WO2018179683A1

WO2018179683A1 - Monitoring system, monitoring method, information processing device, and monitoring program

Info

Publication number: WO2018179683A1
Application number: PCT/JP2018/000836
Authority: WO
Inventors: 寛樹奥井; 直輝宮田
Original assignee: エヌ・ティ・ティ・コミュニケーションズ株式会社
Priority date: 2017-03-28
Filing date: 2018-01-15
Publication date: 2018-10-04
Also published as: JP6317833B1; JP2018166305A

Abstract

An information processing device (100) includes a virtual MAC management table storage unit (13a) which stores virtual MAC addresses of VNFs (10) set for respective access devices (60) managed by the VNFs (10). When the VNFs (10) each receive a frame, the information processing device (100) causes each of the VNFs (10) to determine whether the transmission destination MAC address of said frame matches any of the virtual MAC addresses of the VNF (10), and performs control to cause a VNF (10) having no virtual MAC address that matches the transmission destination MAC address to discard the frame. Furthermore, the information processing device (100) performs control to cause a VNF (10) having a virtual MAC address that matches the transmission destination MAC address to monitor communication of the corresponding access device (60) on the basis of information included in the frame.

Description

Monitoring system, monitoring method, information processing apparatus, and monitoring program

The present invention relates to a monitoring system, a monitoring method, an information processing apparatus, and a monitoring program.

Conventionally, in quality assurance type carrier transmission network services such as dedicated lines, quality measurement and monitoring by EtherOAM has been performed. EtherOAM is a technical standard used to operate and maintain L2 layer networks and services. In the ITU-T recommendation, Y. In 1731, IEEE is standardized as 802.1ag. In EtherOAM, the endpoint device to be monitored is called MEP (Maintenance Entity Group End Point) and uses the standard monitoring CCM (Continuity Check Message) frame and the LMM (Loss Measurement Message) frame. Loss measurement, delay measurement using a DMM (Delay Measurement Message) frame, and the like can be performed in the L2 layer.

In recent years, NFV (Network Function Virtualization), which implements functions on general-purpose hardware that is implemented with software by implementing network technology in software, has been growing mainly in higher layers, and it is expected that the flow will also accelerate in the future in transmission networks. . Many products such as VNF (Virtual Network Function) products and Whiteboxes, which have been re-implemented with software, have been provided with dedicated hardware so that flexible network design can be realized at low cost using NFV. .

The flow of NFV / VNF is being driven by the needs of users who want to design networks more flexibly. VNF products are gradually released from higher layers, and NFV / VNF of many functions are realized in L3 and above. ing. However, the NFV / VNF conversion of the L2 function is still under development because it cannot be controlled using IP, and high performance requirements are required.

In addition, in the current transmission network industry, dis-aggregation NW that realizes functions by separating each optical device module installed in an integrated transmission device and combining pizza box type devices that realize only the respective functions is prosperous. It is being considered. The purpose is to improve the flexibility of equipment procurement and equipment design by dividing all-in-one type optical transmission equipment into functional parts such as L2 switches, transponders, optical switches, and optical amplifiers.

In dis-aggregation NW, instead of being able to realize functions at low cost by freely procuring and constructing separated function modules, it is necessary to separately arrange and construct the EtherOAM function that is standard in integrated transmission equipment. . In the case of an integrated transmission device for a carrier, a function for monitoring an opposing terminal that can be accommodated by EtherOAM is often provided, and the monitoring function can be used simultaneously with the introduction of the device. When using the dis-aggregated function module to implement the transmission function, additional function support is required, such as separately arranging a dedicated appliance device for monitoring, or implementing the EtherOAM function using software and VNF. Become.

If the carrier transmission network has a separate EtherOAM function, it must be designed in consideration of scale-out because there are many monitoring targets and performance requirements are severe. Since all access devices accommodated in the carrier transmission network must be monitored, the number of devices to be monitored is larger than that of a general L2 network. If scale-out with an increased number of monitoring targets is required, it is possible to manually construct and set up more physical devices. However, considering operation costs, it is desirable to automatically scale out using NFV / VNF technology.

When implementing the EtherOAM function using NFV / VNF technology, it is effective to adopt VIM (Virtual Infrastructure Management) technology such as OpenStack as the operation and management infrastructure of VNF. ETSI's NFV MANO (Management and Orchestration) is widely known as a reference model for VNF lifecycle management in the OpenStack environment, and commercial products are available for VNF scale-out and lifecycle management. It is desirable to follow the model from the viewpoint of utilization.

When monitoring a monitoring target device using EtherOAM, the monitoring target device and the monitoring VNF each asynchronously send out a CCM frame, and confirm the normality of interconnection with the opposite side by arrival of the CCM frame from the opposite side. Here, for example, when CCM regular monitoring is performed using the unicast mode, it is necessary to set the MAC address of each frame transmission destination for the monitoring target device and the monitoring VNF. Therefore, when the EtherOAM function is converted to VNF, the MAC address dynamically assigned to VNF is set as the frame transmission destination of the monitoring target device.

JP 2012-015607 A

As described above, in the conventional EtherOAM method, the MAC address dynamically assigned to the VNF is set as the frame transmission destination of the monitoring target device, so that the monitoring target device cannot be easily monitored. was there.

For example, when a monitoring VNF instance is generated using OpenStack, an arbitrary value is automatically assigned to the MAC address of the VNF from the MAC address band pooled in OpenStack. For this reason, it is impossible to specify the CCM transmission destination MAC address in advance in the access device before generating the VNF, and it is necessary to set the MAC address automatically generated after the VNF generation as the frame transmission destination. Further, when using a plurality of VNF instances, since each VNF has a different MAC address, it is necessary to change the frame transmission destination of the monitoring target device every time the VNF for monitoring the monitoring target device is switched due to scale-out or the like. These operation costs are incurred, and the monitoring process cannot be easily performed.

Note that, in order to use a static address instead of a dynamically set MAC address, generally, a technique of commonly using a predetermined static MAC address in each VNF is used. Although this method can reduce the operation cost of tracking dynamic MAC addresses, MAC learning is performed on the communication path of the monitoring target device and the monitoring VNF, and the problem that the frame reaches all the VNFs and the load cannot be distributed. When there is an L2 switch, there is a problem that MAC learning cannot be performed correctly because frames having the same source MAC address arrive from a plurality of paths.

In order to solve the above-described problems and achieve the object, the monitoring system of the present invention is a monitoring system having an information processing device that operates a plurality of VNFs, and the information processing device is monitored by each VNF. A storage unit that stores the virtual MAC address of the own VNF set for each target device, and when each VNF receives a frame transmitted from the monitoring target device, the destination MAC address of the frame is the own VNF A determination control unit that controls each VNF to match each of the virtual MAC addresses, and controls to discard the frame for the VNFs that do not match the destination MAC address and the virtual MAC address; VNFs for which the destination MAC address matches the virtual MAC address are included in the frame. When the VNF transmits a frame to the monitoring target device, the monitoring control unit that controls the monitoring target device to monitor communication based on the information to be transmitted from the storage unit to the transmission destination monitoring target device And a setting control unit configured to acquire a virtual MAC address of a corresponding VNF and control the acquired virtual MAC address to be set as a transmission source MAC address.

The monitoring method of the present invention is a monitoring method executed by an information processing device that operates a plurality of VNFs, and the information processing device has its own VNF set for each monitoring target device managed by each VNF. Storage unit that stores the virtual MAC address of the VNF, when each VNF receives a frame transmitted from the monitored device, the destination MAC address of the frame matches one of the virtual MAC addresses of the own VNF A determination control step for controlling each VNF to discard the frame for the VNF in which the destination MAC address and the virtual MAC address do not match, and the destination MAC address and the virtual MAC For VNFs with matching addresses, the monitoring target device is based on information contained in the frame. When the VNF transmits a frame to the monitoring target device, the virtual MAC address of the VNF corresponding to the transmission destination monitoring target device is acquired from the storage unit when the VNF transmits a frame to the monitoring target device. And a setting control step for controlling to set the acquired virtual MAC address as the source MAC address.

The information processing apparatus of the present invention is an information processing apparatus that operates a plurality of VNFs, and stores a virtual MAC address of the own VNF set for each monitoring target apparatus managed by each VNF, and When each VNF receives a frame transmitted from the monitored device, each VNF determines whether the destination MAC address of the frame matches one of the virtual MAC addresses of its own VNF, and the destination MAC A VNF in which the address and the virtual MAC address do not match is included in the frame, and a determination control unit that controls to discard the frame and a VNF in which the destination MAC address and the virtual MAC address match are included in the frame A monitoring control unit that controls to monitor communication of the monitoring target device based on the information to be monitored; When the VNF transmits a frame to the monitoring target device, the virtual MAC address of the VNF corresponding to the monitoring target device of the transmission destination is acquired from the storage unit, and the acquired virtual MAC address is set as the transmission source MAC address. And a setting control unit that controls the setting.

According to the present invention, there is an effect that the monitoring process can be easily performed while reducing the operation cost.

FIG. 1 is a schematic diagram illustrating the overall configuration of the monitoring system according to the first embodiment. FIG. 2 is a block diagram illustrating a configuration example of the information processing apparatus according to the first embodiment. FIG. 3 is a diagram illustrating an example of a table stored in the virtual MAC management table storage unit. FIG. 4 is a diagram for explaining an example of a virtual MAC address pre-setting process. FIG. 5 is a diagram for explaining an example of an EtherOAM frame reception process. FIG. 6 is a diagram for explaining an example of an EtherOAM frame transmission process. FIG. 7 is a diagram for explaining an example of processing when scale-out is performed on the same physical host. FIG. 8 is a diagram for explaining an example of processing when performing scale-out to another physical host. FIG. 9 is a diagram illustrating an outline of processing for transmitting and receiving a frame using a virtual MAC address set for each monitoring target device. FIG. 10 is a sequence diagram illustrating an example of the flow of the pre-setting process in the monitoring system according to the first embodiment. FIG. 11 is a flowchart illustrating an example of a flow of reception processing in the VNF according to the first embodiment. FIG. 12 is a flowchart illustrating an example of a flow of transmission processing in the VNF according to the first embodiment. FIG. 13 is a diagram for explaining a problem of the conventional method. FIG. 14 is a diagram for explaining a problem of the conventional method. FIG. 15 is a diagram illustrating a computer that executes a monitoring program.

Hereinafter, embodiments of a monitoring system, a monitoring method, an information processing apparatus, and a monitoring program according to the present application will be described in detail with reference to the drawings. The embodiment does not limit the monitoring system, the monitoring method, the information processing apparatus, and the monitoring program according to the present application.

[First Embodiment]
In the following embodiments, the configuration of the monitoring system 1 according to the first embodiment, the configuration of the information processing apparatus 100, the processing flow in the monitoring system 1 will be described in order, and finally the effects of the first embodiment will be described. To do.

[Configuration of monitoring system]
FIG. 1 is a diagram illustrating an example of a configuration of a monitoring system according to the first embodiment. The monitoring system 1 according to the first embodiment includes a plurality of VNFs 10A to 10C, an EtherOAM controller 20, an SDN (Software-Defined Networking) controller 30, a VNFM (Virtual Network Function Manager) 40, a VIM (Virtualized Infrastructure Manager) 50, and a plurality.

Access devices

60A and 60B.

The VNFs 10A to 10C are connected to the

access devices

60A and 60B to be monitored via the L2 transmission network 70 and the L2 switch 80. The configuration illustrated in FIG. 1 is merely an example, and the specific configuration and the number of devices are not particularly limited. Further, when a plurality of VNFs 10A to 10C and a plurality of

access devices

60A and 60B are described without distinction, they are referred to as VNF 10 and access device 60.

The VNFs 10A to 10C are connected to the L2 transmission network 70, and realize monitoring by transmitting and receiving EtherOAM to and from the access device 60 via the L2 transmission network 70 and the L2 switch 80. In the monitoring system 1, since the opposite MAC address is designated as the transmission destination MAC address of EtherOAM for transmission, the access device 60 and the VNF 10 that monitors each access device must be transparently connected to each other in the L2 layer. . Here, to explain with reference to the example of FIG. 1, for example, the access device 60A is transparently connected to the VNF 10A that monitors the access device 60A, and the access device 60B is transparent to the VNF 10B that monitors the access device 60B. Connected. The access device 60A and the access device 60B need not be transparently connected. For example, by making a port connected to the VNF 10 of the L2 switch 80 a trunk port and accommodating a plurality of VLANs, the access devices 60 and the VNF 10 that monitors each access device are transparent while the access devices 60 are separated into different L2 segments. Connect.

VNFs 10A to 10C are virtually constructed on the VIM 50 represented by OpenStack. Further, life cycle management such as instance creation / deletion / scale-out / in of the VNFs 10A to 10C is controlled by the VNFM 40. Management of the EtherOAM related setting information in the VNFs 10A to 10C is performed by the EtherOAM controller 20. Here, the EtherOAM related setting information is, for example, the MEG ID, MEP ID, MAC address, VLAN, etc. of the

access devices

60A and 60B to be monitored. Further, it is necessary to perform consistent provisioning for both of the VNFs 10A to 10C and the

access devices

60A and 60B, and this is performed by the upper SDN controller 30.

Here, in FIG. 1, the functions of the EtherOAM controller 20, the SDN controller 30, the VNFM 40, and the VIM 50 may be realized by the same physical machine or may be realized by separate physical machines. In the following description, it is assumed that the EtherOAM controller 20, the SDN controller 30, the VNFM 40, and the VIM 50 are realized by the information processing apparatus 100 that is the same physical machine.

[Configuration of information processing device]
Next, the configuration of the information processing apparatus 100 will be described with reference to FIG. FIG. 2 is a block diagram illustrating a configuration example of the information processing apparatus according to the first embodiment. As illustrated in FIG. 2, the information processing apparatus 100 includes a communication processing unit 11, a control unit 12, and a storage unit 13. Hereinafter, processing of each unit included in the information processing apparatus 100 will be described.

The communication processing unit 11 controls communication related to various information. For example, the communication processing unit 11 transmits / receives an EtherOAM frame between the access device 60 via the transmission network 70 and the L2 switch 80.

The storage unit 13 stores data and programs necessary for various types of processing by the control unit 12, and has a virtual MAC management table storage unit 13a particularly closely related to the present invention. For example, the storage unit 13 is a semiconductor memory element such as a RAM (Random Access Memory) or a flash memory, or a storage device such as a hard disk or an optical disk.

The virtual MAC management table storage unit 13a stores the virtual MAC address of the VNF 10 set for each monitored access device 60 managed by each VNF 10, and the MAC address / VLAN ID of the access device 60. For example, as illustrated in FIG. 3, the virtual MAC management table storage unit 13a associates the “MEG ID” and “MEP ID” with the virtual MAC address of each VNF 10 set for each access device 60 to be monitored. Is stored as a “virtual MAC”. Further, “monitoring target MAC” and “VLAN ID” are stored as configuration information of the access device 60. Although FIG. 3 shows the case where one “VLAN ID” is used, “VLAN ID” may be assigned in multiple stages. However, as a precondition, the combination of “monitored MAC” and zero or more “VLAN ID” satisfies the uniqueness constraint, and similarly, the combination of “virtual MAC” and zero or more “VLAN ID” restricts uniqueness. Meet.

In the following description, in order to simplify the description, an example is given in which the “virtual MAC” alone satisfies the uniqueness constraint. However, as described above, the “virtual MAC” alone satisfies the uniqueness constraint. Is not required. The combination of “virtual MAC” and zero or more “VLAN ID” only needs to satisfy the uniqueness constraint.

3, for example, the virtual MAC management table storage unit 13a includes MEG ID “MEG10” and MEP ID “100” as information corresponding to the managed access device 60A managed by the VNF 10A. , The virtual MAC “XX: XX: XX: XX: XX: X1” and the configuration information of the access device 60A (monitoring target MAC “YY: YY: YY: YY: YY: Y1” and VLAN ID “10”) MEG ID “MEG20”, MEP ID “200”, and virtual MAC “XX: XX: XX: XX: XX: X2” as information corresponding to the managed access device 60B managed by the VNF 10B are stored in association with each other. ”And the configuration information of the access device 60B (monitoring target MAC“ YY: YY: YY: YY: YY: Y2 ”and VLAN) And stores the ID "20") and in association with each other.

For the virtual MAC management table illustrated in FIG. 3, the EtherOAM controller 20 holds all the records included in the virtual MAC management table. Each VNF 10 holds a record corresponding to the managed access device 60 managed by each VNF 10 in the virtual MAC management table. For example, the VNF 10A includes, as information corresponding to the managed access device 60A managed by the VNF 10A, the MEG ID “MEG10”, the MEP ID “100”, and the virtual MAC “XX: XX: XX: XX: XX: X1”. And the configuration information of the access device 60A (monitoring target MAC “YY: YY: YY: YY: YY: Y1” and VLAN ID “10”) are stored as a virtual MAC management table.

The control unit 12 has an internal memory for storing a program that defines various processing procedures and necessary data, and performs various processes using them, and particularly as closely related to the present invention, It includes a presetting unit 12a, a determination control unit 12b, a monitoring control unit 12c, a setting control unit 12d, a determination unit 12e, a notification unit 12f, and an update unit 12g. Here, the control unit 12 is an electronic circuit such as a CPU (Central Processing Unit) or MPU (Micro Processing Unit) or an integrated circuit such as an ASIC (Application Specific Integrated Circuit) or FPGA (Field Programmable Gate Array).

Among the units, the pre-setting unit 12a is a function that the SDN controller 30 has, and the determination control unit 12b, the monitoring control unit 12c, and the setting control unit 12d are functions that the VNF 10 has, the determination unit 12e, the notification unit 12f, and It is assumed that the updating unit 12g has a function that the EtherOAM controller 20 has.

As a virtual MAC address pre-setting process, the pre-setting unit 12a issues a virtual MAC address of the VNF 10 corresponding to the monitoring target access device 60, and sends the virtual MAC address to the monitoring target access device 60 in the EtherOAM frame. While being set as a transmission destination MAC address, the issued virtual MAC address is set in the virtual MAC management table storage unit 13a.

Here, an example of the virtual MAC address pre-setting process will be described with reference to FIG. FIG. 4 is a diagram for explaining an example of a virtual MAC address pre-setting process. In the following description, a case where the VNF 10 and the monitoring target access device 60 are in a one-to-one relationship will be described as an example. However, the present invention is not limited to this example. A plurality of access devices 60 may be monitored.

As shown in FIG. 4, the SDN controller 30 issues an arbitrary virtual MAC address as an EtherOAM transmission destination MAC address to the monitored

access devices

60A and 60B, and uses the virtual MAC address as the MEG ID, MEP ID, and VLAN ID. And set in the

access devices

60A and 60B. Note that when the virtual MAC address is paid out, it is necessary to satisfy the above-described uniqueness constraint.

4, for example, the SDN controller 30 sets the virtual MAC “XX: XX: XX: XX: XX: X1” as the EtherOAM transmission destination MAC address for the monitoring target access device 60A. In addition, MEG ID “MEG10”, MEP ID “100”, and VLAN ID “10” are set. Further, the SDN controller 30 sets the virtual MAC “XX: XX: XX: XX: XX: X2” as the EtherOAM transmission destination MAC address for the monitoring target access device 60B, and the MEG ID “MEG20”. Set MEP ID “200” and VLAN ID “20”.

Further, the SDN controller 30 acquires the MAC address of the access device 60, and issues the virtual MAC address issued to the EtherOAM controller 20 together with the configuration information (MEG ID, MEP ID, MAC address, VLAN ID) of the access device 60. Set. The EtherOAM controller 20 stores the issued virtual MAC address, the MAC address of the access device, and the VLAN ID in a virtual MAC management table having “MEG ID” and “MEP ID” as composite main keys. 4, for example, the EtherOAM controller 20 includes the MEG ID “MEG10”, the MEP ID “100”, the virtual MAC “XX: XX: XX: XX: XX: X1”, and configuration information. (Monitored MAC “YY: YY: YY: YY: YY: Y1” and VLAN ID “10”), MEG ID “MEG20”, MEP ID “200”, and virtual MAC “ XX: XX: XX: XX: XX: X2 ”and a record in which configuration information (monitoring target MAC“ YY: YY: YY: YY: YY: Y2 ”and VLAN ID“ 20 ”) is associated are stored. .

The EtherOAM controller 20 determines which VNF 10 is responsible for monitoring the registered

access devices

60A and 60B, and notifies the VNF 10 of the corresponding record in the virtual MAC management table. Then, the VNF 10 monitors the designated access device 60 based on the record notified from the EtherOAM controller 20. For example, in the EtherOAM controller 20, the MEG ID “MEG10”, the MEP ID “100”, and the virtual MAC “XX: XX: XX: XX: XX: X1” are associated with each other. Is notified to the VNF 10A, and the record in which the VMEG ID “MEG20”, the MEP ID “200”, and the virtual MAC “XX: XX: XX: XX: XX: X2” are associated is notified to the VNF 10B. .

When each VNF 10 receives an EtherOAM frame transmitted from the monitored access device 60, the determination control unit 12b determines whether the destination MAC address of the EtherOAM frame matches any of the virtual MAC addresses of the own VNF 10. Each VNF 10 for which the destination MAC address and the virtual MAC address do not match is controlled to discard the EtherOAM frame.

The monitoring control unit 12c performs control so that the communication of the monitoring target access device 60 is monitored based on the information included in the EtherOAM frame for the VNF 10 whose transmission destination MAC address and virtual MAC address match. Specifically, the monitoring control unit 12c controls the VNF 10 whose transmission destination MAC address and virtual MAC address match to acquire information from the EtherOAM frame and update the status of the monitoring target access device 60. .

Here, an example of an EtherOAM frame reception process will be described with reference to FIG. FIG. 5 is a diagram for explaining an example of an EtherOAM frame reception process. As illustrated in FIG. 5, the access device 60A transmits an EtherOAM frame with the virtual MAC address “XX: XX: XX: XX: XX: X1” as a transmission destination. In the VNFs 10A to 10C, in order to acquire an EtherOAM frame different from its own MAC address, the interface is set to the promiscuous mode. As a result, all the VNFs 10A to 10C in the same physical host receive the EtherOAM frame.

The EtherOAM frame received by each VNF 10A to 10C is drawn into the application through the socket. The EtherOAM application of each VNF 10A to 10C searches the virtual MAC management table using the transmission destination MAC address as a key. Then, the EtherOAM application discards the EtherOAM frame if the record does not exist as a result of the search, that is, if it is not the EtherOAM frame from the monitoring target for the self-VNF 10.

The EtherOAM application also monitors the monitoring target access device 60 based on the information included in the EtherOAM frame when there is a record as a result of the search, that is, when the local VNF 10 is an EtherOAM frame from the monitoring target. As a process, the status of the access device 60 is updated.

In the example of FIG. 5, the virtual MAC management table of VNF 10A is associated with MEG ID “MEG10”, MEP ID “100”, and virtual MAC “XX: XX: XX: XX: XX: X1”. Records are stored. The virtual MAC management table of the VNF 10B stores a record in which the MEG ID “MEG20”, the MEP ID “200”, and the virtual MAC “XX: XX: XX: XX: XX: X2” are associated with each other. . For this reason, the VNF 10A has a record of the virtual MAC “XX: XX: XX: XX: XX: XX: X1” that matches the destination MAC address “XX: XX: XX: XX: XX: X1”. Is received and monitoring processing is performed. Further, the VNF 10B and the VNF 10C discard the EtherOAM frame because there is no record that matches the transmission destination MAC address “XX: XX: XX: XX: XX: X1”.

When the VNF 10 transmits an EtherOAM frame to the monitored access device 60, the setting control unit 12d acquires the virtual MAC address of the VNF 10 corresponding to the destination access device 60 from the virtual MAC management table storage unit 13a. Control is performed so that the acquired virtual MAC address is set as the source MAC address.

Here, an example of an EtherOAM frame transmission process will be described with reference to FIG. FIG. 6 is a diagram for explaining an example of an EtherOAM frame transmission process. As illustrated in FIG. 6, the VNF 10A sequentially acquires records to be monitored from the virtual MAC management table, transmits the virtual MAC address “XX: XX: XX: XX: XX: X1”, and the MAC address of the access device 60A. The EtherOAM frame is transmitted with “YY: YY: YY: YY: YY: Y1” as a transmission destination.

At this time, the

VNFs

10B and 10C other than the VNF 10A that transmitted the EtherOAM frame receive the EtherOAM frame because the interface is set to the promiscuous mode. In the EtherOAM application, since the EtherOAM frame that does not match the virtual MAC management table is discarded, this frame does not affect the status change.

When a new VNF 10 is generated in the information processing apparatus 100, the determination unit 12e determines an access apparatus 60 to be monitored by the new VNF 10 among the monitored access apparatuses 60 managed by the already operating VNF 10. . That is, when the VNF 10 is scaled out and the number of VNF instances is increased, the determination unit 12e determines a monitoring target to be delegated from the operating VNF 10 to the new VNF 10.

In addition, when a new VNF 10 is generated in another information processing apparatus different from the information processing apparatus 100, the determination unit 12 e creates a new one of the monitored access devices 60 managed by the already operating VNF 10. The access device 60 to be monitored by the VNF 10 is determined. That is, even when the determination unit 12e scales out to another physical host, the determination unit 12e determines a monitoring target to be delegated from the operating VNF 10 to the new VNF 10 of another physical host.

The notification unit 12f notifies another VNF 10 to register the virtual MAC address corresponding to the monitored access device 60 to be monitored by the new VNF 10 determined by the determination unit 12e as the virtual MAC address of the new VNF 10. . Note that the notification unit 12f is not only generated on a different physical host, but also when a new VNF is generated on the same physical host, the monitored access device 60 to be monitored by the new VNF 10. Is notified to another VNF 10 so as to be registered as a virtual MAC address of the new VNF 10.

The update unit 12g updates the virtual MAC management table storage unit 13a so as to change the virtual MAC address corresponding to the monitored access device 60 to be monitored by the new VNF 10 to the virtual MAC address notified by the notification unit 12f. .

Here, an example of processing at the time of performing scale-out will be described with reference to FIGS. 7 and 8. FIG. 7 is a diagram for explaining an example of processing when scale-out is performed on the same physical host. FIG. 8 is a diagram for explaining an example of processing when performing scale-out to another physical host. As illustrated in FIG. 7, when the EtherOAM VNF is scaled out on the same physical host and the VNF 10D is newly increased, the EtherOAM controller 20 determines a monitoring target to be delegated from the operating VNF 10A to the new VNF 10D. Here, it is assumed that the EtherOAM controller 20 has determined the access device 60A as a monitoring target to be delegated from the operating VNF 10A to the new VNF 10D.

At this time, by the notification from the EtherOAM controller 20, the record of the target access device 60A is discarded from the virtual MAC management table of the delegation source VNF 10A, and the record of the access device 60A is added to the virtual MAC management table of the new VNF 10D. . Here, the record of the access device 60A is, as illustrated in FIG. 7, MEG ID “MEG10”, MEP ID “100”, and virtual MAC “XX: XX: XX: XX: XX: X1”. Is a record associated with. In this way, the VNF instance to be monitored is changed by delegation, but even in this case, the MAC address of the transmission / reception frame does not change and does not affect the monitoring.

For this reason, in the case of delegating the monitoring target between the VNFs 10 not only at the time of scale-out but also at the time of scale-in or failure occurrence, it becomes possible to easily carry out without affecting the monitoring process. However, when a failure occurs in the VNF 10, it is necessary to detect the failure in the EtherOAM controller 20 and perform failover.

In addition, although the case where the EtherOAM controller 20 controls the determination of the monitoring target to be delegated at the time of the scale-out execution and the update of the virtual MAC management table will be described as an example, it is not limited to this, for example, the VNF 10 delegates The monitoring target may be determined, or the virtual MAC management table may be updated by performing communication between the VNFs 10.

Next, an example of processing when performing scale-out to another physical host will be described with reference to FIG. As shown in FIG. 8, also when scaling out to another physical host, the virtual MAC management table is updated as in the case of FIG.

For example, when the EtherOAM controller 20 determines the monitoring target access device 60B to be delegated from the operating VNF 10B to the new VNF 10E, the virtual MAC address “XX: XX: XX: XX: XX: XX” corresponding to the monitoring target access device 60B. "X2" is notified to another physical host so as to be changed as the virtual MAC address of the new VNF 10E. The scale-out destination VNF 10E transmits the EtherOAM frame, thereby learning the MAC learning table of the L2 switch 80A on the path. As a result, the frame reaches only the destination physical host, and the processing load can be distributed.

As described above, in the monitoring system 1 according to the first embodiment, a virtual MAC address is prepared for each monitoring target, and the virtual MAC address for the monitoring target device is used instead of the MAC address dynamically assigned when the VM instance is generated. Is used to transmit and receive frames between the VNF 10 and the access device 60. Each VNF 10 has a virtual MAC management table and uses a different MAC address for each opposing device.

Here, an outline of processing for transmitting and receiving a frame using a virtual MAC address set for each monitoring target device will be described with reference to FIG. FIG. 9 is a diagram illustrating an outline of processing for transmitting and receiving a frame using a virtual MAC address set for each monitoring target device. For example, in the example of FIG. 9, the VNF 10B uses “XX: XX: XX: XX: XX: 10”, “XX: XX: XX: XX: XX: 11” as virtual MAC addresses for each monitoring target. It has a virtual MAC management table in which “XX: XX: XX: XX: XX: XX” is defined. For example, in the monitoring system 1 according to the first embodiment, when there are 1000 access devices 60 monitored by one VNF 10, the virtual MAC addresses for every 1000 opposing devices are used.

When the monitoring source VNF is changed due to scale-out or failover, the VNF 10 updates a record in the virtual MAC management table and transmits / receives a frame using the virtual MAC address in the destination VNF 10. . For example, in the example of FIG. 9, when new VNFs 10E to 10G are generated in the VIM 50A of another physical host and the monitoring of the access device 60 is changed from VNF 10B to VNF 10E, the virtual MAC management table of the VNF 10B The record is discarded and the record of the access device 60 is added to the virtual MAC management table of the new VNF 10E. Here, as illustrated in FIG. 9, the record of the access device 60 includes the MEG ID “MEG10”, the MEP ID “100”, and the virtual MAC “XX: XX: XX: XX: XX: 10”. Is a record associated with.

[Processing procedure of the monitoring system]
Next, an example of the procedure of the pre-setting process by the monitoring system 1 according to the first embodiment will be described using FIG. FIG. 10 is a sequence diagram illustrating an example of the flow of the pre-setting process in the monitoring system according to the first embodiment.

As shown in FIG. 10, the SDN controller 30 issues an arbitrary virtual MAC address as the EtherOAM transmission destination MAC address to the monitored access device 60 (step S101), and the virtual MAC address is assigned to the MEG ID, MEP ID, The access device 60 is notified together with the VLAN ID (step S102). When paying out the virtual MAC address, it is necessary to avoid duplication within the same L2 segment. Then, when receiving the virtual MAC address, the access device 60 sets the received virtual MAC address as the EtherOAM transmission destination MAC address (step S103).

Thereafter, the SDN controller 30 acquires the MAC address of the access device 60 (step S104). Then, the SDN controller 30 notifies the EtherOAM controller 20 of the issued virtual MAC address together with the configuration information (MEG ID, MEP ID, MAC address, VLAN ID) of the access device 60 (step S105). The EtherOAM controller 20 stores the issued virtual MAC address in the virtual MAC management table using the configuration information of the access device 60 as a composite key (step S106). The EtherOAM controller 20 determines a VNF in charge of monitoring the registered access device 60 from among the VNFs 10A to 10C (step S107). Here, for example, it is assumed that the VNF 10A is in charge of monitoring the access device 60.

In this case, the EtherOAM controller 20 notifies the virtual MAC address corresponding to the monitored access device 60 to the VNF 10A (step S108). Then, the VNF 10A sets the virtual MAC address notified from the EtherOAM controller 20 in the virtual MAC management table (step S109).

Next, an example of a procedure of transmission / reception processing by the VNF according to the first embodiment will be described using FIG. 11 and FIG. FIG. 11 is a flowchart illustrating an example of a flow of reception processing in the VNF according to the first embodiment. FIG. 12 is a flowchart illustrating an example of a flow of transmission processing in the VNF according to the first embodiment.

First, the flow of reception processing in the VNF 10 will be described with reference to FIG. As illustrated in FIG. 11, when the VNF 10 receives a frame (Yes at Step S201), the VNF 10 searches the virtual MAC management table using the transmission destination MAC address as a key (Step S202).

If the record is found as a result of the search (Yes in step S203), that is, if the VNF 10 is a frame from the monitoring target for the own VNF, the monitoring target access device is based on the information included in the EtherOAM frame. A monitoring process for 60 is performed (step S204).

In addition, if the record does not exist in the virtual MAC management table as a result of the search (No at Step S203), that is, if the VNF 10 is not a frame from the monitoring target for the own VNF, the VNF 10 discards the EtherOAM frame (Step S205).

Next, the flow of transmission processing in the VNF 10 will be described with reference to FIG. As illustrated in FIG. 12, when transmitting an EtherOAM frame to the access device 60, the VNF 10 acquires a record of the monitored access device 60 from the virtual MAC management table (step S301).

Then, the VNF 10 refers to the acquired record, sets the virtual MAC address as the transmission source, sets the MAC address of the access device 60 as the transmission destination in the EtherOAM frame (step S302), and transmits the EtherOAM frame (step S303).

[Effect of the first embodiment]
The information processing apparatus 100 in the monitoring system 1 according to the first embodiment includes a virtual MAC management table storage unit 13a that stores the virtual MAC address of each VNF 10 set for each access device 60 managed by each VNF 10. Then, when each VNF 10 receives a frame transmitted from the access device 60, the information processing apparatus 100 causes each VNF 10 to determine whether or not the transmission destination MAC address of the frame matches the virtual MAC address of the own VNF 10, For the VNF 10 whose destination MAC address and virtual MAC address do not match, control is performed so that the frame is discarded. Further, the information processing apparatus 100 controls the VNF 10 whose transmission destination MAC address and virtual MAC address match to monitor communication of the access apparatus 60 based on information included in the frame. Further, when the VNF 10 transmits a frame to the access device 60, the information processing device 100 acquires the virtual MAC address of the VNF 10 corresponding to the access device 60 that is the transmission destination from the virtual MAC management table storage unit 13a and acquires the virtual MAC address. Control is performed so that the virtual MAC address thus set is set as the source MAC address.

As described above, in the monitoring system 1 according to the first embodiment, a virtual MAC address is prepared in advance for each monitoring target access device 60 and a virtual MAC management table that holds the virtual MAC address is used. It is possible to easily perform monitoring processing without reducing the operation cost, without using the MAC address assigned to.

Further, in the monitoring system 1 according to the first embodiment, even when the monitoring source VNF 10 moves, the virtual MAC address is taken over, so that it is not necessary to track the MAC address of the destination VNF. On the other hand, in the conventional method in which the MAC address dynamically assigned to the VNF is used, it is necessary to track the MAC address of the destination VNF.

For example, as illustrated in FIG. 13, in the conventional method, when the monitoring source VNF is changed from VNF 110 </ b> B to VNF 110 </ b> D, the EtherOAM transmission destination MAC address is changed from the MAC address (A) of VNF 110 </ b> B to VNF 110 </ b> D. It is necessary to notify the change to the MAC address (B). Here, the MAC address (A) is the MAC address of the VNF 110B that is dynamically assigned when the VNF 110B is generated, and the MAC address (B) is the MAC address of the VNF 110D that is dynamically assigned when the VNF 110D is generated. is there.

In the monitoring system 1 according to the first embodiment, since a different unicast address is used for each VNF 10, the frame reaches only the necessary VIM physical host, and load distribution among the VIM physical hosts becomes possible. . Furthermore, in the monitoring system 1 according to the first embodiment, by using a different unicast address for each monitoring target, it is possible to appropriately perform the MAC with the L2 switch on the path even if the physical host is straddled while maintaining the same virtual MAC address. Learning will be implemented, and it will be possible to move across physical hosts.

That is, for example, if a multicast address is used, it reaches all the physical hosts of the VIM, not the MAC learning target. For this reason, a load of kernel domain processing such as NIC I / O load or L2 forwarding in a virtual bridge occurs in all the physical hosts constituting the VIM, and the processing load cannot be distributed. On the other hand, in the monitoring system 1 according to the first embodiment, since a different unicast address is used for each VNF 10, the frame reaches only the necessary VIM physical host, and load distribution among the VIM physical hosts is reduced. It becomes possible.

Also, for example, if a unicast address is used as a common virtual MAC address across multiple VIM physical hosts, EtherOAM with the same MAC address as the source arrives from multiple VIM physical hosts. Can't learn MAC properly. On the other hand, since the monitoring system 1 according to the first embodiment uses a different unicast address for each monitoring target, the L2 switch on the path is appropriate even if the physical host is straddled while maintaining the same virtual MAC address. MAC learning is now performed, and movement across physical hosts becomes possible.

Further, in the monitoring system 1 according to the first embodiment, instead of performing monitoring target determination using the MEG ID or MEP ID in the CCM header, based on the destination MAC address using the virtual MAC management table. Judge whether or not to be monitored. As a result, it is possible to perform the monitoring target determination only by decoding the Ether frame, and the user domain processing load can be reduced.

Here, the object determination using the MEG ID and MEP ID in the CCM header will be described with reference to FIG. As shown in FIG. 14, the VNF extracts the MEG ID and MEP ID in the header to determine whether or not the received EtherOAM frame is a monitoring target, and transmits using the MEG ID and MEP ID. The original solution was performed. On the other hand, in the monitoring system 1 according to the first embodiment, the VNF 10 does not extract the MEG ID or MEP ID from the CCM header, and creates a virtual MAC management table based on the destination MAC address of the Ether header. Since it can be used to determine whether or not it is a monitoring target, the load can be reduced.

The A process illustrated in FIG. 14 is a process that occurs in common to all VNFs that reach the Ether frame, and the B process is a process that occurs only for VNFs in charge of monitoring. As for the B process, since the load is distributed in units of VNF, a high load distribution effect can be expected. Since the A process occurs in all the VNFs on the same physical host, the load can be distributed only in units of physical hosts constituting the VIM, and the effect is low compared to the B process. In general, processing performed in the user domain has lower processing performance than processing in a kernel domain that is optimized for processing in the kernel or hypervisor. For this reason, it is possible to effectively reduce the load by minimizing the user domain process of the A process having a low load distribution effect.

As described with reference to FIG. 6 above, the VNF 10A that transmitted the EtherOAM frame receives the EtherOAM frame from the

other VNFs

10B and 10C, so that the number of receptions increases and there is a concern about an increase in NIC load. Since the load on the user domain processing is reduced, the overall load can be reduced as a result.

Further, in the monitoring system 1 according to the first embodiment, it is possible to realize scale-in / out of VNF using only the functions of standard VIM and VNFM products such as OpenStack, and no additional function is required. Become.

[System configuration, etc.]
Further, each component of each illustrated apparatus is functionally conceptual, and does not necessarily need to be physically configured as illustrated. In other words, the specific form of distribution / integration of each device is not limited to that shown in the figure, and all or a part thereof may be functionally or physically distributed or arbitrarily distributed in arbitrary units according to various loads or usage conditions. Can be integrated and configured. Further, all or any part of each processing function performed in each device may be realized by a CPU and a program analyzed and executed by the CPU, or may be realized as hardware by wired logic.

In addition, among the processes described in this embodiment, all or part of the processes described as being automatically performed can be manually performed, or the processes described as being manually performed All or a part of the above can be automatically performed by a known method. In addition, the processing procedure, control procedure, specific name, and information including various data and parameters shown in the above-described document and drawings can be arbitrarily changed unless otherwise specified.

[program]
It is also possible to create a program in which the processing executed by the information processing apparatus described in the above embodiment is described in a language that can be executed by a computer. For example, a monitoring program in which processing executed by the information processing apparatus 100 according to the embodiment is described in a language that can be executed by a computer can be created. In this case, when the computer executes the monitoring program, the same effect as in the above embodiment can be obtained. Further, the monitoring program may be recorded on a computer-readable recording medium, and the monitoring program recorded on the recording medium may be read by the computer and executed to execute the same processing as in the above embodiment.

FIG. 15 is a diagram illustrating a computer that executes a monitoring program. As illustrated in FIG. 15, the computer 1000 includes, for example, a memory 1010, a CPU 1020, a hard disk drive interface 1030, a disk drive interface 1040, a serial port interface 1050, a video adapter 1060, and a network interface 1070. These units are connected by a bus 1080.

The memory 1010 includes a ROM (Read Only Memory) 1011 and a RAM 1012 as illustrated in FIG. The ROM 1011 stores a boot program such as BIOS (Basic Input Output System). The hard disk drive interface 1030 is connected to the hard disk drive 1090 as illustrated in FIG. The disk drive interface 1040 is connected to the disk drive 1100 as illustrated in FIG. For example, a removable storage medium such as a magnetic disk or an optical disk is inserted into the disk drive 1100. The serial port interface 1050 is connected to, for example, a mouse 1110 and a keyboard 1120 as illustrated in FIG. The video adapter 1060 is connected to a display 1130, for example, as illustrated in FIG.

Here, as illustrated in FIG. 15, the hard disk drive 1090 stores, for example, an OS 1091, an application program 1092, a program module 1093, and program data 1094. That is, the above monitoring program is stored in, for example, the hard disk drive 1090 as a program module in which a command to be executed by the computer 1000 is described.

Further, various data described in the above embodiment is stored as program data in, for example, the memory 1010 or the hard disk drive 1090. Then, the CPU 1020 reads the program module 1093 and the program data 1094 stored in the memory 1010 and the hard disk drive 1090 to the RAM 1012 as necessary, and executes various processing procedures.

Note that the program module 1093 and the program data 1094 related to the monitoring program are not limited to being stored in the hard disk drive 1090, but may be stored in, for example, a removable storage medium and read out by the CPU 1020 via the disk drive or the like. Good. Alternatively, the program module 1093 and the program data 1094 related to the monitoring program are stored in another computer connected via a network (LAN (Local Area Network), WAN (Wide Area Network), etc.), and via the network interface 1070. May be read by the CPU 1020.

The above-described embodiments and modifications thereof are included in the invention described in the claims and equivalents thereof, as well as included in the technology disclosed in the present application.

1 Monitoring

system

10, 10A-10G VNF
DESCRIPTION OF SYMBOLS 11 Communication processing part 12 Control part 12a Prior setting part 12b Judgment control part 12c Monitoring control part 12d Setting control part 12e Determination part 12f Notification part 12g Update part 13 Storage part 13a Virtual MAC management table storage part 20 EtherOAM controller 30 SDN controller 40 VNFM
50 VIM
60, 60A, 60B Access device 70 L2 transmission network 80, 80A L2 switch 100 Information processing device

Claims

A monitoring system having an information processing apparatus that operates a plurality of VNFs,
The information processing apparatus includes:
A storage unit for storing the virtual MAC address of the own VNF set for each monitoring target device managed by each VNF;
When each VNF receives a frame transmitted from the monitored device, each VNF determines whether the destination MAC address of the frame matches one of the virtual MAC addresses of its own VNF, and the destination MAC For a VNF whose address does not match the virtual MAC address, a determination control unit that controls to discard the frame;
A monitoring control unit that controls to monitor communication of the monitoring target device based on information included in the frame for the VNF in which the transmission destination MAC address and the virtual MAC address match,
When the VNF transmits a frame to the monitoring target device, the virtual MAC address of the VNF corresponding to the monitoring target device of the transmission destination is acquired from the storage unit, and the acquired virtual MAC address is set as the transmission source MAC address. A monitoring system comprising: a setting control unit that controls to perform setting.
A determination unit that determines a monitoring target device to be monitored by the new VNF among monitoring target devices managed by the already operating VNF when a new VNF is generated in the information processing device;
A notifying unit for notifying the new VNF to register a virtual MAC address corresponding to a monitoring target device to be monitored by the new VNF determined by the determining unit, as a virtual MAC address of the new VNF;
An update unit that updates the storage unit to change the virtual MAC address corresponding to the monitoring target device to be monitored by the new VNF to the virtual MAC address notified by the notification unit;
The monitoring system according to claim 1, further comprising:
When a new VNF is generated in another information processing apparatus different from the information processing apparatus, a monitoring target apparatus to be monitored by the new VNF is determined from among the monitoring target apparatuses managed by the already operating VNF. A decision unit to
Notifying the new VNF of the other information processing apparatus to register the virtual MAC address corresponding to the monitoring target device to be monitored by the new VNF determined by the determination unit as the virtual MAC address of the new VNF A notification unit;
An update unit that updates the storage unit to change the virtual MAC address corresponding to the monitoring target device to be monitored by the new VNF to the virtual MAC address notified by the notification unit;
The monitoring system according to claim 1, further comprising:
The virtual MAC address of the VNF corresponding to the monitoring target device is issued, the virtual MAC address is transmitted to the monitoring target device as the transmission destination MAC address of the frame, and the issued virtual MAC address is stored in the storage unit The monitoring system according to claim 1, further comprising a pre-setting unit that stores the information in the storage unit.
A monitoring method executed by an information processing apparatus that operates a plurality of VNFs,
The information processing apparatus includes a storage unit that stores a virtual MAC address of the own VNF set for each monitoring target apparatus managed by each VNF,
When each VNF receives a frame transmitted from the monitored device, each VNF determines whether the destination MAC address of the frame matches one of the virtual MAC addresses of its own VNF, and the destination MAC For a VNF whose address and the virtual MAC address do not match, a determination control step for controlling to discard the frame;
A monitoring control step for controlling the monitoring target device to monitor communication based on information included in the frame for VNFs having the same destination MAC address and virtual MAC address;
When the VNF transmits a frame to the monitoring target device, the virtual MAC address of the VNF corresponding to the monitoring target device of the transmission destination is acquired from the storage unit, and the acquired virtual MAC address is set as the transmission source MAC address. A monitoring method comprising: a setting control step for controlling to set.
An information processing apparatus that operates a plurality of VNFs,
A storage unit for storing the virtual MAC address of the own VNF set for each monitoring target device managed by each VNF;
When each VNF receives a frame transmitted from the monitored device, each VNF determines whether the destination MAC address of the frame matches one of the virtual MAC addresses of its own VNF, and the destination MAC For a VNF whose address does not match the virtual MAC address, a determination control unit that controls to discard the frame;
A monitoring control unit that controls to monitor communication of the monitoring target device based on information included in the frame for the VNF in which the transmission destination MAC address and the virtual MAC address match,
When the VNF transmits a frame to the monitoring target device, the virtual MAC address of the VNF corresponding to the monitoring target device of the transmission destination is acquired from the storage unit, and the acquired virtual MAC address is set as the transmission source MAC address. An information processing apparatus comprising: a setting control unit that controls to perform setting.
A monitoring program for causing a computer to function as the information processing apparatus according to claim 6.