 via the switch 202 in the access area.

  For these vHGWs, not all vHGWs are always used. In other words, not all terminals 201 under the control of all vHGWs have been started up, so if vHGWs corresponding to the number of terminals 201 are prepared, an unusable vHGW may occur. Here, when the number of vHGWs prepared in the edge area becomes several hundred to several tens of millions, when all the vHGWs are always started up, other unused loads of vHGW are used. It affects the load of vHGW. In addition, extra power corresponding to the unused vHGW is consumed.

  The present invention has been made in view of the above, and provides a network system, a virtualization method, and a virtualization program that can reduce the load on a virtual home gateway while responding to requests from each terminal The purpose is to do.

  In order to solve the above-described problems and achieve the object, a network system according to an embodiment is a network system including an information processing apparatus that is connected to a plurality of terminals via a network and in which a plurality of virtual machines operate. The information processing apparatus, for each of the plurality of terminals, according to signals from the plurality of first virtual machines that provide a virtual home gateway that virtualizes a home gateway function and signals from the plurality of terminals. A second virtual machine that activates a virtual home gateway corresponding to the terminal, and each of the plurality of first virtual machines uses an unused virtual home gateway that is not used by the terminal from the terminal. The virtual home gateway is moved to the first virtual machine on which the virtual home gateway is operating, and the unused virtual home gateway Characterized in that it stop.

  According to the network system according to the embodiment, it is possible to reduce the load applied to the virtual home gateway while responding to the request of each terminal.

FIG. 1 is a block diagram illustrating a network system according to an embodiment. FIG. 2 is an explanatory diagram for explaining a network configuration according to vHGW. FIG. 3 is an explanatory diagram illustrating the connection between the terminal and the vHGW. FIG. 4 is an explanatory diagram for explaining a comparative example of connection methods. FIG. 5 is an explanatory diagram for explaining resource release in a virtual machine. FIG. 6 is a ladder chart showing an operation related to the startup of vHGW. FIG. 7 is a diagram illustrating a computer that executes a program related to a virtual machine. FIG. 8 is a block diagram illustrating a conventional network system.

  Hereinafter, a network system, a virtualization method, and a virtualization program according to embodiments will be described in detail with reference to the accompanying drawings. In the following description, common constituent elements are given common reference numerals, and redundant description is omitted.

FIG. 1 is a block diagram illustrating a network system 100 according to the embodiment. As illustrated in FIG. 1, the network system 100 includes an information processing apparatus 1 that is a physical machine on which virtual machines VM ₀ , VM ₁ . The information processing apparatus 1 is connected to a plurality of terminals 3 provided in the CPE area via a network device such as a switch 2 provided in the access area. Each of the plurality of terminals 3 belongs to a different HNW and is connected to a different HGW.

The information processing apparatus 1 includes a hypervisor 11 that generates and controls virtual machines VM ₀ , VM ₁ ... And various hardware 10. Such information processing apparatus 1 may be duplicated. The hypervisor 11 is a control program that serves as a basis for making one physical machine (information processing apparatus 1) appear logically (virtually) to a plurality of machines, and is a virtual machine monitor (VMM: Virtual Machine Monitor). ) Etc. By this hypervisor 11, virtual machines VM ₀ , VM ₁ ... Can be configured as logically different machines. For example, virtual machines such as Linux (registered trademark) are set by setting a virtual MAC and a virtual IP address. An OS 12 (Operating System) can be installed.

Further, the hypervisor 11, by copying the virtual machines VM _0, VM 1 _... information in the memory, the live migration function that can migrate virtual machines VM _0, VM 1 _... the without interruption between the physical machines Have. By using this live migration function, services (for example, virtual home gateways) provided by the virtual machines VM ₀ and VM ₁ are transferred without interruption, for example, between the information processing apparatuses 1 that are duplicated. be able to.

The virtual machines VM ₀ , VM ₁ ... Include an AP 13 (AP: Application) that is a service provided to the user and an OS 12 that is controlled by the hypervisor 11. Note that the number of virtual machines (VMs) included in the information processing apparatus 1 is not limited to the illustrated one.

The virtual machines VM ₀ , VM ₁ ... Provide a virtual home gateway (vHGW) that virtualizes the home gateway function to each of the plurality of terminals 3 by the AP 13. Further, the virtual machines VM ₀ , VM ₁ ... Provide a function as a virtual server that activates the home gateway corresponding to the terminal 3 by the AP ₁₃ in response to signals from the plurality of terminals 3. In this embodiment, as an example, it is assumed that the virtual machine VM ₀ provides a function as a virtual server, and the virtual machines VM ₁ ... Provide vHGW.

FIG. 2 is an explanatory diagram for explaining a network configuration according to the vHGW 30. As illustrated in FIG. 2, the virtual machine VM ₀ includes a virtual server 20 that activates the vHGW 30 corresponding to the terminal 3 in response to signals from the plurality of terminals 3. The virtual machine VM ₁ has a vHGW 30 corresponding to each terminal 3.

  The plurality of terminals 3, the virtual server 20, and the vHGW 30 corresponding to each terminal 3 are connected to each other by a network NW via a VLAN (Virtual Local Area Network) that can be identified by an ID (VLANID = 1, 2,...) Or the like. Is done. Specifically, each terminal 3 and the vHGW 30 corresponding to the terminal 3 are connected 1: 1 (fixed) via a VLAN that can be identified by VLANID.

FIG. 3 is an explanatory diagram for explaining the connection between the terminal 3 and the vHGW 30. As illustrated in FIG. 3, the virtual machine VM ₁ includes a virtual switch 31 that virtualizes the function as the switch 2. For example, for the VLAN identified by VLANID = 2, the VLAN port to which the terminal 3 is connected in the switch 2 and the VLAN port to which the vHGW 30 is connected in the virtual switch 31 are fixedly bound as VLANID = 2. Thereby, the terminal 3 and the vHGW 30 corresponding to the terminal 3 are connected to 1: 1 (fixed) via the VLAN identified by VLANID = 2, for example.

The virtual server 20 is connected to all VLANs in the network NW. For this reason, the virtual server 20 can receive a signal from each terminal 3 via the VLAN that can be identified by the VLAN ID. Further, when the virtual server 20 receives a signal transmitted when the terminal 3 is activated through the VLAN, the virtual server 20 activates the vHGW 30 connected to the VLAN to which the terminal 3 belongs. Specifically, for each terminal 3, the virtual server 20 is a table in which a correspondence relationship between the VLAN ID of the VLAN to which the terminal 3 belongs and information (for example, process ID) identifying the vHGW 30 connected via the VLAN is described. Data is preset. When the virtual server 20 receives a signal from the terminal 3, the virtual server 20 identifies the vHGW 30 corresponding to the terminal 3 by referring to the table data described above, and starts the vHGW 30 for the virtual machine VM ₁ . Notify the startup request. Thereby, the virtual server 20 can start the vHGW 30 corresponding to the terminal 3 based on the signal from the terminal 3.

  In this embodiment, the virtual server 20 starts up the vHGW 30 corresponding to the ID of the VLAN to which the terminal 3 belongs in response to a signal from the terminal 3 such as DHCPDISCOVER related to DHCP (Dynamic Host Configuration Protocol).

  FIG. 4 is an explanatory diagram for explaining a comparative example of connection methods. As shown in FIG. 4, in the VLAN method, L2 (layer 2) from the terminal 3 in the CPE area to the vHGW 30 in the edge area, so that signals such as DHCPDISCOVER can reach the vHGW 30 from the terminal 3. Similarly, the DHCPDISCOVER signal from the terminal 3 can reach the virtual server 20.

  Note that in the GRE (IPinIP) system and the L3NW (network via the L3 (layer 3) device) system, DHCP cannot exceed L3, so a signal such as DHCPDISCOVER does not reach the vHGW 30 from the terminal 3. Similarly, the DHCPDISCOVER signal from the terminal 3 does not reach the virtual server 20. Therefore, for the network NW, the vHGW 30 can be started up in the virtual server 20 in accordance with the DHCPDISCOVER signal from the terminal 3 by adopting the VLAN system.

The virtual machine VM ₁ detects an unused vHGW 30 that is not used from the terminal 3 by using the above-described live migration function, and after shifting the unused vHGW 30 to another virtual machine, the virtual machine VM ₁ shuts down (stops). To free up resources. Specifically, the virtual machine VM ₁ monitors a communication session with the terminal 3 corresponding to the vHGW 30, and detects that the vHGW 30 is unused when the communication session is ended. Then, the virtual machine VM ₁ confirms the process state in each virtual machine, migrates the unused vHGW 30 to the virtual machine on which the vHGW 30 used is operating from the terminal 3, and stops the unused vHGW 30. .

FIG. 5 is an explanatory diagram for explaining resource release in the virtual machines VM _{1 to} VM ₄ . As illustrated in FIG. 5, the virtual machines VM _{1 to} VM ₄ are virtual machines that operate in the information processing apparatus 1 and provide the vHGW 30. Here, one square in the virtual machines VM _{1 to} VM ₄ indicates a process for one vHGW 30, and an internal numerical value indicates a load. The load capacity of the virtual machines VM _{1 to} VM ₄ is “10”.

In S1, which is an initial state, two vHGWs 30 in use by the user and three vHGWs 30 not in use by the user are operating in each of the virtual machines VM _{1 to} VM ₄ . Here, the virtual machines VM _{1 to} VM ₄ perform a process related to the vHGW 30 according to a predetermined rule such as an ascending order of the number for identifying the VM, and gather and aggregate the processes related to the vHGW 30 to the virtual machine on which the used vHGW 30 is operating. .

Specifically, the virtual machine VM ₃ shifts the unused vHGW 30 to the virtual machine VM ₁ and the virtual machine VM ₄ moves the unused vHGW ₃₀ to the virtual machine VM so that it falls within the range of the load capacity of the virtual machine. Align to ₂ . Further, the virtual machine VM ₄ shifts the vHGW 30 in use to the virtual machine VM ₃ . Then, the virtual machine VM ₄ shuts down (stops) the vHGW 30 when the unused vHGW 30 is justified (S2).

Further, since the virtual machines VM ₁ and VM ₂ have a free load capacity, the virtual machine VM ₃ shifts the vHGW ₃₀ in use to the virtual machines VM ₁ and VM ₂ . The virtual machines VM ₁ and VM _{2 then} shut down (stop) the vHGW 30 when the unused vHGW 30 is justified (S3).

By performing the above-described misalignment, the virtual machines VM ₃ and VM ₄ can be stopped because there is no process for the vHGW 30. Therefore, it is not necessary to start many virtual machines for the vHGW 30 corresponding to the plurality of terminals 3, and the load on the vHGW 30 can be reduced.

Further, by performing the above-described misalignment, the vHGW 30 in the shutdown (stopped) state has shifted to the operating virtual machines VM ₁ and VM ₂ . Therefore, the shutdown of the vHGW 30 can cope with the immediate startup when the startup is requested by starting the terminal 3 or the like.

FIG. 6 is a ladder chart showing an operation related to the startup of the vHGW 30. As shown in FIG. 6, the terminal 3 transmits a signal such as DHCPDISCOVER when it is connected to the network NW at the time of startup or the like (S10). This signal is received by the virtual server 20 via the VLAN to which the terminal 3 belongs. In response to DHCPDISCOVER from the terminal 3, the virtual server 20 transmits a startup request for starting the vHGW 30 of the VLAN to which the terminal 3 belongs to the virtual machine VM ₁ (S11). Based on this startup request, the virtual machine VM ₁ starts up the vHGW 30 (S12).

  Further, the virtual server 20 responds DHCPOFFER to DHCPDISCOVER from the terminal 3 (S13). As a result, the terminal 3 can continuously perform the DHCP process based on the DHCPOFFER from the virtual server 20 while the vHGW 30 starts up. For this reason, it is possible to prevent the DHCP process from timing out, and it is possible to suppress the occurrence of a time lag that occurs when the DHCP process times out.

As described above, the network system 100 according to the embodiment includes the information processing apparatus 1 that is connected to the plurality of terminals 3 via the network NW and that operates the plurality of virtual machines VM ₀ , VM ₁ . The information processing apparatus 1 responds to each of the plurality of terminals 3 with a plurality of virtual machines VM ₁ , VM ₂ ... That provide the vHGW 30 virtualizing the home gateway function, and signals from the plurality of terminals 3. A virtual machine VM ₀ that provides a virtual server 20 that activates the vHGW 30 corresponding to the terminal 3. Each of the plurality of virtual machines VM ₁ and VM ₂ migrates an unused vHGW 30 that is not used from the terminal 3 to a virtual machine that is running the vHGW 30 that is used from the terminal 3, and converts the unused vHGW 30 to an unused vHGW 30. Stop. Therefore, the network system 100 has an effect that the load on the vHGW 30 can be reduced while responding to the request of each terminal 3.

  Note that the present invention is not limited to the above-described embodiment as it is, and can be embodied by modifying the constituent elements without departing from the scope of the invention in the implementation stage. In addition, the method described in the embodiment is, for example, a magnetic disk (floppy (registered trademark) disk, hard disk, etc.), optical disk (CD-ROM, DVD) as programs (software means) that can be executed by a computer (computer). , MO, etc.), a semiconductor memory (ROM, RAM, flash memory, etc.) or the like, or can be transmitted and distributed via a communication medium. The program stored on the medium side includes a setting program that configures software means (including not only the execution program but also a table and data structure) in the computer. A computer that implements this apparatus reads a program recorded on a recording medium, constructs software means by a setting program as the case may be, and executes the above-described processing by controlling the operation by this software means. The recording medium referred to in this specification is not limited to distribution, but includes a storage medium such as a magnetic disk or a semiconductor memory provided in a computer or a device connected via a network.

For example, the hypervisor 11, the virtual machines VM ₀ , VM ₁ ... Described in the above-described embodiments can be realized by executing a program prepared in advance on a computer. Therefore, an example of a computer that executes a program that realizes the functions of the hypervisor 11, the virtual machines VM ₀ , VM ₁ ... Will be described below.

  FIG. 7 is a diagram illustrating a computer 1000 that executes a program related to a virtual machine. As shown in FIG. 7, the computer 1000 includes, for example, a memory 1010, a CPU (Central Processing Unit) 1020, a hard disk drive interface 1030, a disk drive interface 1040, a serial port interface 1050, a video adapter 1060, a network, and the like. Interface 1070. These units are connected by a bus 1080.

  The memory 1010 includes a ROM (Read Only Memory) 1011 and a RAM (Random Access Memory) 1012. The ROM 1011 stores a boot program such as BIOS (Basic Input Output System). The hard disk drive interface 1030 is connected to the hard disk drive 1090. The disk drive interface 1040 is connected to the disk drive 1100. A removable storage medium such as a magnetic disk or an optical disk is inserted into the disk drive 1100, for example. For example, a mouse 1110 and a keyboard 1120 are connected to the serial port interface 1050. For example, a display 1130 is connected to the video adapter 1060.

Here, the hard disk drive 1090 stores, for example, an OS 1091, an application program 1092, a program module 1093, and program data 1094. Then, the CPU 1020 reads out the program module 1093 and the program data 1094 stored in the hard disk drive 1090 to the RAM 1012 as necessary, and executes them, so that the functions as the hypervisor 11, virtual machines VM ₀ , VM ₁ . Is realized.

  The program module 1093 and the program data 1094 related to the program are not limited to being stored in the hard disk drive 1090. For example, the program module 1093 and the program data 1094 are stored in a removable storage medium and read out by the CPU 1020 via the disk drive 1100 or the like. May be. Alternatively, the program module 1093 and the program data 1094 related to the program are stored in another computer connected via a network such as a LAN (Local Area Network) or a WAN (Wide Area Network), and the CPU 1020 via the network interface 1070. May be read.

  These embodiments and modifications thereof are included in the invention disclosed in the claims and equivalents thereof as well as included in the technology disclosed in the present application.

  For example, in the present embodiment, a DHCPDISCOVER signal applied to DHCP is exemplified as a signal from the terminal 3, and a configuration in which the vHGW 30 is activated in response to the DHCPDISCOVER signal is illustrated. However, the signal from the terminal 3 for starting up the vHGW 30 is not limited to the DHCPDISCOVER signal but may be an ARP (Address Resolution Protocol) or the like, and is not particularly limited.

DESCRIPTION OF SYMBOLS 100 ... Network system 1 ... Information processing apparatus 2, 202 ... Switch 3 ... Terminal 10 ... Hardware 11 ... Hypervisor 12 ... OS
13 ... AP
20 ... Virtual server 30 ... vHGW
31 ... virtual switch NW ... network _VM 0 _~VM 4, 203 ... virtual machine 1000 ... computer 200 ... the conventional network system

Claims (4)

A network system having an information processing apparatus connected to a plurality of terminals via a network and operating a plurality of virtual machines,
The information processing apparatus includes:
A plurality of first virtual machines that provide a virtual home gateway that virtualizes the function of the home gateway to each of the plurality of terminals;
Performs Dynamic Host Configuration Protocol (DHCP) processing, connects to the plurality of terminals without going through the first virtual machine, and activates a virtual home gateway corresponding to the terminals in response to signals from the plurality of terminals A second virtual machine,
Each of the plurality of first virtual machines confirms a process state in each first virtual machine, and unused virtual home gateways that are not used by the terminal are assigned in ascending order of numbers identifying the first virtual machines. The virtual home gateway used from the terminal is moved to the first virtual machine in operation, and the virtual home gateway used from the terminal is changed in ascending order of the number for identifying the first virtual machine. Transition from the terminal to the first virtual machine on which the virtual home gateway used is operating , and stop the unused virtual home gateway on the first virtual machine to be migrated ;
Each of the plurality of first virtual machines stops when all of the virtual home gateways are migrated to another first virtual machine . For each of the plurality of terminals, the terminal, a virtual home gateway corresponding to the terminal, and the second virtual machine are connected 1: 1 (fixed) via a VLAN (Virtual Local Area Network),
The second virtual machine, and characterized by the DHCP to such signal from the terminal to the proxy receives on behalf of the virtual home gateway, along with activating the virtual home gateway, to the signal processing according to the DHCP with the terminal The network system according to claim 1. A virtualization method connected to a plurality of terminals via a network and executed in a network system having an information processing device on which a plurality of virtual machines operate,
A plurality of first virtual machines providing each of the plurality of terminals with a virtual home gateway that virtualizes the function of the home gateway;
A step of performing a DHCP process and a second virtual machine connected to the plurality of terminals without going through the first virtual machine activates a virtual home gateway corresponding to the terminal in response to a signal from the plurality of terminals. When,
Each of the plurality of first virtual machines confirms a process state in each first virtual machine, and unused virtual home gateways that are not used by the terminal are assigned in ascending order of numbers identifying the first virtual machines. The virtual home gateway used from the terminal is moved to the first virtual machine in operation, and the virtual home gateway used from the terminal is changed in ascending order of the number for identifying the first virtual machine. Transitioning from a terminal to a first virtual machine in which a virtual home gateway used is operating, and stopping the unused virtual home gateway in the first virtual machine to be migrated ;
Each of the plurality of first virtual machines is stopped when all of the virtual home gateways are migrated to other first virtual machines;
The virtualization method characterized by including. Providing a virtual home gateway in which a plurality of first virtual machines virtualize a home gateway function to each of a plurality of terminals;
A step of performing a DHCP process and a second virtual machine connected to the plurality of terminals without going through the first virtual machine activates a virtual home gateway corresponding to the terminal in response to a signal from the plurality of terminals. When,
Each of the plurality of first virtual machines confirms a process state in each first virtual machine, and unused virtual home gateways that are not used by the terminal are assigned in ascending order of numbers identifying the first virtual machines. The virtual home gateway used from the terminal is moved to the first virtual machine in operation, and the virtual home gateway used from the terminal is changed in ascending order of the number for identifying the first virtual machine. Migrating from a terminal to a first virtual machine in which a virtual home gateway used is operating, and stopping the unused virtual home gateway in the first virtual machine to be migrated ;
Each of the plurality of first virtual machines is stopped when all of the virtual home gateways are migrated to other first virtual machines;
A virtualization program that causes a computer to execute.

Images