KR20170099710A - Apparatus and method for providing network service in distributed cloud - Google Patents

Abstract

The present invention relates to a method for providing a private network between a user terminal and a distributed data center. The method comprises the steps of: determining a first relay gateway connecting a user terminal and a private network; and setting a service path, through a private network, between the first relay gateway and a second relay gateway connecting a data center including a service node for providing a service to a user terminal and the private network.

Description

[0001] APPARATUS AND METHOD FOR PROVIDING NETWORK SERVICE IN DISTRIBUTED CLOUD [0002]

TECHNICAL FIELD The present invention relates to a technology for providing a dedicated network service for ensuring quality of service in a distributed cloud environment.

In the early days when cloud computing concepts were advocated, the spread of public cloud infrastructures such as Amazon Web Services (AWS) and Google was dominant, but not only commercial cloud computing solutions such as VMWare, Citrix and MS Azure, but also OpenStack , CloudStack, Eucalyptus, and OpenNebula, the private cloud infrastructure that has transformed the ICT environment of each company or organization into the cloud is steadily increasing.

Moreover, with the proliferation of cloud infrastructures, there is a renewed emphasis on the adoption of distributed cloud environments that distribute cloud infrastructure based on a single, large data center as well as relatively small-scale cloud infrastructures across multiple geographies. In addition, the adoption of hybrid cloud, which operates both public cloud and private cloud, is gradually spreading.

In order to universally apply network function virtualization (NFV) technology to transform existing hardware-centric network infrastructure into software, it is necessary to support effective placement and provision of services in a geographically dispersed cloud infrastructure environment do.

However, a method for effectively deploying and providing services sensitive to network latency in a distributed cloud environment has not been specifically described. If virtual resources are allocated to all locally distributed cloud infrastructures to which delay-sensitive services are connected by service users and are redundantly deployed, it is possible to cope with service delays, but it is possible to over-create virtual machines to provide services It can be costly to operate, and it can not efficiently operate cloud infrastructure resources for other services. Especially, when the size of the virtual resources required to provide the service is large, the cost is increased. On the contrary, when a virtual machine or the like is provided for a cloud infrastructure of a specific area, it is difficult to actively cope with a change in the service load, and there is a limitation that the service quality can not be guaranteed to a user at a remote location .

Accordingly, an object of the present invention is to provide a dedicated network service that assures service quality in a distributed cloud environment.

According to an aspect of the present invention, there is provided a method of providing a dedicated network between a user terminal and a distributed data center, the method comprising: determining a relay gateway connecting a user terminal and a private network; And setting a service path through the dedicated network between a data center including a service node for providing a service to a user terminal and a data center gateway connecting the dedicated network and the relay gateway.

According to another aspect of the present invention, there is provided a dedicated network service providing apparatus for providing a dedicated network between a user terminal and a distributed data center, the apparatus comprising: a gateway determining unit determining a relay gateway connecting a user terminal and a private network; And a service path management unit for setting a service path through the dedicated network between a data center including a service node for providing a service to the user terminal and a data center gateway connecting the dedicated network and the relay gateway, / RTI >

According to the embodiment of the present invention, it becomes possible to provide a high-quality dedicated network service.

1 is a diagram illustrating a general service path provided in a distributed cloud environment;
2 is a diagram for explaining a method of providing a dedicated network service according to an embodiment of the present invention;
3 is a diagram illustrating a method of providing a dedicated network service according to another embodiment of the present invention.
4 is a block diagram of an apparatus for providing a dedicated network service according to an embodiment of the present invention;
5 is a flowchart of a method of providing a dedicated network service according to an embodiment of the present invention.
FIG. 6 is a diagram for explaining a specific example of a method for providing a dedicated network service according to an embodiment of the present invention; FIG.

While the present invention has been described in connection with certain exemplary embodiments, it is to be understood that the invention is not limited to the disclosed embodiments, but, on the contrary, is intended to cover various modifications and similarities. It should be understood, however, that the invention is not intended to be limited to the particular embodiments, but includes all modifications, equivalents, and alternatives falling within the spirit and scope of the invention. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, the present invention will be described in detail with reference to the accompanying drawings. In addition, the singular phrases used in the present specification and claims should be interpreted generally to mean "one or more " unless otherwise stated.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings, wherein like reference numerals refer to like or corresponding components throughout. .

1 is a diagram illustrating a general service path provided in a distributed cloud environment.

Referring to FIG. 1, in general, a service operator establishes a geographically dispersed data center around a base area in order to provide a high quality service with a minimum delay to a wide area. Accordingly, a service user using a service in a base area where a data center is established or a nearby area can receive a service faster than when using a remote data center. In particular, when a service operator provides a high-quality broadband service such as a video content streaming service and a virtual desktop service, the service delay can be minimized and service quality can be improved.

In addition, by enabling service operators to establish dedicated networks between geographically dispersed dating centers to ensure networking performance between data centers, service users can also get services serviced by remote data centers faster via nearby data centers.

The cloud data center includes gateways at the points of contact between the cloud data center and the external network, and the user terminal can access the cloud data center through the gateway from the external network. In addition, the user terminal can access another data center through a dedicated network connecting the cloud data center. According to the service operation policy, the service provider node that provides various services to the user terminal can be operated in the form of a virtual machine, a container, or a bare-metal server. The cloud data center may include data communication between these service nodes and a network for communication with service nodes and external terminals. In the cloud data center, a plurality of service nodes having various specifications and configurations according to the service policy can be created and operated, and the network between these service nodes can also be configured as a plurality of networks as needed. In addition, when a service operator provides a service, a cloud data center can be operated by providing a plurality of service nodes providing the same service in order to provide various high-quality services such as load balancing, high availability, and service quality enhancement.

In addition, if there is a connection request from a user terminal to a service node providing a specific service, the service operator can operate GSLB (Global Service Load Balancing) for transmitting the access address of the service node to the user terminal. For example, in the case of a web service having an address of http://www.foo.com, the GSLB sends a request to the user terminal among a plurality of service nodes for a domain address of http://www.foo.com requested by the user terminal And transmits the IP address of the service node capable of providing the optimal service to the user terminal.

In the distributed cloud environment shown in FIG. 1, when a service user desires to use a service that is being operated in a specific virtual machine 140, the user terminal 110 uses the virtual machine 142, which is an optimal service node providing the service, And a connection address is provided from Global Service Load Balancing (GSLB) 130. The user terminal 110 then transmits traffic destined for the address of the virtual machine 142 to the virtual machine 140 via the gateway of the cloud data center 140 including the virtual machine . However, since the traffic is transmitted from the user terminal 110 to the cloud data center gateway 141 via the public network or the Internet network 160, it is difficult for a service user to provide a high-quality service. This is also the case when traffic is transferred from the service node to the user terminal (170). Therefore, it is necessary to force the exchange of traffic between the user terminal 110 and the cloud data center 140 through the dedicated network 120 to improve the service quality.

2 is a diagram for explaining a method of providing a dedicated network service according to an embodiment of the present invention.

2, when the user terminal 110 using the service is far away from the cloud data center 140 including the service node 142 to provide services to the user terminal 110, A relay gateway 210 is installed in an area where the user terminal 110 is located. Here, the relay gateway 210 is used as a point of entry of a service to be used by the user terminal 110. That is, when the user terminal 110 queries the GSLB 130 for the IP address of the service node 142 to be used by the user in order to use the service node 142, the GSLB 130 accesses the virtual machine 142 to the user terminal 110 through an intermediary gateway 210, rather than an IP address. At this time, the network address conversion is performed for the traffic that has flowed from the user terminal 110 to the relay gateway 210, and the traffic is transmitted to the gateway of the cloud data center through the private network (220). Therefore, the traffic transmitted from the user terminal 110 to the service node 140 is delivered according to the dedicated network path 220, so that the quality of service can be improved.

However, since the traffic to be delivered from the cloud data center 140 to the user terminal 110 has the IP address of the user terminal 110, it may be transmitted 170 to the user terminal through the public network, May occur.

3 is a diagram for explaining a method of providing a dedicated network service according to another embodiment of the present invention.

Hereinafter, when the service nodes 142 and 143 are configured in the geographically dispersed cloud data center 140, based on various matters such as the type of service provided by each service node, service quality requirements, and characteristics of the cloud infrastructure environment The service provisioning server 310 that is responsible for configuring and setting the connection environment of the user terminal 110 using the service node will be described below.

Referring to FIG. 3, when the service provisioning server 310 is configured to arbitrarily configure a user access environment in order to guarantee quality of service according to a service policy, And configures and sets the user access environment according to the policy information input in the user interface. First, the service provisioning server 310 searches for potential users who use the generated service nodes 142 and 143 according to various classification criteria such as a user's access area, a user's service usage grade, or a user's specific group, ) To provide high-quality dedicated network services or to provide services through general public networks.

In one embodiment, if the address of the user terminal 110 belongs to a specific subnet band, the connection IP address of the service node is set to a specific gateway port of the relay gateway 210 so that connection through the specific relay gateway 210 can be established. And the service provisioning server 310 accesses the GSLB 130 and sets it. In contrast, if the IP address of the user terminal 110 belongs to another specific subnet band where the private network can not be used, the GSLB 130 is set to access through the gateway 141 of the cloud data center 140 through the public network do.

The service provisioning server 310 sets up the GSLB 130 and then transmits the data to the data center gateway 141 of the cloud data center 140 in which the relay gateway 210 and the service nodes 142 and 143, And adds a setting so that traffic exchange between a specific user terminal and the Clyde data center can be serviced through a dedicated network. At this time, a virtual dedicated network using a tunnel or the like is configured between the relay gateway 210 and the data center gateway 141 so as to guarantee the required service quality according to the service policy. At this time, the traffic of the user terminal 110 may be delivered through the dedicated network 120 by configuring an overlay network including IPSec Tunnel, GRE, VxLAN Tunnel, or the like, or using MPLS or PTN technology to guarantee quality of service And is not limited to a specific network technology.

The information that the service provisioning server 310 sets in the relay gateway 210 and the data center gateway 141 is used for traffic for which the IP address of the service node 142, which is provided through the GSLB 130, And add a network address translation (NAT) rule to the IP address in the cloud data center 140 of the actual service node 142. Conversely, for the traffic arriving from the service node 142 through the dedicated network 120, the IP address of the service node 142, which is known by the user terminal 110, that is, the IP address Add a rule to reverse address (NAT) the address again. In addition, next hop information is set to the data center gateway 141 so that the traffic that has undergone the destination network address translation can be delivered through the dedicated network.

The service provisioning server 310 further sets traffic transmission information to the data center gateway 141 of the cloud data center 140 where the service node 142 is located. The service provisioning server 310 transmits the IP address of the specific user group to the next path next to the destination traffic using the IP address of the specific user group so that the traffic to be transmitted from the service node 142 to the user terminal 110 can use the dedicated network 120. [ hop to be the relay gateway 210. [ More specifically, when the service node 141 is created, the service provisioning server 310 may determine whether or not the service gateway 141 is connected to the relay gateway (not shown) according to various classification criteria such as a user's access area, 210) and, if so, set the service access IP address in the GSLB 130. Accordingly, information of the relay gateway 210 and the data center gateway 141 to which the user traffic will return according to the determined classification criteria information of the user is transmitted to the data center gateway 141 of the cloud data center 140 in which the service node 142 is located The service traffic can be delivered through the dedicated network 120 to guarantee the quality of service.

A method for the service provisioning server 310 to apply the setting items to the data gateway 140 of the relay gateway 210 and the cloud data center 140 in order to apply the control method described above is called software defined networking -defined networking), it is possible to preliminarily apply setting items to each gateway 2 in advance according to a policy determined at the time when the service node 141 is created, or to allow user traffic to be transmitted to arbitrary gateways 200 and 112 It may query the service provisioning server 300 when it arrives, and then apply and process the determined information. The protocol between the service provisioning server 300 and each of the gateways 200 and 112 can be applied using various protocols or interfaces according to needs such as OpenFlow, OVSDB, Netconf, I2RS, SNMP, Not limited.

The service provisioning server 300 in such a geographically dispersed cloud environment is described in detail in the " Cloud Center Management Method and System " filed by the present applicant (Application No. 10-2013-0086295) "Or may be at an equivalent level of location. More specifically, it is included in the "network control unit" of the "virtual infrastructure service provision apparatus" described in the " apparatus and method for providing virtual infrastructure service ", filed by the present applicant It can exist at an equivalent level of location.

4 is a block diagram of an apparatus for providing a dedicated network service according to an embodiment of the present invention.

Referring to FIG. 4, the dedicated network service providing apparatus includes a service provisioning server 310 shown in FIG. 3, and includes a relay gateway determining unit 410 and a service path managing unit 420.

The relay gateway determination unit 410 determines a relay gateway for connecting the user terminal that intends to use the service with the private network.

In one embodiment, the relay gateway determination unit 410 can determine a relay gateway for connecting the user terminal and the private network based on the address information of the user terminal. For example, when the address of the user terminal belongs to a specific subnet band, the connection IP address of the service node is set to one of the IP address bands including the specific gateway port of the relay gateway so that the connection can be made through the specific relay gateway. Access and configure GSLB.

The service path management unit 420 manages a service path between the user terminal and the distributed cloud including the service node to provide the service to the user terminal. Specifically, the service path management unit may establish a private network between a relay gateway connecting the user terminal and the private network, and a relay gateway connecting the private network and the distributed cloud. In addition, the service path management unit 420 accesses the data center gateway of the cloud data center in which the relay station and the service node to which the user terminal is to be connected, so that traffic exchange between the specific user terminal and the Clyde data center can be both serviced through the private network Add the settings.

In one embodiment, the service path management unit 420 may set a forwarding rule to forward the traffic coming from the user terminal to the service node through the dedicated network, to the relay node connecting the user terminal and the dedicated network.

In one embodiment, the service path management unit 420 may set a forwarding rule to forward the traffic coming from the service node to the user terminal through the relay network connecting the distributed cloud and the private network through the private network.

5 is a flowchart of a method of providing a dedicated network service according to an embodiment of the present invention.

Hereinafter, each step will be described as an example performed by the service provisioning server.

In step S510, the service provisioning server receives the request from the user terminal with the connection information about the service node to provide the service to the user terminal.

In step S520, the service provisioning server determines a relay gateway to connect the private network with the user terminal. Specifically, the relay gateway is determined based on the address information of the user terminal.

In step S530, the service provisioning server establishes a traffic forwarding rule to a relay gateway connecting the user terminal and the dedicated network, in order to create a dedicated network service path between the user terminal and the service node. Specifically, the traffic forwarding rule may be a rule that directs the traffic flowing from the user terminal to the service node through the dedicated network.

In step S540, in order to create a dedicated network service path between the dedicated network and the service node, a traffic forwarding rule is set in the data center gateway connecting the service node and the private network. Specifically, the traffic forwarding rule may be a rule for directing traffic from a service node to a user terminal through a private network.

6 is a diagram for explaining a specific example of a method of providing a dedicated network service according to an embodiment of the present invention.

Hereinafter, the IP addresses are assigned to the main network ports 310, 312, 314, 316, 318, and 320 located on the traffic transmission path shown in FIG. 3, for example. First creates a virtual network 144 in the cloud data center, and creates a service node 143, which is a web server to provide a web service having an address of http://www.foo.com. At this time, when the subnet address band of the virtual network 144 is 10.10.0.0/24, the address of the gateway port 141 of the virtual network is 10.10.0.1 and the IP address 320 of the service node 142 is 10.10.0.9 Let's assume. Of course, since there may be a user terminal using a service by directly connecting to the cloud data center 140, the service node 142 may also have a public IP address accessible from the external network. In this embodiment, 220.220. 0.9. An example of an IP address for each of the major network ports described in this embodiment is shown in Table 1 below.

location IP address Explanation location IP address Explanation 310 200.1.0.3 User terminal 318 10.10.0.1 Subnet gateway 312 200.3.0.1 Subnet gateway 320 10.10.0.9 Service node 314 172.16.0.2 Tunnel endpoint 322 172.16.1.41 Tunnel endpoint 316 172.16.0.3 Tunnel endpoint 324 172.16.1.42 Tunnel endpoint

Assume that the IP address 310 of the user terminal 110 is 200.1.0.3. At this time, the network connection environment of the user 100, that is, the states of the wired terminal, the mobile terminal, the terminals in the private network, etc. may vary, but the specific connection environment is not limited here, have. It is also assumed that the specific port 312 that the user terminal can access in the relay gateway 210 is the gateway port 200.3.0.1 of the 200.3.0.0/24 subnet.

In step S610, a virtual network 141 is created in the cloud data center 140, and a service node 142, which is a web server to provide a web service having an address of http://www.foo.com, is created

In step S620, after the service node 142 is created, according to the service policy, the service provisioning server 310 transmits the traffic of the user terminal having the IP address belonging to the 200.1.0.0/16 band among the potential users using the service to the relay gateway The IP address of the service node 142 is set to 200.3.0.9 instead of the private IP address 10.10.0.9 or the public IP address 220.220.0.9 of the service node 142 at this time do.

In step S630, the service provisioning server 310 sets the GSLB 130 to notify 200.3.0.9 when the IP address of the user terminal belongs to 200.1.0.0/16 for the DNS service request for www.foo.com do.

In step S640, the service provisioning server 310 establishes a tunnel 220 or 320 that can guarantee quality of service between the relay gateway 200 and the gateway 141 of the data center 140 where the service node 142 is located Respectively.

In step S650, the service provisioning server 310 sets the network address translation rules and the traffic forwarding rules of the relay gateway 210. [ That is, when the traffic having the destination address of 200.3.0.9, which is one of the IP addresses of the service node 142, is input to the relay gateway 210, the destination address is converted into the private IP address 10.10.0.9 of the service node 142 And sets the traffic forwarding rule to 172.16.0.3, which is the address of the tunnel end point 316, so that the next hop to which the next traffic will be forwarded is the endpoint 316 of the tunnel 220 with the gateway 141. That is, If the destination IP address is 10.10.0.0/24 or 10.10.0.9, the rule with the following path is 172.16.0.3 is added. If the relay gateway 210 receives traffic with the destination address 10.10.0.9, To 200.3.0.9.

In step S660, the next service provisioning server 310 establishes a traffic forwarding rule to the gateway 142 of the data center where the service node 142 is located. That is, if the address of the destination is included in the 200.1.0.0/16 band including the user 100 for the outgoing traffic from the gateway 142, the next route of the traffic is transmitted to the end point 314 of the dedicated network 320, The traffic forwarding rule is set to 172.16.0.2, which is the address of the end point 314.

The apparatus and method according to embodiments of the present invention may be implemented in the form of program instructions that can be executed through various computer means and recorded in a computer-readable medium. The computer readable medium may include program instructions, data files, data structures, and the like, alone or in combination.

Program instructions to be recorded on a computer-readable medium may be those specially designed and constructed for the present invention or may be known and available to those of ordinary skill in the computer software arts. Examples of computer-readable media include magnetic media such as hard disks, floppy disks and magnetic tape; optical media such as CD-ROMs and DVDs; magnetic media such as floppy disks; Includes hardware devices specifically configured to store and execute program instructions such as magneto-optical media and ROM, RAM, flash memory, and the like. The above-mentioned medium may also be a transmission medium such as a light or metal wire, wave guide, etc., including a carrier wave for transmitting a signal designating a program command, a data structure and the like. Examples of program instructions include machine language code such as those produced by a compiler, as well as high-level language code that can be executed by a computer using an interpreter or the like.

The hardware devices described above may be configured to operate as one or more software modules to perform the operations of the present invention, and vice versa.

The embodiments of the present invention have been described above. It will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention as defined by the appended claims. Therefore, the disclosed embodiments should be considered in an illustrative rather than a restrictive sense. The scope of the present invention is defined by the appended claims rather than by the foregoing description, and all differences within the scope of equivalents thereof should be construed as being included in the present invention.

110: User terminal
120: Private network
130: GSLB
140: The cloud data center
141: Data center gateway
142: service node
210: Relay gateway

Claims (1)

A method for providing a dedicated network between a user terminal and a distributed data center,
Determining a relay gateway connecting the user terminal and the private network; And
Setting a service path through the dedicated network between a data center including a service node for providing a service to a user terminal and a data center gateway connecting the private network and the relay gateway;
The method comprising the steps of:

Images