Abstract:
A network system, a network control method, and a control apparatus are provided that can easily achieve assurance of the quality of a network service and optimization of the throughput of an entire system. A network control apparatus (11) controls a network having a multi-layer structure, sets a first layer path that provides virtual network functions for a network service on a first layer, monitors whether or not the network service on the first layer fulfills a required service level, and depending on a result of the monitoring, changes a setting of a packet header so that the first layer path will be switched at an end point of the network service. This causes a resource on a second layer, which is a lower layer than the first layer, to change.
Abstract:
A technique capable of changing communication services that can be provided by a communication system is provided. A control apparatus includes: first means that receives first information from a management apparatus, which is capable of creating a group of network functions for providing communication services, wherein the first information indicates a connection structure of the network functions in the group; and second means that generates second information based on the first information and sends the second information to the network function, wherein the second information is information for forwarding a packet to which second identification information corresponding to first identification information that is assigned to the group is added.
Abstract:
A communication system includes at least one node that processes a packet, and a control device that receives a request for a transmission of a first processing rule from said node, the first processing rule including a matching rule and a second processing rule that conforms to the matching rule, the matching rule being for comparing with information included in the packet. The control device retrieves a first processing rule which corresponds to an identifier from a database if the identifier for identifying the first processing rule is included in the request.
Abstract:
A technique capable of changing communication services that can be provided by a communication system is provided. A communication system according to the present invention includes: first means that is capable of executing a network function for providing a communication service; and second means that adds second identification information corresponding to first identification information that is assigned to a group of network functions, to a packet belonging to the group, and sends the packet to the network function, which performs packet forwarding within the group based on the second identification information.
Abstract:
An apparatus includes an input unit that receives a requested resource, and a VM arrangement destination computation unit that predicts traffic volume flowing through a network with the physical machines connected thereto in a case wherein the virtual machine is arranged on the physical machine that conform to a condition specified by the requested resource, and based on the predicted traffic volume, and selects the physical machine that balances a link utilization of the network as an arrangement destination of the virtual machine.
Abstract:
A relay apparatus includes: a data request part which requests, based on a data acquisition request(s) from a data request source(s), a data provision apparatus(es) that provides data by using a predetermined application programming interface(s) to transmit data; a conversion instruction part which transmits a conversion rule(s) for data transmitted from the data provision apparatus(es) to the data request source(s) and instructs the data request source(s) to convert the data transmitted from the data provision apparatus(es); and a data forwarding part which forwards data transmitted from the data provision apparatus(es) to the data request source(s).
Abstract:
The present invention contributes to facilitating: setting for connection between a TEP in a virtual network configured by using a virtual tunnel and a virtual network; and management of the connection. A control apparatus includes: a connection detection unit configured to detect that a virtual machine has newly been connected to one of a plurality of tunnel endpoints each of which functions as an endpoint of a virtual tunnel used for a communication between virtual machines that belong to a virtual network; a virtual network determination unit configured to determine a virtual network to which the detected virtual machine belongs on the basis of information in which virtual machines and virtual networks are associated with each other; and a tunnel endpoint control unit configured to cause, if the tunnel endpoint has not participated in the determined virtual network, the tunnel endpoint to participate in the determined virtual network.
Abstract:
Communication allowance determination means determines, using information of a packet received by a packet relay unit and based on a policy which is information associating a match condition with communicability information, whether to allow or not to allow communication to a destination unit for the packet that meets the match condition, the match condition being information identifying the packet, and the communicability information indicating whether to allow or not to allow the communication to the destination unit for the packet that meets the match condition. Rule setting means sets, at least in the packet relay unit receiving the packet, a rule of executing a process for suppressing forwarding of the packet to the destination unit, on condition that the communication allowance determination means determines not to allow the communication to the destination unit for the packet that meets the match condition.
Abstract:
A control apparatus includes a packet handling operation setting unit that sets a packet handling operation for processing a packet for a communication node selected from a plurality of communication nodes. The packet handling operation setting unit sets the packet handling operation for communication nodes out of the plurality of communication nodes other than the selected communication node, in response to the fact that it was possible to set the packet handling operation for the selected communication node.
Abstract:
An information processing system according to the present invention includes: an analysis device; and a control device. The analysis device performs first operations. The first operations includes: executing analysis, based on an analysis rule with respect to data to be input as an object of analysis; outputting an analysis result; managing the analysis rule; The analysis device store the analysis rule; and analysis state information indicating a state of the analysis to be generated or referred to by the first processor. The control device performs second operations. The second operations includes: monitoring a usage status of the first memory storing the analysis state information; acquiring and managing an evaluation result with respect to the analysis result; and controlling the analysis rule via the analysis device, based on a usage status of the first memory storing the analysis state information and the evaluation result.