JP6051771B2 - Communication relay device, virtual machine server, bandwidth control system, bandwidth control method and program - Google Patents

Description

  The present invention relates to a communication relay device, a virtual machine server, a bandwidth control system, a bandwidth control method and a program, and more particularly to a communication relay device, a virtual machine server, a bandwidth control system, a bandwidth control method and a program for a virtual machine.

  When a virtual machine group operating on a virtual machine server communicates with a network, a physical line provided in the virtual machine server is shared. Therefore, for example, the virtual machine server needs to control communication of the virtual machine group.

  As the performance of computers increases, the number of virtual machines operating on a virtual machine server and the communication line bandwidth tend to increase. Therefore, the load when the virtual machine server performs communication control of the virtual machine group also tends to increase.

  On the other hand, when communication control is performed from a communication relay device outside the virtual machine server, for example, the existing communication control technology IEEE 802.3x is a hop-by-hop technology, so the communication control of the entire virtual machine server as a whole Although it is possible, communication control cannot be performed individually for each virtual machine.

  Patent Literature 1 describes a communication system including a communication device group having a communication control function. The communication system described in Patent Document 1 is intended to perform communication control of a physical communication device group, not communication control between a virtual machine provided in a virtual machine server and a virtual communication relay device. Specifically, the communication system uses QoS (Quality of Service), VLAN (Virtual Local Area Network), MAC (Media Access Control) address and IP (Internet Protocol) for the padding field of the IEEE 802.3x Pause frame. It has a communication device group having a function of including various information such as a target type including address designation and a function of analyzing the Pause frame.

  In Patent Document 2, in a data frame transfer apparatus having a plurality of communication ports, when congestion occurs only in traffic destined to some communication ports, the congestion occurs without performing traffic distribution processing using an IP address. A technique is described in which the transmission rate of traffic addressed to a certain communication port is controlled so as not to affect the traffic of the communication port in which congestion has not occurred.

JP 2006-050361 A JP 2006-246087 A

  The entire disclosure of the above patent document is incorporated herein by reference. The following analysis was made by the present inventors.

  By using a virtual machine environment program that is executed on a virtual machine server, a virtual traffic server that monitors the traffic of virtual machines is virtually installed. As the line bandwidth increases, the traffic monitoring load by the virtual machine server also increases (first problem).

  In addition, there is a method of controlling transmission processing by transmitting a Pause frame defined by IEEE802.3x from a communication device directly connected to a communication terminal to be controlled by a network. However, according to such a method, there is a problem that all transmission processes subject to communication control are interrupted (second problem). In particular, if the device that is subject to communication control is a virtual machine server, suspending all transmission processing means suspending transmission processing for all virtual machines that are virtually running on the virtual machine server. Become.

  Further, according to the communication system described in Patent Document 1, in the communication device group, the communication control target is set in the padding field (padding area) of the Pause frame defined by IEEE802.3x in order to perform communication control between the communication devices. Communication control is performed including various information including a MAC address for designating. In the communication system described in Patent Document 1, since a wide range of network environment is applied and a method for specifying a control target is defined for general purposes, a padding field that configures a Pause frame to include various information There is a problem that the data structure becomes large and complicated (third problem). In addition, it is necessary for the communication device to be controlled to repeat the padding field analysis as many times as the information length, type, and value information is embedded, which increases the analysis load. There is also.

  Further, according to the data frame transfer device described in Patent Document 2, there is a problem that compatibility with a Pause frame defined by IEEE802.3x is impaired.

  Therefore, it is desired to be able to identify the virtual machine subject to bandwidth control without imposing high load on the virtual machine server and maintaining compatibility with the Pause frame specified by IEEE802.3x. . An object of the present invention is to provide a communication relay device, a virtual machine server, a bandwidth control system, a bandwidth control method, and a program that contribute to such a demand.

The communication relay device according to the first aspect of the present invention is:
Pause that stores the MAC (Media Access Control) address of a virtual machine that performs bandwidth control of communication toward the network for continuous addresses including the top address of the padding field that composes the Pause frame based on the IEEE802.3x system Pause frame generation means for generating a frame;
Communication control means for sending the generated Pause frame to a virtual machine server on which the virtual machine operates, and
The Pause frame generating means stores the MAC address of the virtual machine subject to bandwidth control in the padding field in reverse order .

The virtual machine server according to the second aspect of the present invention is:
A virtual machine server on which the virtual machine operates,
Pause that stores the MAC (Media Access Control) address of a virtual machine that performs bandwidth control of communication toward the network for continuous addresses including the top address of the padding field that composes the Pause frame based on the IEEE802.3x system While receiving the frame from the communication relay device, the Pause frame analysis means for analyzing the received Pause frame,
The Pause frame's padding field holds the reverse of the byte order of the MAC address of the virtual machine on which bandwidth control is performed .

The bandwidth control system according to the third aspect of the present invention is:
Pause that stores the MAC (Media Access Control) address of a virtual machine that performs bandwidth control of communication toward the network for continuous addresses including the top address of the padding field that composes the Pause frame based on the IEEE802.3x system Pause frame generation means for generating a frame;
A communication control unit for transmitting the generated Pause frame, and a communication relay device,
Pause frame analysis means for analyzing the Pause frame received from the communication relay device,
A virtual machine server on which the virtual machine operates,
The Pause frame generating means stores the MAC address of the virtual machine subject to bandwidth control in the padding field in reverse order .

The bandwidth control method according to the fourth aspect of the present invention is:
The MAC (Media Access Control) of a virtual machine in which the communication relay device performs bandwidth control of communication toward the network for consecutive addresses including the leading address of the padding field that composes the Pause frame based on the IEEE 802.3x system Generating a Pause frame storing an address;
The resulting Pause frames and a step of sending to the virtual machine server, wherein the virtual machine is running,
In the generation step, the byte order of the MAC address of the virtual machine subject to bandwidth control is reversed and stored in the padding field .

The program according to the fifth aspect of the present invention is:
For the computer installed in the virtual machine server where the virtual machine runs,
Pause that stores the MAC (Media Access Control) address of a virtual machine that performs bandwidth control of communication toward the network for continuous addresses including the top address of the padding field that composes the Pause frame based on the IEEE802.3x system A process of receiving a frame from a communication relay device;
A process of analyzing the received Pause frame, and
The Pause frame's padding field holds the reverse of the byte order of the MAC address of the virtual machine on which bandwidth control is performed .
The program can be provided as a program product recorded on a non-transitory computer-readable storage medium.

  According to the communication relay device, virtual machine server, bandwidth control system, bandwidth control method and program according to the present invention, the virtual machine server is not subjected to a high load and is compatible with the Pause frame defined by IEEE802.3x. Thus, it is possible to contribute to specifying the bandwidth control target virtual machine.

It is a block diagram which shows the structure of the communication relay apparatus which concerns on this invention as an example. It is a block diagram which shows the structure of the band control system which concerns on embodiment as an example. It is a block diagram which shows the structure of the virtual machine server which concerns on embodiment as an example. It is a block diagram which shows the structure of the virtual communication control part which concerns on embodiment as an example. It is a figure which shows the structure of the Pause frame in embodiment as an example. It is a flowchart which shows operation | movement of the communication relay apparatus which concerns on embodiment as an example. It is a flowchart which shows operation | movement of the virtual machine server which concerns on embodiment as an example. It is a flowchart which shows operation | movement of the virtual machine server which concerns on embodiment as an example. It is a figure which shows the candidate MAC address list in embodiment as an example.

  First, an outline of one embodiment will be described. Note that the reference numerals of the drawings attached to this summary are merely examples for facilitating understanding, and are not intended to limit the present invention to the illustrated embodiment.

  In the bandwidth control system according to the present invention, the virtual machine server communication control is performed by an external communication device, thereby reducing the load on the virtual machine server, and the MAC (Media Access Control) address in the padding field of the IEEE 802.3x Pause frame. Can be specified for each virtual machine on the virtual server, reduce the amount of calculation by devising the MAC address comparison method, and reduce the control target identification process in the virtual machine server To do.

  Hereinafter, it demonstrates, referring drawings. FIG. 1 is a diagram showing an example of a schematic configuration of a communication relay device (10) according to the present invention. Referring to FIG. 1, the communication relay device (10) includes a Pause frame generation unit (12) and a communication control unit (13). FIG. 2 is a block diagram showing an example of the configuration of the bandwidth control system according to the present invention. Referring to FIG. 2, the bandwidth control system includes a communication relay device (10) and a virtual machine server (20). FIG. 3 is a block diagram illustrating a detailed configuration of the virtual machine server (20) as an example. FIG. 5 is a diagram illustrating a configuration of the Pause frame (40) as an example.

  For the first problem described above, the communication relay device (10) monitors the bandwidth per unit time for each frame transmitted from the virtual machine server (20) in units of source MAC addresses stored in the frame. When the bandwidth of an arbitrary MAC address becomes a numerical value for which transmission processing should be temporarily stopped, the Pause frame generation unit (12) generates a Pause frame (for example, the Pause frame 40 in FIG. 5), and the communication control unit (13) transmits the generated Pause frame (40) to the virtual machine server (20). Thereby, communication control is enabled without imposing a load on the virtual machine server (20).

  Further, with respect to the second problem described above, the virtual communication relay unit (virtual communication relay unit 26 in FIG. 3) virtually implemented on the virtual machine server (20) has received the Pause frame (40). In this case, the virtual machine subject to communication control is identified from the virtual machine group (for example, virtual machines 24 and 25 in FIG. 3) from the MAC address information included in the Pause frame (40), and transmission processing of the virtual machine is controlled. To do.

  Furthermore, with respect to the third problem described above, the Pause frame (40) stores only the MAC address in the upper 6 bytes of the padding field (48). Further, as shown in FIG. 2, the communication relay device (10) for performing communication control and the virtual machine server (20) are adjacent to each other on the network and connected without going through another communication relay device. As a result, the number of MAC addresses to be controlled is limited, comparison of OUI (Organizationally Unique Identifier) expressed by the first three bytes of the MAC address can be omitted, and the virtual machine group (virtual machines 24 and 25 in FIG. 3) can be omitted. Etc.), the amount of calculation of the virtual machine server (20) for specifying the communication control target can be reduced.

  As described above, in the present invention, the Pause frame (40) is provided by the Pause frame generation unit (12) provided in the communication relay device (10) connected to the virtual machine server (20) in a network adjacent manner. Data in which the MAC address is stored in the padding field (48) is generated. Thereby, it becomes possible to designate the virtual communication terminal connection part (31, 32) of the virtual machine (24, 25) virtually implemented in the virtual machine server (20).

  Further, in the present invention, the Pause frame analysis unit (36) virtually implemented by executing the virtual machine environment program (23) by the calculation unit (21) provided in the virtual machine server (20) is used by the Pause frame analysis unit (36). The virtual communication terminal connection unit of the corresponding virtual machine is specified from the frame (40), and the transmission process is temporarily stopped. Thereby, it is possible to control transmission of any virtual communication terminal connection unit without monitoring the bandwidth of each virtual communication terminal connection unit by the virtual machine server (20).

(Embodiment)
A band control system according to an embodiment will be described with reference to the drawings. FIG. 2 is a block diagram illustrating an example of the configuration of the bandwidth control system according to the present embodiment. Referring to FIG. 2, the bandwidth control system includes a communication relay device 10 and a virtual machine server 20 connected to the communication relay device 10 adjacent to the network (without passing through another communication relay device). .

  The communication relay device 10 includes a traffic monitoring unit 11, a Pause frame generation unit 12, a communication control unit 13, and communication terminal connection units 14 to 17.

  In FIG. 2, as an example, the communication relay device 10 includes four communication terminal connection units 14 to 17. However, the number of communication terminal connection units is not limited to this.

  The communication amount monitoring unit 11 performs communication per unit time for each Ethernet (Media Access Control) address of the transmission source via the communication control unit 13 for Ethernet (registered trademark) frames received by the communication terminal connection units 14 to 17. Measure the amount. Further, the traffic monitoring unit 11 detects that the traffic for each transmission source MAC address being monitored exceeds a predetermined amount. Further, when the traffic monitoring unit 11 detects that the traffic for each source MAC address being monitored exceeds a predetermined amount, the traffic monitoring unit 11 notifies the Pause frame generation unit 12 of the MAC address that has exceeded the traffic. introduce. In addition, as a technique for measuring the communication amount by the communication amount monitoring unit 11 and a technique for detecting that the communication amount exceeds a predetermined amount, for example, an existing known technique can be employed.

  When the MAC address is transmitted from the traffic monitoring unit 11, the Pause frame generation unit 12 generates a Pause frame in which the MAC address is stored in a padding field, as will be described later with reference to FIG. In addition, when the Pause frame generation unit 12 generates a Pause frame defined in this patent, the Pause frame generation unit 12 transmits the generated Pause frame and the MAC address included therein to the communication control unit 13.

  The communication control unit 13 constructs a MAC address table that holds associations of the transmission source MAC addresses of the Ethernet frames received by the communication terminal connection units 14 to 17 respectively. When the communication control unit 13 receives an Ethernet frame transmitted from each communication device connected to the communication terminal connection units 14 to 17, the communication control unit 13 transmits or discards the Ethernet frame from an appropriate communication terminal connection unit. Take control. For example, if the communication terminal connection unit 17 receives an Ethernet frame from the virtual machine server 20 destined for a communication terminal on the Internet, the communication control unit 13 transmits the Ethernet frame from the communication terminal connection unit 16. As a technique for constructing the MAC address table and the control technique, for example, an existing known technique can be used. Further, when the Pause frame and the MAC address are transmitted from the Pause frame generation unit 12, the communication control unit 13 identifies a communication terminal connection unit related to the MAC address from the constructed MAC address table, and identifies the identified communication terminal. The connection unit is instructed to transmit the Pause frame.

  The communication terminal connection units 14 to 17 are connected to other communication devices and terminals through physical network lines based on Ethernet technology. In addition, the communication terminal connection units 14 to 17 transmit data received from other connected communication devices and terminals to the communication control unit 13. Furthermore, the communication terminal connection units 14 to 17 transmit data instructed to be transmitted from the communication control unit 13 to other connected communication devices and terminals. These functions by the communication terminal connection units 14 to 17 can be realized by an existing technology as an example.

  The virtual machine server 20 includes a calculation unit 21 and a communication terminal connection unit 22.

  The computing unit 21 executes the virtual machine environment program 23 and virtually implements a virtual machine environment in the virtual machine server 20. Such a function can be realized by existing technology as an example.

  The communication terminal connection unit 22 connects to other communication devices and terminals through a physical network line based on Ethernet technology.

  The communication terminal connection unit 22 transmits data received from other connected communication devices and terminals to a virtual communication relay unit 26 described later with reference to FIG. Further, the communication terminal connection unit 22 transmits data instructed to be transmitted from a virtual communication relay unit 26 described later with reference to FIG. 3 to other connected communication devices and terminals. These functions by the communication terminal connection unit 22 can be realized by existing technology as an example.

  FIG. 3 is a block diagram illustrating a detailed configuration of the virtual machine server 20 illustrated in FIG. 2 as an example.

  When the virtual machine environment program 23 is executed by the calculation unit 21, the virtual machine server 20 includes virtual machines 24 and 25 and a virtual communication relay unit 26 in addition to the calculation unit 21 and the communication terminal connection unit 22.

  In FIG. 3, as an example, the virtual machine server 20 includes two virtual machines 24 and 25. However, the number of virtual machines is not limited to this.

  The virtual machine 24 has a virtual communication terminal connection unit 28. Further, the virtual machine 24 has a function of a virtual general-purpose information terminal. Furthermore, the virtual machine 24 transmits / receives data to / from other communication devices and terminals via the virtual communication terminal connection unit 28. The virtual machine 25 also has the same configuration and function as the virtual machine 24. These functions of the virtual machines 24 and 25 can be realized by existing technology as an example.

  The virtual communication terminal connection unit 28 transmits data instructed to be transmitted from the virtual machine 24 via the virtual communication terminal connection unit 31 to the virtual communication relay unit 26. Such a function can be realized by technologies including existing Ethernet.

  The virtual communication terminal connection unit 28 transmits the data received from the virtual communication terminal connection unit 31 to the virtual machine 24. Such a function can be realized by technologies including existing Ethernet. Further, when the virtual communication terminal connection unit 28 is instructed to temporarily stop the transmission process from the virtual communication relay unit 26 via the virtual communication terminal connection unit 31, the virtual communication terminal connection unit 28 temporarily stops the transmission process and then restarts the transmission process. Such a function can also be realized by existing technology as an example. The virtual communication terminal connection unit 29 has the same configuration and function as the virtual communication terminal connection unit 28.

  The virtual communication relay unit 26 includes virtual communication terminal connection units 31, 32, 34 and a virtual communication control unit 33. In FIG. 3, as an example, the virtual communication relay unit 26 includes three virtual communication terminal connection units 31, 32, and 34. However, the number of virtual communication terminal connection units is not limited to this.

  The virtual communication terminal connection unit 31 transmits data instructed to be transmitted from the virtual terminal communication control unit 33 via the virtual communication terminal connection unit 28 to the virtual machine 24. Further, the virtual communication terminal connection unit 31 transmits the data received from the virtual communication terminal connection unit 28 to the virtual communication control unit 33. Further, when the virtual communication control unit 33 instructs the virtual communication terminal connection unit 28 to temporarily stop the transmission process, the virtual communication terminal connection unit 31 transmits the instruction to the virtual communication terminal connection unit 28. These functions by the virtual communication terminal connection unit 31 can be realized by an existing technology as an example. The virtual communication terminal connection unit 32 has the same configuration and function as the virtual communication terminal connection unit 31.

  The virtual communication control unit 33 constructs a MAC address table that holds the association of the source MAC addresses of the Ethernet frames received by the virtual communication terminal connection units 31, 32, and 34, respectively. The virtual communication control unit 33 determines whether the virtual communication terminal connection units 31, 32, and 34 are connected to the virtual communication terminal connection units 28 and 29 of the virtual machine or the communication terminal connection unit 22. These functions by the virtual communication control unit 33 can be realized by existing technology as an example.

  When the virtual communication control unit 33 constructs the MAC address table, the communication terminal connection unit (22, 28, 29 in the case of FIG. 3) that is the connection destination of the related virtual communication terminal connection unit 31, 32, 34 is Information on whether the virtual machine is provided is also stored.

  When the virtual communication control unit 33 receives an Ethernet frame transmitted from each communication device that is a connection destination of the virtual communication terminal connection units 31, 32, 34, the virtual communication control unit 33 transmits the Ethernet frame from an appropriate virtual communication terminal connection unit, Alternatively, control to discard is performed. For example, when the virtual communication terminal connection unit 34 receives an Ethernet frame destined for the virtual communication terminal connection unit 28 ahead of the virtual communication terminal connection unit 31, the virtual communication control unit 33 receives the virtual communication terminal connection unit 31 from the virtual communication terminal connection unit 31. Send the Ethernet frame. Such control by the virtual communication control unit 33 can be realized by an existing technology as an example.

  When the virtual communication control unit 33 receives a Pause frame from the virtual communication terminal connection unit 34, when the virtual communication control unit 33 reads the padding field of the Pause frame, the virtual communication control unit 33 reads the MAC from the MAC address table configured as described later in the operation of this embodiment. The virtual communication terminal connection unit related to the address is specified. In addition, when the virtual communication control unit 33 can identify either the virtual communication terminal connection unit 31 or 32 to which the virtual machine is connected from the Pause frame, the virtual communication control unit 33, via the specified virtual communication terminal connection unit, Instructs the connection destination to pause transmission processing according to the pause time of the Pause frame. On the other hand, if the virtual communication terminal connection unit cannot be identified from the Pause frame, the virtual communication control unit 33 passes the Pause frame to the connection destination via the virtual communication terminal connection units 31 and 32 of all virtual machines. Instructs the suspension of transmission processing according to the interruption time.

  FIG. 4 is a block diagram illustrating a detailed configuration of the virtual communication control unit 33 illustrated in FIG. 3 as an example. Referring to FIG. 4, the virtual communication control unit 33 includes a Pause frame analysis unit 36 and a MAC address table storage unit 37.

  The Pause frame analysis unit 36 monitors the frame input to the virtual communication control unit 33 and determines whether the frame is a Pause frame defined by IEEE802.3x with 1 to 24 bytes. When the Pause frame analysis unit 36 determines that the frame is a Pause frame, the Pause frame analysis unit 36 stores the interruption time stored in the upper 25 to 26 bytes of the Pause frame. Further, when the Pause frame analysis unit 36 determines that the frame is a Pause frame, the Pause frame analysis unit 36 reads out one byte at a time from the padding field after the upper 27th byte of the Pause frame and stores it in the MAC address table storage unit 37. In particular, the virtual communication terminal connection unit 28 and 29 of the virtual machine each of the plurality of MAC addresses are compared in order from the lower byte.

  When the Pause frame analysis unit 36 can uniquely identify the MAC address by repeated comparison up to the upper 29 bytes of the Pause frame, that is, the upper 3 bytes of the padding field, the virtual communication control unit 33 The virtual communication terminal connection unit 31 or 32 associated with the address is used to instruct the suspension of the transmission process according to the interruption time already stored in the connection destination.

  The Pause frame analysis unit 36, when there are a plurality of MAC addresses that may match in the repeated comparison up to the upper 29 bytes of the Pause frame, that is, the upper 3 bytes of the padding field, If the comparison is continued up to the upper 32 bytes, that is, the upper 6 bytes of the padding field, and the MAC address can be uniquely identified, it is already stored in the virtual communication terminal connection unit associated with the MAC address. Instructs suspension of transmission processing according to the interruption time.

  The Pause frame analysis unit 36, when there is no MAC address that may match during the comparison of the Pause frame and the MAC address stored in the MAC address table storage unit 37, all the virtual machines as connection destinations Through the virtual communication terminal connection units 31 and 32, the connection destination is instructed to pause the transmission process according to the already stored interruption time.

  The MAC address table storage unit 37 stores associations between the virtual communication terminal connection units 31, 32, and 34 in FIG. 3 and the transmission source MAC addresses of the Ethernet frames received by the virtual communication control unit 33, respectively. Further, the MAC address table storage unit 37 stores, by the virtual communication control unit 33, whether or not the connection destinations of the virtual communication terminal connection units 31, 32, and 34 in FIG.

  FIG. 5 shows an example of the detailed data structure of the Pause frame in the present embodiment.

  The Pause frame 40 is transmitted to the virtual communication terminal connection units 28 and 29 of the virtual machines 24 and 25 that the virtual machine server 20 shown in FIG. When the amount of communication is controlled by temporarily interrupting, the Pause frame generation unit 12 generates the frame and transmits it to the virtual machine server 20.

  The Pause frame 40 has a data structure defined by IEEE 802.3x as a basic structure. Referring to FIG. 5, a Pause frame 40 includes, as data areas, a preamble field 41, an SFD (Start Frame Delimiter) field 42, a destination address field 43, a source address field 44, a length / type field 45, and an operation code field 46. A pause time field 47, a padding field 48, and an FCS (Frame Check Sequence) field 49.

  In this embodiment, the preamble field 41, the SFD field 42, the destination address field 43, the source address field 44, the length / type field 45, the operation code field 46, the interruption time field 47, and the FCS field 49 are IEEE802. Use the internal structure as specified in 3x.

  The padding field 48 has a 42-byte fixed-length data area between 27 and 68 bytes of the Pause frame 40 as defined by IEEE802.3x. As for the padding field 48, the internal structure is not defined in IEEE802.3x, and the structure defined in this embodiment is adopted. That is, the padding field 48 has two data areas, that is, a reversed MAC address 51 and a remaining 52 of the padding field as internal structures.

  The Reversed MAC address 51 has a data area of a fixed length of 6 bytes between 1 to 6 bytes of the padding field 48, that is, 27 to 32 bytes of the Pause frame 40. 2 stores data in which the Pause frame generation unit 12 in FIG. 2 reverses the byte order of the MAC address input from the traffic monitoring unit 11 in the reverse order. For example, when the MAC address input by the Pause frame generation unit 12 is “00: 21: 85: 45: 86: 1A”, the data stored in the Reversed MAC address 51 is “1A: 86: 45: 85: 21: 00 ”.

  The rest of the padding field 52 has a fixed length data area of 36 bytes between 7 and 42 bytes of the padding field 48, that is, between 33 and 68 bytes of the Pause frame 40. In the present embodiment, the remaining padding field 52 is not particularly defined.

  Next, the operation of the present embodiment shown in FIGS. 2 to 5 will be described with reference to the flowcharts of FIGS.

  FIG. 6 is a flowchart showing an example of an operation when the communication relay apparatus 10 of FIG. 2 receives a frame from another communication apparatus or communication terminal connected adjacently in the network.

  Referring to FIG. 6, the communication control unit 13 of the communication relay device 10 immediately receives a frame from another communication device or communication terminal connected adjacently on the network via the communication terminal connection units 14 to 17. Wait for reception (step A1).

  When the communication control unit 13 receives a frame by the communication terminal connection units 14 to 17 (Yes in step A1), the communication control unit 13 stores the association between the received communication terminal connection unit and the transmission source MAC address of the frame in the MAC address table. Update (step A2).

  Next, the communication relay device 10 performs two processes (step A3 and later and step A4 and later) in parallel.

  The communication control unit 13 of the communication relay apparatus 10 selects an appropriate unit from the communication terminal connection units 14 to 17 according to the destination MAC address of the frame received by the existing technology, and has received from the selected communication terminal connection unit The frame is transmitted / relayed or discarded (step A3). After transmitting / relaying or discarding the received frame (step A3), the communication control unit 13 again waits for reception of a frame from another communication device or communication terminal (step A1).

  The traffic monitoring unit 11 of the communication relay device 10 measures the traffic per unit time for each transmission source MAC address of the received frame (step A4).

  The traffic monitoring unit 11 determines whether or not the traffic per unit time exceeds an arbitrary amount for each source MAC address (step A5). If there is no communication amount per unit time exceeding the arbitrary amount in the MAC address group to be monitored (No in step A5), the communication amount monitoring unit 11 again determines another communication device or communication. Waiting for frame reception from the terminal (step A1 in FIG. 6).

  On the other hand, when there is a MAC address whose communication amount per unit time exceeds an arbitrary amount in the MAC address group to be monitored (Yes in step A5), the traffic monitoring unit 11 uses the MAC address as a Pause frame. It inputs into the production | generation part 12 (step A6 of FIG. 6).

  When the MAC address is input from the traffic monitoring unit 11, the Pause frame generation unit 12 creates data in which the byte order of the MAC address is reversed (step A6 in FIG. 6). For example, when the MAC address input from the traffic monitoring unit 11 is “00: 21: 85: 45: 86: 1A”, the data generated by the Pause frame generation unit 12 is “1A: 86: 45: 85”. : 21:00 ".

  Next, the Pause frame generation unit 12 generates a Pause frame based on IEEE802.3x using an existing technique. In other words, the Pause frame generation unit 12 is the MAC address data in the reverse byte order that has also been generated in the upper 6 bytes of the padding field constituting the generated Pause frame, that is, the upper 27 to 32 bytes of the Pause frame. And the data of the Pause frame 40 shown in FIG. 5 is generated (step A6).

  Next, the Pause frame generation unit 12 uses the generated Pause frame and the original byte order of the reverse MAC address stored in the padding field of the Pause frame, that is, the forward MAC address as the transmission destination of the Pause frame. 13 is input. When the Pause frame and the transmission destination MAC address are input from the Pause frame generation unit 12, the communication control unit 13 refers to the MAC address table and sets the communication terminal connection unit corresponding to the transmission destination MAC address to the communication terminal connection unit 14 to 14. Then, the Pause frame is transmitted from the identified communication terminal connection unit (step A7).

  After the communication control unit 13 finishes the Pause frame transmission process, the communication amount monitoring unit 11 waits again for frame reception from other communication devices and communication terminals (step A1).

  FIG. 7 and FIG. 8 are flowcharts showing an example of the operation when the virtual machine server 20 shown in FIG. 3 receives a frame from another communication device or communication terminal connected adjacently in terms of network.

  Referring to FIG. 7, the virtual communication control unit 33 of the virtual communication relay unit 26 is connected to other communication devices adjacent to each other via the virtual communication terminal connection units 31, 32, and 34 immediately after startup, Wait for frame reception from the communication terminal (step B1).

  When the virtual communication control unit 33 receives a frame from the virtual communication terminal connection units 31, 32, and 34 (Yes in step B1), the virtual communication terminal connection unit and the transmission source MAC address of the received frame are received. The association is stored and updated by the MAC address table storage unit 37 provided in itself (step B2). Here, when storing / updating the association between the virtual communication terminal connection unit and the MAC address, the virtual communication control unit 33 associates three pieces of connection destination information in addition to the virtual communication terminal connection unit and the MAC address. To store and update.

  The virtual communication control unit 33 stores the connection destination information as an external network when the virtual communication terminal connection units 31, 32, and 34 are connected to the communication terminal connection unit 22 (step B2). For example, in the case shown in FIG. 3, the connection destination information of the virtual communication terminal connection unit 34 is an external network.

  On the other hand, when the virtual communication terminal connection units 31, 32, and 34 are not connected to the communication terminal connection unit 22, the virtual communication control unit 33 stores the connection destination information as a virtual machine (step B2). For example, in the case illustrated in FIG. 3, the connection destination information of the virtual communication terminal connection units 31 and 32 is a virtual machine.

  The virtual communication control unit 33 determines whether the received frame is a Pause frame, whether the destination MAC address is a multicast address “01: 80: C2: 00: 00: 01” as defined by IEEE802.3x. The determination is made based on whether or not (step B3). Such a determination can be realized by an existing technique as an example.

  If the received frame is not a Pause frame (No in Step B3), the virtual communication control unit 33 selects an appropriate connection unit from the virtual communication terminal connection units 31, 32, and 34 according to the destination MAC address of the received frame, The frame received from the communication terminal connection unit is transmitted / relayed or discarded (step B4). Such a function can be realized by an existing technology as an example. After transmitting / relaying or discarding the received frame (step B4), the virtual communication control unit 33 waits for frame reception from another communication device or communication terminal again (step B1).

  On the other hand, when the received frame is a Pause frame (Yes in Step B3), the virtual communication control unit 33 analyzes the Pause frame by the Pause frame analysis unit 36 shown in FIG. 4 and stores it in the MAC address table storage unit 37. It is determined whether a unique MAC address can be specified from the stored MAC address group (step B5).

  FIG. 8 is a flowchart showing details of the process of step B5 as an example. FIG. 9 is a diagram illustrating a list of candidate MAC addresses as an example. Details of the process of step B5 will be described with reference to FIGS.

  When the received Pause frame is input, the Pause frame analysis unit 36 initializes an index n for referring to the MAC address to 1 (step C1).

  The Pause frame analysis unit 36 acquires, from the MAC address table storage unit 37, a list of MAC addresses whose connection destination information is a virtual machine and communication terminal connection units associated therewith as a list of candidate MAC addresses to be controlled (steps). C2).

  The Pause frame analysis unit 36 reads 1 byte of the upper n bytes of the padding field of the received Pause frame (step C3 in FIG. 8). For the first time, n = 1. For example, when the upper 6 bytes of the padding field of the received Pause frame are “1A: 86: 45: 85: 21: 00”, the read data is “1A”.

  The Pause frame analysis unit 36 confirms whether or not the lower n bytes coincide with one byte read from the padding field for each of the candidate MAC addresses to be controlled (step C4).

  For example, assume that the list of candidate MAC addresses to be controlled is as shown in FIG. Assuming that the Pause frame analysis unit 36 compares the lower n bytes of 91 as the first MAC address from the candidate MAC address list 80, the first n is 1 and the data of the lower 1 byte (upper 6 bytes) is the first time. Becomes “1A”. When this is compared with “1A” which is one byte read from the previous padding field, a result of matching is obtained. Next, when 92 is compared in the same manner as the second MAC address from the candidate MAC address list 80, the lower first byte of 92 is “1B”, and “1A” is 1 byte read from the previous padding field. Results in not matching.

  Next, the Pause frame analysis unit 36 checks whether or not the lower n bytes of all candidate MAC addresses match one byte read from the padding field in the above processing, and then checks whether there is a match. Determine (step C4).

  When the Pause frame analysis unit 36 determines that there is no matching MAC address (No in Step C4), the virtual communication control unit 33 passes the communication terminal connection unit whose connection destination information is a virtual machine. To instruct the suspension of the transmission process (step B7 in FIG. 7). For example, an existing technique can be used as a method for temporarily stopping transmission processing.

  When the Pause frame analysis unit 36 determines that one or more matching MAC addresses exist (Yes in step C4), the virtual communication control unit 33 determines the MAC address that did not match from the candidate MAC address list and the related information. Is deleted (step C5). For example, in the case shown in FIG. 9, the connection destination information 86, the communication terminal connection unit information 88, and the MAC address 92 are deleted.

  Next, the virtual communication control unit 33 increments the index n for referring to the MAC address by adding 1 (step C6).

  The virtual communication control unit 33 determines whether the comparison for the lower 3 bytes of the MAC address is completed by comparing whether the index n is greater than 3 (step C7).

  When the comparison of the lower 3 bytes of the MAC address is not completed, that is, when n ≦ 3 (No in Step C7), the virtual communication control unit 33 again returns the upper n bytes of the padding field of the received Pause frame. One byte is read (step C3), and for each of the candidate MAC addresses to be controlled, the process of comparing whether the lower n bytes match the one byte read from the padding field (step C4) is repeated.

  On the other hand, when the comparison of the lower 3 bytes of the MAC address is completed, that is, when n> 3 (Yes in step C7), the virtual communication control unit 33 has only one MAC address in the MAC address candidate list. (Step C8).

  When there are a plurality of MAC addresses in the MAC address candidate list (No in Step C8), the virtual communication control unit 33 reads the upper n bytes of the padding field of the received Pause frame again by 1 byte (Step C3). ) For each of the candidate MAC addresses to be controlled, the process of comparing whether the lower n bytes match the one byte read from the padding field (step C4) is repeated for the fourth and subsequent bytes.

  On the other hand, when there is only one MAC address in the MAC address candidate list (Yes in step C8), the virtual communication control unit 33 passes through the communication terminal connection unit associated with the MAC addresses remaining in the MAC address candidate list. An instruction to pause the transmission process is given (step B6 in FIG. 7). For example, an existing technique can be used as a method for temporarily stopping transmission processing.

  For example, in the example shown in FIG. 9, when the upper 6 bytes of the Pause field of the Pause frame are “1A: 86: 45: 85: 21: 00”, the index shown in FIG. In the process of step C7, only one MAC address 91 “00: 21: 85: 45: 86: 1A” has the lower 3 bytes of the MAC address continuously matching the padding field. Therefore, in this case, the communication terminal connection unit instructed to temporarily stop the transmission process in step B6 is identified as the virtual communication terminal connection unit 31 based on the communication terminal connection unit information 87, and the virtual communication terminal A temporary stop process of the transmission process is performed on the communication terminal ahead through the connection unit 31.

  The virtual communication control unit 33 instructs the specific communication terminal connection unit to temporarily stop the transmission process in step B6 of FIG. 7, and then waits for frame reception from another communication device or communication terminal again (step B1).

  As a first effect, since the communication relay device 10 adjacent to the virtual machine server in the network instructs the virtual machine server 20 to measure the amount of communication and temporarily stop transmission, the virtual machine server 20 is subjected to the processing load. Does not occur.

  As a second effect, a frame received by the communication relay device 10 from the virtual machine server 20 is virtually provided on the virtual machine server 20 in order to instruct the measurement of the traffic and the transmission suspension in MAC address units. Transmission control can be performed for each virtual machine.

  As a third effect, since IEEE802.3x Pause frames are used to store transmission control target information in the padding field, IEEE802.3x Pause frame compatible operations can be realized.

  As a fourth effect, when the communication relay device 10 designates a transmission control target, the MAC address is stored in the padding field of the Pause frame, and the propagation range of the Pause frame is set in the virtual machine server 20 adjacent to the communication relay device 10. By limiting, there is a high possibility that the control target can be specified by comparing the MAC address with a minimum of 3 bytes. Therefore, it is possible to reduce the amount of calculation for specifying the control target in the virtual machine server 20.

  As a fifth effect, the data stored in the padding field of the Pause frame is only the MAC address, and the control target can be specified by reading 6 bytes at the maximum.

  It should be noted that the disclosures of prior art documents such as the above patent documents are incorporated herein by reference. Within the scope of the entire disclosure (including claims) of the present invention, the embodiment can be changed and adjusted based on the basic technical concept. Further, various combinations or selections of various disclosed elements (including each element of each claim, each element of each embodiment, each element of each drawing, etc.) are possible within the scope of the claims of the present invention. It is. That is, the present invention of course includes various variations and modifications that could be made by those skilled in the art according to the entire disclosure including the claims and the technical idea. In particular, with respect to the numerical ranges described in this document, any numerical value or small range included in the range should be construed as being specifically described even if there is no specific description.

In the present invention, the following modes are possible.
[Form 1]
Pause that stores the MAC (Media Access Control) address of a virtual machine that performs bandwidth control of communication toward the network for continuous addresses including the top address of the padding field that composes the Pause frame based on the IEEE802.3x system Pause frame generation means for generating a frame;
A communication relay device comprising: communication control means for sending the generated Pause frame to a virtual machine server on which the virtual machine operates.
[Form 2]
Communication for monitoring the amount of communication directed to the network for each virtual machine running on the virtual machine server, and notifying the Pause frame generation means of the MAC address of the virtual machine whose monitored amount of communication has exceeded a predetermined amount of communication Further comprising a quantity monitoring means,
The communication relay device according to mode 1, wherein the Pause frame generation unit generates a Pause frame storing a MAC address notified from the communication amount monitoring unit.
[Form 3]
The communication relay device according to mode 1 or 2, wherein the Pause frame generation unit stores the MAC address of the virtual machine subject to bandwidth control in the padding field in reverse order.
[Form 4]
The communication relay device according to any one of Embodiments 1 to 3, which is provided between the virtual machine server and the network and is connected to the virtual machine server without passing through another communication relay device.
[Form 5]
A virtual machine server on which the virtual machine operates,
Pause that stores the MAC (Media Access Control) address of a virtual machine that performs bandwidth control of communication toward the network for continuous addresses including the top address of the padding field that composes the Pause frame based on the IEEE802.3x system A virtual machine server provided with a Pause frame analysis means for receiving a frame from a communication relay device and analyzing the received Pause frame.
[Form 6]
MAC address table storage means for storing a MAC address table that stores the virtual machine and the MAC address allocated to the virtual machine in association with each other,
The virtual machine server according to mode 5, wherein the Pause frame analysis means identifies a virtual machine on which bandwidth control is performed based on a MAC address stored in the Pause frame and the MAC address table.
[Form 7]
The virtual machine server according to mode 5 or 6, wherein a padding field of the Pause frame holds a reverse order of a byte order of a MAC address of a virtual machine on which bandwidth control is performed.
[Form 8]
The virtual machine server according to mode 7, wherein the Pause frame analysis means compares the MAC address stored in the Pause frame with the MAC address held in the MAC address table in order from the lower byte.
[Form 9]
The virtual machine server according to any one of forms 5 to 8, wherein the virtual machine server is connected to the communication relay device provided between the network and the virtual machine server without passing through another communication relay device.
[Mode 10]
Pause that stores the MAC (Media Access Control) address of a virtual machine that performs bandwidth control of communication toward the network for continuous addresses including the top address of the padding field that composes the Pause frame based on the IEEE802.3x system Pause frame generation means for generating a frame;
A communication control unit for transmitting the generated Pause frame, and a communication relay device,
Pause frame analysis means for analyzing the Pause frame received from the communication relay device,
A bandwidth control system comprising: a virtual machine server on which the virtual machine operates.
[Form 11]
The communication relay device monitors the amount of communication directed to the network for each virtual machine operating on the virtual machine server, and sets the MAC address of the virtual machine whose monitored amount of communication exceeds a predetermined amount of communication to the Pause frame. A communication amount monitoring means for notifying the generating means;
The bandwidth control system according to mode 10, wherein the Pause frame generation unit generates a Pause frame storing a MAC address notified from the traffic monitoring unit.
[Form 12]
The bandwidth control system according to mode 10 or 11, wherein the Pause frame generation means stores the MAC address of a virtual machine subject to bandwidth control in the padding field in reverse order.
[Form 13]
The virtual machine server further includes a MAC address table storage unit that stores a MAC address table that associates and holds a virtual machine and a MAC address allocated to the virtual machine,
The bandwidth control system according to any one of Embodiments 10 to 12, wherein the Pause frame analysis unit specifies a virtual machine on which bandwidth control is performed based on a MAC address stored in the Pause frame and the MAC address table. .
[Form 14]
The band control system according to mode 13, wherein the padding field of the Pause frame holds the reverse of the byte order of the MAC address of the virtual machine on which band control is performed.
[Form 15]
The band control system according to mode 14, wherein the Pause frame analysis means compares the MAC address stored in the Pause frame with the MAC address held in the MAC address table in order from the lower byte.
[Form 16]
The bandwidth according to any one of Forms 10 to 15, wherein the communication relay device is provided between the virtual machine server and the network and is connected to the virtual machine server without passing through another communication relay device. Control system.
[Form 17]
The MAC (Media Access Control) of a virtual machine in which the communication relay device performs bandwidth control of communication toward the network for consecutive addresses including the leading address of the padding field that composes the Pause frame based on the IEEE 802.3x system Generating a Pause frame storing an address;
And a step of transmitting the generated Pause frame to a virtual machine server on which the virtual machine operates.
[Form 18]
The communication relay device further includes a step of monitoring a communication amount directed to the network for each virtual machine operating on the virtual machine server,
The bandwidth control method according to mode 17, wherein, in the generation step, a Pause frame storing a MAC address of a virtual machine whose monitored communication amount exceeds a predetermined communication amount is generated.
[Form 19]
The bandwidth control method according to mode 17 or 18, wherein in the generation step, the MAC address of the virtual machine subject to bandwidth control is stored in the padding field in reverse order.
[Mode 20]
The virtual machine's MAC where the virtual machine server on which the virtual machine is operating performs bandwidth control of communication toward the network for consecutive addresses including the top address of the padding field that composes the Pause frame based on the IEEE802.3x method (Media Access Control) a step of receiving a Pause frame storing an address from a communication relay device;
Analyzing the received Pause frame.
[Form 21]
The virtual machine server further includes a step of holding a MAC address table that holds the virtual machine and the MAC address allocated to the virtual machine in association with each other;
The bandwidth control method according to mode 20, wherein, in the analysis step, a virtual machine on which bandwidth control is performed is specified based on the MAC address stored in the Pause frame and the MAC address table.
[Form 22]
The band control method according to mode 20 or 21, wherein the padding field of the Pause frame holds the reverse of the byte order of the MAC address of the virtual machine on which band control is performed.
[Form 23]
The band control method according to mode 22, wherein in the analysis step, the MAC address stored in the Pause frame and the MAC address held in the MAC address table are compared in order from the lower byte.
[Form 24]
For the computer installed in the virtual machine server where the virtual machine runs,
Pause that stores the MAC (Media Access Control) address of a virtual machine that performs bandwidth control of communication toward the network for continuous addresses including the top address of the padding field that composes the Pause frame based on the IEEE802.3x system A process of receiving a frame from a communication relay device;
A program that executes processing for analyzing a received Pause frame.
[Form 25]
Causing the computer to further execute a process of holding a MAC address table that holds a virtual machine in association with a MAC address assigned to the virtual machine;
25. The program according to mode 24, wherein in the analysis process, a virtual machine on which bandwidth control is performed is specified based on a MAC address stored in the Pause frame and the MAC address table.
[Form 26]
The program according to mode 24 or 25, wherein the padding field of the Pause frame holds a reverse order of the byte order of the MAC address of the virtual machine on which bandwidth control is performed.
[Form 27]
The program according to mode 26, wherein, in the analysis process, the MAC address stored in the Pause frame and the MAC address held in the MAC address table are compared in order from the lower byte.

DESCRIPTION OF SYMBOLS 10 Communication relay apparatus 11 Communication volume monitoring part 12 Pause frame production | generation part 13 Communication control part 14-17 Communication terminal connection part 20 Virtual machine server 21 Operation part 22 Communication terminal connection part 23 Virtual machine environment program 24, 25 Virtual machine 26 Virtual communication Relay unit 28, 29, 31, 32, 34 Virtual communication terminal connection unit 33 Virtual communication control unit 36 Pause frame analysis unit 37 MAC (Media Access Control) address table storage unit 40 Pause frame 41 Preamble field 42 SFD (Start Frame Delimiter) Field 43 Destination address field 44 Source address field 45 Length / type field 46 Operation code field 47 Interrupt time field 48 Padding field 49 FCS (Frame Check Sequence) field 51 Reversed MAC address 52 Padding field Yield remaining 80 Candidate MAC address list 85, 86 Connection destination information 87, 88 Communication terminal connection information 91, 92 MAC address

Claims (8)

Pause that stores the MAC (Media Access Control) address of a virtual machine that performs bandwidth control of communication toward the network for continuous addresses including the top address of the padding field that composes the Pause frame based on the IEEE802.3x system Pause frame generation means for generating a frame;
Communication control means for sending the generated Pause frame to a virtual machine server on which the virtual machine operates, and
The said Pause frame production | generation means is a communication relay apparatus which reversely reverses the byte order of the MAC address of the virtual machine of bandwidth control object, and stores it in the said padding field . Communication for monitoring the amount of communication directed to the network for each virtual machine running on the virtual machine server, and notifying the Pause frame generation means of the MAC address of the virtual machine whose monitored amount of communication has exceeded a predetermined amount of communication Further comprising a quantity monitoring means,
The communication relay device according to claim 1, wherein the Pause frame generation unit generates a Pause frame storing a MAC address notified from the communication amount monitoring unit. A virtual machine server on which the virtual machine operates,
Pause that stores the MAC (Media Access Control) address of a virtual machine that performs bandwidth control of communication toward the network for continuous addresses including the top address of the padding field that composes the Pause frame based on the IEEE802.3x system While receiving the frame from the communication relay device, the Pause frame analysis means for analyzing the received Pause frame,
A padding field of the Pause frame is a virtual machine server that stores a reverse order of the byte order of the MAC address of a virtual machine on which bandwidth control is performed . MAC address table storage means for storing a MAC address table that stores the virtual machine and the MAC address allocated to the virtual machine in association with each other,
The virtual machine server according to claim 3 , wherein the Pause frame analysis unit specifies a virtual machine on which bandwidth control is performed based on a MAC address stored in the Pause frame and the MAC address table. The virtual machine server according to claim 4 , wherein the Pause frame analysis unit compares the MAC address stored in the Pause frame with the MAC address held in the MAC address table in order from the lower byte. Pause that stores the MAC (Media Access Control) address of a virtual machine that performs bandwidth control of communication toward the network for continuous addresses including the top address of the padding field that composes the Pause frame based on the IEEE802.3x system Pause frame generation means for generating a frame;
A communication control unit for transmitting the generated Pause frame, and a communication relay device,
Pause frame analysis means for analyzing the Pause frame received from the communication relay device,
A virtual machine server on which the virtual machine operates,
The bandwidth control system, wherein the Pause frame generation means stores the MAC address of the virtual machine subject to bandwidth control in the padding field in reverse order . The MAC (Media Access Control) of a virtual machine in which the communication relay device performs bandwidth control of communication toward the network for consecutive addresses including the leading address of the padding field that composes the Pause frame based on the IEEE 802.3x system Generating a Pause frame storing an address;
Sending the generated Pause frame to a virtual machine server on which the virtual machine runs , and
A bandwidth control method, wherein in the generation step, the byte order of MAC addresses of bandwidth control target virtual machines is stored in the padding field in reverse order . For the computer installed in the virtual machine server where the virtual machine runs,
Pause that stores the MAC (Media Access Control) address of a virtual machine that performs bandwidth control of communication toward the network for continuous addresses including the top address of the padding field that composes the Pause frame based on the IEEE802.3x system A process of receiving a frame from a communication relay device;
A process of analyzing the received Pause frame, and
The Pause frame padding field holds a reverse-ordered byte order of the MAC address of the virtual machine on which bandwidth control is performed .

Images