KR20190011114A - Control System for Multi-Virtual Data Center in Software-Defined Data Center - Google Patents

Abstract

The present invention relates to a software-defined data center (SDDC). According to the present invention, an apparatus, in an apparatus for controlling a multi-virtual data center system realized by the interconnection of a plurality of SDDCs, comprises: a processor; and a memory including at least one instruction performed by the processor. The processor generates a local network corresponding to a region, where the plurality of SDDCs are located, in a logical virtual area realized by the interconnection of the plurality of SDDCs, and designs a virtual data center by placing an icon corresponding to a data center component in the local network.

Description

[0001] Multi-Virtual Data Center System [

The present invention relates to a software-defined data center (SDDC), and more particularly, to a software-defined data center (SDDC), in which data centers located in a plurality of areas are interlocked to design a virtual data center And more particularly, to a multi-virtual data center system that manages data.

The data center evolved into a virtual data center (VDC) concept that virtualizes IT resources such as servers, networking, and storage in a traditional data center that individually designed and managed servers, networking, and storage. Software-defined data centers (SDDC).

The Software-Defined Data Center (SDDC) is a data center that virtualizes all IT resources on hardware resources, provides virtual services without physical configuration changes, and consolidates and manages virtualized IT resources . In other words, a software-defined data center (SDDC) can virtualize computing, storage, networking, and all of these IT resources in an orchestrator. The orchestrator has a 'provisioning' function for setting up multiple devices and an 'automation' function for automating all settings.

As such, the data center continues to evolve, and the Software-Defined Data Center (SDDC) separates "control" from computing to storage, networking, and security, It is defined as an IT as a Service (ITaaS) data center infrastructure that can be integrated and managed and provides the IT infrastructure as a service.

However, due to the broader scope of the data center, it is difficult to continue to develop without an 'interlocking structure' that includes concrete structures and methods of realizing related technologies.

Korean Patent Publication No. 10-2017-0044011, " Power Management Technique for Data Center Power Architecture "

SUMMARY OF THE INVENTION Accordingly, the present invention has been made keeping in mind the above problems occurring in the prior art,

SUMMARY OF THE INVENTION It is an object of the present invention to provide a multi-virtual data center system in which locally distributed data centers are linked to each other through a private network, and a plurality of interlinked data centers can be centrally managed.

It is another object of the present invention to provide a multi-virtual data center system capable of freely designing and integrally managing virtual data centers (VDCs) .

It is another object of the present invention to provide a multi-virtual data center system capable of freely designing and integrally managing customer-requested services in a centralized manner by linking locally distributed virtual data centers (VDCs) will be.

The present invention is embodied by the following embodiments in order to achieve the above object.

According to one embodiment, an apparatus is provided for managing a multi-virtual data center system implemented with interworking of a plurality of software defined data centers, the apparatus comprising: a processor; And a memory including at least one instruction executed by the processor, wherein the processor is further configured to: determine whether a local area network that matches an area where the plurality of data centers is located in a logical virtual area implemented with interworking of a plurality of data centers And designing a virtual data center by placing an icon corresponding to the data center component in the local network.

The processor is characterized in that a plurality of virtual data centers are designed and linked with a dedicated network to construct a multi-virtual data center system defined by software.

The processor is characterized by assigning a data center account and designing the virtual data center at the request of a manager assigned the data center account.

Wherein the processor assigns the dedicated network usage right to the data center account so that the virtual data center is independent of the area where the plurality of data centers are located.

The processor allocating at least one service account in the data center; A service virtual machine is arranged in a local network of the virtual data center according to a request of an administrator who has been assigned the service account, and the details of the data center component are set to form service traffic to design a virtual service.

The data center component may include at least one of a load balancer, a firewall, a web firewall, and an L2 network.

The service virtual machine includes a program for performing a service to be provided by an administrator who has been assigned the service account.

The processor creating and operating the virtual data center and the virtual service in a common environment; And performs integrated monitoring on virtual data centers and virtual services operated in a common environment.

The processor may perform monitoring on the virtual data center by dividing the virtual data center into at least one of an operation state, a name, a number of matching areas, and a service to be executed.

The processor may perform monitoring by dividing the plurality of data centers matched with the virtual data center into regions.

The processor may perform monitoring on the data center component by dividing the data center component into at least one of a type, a supplier, and a creation date of the data center component.

The present invention has the following effects with the above-described configuration.

The present invention has the effect of centrally integrating and managing a plurality of distributed data centers by linking locally distributed data centers through a private network.

The present invention has the effect of freely designing and integrating a virtual data center (VDC) that is not dependent on a specific area by using various icons corresponding to the constituent elements of the virtual data center (VDC).

It is still another object of the present invention to provide a multi-virtual data center system capable of freely designing and integrally managing a customer requested service using an image for a virtual data center (VDC).

1 is a block diagram of a multi-virtual datacenter system in accordance with one embodiment.
Figure 2 is a block diagram of the data center management platform of Figure 1;
FIG. 3 is a conceptual diagram illustrating the types of accounts assigned to customers according to an embodiment.
4 is an illustration of an example of designing a virtual data center (vDC) according to one embodiment.
5 is an illustration of an example of designing a virtual data center (vDC) according to another embodiment.
FIG. 6 is an exemplary diagram illustrating an initial process in which a customer requested service is designed according to another embodiment.
Figure 7 is an exemplary diagram of a customer request service being designed in a virtual data center (vDC) according to yet another embodiment.
8 is an exemplary diagram illustrating integrated monitoring performed in a data center management platform in accordance with an embodiment.
Figures 9-11 illustrate how a data center management platform manages a virtual data center (vDC) according to an embodiment.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings. The embodiments of the present invention can be modified in various forms, and the scope of the present invention should not be construed as being limited to the following embodiments. This embodiment is provided to more fully describe the present invention to those skilled in the art. Furthermore, although specific terms have been used in the drawings and specification of the present invention, they have been used for the purpose of describing the present invention only and not for limiting the scope of the present invention described in the claims or the claims. Therefore, those skilled in the art will appreciate that various modifications and equivalent embodiments are possible without departing from the scope of the present invention. Accordingly, the true scope of the present invention should be determined by the technical idea of the appended claims.

The multi-virtual data center system of the present invention will now be described in detail with reference to the drawings.

1 is a block diagram of a multi-virtual datacenter system in accordance with one embodiment.

1, a multi-virtual data center system 1 includes a plurality of data centers 10, 11, 12, 13, a private network 20, 21, 22, a public network 30, a data center management platform 40 ), And a customer terminal (50).

The plurality of data centers 10: 11, 12, and 13 are data centers that provide cloud computing services and are physically distributed in different locations for various reasons such as power problems, regional problems, network problems, and quality of service problems. A plurality of data centers 10: 11, 12, 13 according to one embodiment may be interconnected by a dedicated network 20: 21, 22. 1, there is shown a data center 11 located in the Cheonan, a data center 12 located in Mok-dong, and a data center 13 located in Inchon. However, the present invention is not limited to this, May be implemented as data centers 10.

In accordance with one embodiment, each data center 10, 11, 12, 13 with different geographical locations virtualizes all components, such as computing, storage, and networking, over hardware resources, Defined data centers (SDDCs) that can be integrated and managed. Each data center 10, 11, 12, and 13 can be remotely controlled by the data center management platform 40 to create a service (server) utilizing IT resources without changing the physical configuration, Or backups.

The private network 20 is a dedicated line for connecting a plurality of data centers 10: 11, 12, and 13, which are a collection of various infrastructures defined by software, to a closed network without interworking with the outside. The private networks 20: 21 and 22 are realized by a wired cable connecting the newly installed data center 10 and other pre-installed data centers 10 when the data center 10 is installed in an arbitrary area . According to one embodiment, tenants who are assigned a virtual data center (vDC) account may share an already established private network 20: 21, 22 using a delimiter (ex. VXLAN ID). Further, the delimiter (ex, VXLAN ID) can be implemented as a delimiter used only for interworking between data centers 10.

The public network 30 is a communication network that can be freely connected to any one of the public network 30 and the private network 20, 21 and 22, which is a private network in which access is limited to a specific user, such as a telephone network, a data network, Concept. A tenant may perform an application to receive a Virtual Data Center (vDC) or service account via the public network 30 to the data center management platform 40. In addition, the plurality of data centers 10: 11, 12, and 13 may be connected to the public network 30 as well as connected to each other through the private networks 20: 21 and 22.

The data center management platform 40 includes a virtual data center (vDC) that does not depend on the area in response to a tenant request on a canvas implemented as a plurality of virtualized data centers 10: 11, 12, The service can be designed and integrated by monitoring the designed virtual data center (vDC) and services. The data center management platform 40 according to an exemplary embodiment of the present invention has a common environment (a hypervisor, an open stack) The virtual data center (vDC) and the virtual service are created and managed on the canvas. That is, the data center management platform 40 realizes a multi-virtual data center (MvDC) by designing and integrating and monitoring virtual data centers (vDCs) and services that are not region-dependent.

A plurality of data centers 10: 11, 12 and 13 are interconnected by dedicated networks 20: 21 and 22 to function as a data center (SDDC) And is a set of a plurality of data centers 10: 11, 12, and 13 that can be managed integrally through a data center management platform 40 by an administrator. According to one embodiment, the data center management platform 40 may use a plurality of physical data centers 10: 11, 12, 13 with different geographic locations as a single data center 10, (10) as a plurality of data centers (10). The virtual data center (vDC) is logically mapped to all or some of the physical data centers 10 located in an arbitrary area, and even if the physical data center 10 of the mapped area collapses due to natural disasters It can be implemented as a redundant system that is mapped to the data center 10 located in another area without being destroyed.

The customer terminal 50 may be connected to the data center management platform 40 via the public network 30 to a terminal owned by a customer who is assigned a virtual data center (vDC) account or a virtual service account have. The customer terminal 50 includes all devices such as a PC, a mobile communication terminal, various servers, etc. connected to the public network 30, and is not limited to a specific electronic device. Customers can be realized by a variety of entities such as enterprises, individuals, and government agencies that want to provide cloud services through virtual data centers (vDCs).

FIG. 2 is a block diagram of the data center management platform of FIG. 1, FIG. 3 is a conceptual diagram illustrating a type of an account assigned to a customer according to an embodiment, FIG. Fig. 5 is an exemplary diagram for designing a virtual data center (vDC) according to another embodiment, and Fig. 6 is a diagram illustrating an example of an initial process in which a customer requested service is designed according to another embodiment FIG. 7 is an exemplary diagram illustrating a customer request service design in a virtual data center (vDC) according to another embodiment, and FIG. 8 is an exemplary diagram illustrating integrated monitoring performed in a data center management platform according to an embodiment. And FIGS. 9-11 illustrate how a data center management platform manages virtual data centers (vDCs) according to an embodiment.

The data center management platform 40 may include a memory, a memory controller, one or more processors (CPUs), a peripheral interface, an input / output (I / O) subsystem, a display device, an input device, and a communications circuit. The memory may include high speed random access memory and may also include one or more magnetic disk storage devices, non-volatile memory such as flash memory devices, or other non-volatile semiconductor memory devices. Access to the memory by other components such as the processor and the peripheral interface may be controlled by the memory controller. The memory can store various information and program instructions, and the program is executed by the processor.

The peripheral interface connects the input / output peripheral of the data center management platform 40 with the processor and memory. The one or more processors perform various functions and process data for the data center management platform 40 by executing a set of instructions stored in various software programs and / or memory. The I / O subsystem provides an interface between I / O peripheral devices such as display devices, input devices, and peripheral interfaces. The display device can use liquid crystal display (LCD) technology or light emitting polymer display (LPD) technology.

A processor is a processor configured to perform operations associated with the data center management platform 40 and to execute instructions, for example, using instructions retrieved from memory to provide input and output data between components of the data center management platform 40 Reception and operation can be controlled. The communication circuit performs communication via an external port or communication by an RF signal. The communication circuit converts the electrical signal to an RF signal and vice versa, and is capable of communicating with the communication network, other mobile gateway devices, and the communication device through the RF signal.

2, the data center management platform 40 includes a management unit 41, a virtual data center design unit 43, a service design unit 45, and a monitoring unit 47. Such components may be implemented in software, stored in memory and executed by a processor, or may be implemented in a combination of software and hardware.

The management unit 41 controls the entirety of the data center management platform 40 by performing data center component creation, user authority creation, and data center region management that constitute the virtual data center vDC.

The data center component is a virtual resource corresponding to the function of the physical resource constituting the data center, and may be configured as an icon according to an embodiment. 4, a data center component, a load balancer (LB), a firewall (FW), a web firewall (WAF), an L2 network (L2 network), a public network Storage, or the like. The management unit 41 can generate a component in a common environment (Hypervisor, OpenStack), and the generated component can be shared with a plurality of virtual data centers (vDC).

The user authority can be implemented as a virtual data center account (vDC account) and a service account (service account). 3, the virtual data center accounts (A1, A2, ..., AN) are entitled to build and operate a virtual data center (vDC) Data center (vDC) can be designed. The service account (AxBy) is the right to build and operate a cloud service within a virtual data center (vDC). The vDC account or the service account may have a dedicated network use right that can use a dedicated network 20 for connecting a plurality of data centers 10: 11, 12, and 13 to a closed network And the usage authority for each account can be distinguished using a delimiter (ex, VXLAN ID).

3, each of virtual data center account 1 (A1), virtual data center account 2 (A2), and virtual data center account N (AN), according to one embodiment, (VDC) in a data center 12 located in a mock-up area 11, a data center 13 located in Incheon, and a plurality of A1B1, A1B2, ..., A1BN of the service account (ex, A1B1, A1B2, ..., A1BN)

The data center area refers to the area where the physical data centers (10: 11, 12, 13) where the virtual data centers (vDC) match are located. For example, referring to FIG. 1, the data center area corresponds to Cheonan, Mokdong, and Incheon.

The virtual data center design unit 43 designates a virtual data center account (vDC account) on a canvas implemented as a plurality of virtualized data centers 10 (11, 12, 13) Build a virtual data center (vDC) accordingly. According to one embodiment, the virtual data center design unit 43 can design a virtual data center (vDC) using common virtual data center (vDC) components. That is, the virtual data center design unit 43 may separately generate a load balancer, a firewall FW, a web firewall (WAF), and an L2 network for each virtual data center (vDC) to be designed.

A canvas is a canvas in which one data center 11 can be divided into a plurality of data centers 11a, 11b, ..., 11n without changing the physical configuration of the plurality of data centers 10: 11, 12, Is a logical virtual area that does not rely on a region that can design and manage the data center 10 (11, 12, 13) like a single data center 10. A canvas according to an embodiment is a virtual area in which a virtual service is freely designed by freely utilizing all system resources such as servers, storage, switches, etc., and managing internal and external networks of a plurality of data centers 10: 11, 12 and 13 . Here, the service may correspond to a virtual server (VM) that provides a cloud service.

Referring to FIG. 4, the virtual data center designing unit 43 designates a virtual network (L2 network) that matches a plurality of data centers located in a canvas (ex, Kt_sports) ), Respectively. The virtual data center design unit 43 selects an icon corresponding to a data center component such as a firewall FW, a web firewall WAF, a load balancer LB and the like, arranges the selected icon in the Mokdong area network, You can design a virtual data center on top of a physical data center, and you can design a virtual data center on top of a physical data center located in the cloud. The virtual data center design unit 43 can construct a multi-virtual data center system defined by software by linking the virtual data centers matched to the Mokdong and Cheonan to the private network ex (VNI 9000).

Fig. 5 shows an embodiment in which the virtual data center design section 43 designates a virtual data center (vDC) on the physical data center located in the competition and the gambling in the same manner as in Fig. The virtual data center design unit 43 constructs a duplex configuration by linking virtual data centers (vDCs) to a dedicated network (ex, VNI9000), thereby preventing a physical data center in some areas from being damaged (VDCs) can be made more available by allowing them to continue to provide services in physical data centers in other regions, even in the event of a failure.

The virtual data center design section 43 designates and arranges detailed specifications (ex, lending width, licensing, redundancy (HA), etc.) of virtual data center (vDC) And performs a provisioning request. Provisioning refers to a series of tasks that place the necessary virtual data center (vDC) components where they are needed and reclaim idle resources. For example, a server computer using 8TB capacity has increased the capacity of 8TB, and after that, the amount of data is reduced, and there is no more space demand, so 8TB capacity can be recovered again. The operation is called provisioning.

The service design unit 45 designates a service component in a local network (ex. L2 network) of a virtual data center (vDC) designed by the virtual data center design unit 43, Virtual machine, VM). A service component can consist of a standardized image (ex, CentOS, Ubuntu) as a template. Here, the service virtual machine may include a program for performing a service that the administrator who has been assigned the service account wants to provide.

The service designing unit 45 sets detailed specifications of the virtual data center (vDC) component configured in the virtual data center design unit 43, for example, a load balancer rule (LB rule), a firewall rule (FW rule) Allowing real service traffic to flow. According to one embodiment, a plurality of service accounts can be issued in the virtual data center (vDC), and a customer who has been issued a service account can directly create, use and delete a desired IT infrastructure through the service design unit 45 A 'Self-Service Portal' can be built to provide cloud services to users.

6, the service component (ex, CentOS 7, RedHat, Ubuntu 14, cirrus) is composed of images, and a customer who has been issued a service account transmits service components (Ubuntu 14 in the L2 network of the Cheonan area by Drag & Drop method, and another service component CentOS 7 is selected and dragged and dropped in the L2 network of Mokdong area And a detailed specification of a load balancer rule (LB Rule) and a firewall rule (FW Rule) configured by the other virtual data center design unit 43 can be set to design a virtual service so that actual service traffic can flow.

FIG. 7 shows a screen in which a virtual service (IPC_service 1) is designed in the canvas according to another embodiment, and further detailed specifications of components are displayed.

The monitoring unit 47 monitors each unit virtual data center (vDC) and provides monitoring results through a screen. The information provided on the screen may include basic configuration information (eg, Port, IP, Interface, QOS, etc.) and real-time numerical values for the basic configuration information. According to the embodiment, the virtual data center and the service are created and operated in a common environment, so that the monitoring unit 47 can perform integrated monitoring on a virtual data center and services operated in a common environment.

Referring to FIG. 8, monitoring contents performed by the monitoring unit 47 are shown according to an embodiment. 9-11 illustrate how the monitoring unit 47 monitors the monitoring of virtual data centers (vDCs) running on the data center management platform 40 by virtual data center (vDC), by region , And components. FIG. 9 shows the statuses of the management status, operational status, name, number of matching areas, and number of services executed in a plurality of virtual data centers (vDCs). FIG. 10 shows an example in which monitoring is performed by dividing a plurality of data centers 10: 11, 12, and 13 matching a virtual data center into regions (ex, Mokdong, and Cheonan). FIG. 11 illustrates monitoring information about the status of various components of a virtual data center (vDC), for example, by classifying data center component types, suppliers, and creation dates into data center components As shown in FIG.

While the specification contains many features, such features should not be construed as limiting the scope of the invention or the scope of the claims. In addition, the features described in the individual embodiments herein may be combined and implemented in a single embodiment. Conversely, various features described in the singular < Desc / Clms Page number 5 > embodiments herein may be implemented in various embodiments individually or in combination as appropriate.

Although the operations have been described in a particular order in the figures, it should be understood that such operations are performed in a particular order as shown, or that all described operations are performed to obtain a sequence of sequential orders, or a desired result . In certain circumstances, multitasking and parallel processing may be advantageous. It should also be understood that the division of various system components in the above embodiments does not require such distinction in all embodiments. The above-described program components and systems can generally be implemented as a single software product or as a package in multiple software products.

The method of the present invention as described above can be implemented by a program and stored in a computer-readable recording medium (CD-ROM, RAM, ROM, floppy disk, hard disk, magneto optical disk, etc.). Such a process can be easily carried out by those skilled in the art and will not be described in detail.

It will be apparent to those skilled in the art that various modifications and variations can be made in the present invention without departing from the spirit or scope of the invention. The present invention is not limited to the drawings.

10: Data center 20: Private network
30: Public network 40: Data center management platform
41: Manager 43: Virtual Data Center Design Department
45: service design section 47: monitoring section
50: Customer terminal

Claims (11)

1. An apparatus for managing a multi-virtual data center system implemented by interworking of a plurality of software defined data centers,
A processor; And
And a memory including at least one instruction executed by the processor,
The processor comprising:
Designing a virtual data center by creating a local network matching a location where the plurality of data centers are located in a logical virtual area realized by linking a plurality of data centers and arranging an icon corresponding to the data center component in the local network Lt; / RTI > The method according to claim 1,
The processor comprising:
Designing a plurality of virtual data centers and interworking with the dedicated network to construct a multi-virtual data center system defined by software. 3. The method of claim 2,
The processor comprising:
Allocating a data center account and designing the virtual data center at the request of a manager assigned the data center account. The method of claim 3,
The processor comprising:
And assigning the dedicated network usage right to the data center account so that the virtual data center is independent of the area where the plurality of data centers are located. 5. The method of claim 4,
The processor comprising:
Allocating at least one service account in the data center;
And designing a virtual service by arranging a service virtual machine in a local network of the virtual data center according to a request of an administrator assigned the service account and forming details of the data center component to form service traffic. . 6. The method of claim 5,
The data center component comprising:
A load balancer, a firewall, a web firewall, and an L2 network. The method according to claim 6,
The service virtual machine comprises:
And a program for performing a service to be provided by an administrator who has been assigned the service account. 8. The method of claim 7,
The processor comprising:
Create and operate the virtual data center and the virtual service in a common environment; And performs integrated monitoring for virtual data centers and virtual services operating in a common environment. 9. The method of claim 8,
The processor comprising:
Wherein the virtual data center is divided into at least one of an operating state of the virtual data center, a name, a number of matching areas, and a service to be executed, thereby monitoring the virtual data center. 9. The method of claim 8,
The processor comprising:
Wherein the monitoring is performed by dividing the plurality of data centers matched by the virtual data center into regions. 9. The method of claim 8,
The processor comprising:
And monitoring the data center component by dividing the data center component into at least one of a type, a supplier, and a creation date of the data center component.

Images