KR20190132297A - Server and method for managing connection with virtual machine - Google Patents

Abstract

A host server for managing connection with a virtual machine may comprise: a transmission unit transmitting a connection request message including a first virtual machine ID and connection setting information corresponding to a first virtual machine in an inactive state to a manager server; a reception unit receiving virtual machine detailed information updated from the manager server by using information on at least one physical interface corresponding to the first virtual machine ID and inquired based on the connection configuration information; a connection unit performing pass-through by mapping a physical interface corresponding to the information on the first virtual machine and physical interface based on the virtual machine detailed information; and a booting unit booting the first virtual machine.

Description

Servers and methods for managing connections with virtual machines {SERVER AND METHOD FOR MANAGING CONNECTION WITH VIRTUAL MACHINE}

The present invention relates to a server and a method for managing a connection with a virtual machine.

Conventionally, remote screen access, file system-based recovery, disk to remotely control and manage user terminals (e.g., PCs, laptops, POS devices, kiosks, digital signage devices, etc.) connected to the network. It used a technology such as diskless booting.

Among these, the diskless booting technique (also called no-hard technique) is applied to a PC room, a school PC training room, etc., for example. The diskless booting technology has a structure in which the server is located on the same LAN as the user terminal, and all the user terminals are disabled even in the case of a temporary failure of the network or the server.

On the other hand, since the remote screen access and file system-based recovery solution, which is the control and management solution of the user terminal, is executed at the application / driver level, which is a higher layer of the OS of the user terminal, the operating system of the user terminal ( In particular, if the Windows) is not properly managed, the remote screen access and file system-based recovery solution may not work smoothly.

Meanwhile, the conventional pass-through technology is a technology in which a virtual machine directly utilizes resources of a physical interface of a host server through a virtualization layer when the virtual port of the virtual machine is directly connected to a physical interface of a host server. . When using the conventional pass-through connection technology, one virtual machine is connected to one physical interface to exclusively use resources of the corresponding physical interface. In this case, there is no problem when there is only one virtual machine, but when there are two or more virtual machines, it is difficult for other virtual machines to share resources of the physical interface of the host server and to virtual machines that are not supported by pass-through connection. The problem of performance issues arises.

Korea Patent Publication No. 1401378 (registered May 23, 2014)

The present invention intends to manage a connection with a virtual machine to share resources of a physical interface among a plurality of virtual machines.

Specifically, the present invention transmits a connection request message for pass-through between the virtual machine and the physical interface in an inactive state to the manager server, and sends the virtual machine detailed information as a response to the connection request message from the manager server. When received from the manager server, the virtual machine and the physical interface are mapped according to the received virtual machine detailed information to perform the pass-through connection.

However, the technical problem to be achieved by the present embodiment is not limited to the technical problems as described above, and other technical problems may exist.

As a technical means for achieving the above technical problem, the host server managing the connection with the virtual machine according to the first aspect of the present invention is the first virtual machine ID and connection setting information corresponding to the first virtual machine in an inactive state A transmitter for transmitting a connection request message including a manager server; A receiving unit which receives virtual machine detailed information updated from the manager server by using information on at least one physical interface corresponding to the first virtual machine ID and inquired based on the connection setting information; A connection unit configured to perform pass-through by mapping a physical interface corresponding to the information about the first virtual machine and the physical interface based on the virtual machine detailed information; And a booting unit for booting the first virtual machine.

A manager server for managing a connection with a virtual machine according to a second aspect of the present invention includes a receiving unit for receiving a connection request message including a virtual machine ID and connection setting information from a host server; An inquiry unit for inquiring virtual machine detailed information corresponding to the virtual machine ID and inquiring information on at least one physical interface based on the connection setting information; An update unit for updating the inquired virtual machine detailed information by using the inquired physical interface information; And a transmission unit which transmits the updated virtual machine detailed information to the host server, and corresponds to information about the virtual machine and the physical interface included in the virtual machine detailed information based on the transmitted virtual machine detailed information. The physical interface may be mapped so that pass-through may be performed.

A method for managing a connection with a virtual machine in a host server according to a third aspect of the present invention includes: releasing a pass-through between a first virtual machine and a physical interface in an active state; Mapping the physical interface to a second virtual machine in an inactive state to perform a pass-through connection.

The above-mentioned means for solving the problems are merely exemplary, and should not be construed to limit the present invention. In addition to the exemplary embodiments described above, there may be additional embodiments described in the drawings and detailed description of the invention.

According to any one of the above-described problem solving means of the present invention, the present invention can dynamically manage pass-through between the virtual machine and the physical interface in order to share resources of the physical interface between the plurality of virtual machines. . Through this, the present invention can implement a dynamic pass-through.

Specifically, the present invention transmits a connection request message for pass-through connection between the virtual machine and the physical interface in an inactive state to the manager server, and receives the virtual machine detailed information from the manager server as a response to the connection request message from the manager server. In this case, the pass-through connection may be performed by mapping the virtual machine and the physical interface according to the received virtual machine detailed information.

Through this, the present invention can provide resource sharing and connectivity of a dynamic physical interface among a plurality of virtual machines.

In addition, the present invention can implement a plurality of user terminals connected to the network in a centralized structure so that an administrator can efficiently perform maintenance and management tasks for a plurality of user terminals connected to the network.

In addition, the present invention provides virtualization technology (eg, Hypervisor, Pass-Through technology, etc.), storage management technology (eg, Snapshot, Differential Patch, etc.) and operating system technology (eg, Device Mapper) that have been applied to a server to provide a cloud service. Technology) to implement a plurality of user terminals in a centralized structure, through which the operating system of the plurality of user terminals can be managed remotely. Through this, the present invention can manage the user terminal efficiently while minimizing on-site dispatch because the administrator remotely maintains and manages a plurality of user terminals connected to the network.

In addition, the present invention is a technology for remotely controlling the power of the user terminal (for example, WOL (Wake-On-LAN) technology, VPN technology, etc.) instead of the existing remote control technology (eg chipset-based VPro and IPMI) It can be used to remotely control and manage the power of the user terminal. That is, the present invention can remotely control and manage the power of the virtual machine by using a WOL technology for controlling the power of the user terminal and a separate VPN technology.

Through this, administrators can efficiently maintain and manage a large number of user terminals centrally, and users can also receive A / S service remotely in real time in case of user terminal failures, thereby improving overall service availability and satisfaction. Can be.

In addition, the present invention can enhance the stability and security than before by applying the agent-based security and management solution, which is an application on the existing operating system to the host operating system (Host OS or Hyper OS), which is a lower level of the operating system. Additional features of central management can be applied.

In addition, the present invention, without the need to install a separate dedicated chipset (vPRO, IPMI) and operating system solutions provided in the user terminal to maintain and manage the user terminal in the past, on the basic hardware (H / W) Only the host operating system can improve the work efficiency of the operator and improve the user satisfaction of the user terminal more safely and quickly than the existing.

In addition, the present invention can reduce the investment cost and operating cost to build a management system of the user terminal by replacing the existing dedicated chipset with a software method.

1A to 1B are schematic diagrams of a virtual machine driving system according to an embodiment of the present invention.
2A to 2F are diagrams for describing a method of driving a virtual machine, according to an exemplary embodiment.
3A to 3C are diagrams for comparing and comparing the conventional pass-through method with the dynamic pass-through method of the present invention.
4 is a block diagram of the host server shown in FIG. 1 in accordance with an embodiment of the present invention.
FIG. 5 is a block diagram of the manager server shown in FIG. 1 according to an embodiment of the present invention.
6 is a flowchart illustrating a method for managing pass-through connections by a host server according to an embodiment of the present invention.
7 is a flowchart illustrating a method of managing a pass through connection by a manager server according to an embodiment of the present invention.
8 is a flowchart illustrating a virtual machine driving method according to an embodiment of the present invention.
9 is a flowchart illustrating a method of shutting down a virtual machine according to an embodiment of the present invention.
10A through 10B are flowcharts illustrating a method of managing a pass-through connection according to an embodiment of the present invention.

DETAILED DESCRIPTION Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art may easily implement the present invention. As those skilled in the art would realize, the described embodiments may be modified in various different ways, all without departing from the spirit or scope of the present invention. In the drawings, parts irrelevant to the description are omitted in order to clearly describe the present invention, and like reference numerals designate like parts throughout the specification.

Throughout the specification, when a part is "connected" to another part, this includes not only "directly connected" but also "electrically connected" with another element in between. . In addition, when a part is said to "include" a certain component, which means that it may further include other components, except to exclude other components unless otherwise stated.

In the present specification, the term 'unit' includes a unit realized by hardware, a unit realized by software, and a unit realized by both. In addition, one unit may be realized using two or more pieces of hardware, and two or more units may be realized by one piece of hardware.

Some of the operations or functions described as being performed by a terminal or a device in the present specification may instead be performed in a server connected to the terminal or device. Similarly, some of the operations or functions described as being performed by the server may be performed by a terminal or a device connected to the server.

Hereinafter, with reference to the accompanying configuration diagram or processing flow chart, it will be described in detail for the practice of the present invention.

1A to 1B are schematic diagrams of a virtual machine driving system according to an embodiment of the present invention.

Referring to FIG. 1A, a virtual machine driving system may include a host server 100 and a manager server 110. However, since the virtual machine driving system of FIG. 1 is only one embodiment of the present invention, the present invention is not limitedly interpreted through FIG. 1 and may be configured differently from FIG. 1 according to various embodiments of the present invention. .

The conventional virtual machine driving system is composed of a management system of a single user terminal centered on an agent (Agent), which is an application on an existing operating system, while the present invention implements the existing operating system as an operating system of a virtual machine (VM). The user terminal may be managed and controlled by a host server located at a lower level of the operating system. For example, the present invention can optimize IP-traffic transmission of applications and webs of a plurality of user terminals by applying hypervisor technology to the host server 100, and provides a dynamic path between a virtual machine and a physical interface. By providing management for pass-through, traffic can be optimized for physical interfaces (ie, HDMI and USB).

The present invention can remotely manage the power of a user virtual machine (VM) by utilizing a Wake-On-LAN (WOL) technology that remotely controls the power of a user terminal and a separate VPN technology. Here, the WOL technology is an Ethernet computer networking technology for delivering a message packet to a user terminal through a general local area network (LAN) to turn on or release a power mode of the user terminal.

According to the present invention, even if a separate physical network is not configured, by applying a VPN technology to the WOL technology, the host server 100 may communicate with the virtual machine through VPN tunneling to transmit a message for power control of the user terminal. Such power control through the host server 100 may be performed locally, and power management of the virtual machines in the host server 100 may be remotely supported.

For a while, referring to FIG. 1B, a plurality of virtual machines controlled by the host server 100 may be configured by installing a VPN client module at first generation. The plurality of virtual machines may be issued an encrypted authentication key and certificate based on RSA (Rivest®Shamir®Adleman) from a VPN server installed in a hyper operating system. At this time, the encryption algorithm for authentication of the VPN client of the virtual machine is not limited to the RSA-based encryption algorithm. A virtual tunneling interface is created in the plurality of VPN client modules authenticated by the VPN server, and a virtual VPN network may be generated through the VPN server.

The virtual VPN network created here provides an independent LAN environment, and when applied to VPN tunneling to the WOL technology, power control messages are transmitted to the virtual machines in the host server 100 through the corresponding tunneling interface to enable power management of the virtual machines. do. Status information of each virtual machine (for example, network traffic, vCPU / vMEM share, etc.) can be monitored through the VPN-based virtual network, and the virtual resources can be controlled through a control command (CLI or Web UI Command). have.

The virtual machine in the host server 100 may directly input / output (I / O) to the physical interface 102 through a native device driver through pass-through. The physical interface 102 that is pass-through connected to the virtual machine may directly perform input / output with the virtual machine without intervention of the virtualization layer.

In addition, the host server 100 may drive the virtual machine by mounting an image of the virtual machine stored in the storage 120 on the host server 100 through a cache manager of the host server 100.

In addition, the host server 100 may establish a VPN connection with the manager server 110 at all times and transfer the physical interface and state information of the virtual machine to the manager server 110. Through this, the manager server 110 may maintain an abnormal situation or maintenance of a physical interface or a virtual machine based on the state information received from the host server 100, and for this purpose, access the physical interface through a VPN connection path. have.

On the other hand, the host server 100 may manage the pass-through connection (Pass-through) in conjunction with the manager server (110). This will be described with reference to FIGS. 2A to 2F.

Referring to FIG. 2A, when the host server 100 receives a request for releasing a pass-through connection between a first virtual machine in an activated state and at least one physical interface 102-1 from a user terminal (not shown), Through the host agent 108 of the host server 100, a connection request message including a first virtual machine ID (eg, vm_01) and disconnection setting information corresponding to the first virtual machine is transmitted to the manager server 1110. Can be. In this case, the disconnection setting information may include a physical interface ID (eg, dev_01) for at least one physical interface 102-1 requesting to pass-through disconnection with the first virtual machine.

The manager server 110 may receive a connection release request message including a first virtual machine ID (eg, vm_01) and connection release setting information from the host server 100.

The manager server 110 inquires the virtual machine detailed information 201 corresponding to the first virtual machine ID (eg, vm_01) using the first virtual machine ID (eg, vm_01) included in the disconnect request message. Based on the disconnection setting information, information about at least one physical interface that is pass-through connected to the first virtual machine may be inquired.

When the manager server 110 queries the virtual machine detailed information 201 and the information on the at least one physical interface (eg, dev_01) based on the connection release request message, the at least one physical interface that is inquired is the first virtual machine. You can see that the pass-through is connected to.

Referring to FIG. 2B, based on the connection release request message, the manager server 110 may include information about at least one physical interface that is pass-through connected to the first virtual machine in the inquired virtual machine detailed information 201 (eg, dev_01). ) Can be updated to update the virtual machine details 201.

Subsequently, as the virtual machine detailed information 201 is updated, the manager server 110 may interwork with the storage 120 storing the state information table 203 and pass-through the first virtual machine from the state information table 203. Information 205 for at least one physical interface may be extracted.

The manager server 110 deletes the first virtual machine ID of the first virtual machine to release the pass-through connection with the corresponding physical interface from the information 205 about the extracted at least one physical interface, and extracts the extracted at least one The state information table 203 may be updated by changing the state information related to the information 205 about the physical interface from 'in use' to 'unused'.

Referring to FIG. 2C, the manager server 110 may transmit a disconnection response message including the updated virtual machine details 201 through the host agent 108 of the host server 100 to the host server 100. have.

The host server 100 may deactivate the first virtual machine based on the connection release response message received from the manager server 110. When the first virtual machine is deactivated, the pass through connection with the at least one physical interface may be released.

If the deactivation of the first virtual machine fails, the host server 100 may transmit information on the deactivation failure of the first virtual machine to the manager server 110.

When the manager server 110 receives the information about the deactivation failure of the first virtual machine from the host server 100, the manager server 110 interlocks the storage 120 to the first virtual server from the failure management table 207 stored in the storage 120. The fault management table by extracting information 209 about at least one physical interface connected to the machine through the pass-through, and recording fault information related to deactivation of the first virtual machine in the extracted information about the at least one physical interface 209. 207 may be updated.

Referring to FIG. 2D, a request for a pass-through connection with a second virtual machine in which a user terminal (not shown) has previously deactivated at least one physical interface 102-1 that has been pass-through connection with a first virtual machine is shown. In this case, the host server 100 includes a second virtual machine ID (eg, vm_02) and connection configuration information corresponding to the second virtual machine deactivated through the host agent 108 of the host server 100. The connection request message may be transmitted to the manager server 110. Here, the connection configuration information may include a physical interface ID (eg, dev_01) for at least one physical interface 102-1 requesting a pass-through connection with the second virtual machine in an inactive state.

The manager server 110 may receive a connection request message including a second virtual machine ID (eg, vm_02) and connection setting information from the host server 100.

The manager server 110 inquires the virtual machine detailed information 211 corresponding to the second virtual machine ID (eg, vm_02) by using the second virtual machine ID (eg, vm_02) included in the connection request message, and connects. Information on at least one physical interface may be inquired based on the configuration information.

Referring to FIG. 2E, the manager server 110 may connect at least one physical interface to the virtual machine detailed information 211 corresponding to the inquired second virtual machine ID (eg, vm_02) and the second virtual machine. The virtual machine detailed information 211 may be updated by recording information (for example, dev_02).

As the virtual machine detailed information 211 is updated, the manager server 110 may connect to the at least one physical interface connectable with the connection setting information from the state information table 213 stored in the storage 120 in association with the storage 120. The information 215 may be extracted and inquired.

The manager server 110 changes the state information related to the information 215 about the at least one connectable physical interface that is inquired from 'unused' to 'in use', and tries to pass-through connection with the inquired corresponding physical interface. The state information table 213 may be updated by recording the second virtual machine ID of the second virtual machine.

Referring to FIG. 2F, the manager server 110 may transmit a connection response message including the updated virtual machine details 211 through the host agent 108 of the host server 100 to the host server 100. .

The host server 100 may activate the second virtual machine based on the connection response message received from the manager server 110.

The host server 100 performs a pass-through connection by mapping a physical interface corresponding to the information about the physical interface included in the virtual machine detail information 211 and the second virtual machine based on the virtual machine detail information 211. The second virtual machine mapped with the physical interface may be booted.

The host server 100 may communicate with the second virtual machine through VPN tunneling.

If a connection failure occurs between the second virtual machine and the physical interface, the host server 100 may transmit information about the connection failure to the manager server 110.

When the manager server 110 receives the information on the connection failure of the second virtual machine from the host server 100, the manager server 110 interlocks the storage 120 to the second virtual from the failure management table 217 stored in the storage 120. The failure management table 217 may be updated by extracting information 219 about the physical interface having a connection failure with the machine and recording failure information related to the connection failure in the extracted information about the physical interface 219. .

3A to 3C are diagrams for comparing and comparing the conventional pass-through method with the dynamic pass-through method of the present invention.

Referring to FIG. 3A, referring to the conventional pass-through technique, when a pass-through connection is established between the first virtual machine and the first physical interface, the first virtual machine exclusively uses resources of the first physical interface. At this time, since the connection between the first virtual machine and the first physical interface is established, there is no way to disconnect, so that a plurality of other virtual machines cannot share resources of the first physical interface and are not supported by pass-through. Unsuccessful virtual machines have performance problems.

Referring to FIG. 3B, in order to solve this problem, the present invention releases a pass-through connection between a first virtual machine and a first physical interface with respect to a first virtual machine that has received a disconnect request from a user terminal. By providing a technology for performing a pass-through connection between the second virtual machine and the first physical interface to the second virtual machine that has received a connection request from the terminal, it is possible to provide resource sharing and connectivity of the dynamic physical interface among the plurality of virtual machines. have. Through this, the present invention can implement a dynamic pass-through.

Meanwhile, the present invention may provide an indirect path through connection with a physical interface (a physical interface currently connected through a second virtual machine with a second virtual machine) to another virtual machine through a second through-pass connected virtual machine. Specifically, when the pass-through connection between the physical interface and the second virtual machine is performed, the packet transmitted to the second virtual machine (resource resources of the physical interface received from the physical interface) from the second virtual machine to the third virtual machine. Pass-through functionality can be shared by forwarding to a machine. For example, referring to FIG. 3C, when the second virtual machine is connected to the physical interface of the host server 100 in a pass-through, the packet is received from the second virtual machine through a separate virtual interface of the second virtual machine. The third virtual machine may be configured to connect to the Internet by passing the to the third virtual machine.

Hereinafter, the operation of each component of the virtual machine driving system of FIG. 1A will be described in more detail.

4 is a block diagram of the host server 100 shown in FIG. 1 in accordance with an embodiment of the present invention.

Referring to FIG. 4, the host server 100 may include a transmitter 400, a receiver 410, a connector 420, a booting unit 430, and a forwarding unit 440. However, the host server 100 shown in FIG. 4 is just one implementation example of the present invention, and various modifications are possible based on the components shown in FIG. 4.

When the transmission unit 400 receives a connection release request between the first virtual machine in the activated state and the physical interface connected to the first virtual machine through a pass-through from the user terminal, the transmitter 400 corresponds to the first virtual machine ID and the connection corresponding to the first virtual machine. The connection release request message including the release setting information may be transmitted to the manager server 110. The connection release setting information may include a physical interface ID of a physical interface for requesting release of a pass-through connection with the first virtual machine.

The reception unit 410 corresponds to the first virtual machine ID from the manager server 110, and the connection disconnection response message including the virtual machine details updated by deleting the information about the physical interface inquired based on the connection setting information. Can be received.

The connection unit 420 may release the pass-through connection between the first virtual machine and the physical interface by deactivating the first virtual machine according to the received virtual machine detailed information.

When the transmission unit 400 receives a request for a pass-through connection between the second virtual machine in the inactive state and the physical interface from the user terminal, the transmission unit 400 includes the second virtual machine ID and connection setting information corresponding to the second virtual machine in the inactive state. The included connection request message may be transmitted to the manager server 110.

The receiver 410 receives a connection response message corresponding to the second virtual machine ID from the manager server 110 including the virtual machine detailed information updated by using the information about the physical interface inquired based on the connection configuration information. can do.

The connection unit 420 maps the physical interface corresponding to the information about the second virtual machine and the physical interface included in the virtual machine detailed information according to the virtual machine detailed information, and maps the second virtual machine by activating the second virtual machine. Pass-through connection between the physical interface and the second virtual machine.

The booting unit 430 may boot the second virtual machine connected to the physical interface and pass through. When the second virtual machine is booted, the host server 100 may communicate with the second virtual machine through VPN tunneling.

When the pass-through connection between the physical interface and the second virtual machine is performed, the forwarding unit 440 receives a packet (resource resources of the physical interface received from the physical interface) from the second virtual machine to the third virtual machine. You can forward to a machine. Through this, resources of a physical interface may be shared between the second virtual machine and the third virtual machine.

When a connection failure occurs between the physical interface and the second virtual machine, the transmitter 400 may transmit information about the connection failure to the manager server 110.

As the failure management table is updated by the manager server 110 according to the information on the connection failure of the second virtual machine, the manager of the manager server 110 checks the information on the connection failure in real time, and remotely provides the A / S service. Can be provided in real time.

On the other hand, those skilled in the art, each of the transmitter 400, the receiver 410, the connection unit 420, the booting unit 430 and the forwarding unit 440 may be implemented separately, or one or more of them may be integrated. I will fully understand.

5 is a block diagram of the manager server 110 shown in FIG. 1 in accordance with an embodiment of the present invention.

Referring to FIG. 5, the manager server 110 may include a receiver 500, an inquiry unit 510, an update unit 520, a transmitter 530, and an update unit 540. However, the manager server 110 shown in FIG. 5 is just one implementation example of the present invention, and various modifications are possible based on the elements shown in FIG. 5.

The receiver 500 may receive a connection release request message including first virtual machine ID and disconnection setting information corresponding to the first virtual machine in the activated state received from the host server 100. The connection release setting information may include a physical interface ID of at least one physical interface for requesting release of a pass-through connection with the first virtual machine in an activated state.

The inquiry unit 510 may inquire virtual machine detailed information corresponding to the first virtual machine ID, and may inquire information on at least one physical interface that is pass-through connected to the first virtual machine based on the connection release setting information. .

The updater 520 may delete and update information on at least one physical interface corresponding to the disconnection setting information from the virtual machine detailed information corresponding to the inquired first virtual machine ID.

The updater 540 may update the virtual machine detailed information corresponding to the first virtual machine ID to obtain state information (eg, 'in use'-> 'unused') related to the at least one physical interface inquired. You can change it to update the state information table (a table that manages multiple physical interfaces).

The transmitter 530 may transmit a connection release response message including the updated virtual machine detailed information to the host server 100.

The receiver 500 may receive a connection request message including a second virtual machine ID and connection setting information corresponding to the second virtual machine in an inactive state from the host server 100. Here, the connection setting information may include a physical interface ID of at least one physical interface requesting a pass-through connection with the second virtual machine in an inactive state.

The inquiry unit 510 may inquire virtual machine detailed information corresponding to the second virtual machine ID, and may inquire information on at least one physical interface based on the connection setting information.

The inquiry unit 510 may extract and inquire information on at least one physical interface connectable to the second virtual machine according to the connection setting information from the state information table. For example, when the inquiry interface 510 is inquired that the physical interface requesting the pass-through connection with the second virtual machine is in use or unavailable by another virtual machine, the state information related to the information on the corresponding physical interface Can be reported to the manager terminal. Thereafter, another virtual machine having a state previously connected with the corresponding physical interface may be terminated.

The updater 520 may update the inquired virtual machine detailed information on the basis of the information on the physical interface capable of pass-through connection with the inquired second virtual machine. That is, the updater 520 may update the added virtual interface information by adding the information about the queried physical interface.

As the virtual machine detailed information is updated, the updater 540 may update the state information table by changing state information (eg, 'unused'-> 'used') related to the information about at least one physical interface inquired. have.

The transmitter 530 may transmit a connection response message including the updated virtual machine detailed information to the host server 100.

When the updater 540 receives the information on the connection failure of the second virtual machine from the host server 100, the updater 540 extracts information on the physical interface having the connection failure with the second virtual machine from the failure management table, The failure management table may be updated by recording failure information related to connection failure in the extracted physical interface information. Information about the connection failure may be transmitted to the terminal of the administrator, the administrator may cope with the failure while monitoring the failure management table.

On the other hand, those skilled in the art, each of the receiver 500, the inquiry unit 510, the update unit 520, the transmitter 530 and the update unit 540 may be implemented separately, or one or more of them may be integrated. I will understand enough.

6 is a flowchart illustrating a method of managing a pass-through connection by the host server 100 according to an embodiment of the present invention.

Referring to FIG. 6, in operation S601, the host server 100 may release a pass-through connection between a first virtual machine in an activated state and a physical interface.

In operation S603, the host server 100 may perform a pass-through connection by mapping a physical interface to a second virtual machine in an inactive state.

In the above description, steps S601 to S603 may be further divided into additional steps or combined into fewer steps, according to an embodiment of the present invention. In addition, some steps may be omitted as necessary, and the order between the steps may be changed.

7 is a flowchart illustrating a method of managing a pass-through connection by the manager server 110 according to an embodiment of the present invention.

Referring to FIG. 7, in operation S701, the manager server 110 may receive a connection request message including a virtual machine ID and connection setting information from the host server 100.

In operation S703, the manager server 110 may inquire virtual machine detailed information corresponding to the virtual machine ID and inquire information on at least one physical interface based on the connection setting information.

In operation S705, the manager server 110 may update the inquired virtual machine detailed information by using the inquired physical interface information.

In operation S707, the manager server 110 may transmit updated virtual machine detailed information to the host server 100.

Although not shown in FIG. 7, after step S707, the manager server 110 may further receive a connection release request message including a virtual machine ID and connection release setting information from the host server 100. Thereafter, the manager server 110 may query the virtual machine detailed information corresponding to the virtual machine ID, and may update the deleted virtual machine information by deleting the information about the physical interface corresponding to the disconnection setting information from the inquired virtual machine detailed information.

In the above description, steps S701 to S707 may be further divided into additional steps or combined into fewer steps, according to an embodiment of the present invention. In addition, some steps may be omitted as necessary, and the order between the steps may be changed.

8 is a flowchart illustrating a virtual machine driving method according to an embodiment of the present invention.

Referring to FIG. 8, in operation S801, the host server 100 may boot a hyper operating system.

In operation S803, the host server 100 may set up a VPN connection.

In operation S805, the host server 100 may mount the virtual machine image of the virtual machine on the hyper operating system based on the virtual machine detailed information received from the manager server 110 in association with the storage 120.

In operation S807, the host server 100 may perform a pass-through connection by mapping a virtual machine and a physical interface according to the virtual machine detailed information.

In operation S809, the host server 100 may boot a virtual machine mapped to the physical interface.

In the above description, steps S801 to S809 may be further divided into additional steps or combined into fewer steps, according to an embodiment of the present invention. In addition, some steps may be omitted as necessary, and the order between the steps may be changed.

9 is a flowchart illustrating a method of shutting down a virtual machine according to an embodiment of the present invention.

Referring to FIG. 9, in operation S901, the host server 100 may receive a termination request of a virtual machine from a user terminal.

In operation S903, the host server 100 may mount a virtual machine image of the virtual machine on the hyper operating system based on the virtual machine detailed information received from the manager server 110.

In operation S905, the host server 100 may release the connection of the native device driver of the virtual machine mapped to the physical interface.

In operation S907, the host server 100 may terminate driving of the virtual machine.

In the above description, steps S901 to S907 may be further divided into additional steps or combined into fewer steps, according to an embodiment of the present invention. In addition, some steps may be omitted as necessary, and the order between the steps may be changed.

10A through 10B are flowcharts illustrating a method of managing a pass-through connection according to an embodiment of the present invention.

10A to 10B, in step S1001, the host server 100 transmits a connection request message including a second virtual machine ID and connection setting information corresponding to a second virtual machine in an inactive state to the manager server 110. Can be. For reference, the step may be performed after a process (see FIGS. 2A to 2C) in which a pass-through connection between the first virtual machine in the activated state and the physical interface is released is performed.

In operation S1003, the manager server 110 may inquire virtual machine detailed information corresponding to the second virtual machine ID included in the received connection request message.

In operation S1005, the manager server 110 may inquire information about at least one physical device based on the connection setting information included in the received connection request message.

In operation S1007, the manager server 110 may update the inquired virtual machine detailed information by using the inquired physical interface information.

In operation S1009, the manager server 110 may update the state information table by changing state information related to information about the at least one physical interface inquired.

In operation S1011, the manager server 110 may transmit updated virtual machine state information to the host server 100.

In operation S1013, the host server 100 may perform a pass-through connection by mapping a second virtual machine and a physical interface according to the received virtual machine state information.

In operation S1015, the host server 100 may boot the second virtual machine.

In operation S1017, the host server 100 may determine whether a connection failure between the physical interface and the second virtual machine occurs.

In operation S1019, when the connection failure occurs, the host server 100 may transmit information about the connection failure to the manager server 110.

In operation S1021, the manager server 110 may update the failure management table based on the received information about the connection failure.

In operation S1023, the host server 100 may drive a virtual machine to control a physical interface through the virtual machine.

Although not shown in FIG. 10, when the host server 100 receives a disconnect request between the first virtual machine and the physical interface from the user terminal before step S1001, the host server 100 may release the pass-through connection between the physical interface and the first virtual machine. Can be.

Although not shown in FIG. 10, the host server 100 may transmit a connection release request message including the first virtual machine ID and connection release setting information to the manager server 110 before step S1001. The manager server 110 inquires the virtual machine detailed information corresponding to the first virtual machine ID based on the received disconnect request message, and the information about the physical interface corresponding to the disconnection setting information from the inquired virtual machine details. You can update by deleting.

In the above description, steps S1001 to S1023 may be further divided into additional steps or combined into fewer steps, according to an embodiment of the present invention. In addition, some steps may be omitted as necessary, and the order between the steps may be changed.

An embodiment of the present invention may also be implemented in the form of a recording medium including instructions executable by a computer, such as a program module executed by the computer. Computer readable media can be any available media that can be accessed by a computer and includes both volatile and nonvolatile media, removable and non-removable media. In addition, computer readable media may include all computer storage media. Computer storage media includes both volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information such as computer readable instructions, data structures, program modules or other data.

The foregoing description of the present invention is intended for illustration, and it will be understood by those skilled in the art that the present invention may be easily modified in other specific forms without changing the technical spirit or essential features of the present invention. will be. Therefore, it should be understood that the embodiments described above are exemplary in all respects and not restrictive. For example, each component described as a single type may be implemented in a distributed manner, and similarly, components described as distributed may be implemented in a combined form.

The scope of the present invention is shown by the following claims rather than the detailed description, and all changes or modifications derived from the meaning and scope of the claims and their equivalents should be construed as being included in the scope of the present invention. .

100: host server
110: manager server
120: storage
400: transmission unit
410: receiver
420: connection
430: boot
440: the forwarding unit
500: receiver
510: Views
520: update unit
530: transmission unit
540: update unit

Claims (17)

A host server that manages connections with virtual machines,
A transmission unit configured to transmit a connection request message including a first virtual machine ID and connection setting information corresponding to the first virtual machine in an inactive state to the manager server;
A receiving unit which receives virtual machine detailed information updated from the manager server by using information on at least one physical interface corresponding to the first virtual machine ID and inquired based on the connection setting information;
A connection unit configured to perform pass-through by mapping a physical interface corresponding to the information about the first virtual machine and the physical interface based on the virtual machine detailed information; And
Booting unit for booting the first virtual machine
To include, the host server.
The method of claim 1,
And the host server communicates with the first virtual machine via VPN tunneling.
The method of claim 1,
The information about the at least one physical interface inquired is obtained by extracting and inquiring information about at least one physical interface connectable according to the connection configuration information from a state information table managing a plurality of physical interfaces. .
The method of claim 3, wherein
And as the virtual machine detailed information is updated, state information related to the at least one physical interface inquired is changed so that the state information table is updated.
The method of claim 1,
When the connection failure occurs between the physical interface and the first virtual machine, the transmission unit transmits information about the connection failure to the manager server.
The method of claim 1,
The connection unit releases a pass through connection between the physical interface and the second virtual machine, and performs a pass through connection between the physical interface and the first virtual machine.
The method of claim 1,
When a pass-through connection between the physical interface and the first virtual machine is performed, a forwarding unit for forwarding a packet transferred to the first virtual machine from the first virtual machine to a third virtual machine
The host server further comprises.
In the manager server to manage the connection with the virtual machine in conjunction with the host server,
A receiving unit for receiving a connection request message including a virtual machine ID and connection setting information from a host server;
An inquiry unit for inquiring virtual machine detailed information corresponding to the virtual machine ID and inquiring information on at least one physical interface based on the connection setting information;
An update unit for updating the inquired virtual machine detailed information by using the inquired physical interface information; And
Transmitting unit for transmitting the updated virtual machine detailed information to the host server
Including,
A manager is configured to perform pass-through by mapping a virtual interface corresponding to the virtual machine and information about a physical interface included in the virtual machine detailed information based on the transmitted virtual machine detailed information. server.
The method of claim 8,
The inquiry unit extracts and queries information on at least one physical interface connectable according to the connection setting information from a state information table managing a plurality of physical interfaces.
The method of claim 9,
The updating unit adds and updates information about the queried physical interface to the queried virtual machine detailed information, and updates the manager server.
The method of claim 10,
An update unit for updating the state information table by changing state information related to information about the at least one physical interface as the virtual machine detailed information is updated
To further include, the manager server.
The method of claim 11,
When the connection failure occurs between the physical interface and the virtual machine, the receiving unit receives information about the connection failure from the host server,
The updating unit updates the failure management table by using the information on the connection failure, manager server.
The method of claim 8,
The receiving unit further receives a disconnect request message including a virtual machine ID and disconnection setting information from the host server,
The inquiry unit inquires the virtual machine detailed information corresponding to the virtual machine ID,
The updating unit deletes and updates information on a physical interface corresponding to the disconnection setting information from the inquired virtual machine detailed information.
In the method for managing a connection with a virtual machine on a host server,
Releasing a pass-through between the activated first virtual machine and the physical interface; And
Mapping the physical interface to a second virtual machine in an inactive state to perform a pass-through connection;
That includes, connection management method.
The method of claim 14,
Communicating with the second virtual machine via VPN tunneling.
The method of claim 14,
If a connection failure occurs between the physical interface and the second virtual machine, transmitting the information about the connection failure to a manager server.
The method of claim 14,
If a pass-through connection between the physical interface and the second virtual machine is performed, further comprising forwarding a packet transferred to the second virtual machine from the second virtual machine to a third virtual machine. How to manage.

Images