Nec Corporation

Syuuhei Yamaguchi

Junichi Yamato

Masashi Numata

A control apparatus, includes a first unit configured to be capable of specifying an identification rule to identify a packet based on a user of a virtual network including a plurality of virtual nodes; and a second unit configured to be capable of sending an instruction to a physical node corresponding to each of the virtual nodes of the virtual network, wherein each of the virtual nodes includes a predetermined network function being capable of providing a first packet operation to the packet, wherein the instruction includes that the physical node provides a second packet operation to the packet so as to emulate the first packet operation.

Information system, control server, virtual network management method, and program

In a method and a configuration for forming a processing rule, number of entries for packet processing, maintained by a forwarding node, may be decreased. The processing rule includes processing contents and information to become a matching key to identify a packet to be applied with the processing contents. An aggregation tree is used which has a depth corresponding to a length of information that becomes matching key in the processing rule. A plurality of nodes branched from a root of the aggregation tree and levels of nodes represent value of the matching key and mask length, respectively. The processing rule or the policy is registrable in each of the individual nodes. The policy is registered in a relevant node of the aggregation tree. For each received packet, processing contents and ad-hoc matching key to identify the packet to be applied with the processing contents are determined by having reference to the policy. Then, based on the ad-hoc matching key, the aggregation tree is traced from its root downwards to find a node beyond which along the depth of the tree there is no policy registered. The processing rule having the node as the matching key is then formed.

Packet forwarding system, control device, forwarding device and method and program for preparing processing rules

A control server is connected to a plurality of physical nodes that keep control information defining an operation to be taken in accordance with input/output packet characteristics and process the input/output packets according to the control information. The control server includes a first storage unit that stores configuration information about a virtual network configured to include virtual nodes that are virtualized versions of the physical nodes, and a second storage unit that stores virtual network identifying information identifying the virtual network from characteristics of an input packet, and the control server identifies a physical node that configures a virtual network that handles a packet having a characteristic in common with the packet received by the physical node based on a request from the physical node and updates control information for each physical node.

Growing community of inventors

Tokyo, Japan

Syuuhei Yamaguchi