WO2014142081A1 - Transfer node, control device, communication system, packet processing method and program - Google Patents

Transfer node, control device, communication system, packet processing method and program Download PDF

Info

Publication number
WO2014142081A1
WO2014142081A1 PCT/JP2014/056209 JP2014056209W WO2014142081A1 WO 2014142081 A1 WO2014142081 A1 WO 2014142081A1 JP 2014056209 W JP2014056209 W JP 2014056209W WO 2014142081 A1 WO2014142081 A1 WO 2014142081A1
Authority
WO
WIPO (PCT)
Prior art keywords
entry
packet
identifier
match condition
condition
Prior art date
Application number
PCT/JP2014/056209
Other languages
French (fr)
Japanese (ja)
Inventor
倫明 宮崎
Original Assignee
日本電気株式会社
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 日本電気株式会社 filed Critical 日本電気株式会社
Publication of WO2014142081A1 publication Critical patent/WO2014142081A1/en

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/64—Hybrid switching systems
    • H04L12/6418—Hybrid transport

Definitions

  • the present invention is based on the priority claim of Japanese Patent Application No. 2013-049168 (filed on Mar. 12, 2013), the entire contents of which are incorporated herein by reference. Shall.
  • the present invention relates to a forwarding node, a control device, a communication system, a packet processing method, and a program, and in particular, a forwarding node, a control device, a communication system, a packet processing method, and a program that operate according to control information (entries) set from the control device.
  • control information entries
  • Non-Patent Documents 1 and 2 OpenFlow captures communication as an end-to-end flow and performs path control, failure recovery, load balancing, and optimization on a per-flow basis.
  • the OpenFlow switch specified in Non-Patent Document 2 includes a secure channel for communication with the OpenFlow controller, and operates according to a flow table that is appropriately added or rewritten from the OpenFlow controller. For each flow, a set of match conditions (Match Fields), flow statistical information (Counters), and instructions (Instructions) that define processing contents are defined for each flow (non-patented). (Refer to “5.2 Flow Table” in Document 2).
  • the OpenFlow switch searches the flow table for an entry having a matching condition (see “5.3 Matching” in Non-Patent Document 2) that matches the header information of the received packet. If an entry that matches the received packet is found as a result of the search, the OpenFlow switch updates the flow statistical information (counter) and processes the processing (designated) in the instruction field of the entry for the received packet. Perform packet transmission, flooding, discard, etc. from the port. On the other hand, if no entry matching the received packet is found as a result of the search, the OpenFlow switch sends an entry setting request to the OpenFlow controller via the secure channel, that is, a control for processing the received packet. An information transmission request (Packet-In message) is transmitted. The OpenFlow switch receives a flow entry whose processing content is defined and updates the flow table. As described above, the OpenFlow switch performs packet transfer using the entry stored in the flow table as control information.
  • a matching condition see “5.3 Matching” in Non-Patent Document 2
  • the OpenFlow switch updates the flow statistical information (counter
  • Patent Document 1 discloses a configuration in which a communication device (corresponding to the OpenFlow switch) can perform high-speed path switching in a communication system using the OpenFlow when a network failure or congestion occurs.
  • the communication device of the same document is stored in a processing storage unit that stores a processing rule that associates identification information of a received packet with a process for the received packet, and the processing storage unit for the received packet.
  • An alternative processing storage unit that stores a processing rule including processing different from processing, and the received packet according to the processing rule obtained by searching the processing storage unit or the alternative processing storage unit based on identification information of the received packet And a processing unit that performs the above process.
  • Flow Mod a flow entry operation message called Flow Mod is prepared (6.4 Flow Table Modulation Messages).
  • Flow Mod command in addition to rewriting and deleting by strict match specifying the contents of the flow entry, it is possible to collectively correct and delete entries that meet the conditions specified using the wildcard.
  • the switch (forwarding node) side needs to rewrite the entries that match the conditions one by one. There may be a large number of entries to be rewritten. In this case, a change time proportional to the number of entries is required, and the time until communication becomes possible is also increased.
  • a first table that holds an entry in which a match condition is associated with a processing content to be applied to a packet that matches the match condition, an identifier that replaces at least a part of the match condition,
  • a second table holding an entry defining a correspondence relationship with the content before replacement, and an entry in which the identifier is set as a part of the match condition in the first table.
  • a forwarding node is provided that includes a packet processing unit that determines whether or not the matching condition matches the received packet and determines the processing content to be applied to the received packet.
  • a control device that is connected to the forwarding node described above and operates the first and second tables of the forwarding node.
  • a communication system including the transfer node and the control device described above is provided.
  • a first table holding an entry in which a match condition is associated with a processing content applied to a packet that matches the match condition, an identifier that replaces at least a part of the match condition
  • a forwarding node comprising a second table that holds an entry that defines a correspondence relationship with the content before replacement
  • the identifier is set as part of the match condition in the first table
  • the second table For the entry, refer to the second table to determine whether or not the received packet matches the match condition, and if the received packet and the match condition match, the processing set in the entry Applying a content to the received packet.
  • This method is linked to a specific machine called a forwarding node that processes received packets with reference to the first and second tables.
  • a first table that holds entries in which match conditions are associated with processing contents applied to packets that match the match conditions, an identifier that replaces at least a part of the match conditions
  • a second table that holds an entry that defines a correspondence relationship with the content before replacement, and the identifier is added to a part of the match condition in the first table.
  • the entry is set.
  • a process for applying the processing content set to the received packet to the received packet can be recorded on a computer-readable (non-transient) storage medium. That is, the present invention can be embodied as a computer program product.
  • the present invention it is possible to contribute to the reduction of the rewriting cost of the packet processing entry in the forwarding node of the centralized control network.
  • FIG. 6 is a diagram illustrating an example of entries set in a switch A.
  • FIG. 6 is a diagram illustrating an example of entries set in a switch B.
  • FIG. 6 is a diagram illustrating a calculation example of a packet transfer path from terminal A to terminal B. It is a figure which shows the example which changed the packet transfer path
  • FIG. 6 is a diagram illustrating a change location of an entry set in a switch A.
  • FIG. 6 is a diagram illustrating a change location of an entry set in a switch B. It is a figure which shows the structure of the table used in the 2nd Embodiment of this invention. It is a figure which shows the structure of the table used in the 3rd Embodiment of this invention.
  • the first table 201 holding an entry in which a match condition is associated with a processing content applied to a packet that matches the match condition, and the match
  • a second table 202 that holds an entry defining a correspondence relationship between an identifier (virtual match condition) in which at least a part of the condition is replaced, and the content (actual match condition) before the replacement, a packet processing unit 203, Can be realized by the forwarding node 200 including.
  • the packet processing unit 203 refers to the second table 202 for an entry in which the identifier is set as part of the match condition in the first table 201, and receives a received packet And whether or not the match condition is satisfied, and determines the processing contents to be applied to the received packet.
  • the entry modification cost is as follows. For example, when a change occurs in a transmission source terminal of communication to be controlled, it is necessary to change a transmission source IP (Internet Protocol) address used in a match condition of three entries as shown in FIG. May occur. In this case, the forwarding node 200 needs to update these three entries in accordance with an instruction from the control device (for example, in the case of the open flow of Non-Patent Document 2, the Flow mod message is used).
  • IP Internet Protocol
  • the source IP address 192.168.10.1 replaced with the identifier “A” in the second table is changed to 192. What is necessary is just to change to 168.10.2, and it is not necessary to change three entries like FIG. 2 and 3 show an example in which there are three entries with common change contents. However, as the number of entries with common change contents increases, the amount of processing required to change the entries is greatly reduced. It will be possible.
  • FIG. 4 is a diagram illustrating the configuration of the communication system according to the first embodiment of this invention.
  • a plurality of switches 200A and 200B, a control device 100 that is controlled by setting flow entries in these switches 200A and 200B, and terminals A and B that communicate via the switches 200A and 200B are shown. Has been.
  • Each of the switches 200A and 200B includes a plurality of ports 1 to 3, first and second tables 201/202, and a packet processing unit 203.
  • the first table 201 includes a match condition for identifying a packet to be processed by collating with a header of a received packet, and a process applied to a packet that matches the match condition. It is a table which stores the entry which matched the content. As the first table 201, a table similar to the flow table of the OpenFlow switch specified in Non-Patent Document 2 can be used.
  • the second table 202 is a correspondence relationship between an identifier (“X” in FIG. 6) obtained by replacing at least a part of the match condition in the first table 201 and the content before the replacement. It is a table that holds entries that define
  • the packet processing unit 203 When the packet processing unit 203 receives a packet from the ports 1 to 3, the packet processing unit 203 searches the first table 201 for an entry in which a matching condition matching the received packet is set. If a corresponding entry is found as a result of the search, the packet processing unit 203 applies the processing content set in the action field of the entry to the received packet. On the other hand, if the corresponding entry is not found as a result of the search, the packet processing unit 203 requests the control device 100 to transmit the entry set in the first table 201.
  • a specific match condition (actual match condition) is not set in part of the match condition of the entry in the first table 201, and an identifier for specifying communication is not set. May be set.
  • the packet processing unit 203 refers to the second table 202, finds the actual match condition associated with the identifier, and performs matching based on the content.
  • Specific match conditions include, for example, match conditions (also referred to as “Tuple”) that can be set in the flow entry of Non-Patent Document 2.
  • the first and second tables 201/202 are preferably stored in a CAM (Content Addressable Memory) or the like.
  • the packet processing unit 203 can be realized by a program executed by a computer mounted on the switch 200A / 200B. However, the packet processing unit 203 is configured by a dedicated circuit such as ASIC (Application Specific Integrated Circuit). Can be improved.
  • ASIC Application Specific Integrated Circuit
  • port 1 of switch 200A is connected to terminal A
  • port 1 of switch 200B is connected to terminal B
  • the port 2 of the switch 200A is connected to the port 1 of the switch 200B
  • the port 3 of the switch 200A is connected to the port 3 of the switch 200B.
  • the control device 100 matches the switch 200A and the switch 200B with a match condition for identifying a packet to be processed by collating with the header of the received packet, etc., and a process content to be applied to a packet that matches the match condition. Communication between the terminal A and the terminal B is realized by setting the associated entry.
  • the control device 100 replaces the content with a unique identifier, In the second table 202, an entry in which the identifier is replaced with the replaced content is set.
  • Such a control device 100 is based on an open flow controller of Non-Patent Document 2 that sets a flow entry in a switch to be controlled as a request from a switch (Packet-In message of Non-Patent Document 2) or an initial setting operation. Further, it can be realized by adding a function for creating two types of entries using the identifier.
  • the control device 100 receives a packet from the terminal A received by the switch 200A from the terminal A at the port 1 as port 2 of the switch 200A and port 1 of the switch 200B. It is assumed that the route to be output from the port 2 of the switch 200B is determined through the above.
  • FIG. 5 is a diagram showing entries set in the first table 201 and the second table 202 of the switch 200A by the control device 100 in order to realize packet transfer along the route.
  • the first table 201 shows an entry that associates a match condition of receiving from port 1 (others are a wild card “any”) and an action of transferring the packet from port 2. .
  • the packet processing unit 203 of the switch 200A receives a packet from the port 1, the packet processing unit 203 performs an operation of transferring the packet to the port 2.
  • no identifier is used in the match condition of the first table 201 of the switch 200A, so no entry is set in the second table 202.
  • FIG. 6 is a diagram illustrating entries set in the first table 201 and the second table 202 of the switch 200B by the control device 100 in order to realize packet transfer along the route.
  • the first table 201 is transferred from the port 2 with the match condition 1 partially replaced with the identifier “X”, other match conditions (represented by a to e for convenience), and the corresponding packet.
  • An entry that associates an action to be performed is shown.
  • the packet processing unit 203 of the switch 200B also refers to the second table 202 and determines whether the packet is received from the port 1 or not. If the content received from the port 1 and the content defined in the match condition 2 matches any of a to e, the packet processing unit 203 performs an operation of transferring the corresponding packet to the port 2.
  • control device 100 determines that the packet transfer route shown in FIG. 7 is disconnected, and calculates an alternative route.
  • the packet from terminal A received by switch 200A from terminal A at port 1 passes through port 3 of switch 200A and port 3 of switch 200B, and the port of switch 200B. It is assumed that the alternative route output from 2 is determined.
  • FIG. 9 is a diagram showing changes to the entry set in the switch 200A.
  • FIG. 8 it is necessary to change the output port of the switch 200A for the packet received from the terminal A from the port 2 to the port 3. Therefore, in the example of FIG. 9, the action of the corresponding entry in the first table 201 shown in FIG. 5 is changed to “transfer from port 3”. Thereby, the packet received from the terminal A is output from the port 3 of the switch 200A.
  • FIG. 10 is a diagram showing changes to the entry set in the switch 200B.
  • the packet processing unit 203 of the switch 200B refers to the second table 202 after the change and determines whether the packet is received from the port 3 or not. To do.
  • the packet processing unit 203 of the switch 200B performs an operation of forwarding the corresponding packet to the port 2. Become.
  • the time required for changing a plurality of entries having a common match condition in the switch can be reduced. This is because the number of entries required to change a plurality of entries is reduced.
  • the entry change instruction from the control device and the period until the change processing on the switch side is completed are the target. Unable to forward the packet.
  • the communication interruption time can be dramatically shortened.
  • FIG. 11 is a diagram showing a configuration of a table used in the second embodiment of the present invention.
  • a third table 204 is added.
  • the third table 204 includes an identifier (“a” in FIG. 11) obtained by replacing another part of the match condition of the first table 201, and the contents before the replacement (FIG. 11 is a table that holds entries that define a correspondence relationship with 11 transmission source MAC addresses (SMAC).
  • SMAC transmission source MAC addresses
  • the packet processing unit 203 When searching for an entry that matches the received packet, the packet processing unit 203 refers to the third table 204 in addition to the second table 202 to find the actual match condition associated with the identifier, and its contents Perform matching at.
  • FIG. 12 is a diagram showing a configuration of a table used in the third embodiment of the present invention.
  • a fourth table 205 is added.
  • the fourth table 205 includes an identifier (“ACT01” in FIG. 12) obtained by replacing the content of the action field of the first table 201, the content before the replacement (action “transfer from port 2” in FIG. 12), It is a table holding entries that define the correspondence relationship.
  • the packet processing unit 203 When an identifier (“ACT01” in FIG. 12) that replaces the content of the action field is set in the action field of the entry that matches the received packet, the packet processing unit 203 refers to the fourth table 205. Then, the action associated with the identifier is found, and packet processing is performed based on the action.
  • match conditions and actions used in the above-described embodiment are merely examples, and may be contents that can be set as match conditions and actions.
  • a MAC (Media Access Protocol) address (source / destination), an IP (Internet Protocol) address (source / destination), The port number (source / destination) of TCP / UDP (Transmission Control Protocol / User Datagram Protocol), VLAN ID (Virtual Local Network ID), etc. can be replaced with an identifier.
  • TCP / UDP Transmission Control Protocol / User Datagram Protocol
  • VLAN ID Virtual Local Network ID
  • a change instruction of the second table 202, the third table 204, and the fourth table 205 from the control device 100 to the switch 200B is a control protocol between the control device 100 and the switch 200B (for example, Non-Patent Document 2). It is preferable to transmit using an extended control message of the OpenFlow protocol (for example, a control message for an additional function called an Expert message of Non-Patent Document 2 can be used). In this way, an instruction can be sent from the control device 100 using the control channel between the switches 200B, and the mounting on the control device and the 100 and switch 200A / 200B side is facilitated.
  • a control protocol between the control device 100 and the switch 200B for example, Non-Patent Document 2.
  • the packet processing unit refers to the fourth table for an entry in which the identifier is set in the processing content in the first table, and determines a processing content to be applied to a received packet with reference to the fourth table.
  • a forwarding node that can substantially change two or more entries in the first table by changing an entry in the second table.
  • Control apparatus 200 Forwarding node 200A, 200B Switch 201 1st table 202 2nd table 203 Packet processing part 204 3rd table 205 4th table

Abstract

The present invention contributes to reducing the rewriting cost of packet processing entry in a transfer node of an integrated control network. The transfer node is provided with: a first table for holding entries associating match conditions, and the processing details to be applied to packets compatible with the match conditions; a second table for holding entries determining the correspondence relationships of identifiers in which at least a part of the match conditions are substituted, and the details before substitution; and a packet processing unit for assessing, regarding the entries in the first table for which the identifies are set for part of the match conditions, with reference to the second table, whether the reception packet and the match conditions are compatible, and determining the processing details to apply to the reception packet.

Description

転送ノード、制御装置、通信システム、パケット処理方法及びプログラムForwarding node, control device, communication system, packet processing method and program
　（関連出願についての記載）
　本発明は、日本国特許出願：特願２０１３－０４９１６８号（２０１３年０３月１２日出願）の優先権主張に基づくものであり、同出願の全記載内容は引用をもって本書に組み込み記載されているものとする。
　本発明は、転送ノード、制御装置、通信システム、パケット処理方法及びプログラムに関し、特に、制御装置から設定された制御情報（エントリ）に従って動作する転送ノード、制御装置、通信システム、パケット処理方法及びプログラムに関する。 (Description of related applications)
The present invention is based on the priority claim of Japanese Patent Application No. 2013-049168 (filed on Mar. 12, 2013), the entire contents of which are incorporated herein by reference. Shall.
The present invention relates to a forwarding node, a control device, a communication system, a packet processing method, and a program, and in particular, a forwarding node, a control device, a communication system, a packet processing method, and a program that operate according to control information (entries) set from the control device. About.
　近年、オープンフロー（ＯｐｅｎＦｌｏｗ）という技術が提案されている（非特許文献１、２参照）。オープンフローは、通信をエンドツーエンドのフローとして捉え、フロー単位で経路制御、障害回復、負荷分散、最適化を行うものである。非特許文献２に仕様化されているオープンフロースイッチは、オープンフローコントローラとの通信用のセキュアチャネルを備え、オープンフローコントローラから適宜追加または書き換え指示されるフローテーブルに従って動作する。フローテーブルには、フロー毎に、パケットヘッダと照合するマッチ条件（Ｍａｔｃｈ　Ｆｉｅｌｄｓ）と、フロー統計情報（Ｃｏｕｎｔｅｒｓ）と、処理内容を定義したインストラクション（Ｉｎｓｔｒｕｃｔｉｏｎｓ）と、の組が定義される（非特許文献２の「５．２　Ｆｌｏｗ　Ｔａｂｌｅ」の項参照）。 In recent years, a technique called OpenFlow has been proposed (see Non-Patent Documents 1 and 2). OpenFlow captures communication as an end-to-end flow and performs path control, failure recovery, load balancing, and optimization on a per-flow basis. The OpenFlow switch specified in Non-Patent Document 2 includes a secure channel for communication with the OpenFlow controller, and operates according to a flow table that is appropriately added or rewritten from the OpenFlow controller. For each flow, a set of match conditions (Match Fields), flow statistical information (Counters), and instructions (Instructions) that define processing contents are defined for each flow (non-patented). (Refer to “5.2 Flow Table” in Document 2).
　例えば、オープンフロースイッチは、パケットを受信すると、フローテーブルから、受信パケットのヘッダ情報に適合するマッチ条件（非特許文献２の「５．３　Ｍａｔｃｈｉｎｇ」参照）を持つエントリを検索する。検索の結果、受信パケットに適合するエントリが見つかった場合、オープンフロースイッチは、フロー統計情報（カウンタ）を更新するとともに、受信パケットに対して、当該エントリのインストラクションフィールドに記述された処理内容（指定ポートからのパケット送信、フラッディング、廃棄等）を実施する。一方、検索の結果、受信パケットに適合するエントリが見つからなかった場合、オープンフロースイッチは、セキュアチャネルを介して、オープンフローコントローラに対してエントリ設定の要求、即ち、受信パケットを処理するための制御情報の送信要求（Ｐａｃｋｅｔ－Ｉｎメッセージ）を送信する。オープンフロースイッチは、処理内容が定められたフローエントリを受け取ってフローテーブルを更新する。このように、オープンフロースイッチは、フローテーブルに格納されたエントリを制御情報として用いてパケット転送を行う。 For example, when the OpenFlow switch receives a packet, the OpenFlow switch searches the flow table for an entry having a matching condition (see “5.3 Matching” in Non-Patent Document 2) that matches the header information of the received packet. If an entry that matches the received packet is found as a result of the search, the OpenFlow switch updates the flow statistical information (counter) and processes the processing (designated) in the instruction field of the entry for the received packet. Perform packet transmission, flooding, discard, etc. from the port. On the other hand, if no entry matching the received packet is found as a result of the search, the OpenFlow switch sends an entry setting request to the OpenFlow controller via the secure channel, that is, a control for processing the received packet. An information transmission request (Packet-In message) is transmitted. The OpenFlow switch receives a flow entry whose processing content is defined and updates the flow table. As described above, the OpenFlow switch performs packet transfer using the entry stored in the flow table as control information.
　特許文献１には、上記オープンフローを用いた通信システムにおいて、ネットワークの障害または輻輳発生時に、通信装置（上記オープンフロースイッチに相当）において高速な経路切り替えを行うことができるという構成が開示されている。具体的には、同文献の通信装置は、受信パケットの識別情報と前記受信パケットに対する処理とを対応付けた処理規則を記憶する処理記憶部と、前記受信パケットに対する前記処理記憶部に記憶された処理とは異なる処理を含む処理規則を記憶する代替処理記憶部と、前記受信パケットの識別情報に基づき、前記処理記憶部または前記代替処理記憶部を検索して得られた処理規則に従って前記受信パケットの処理を行う処理部と、を備えると記載されている。 Patent Document 1 discloses a configuration in which a communication device (corresponding to the OpenFlow switch) can perform high-speed path switching in a communication system using the OpenFlow when a network failure or congestion occurs. Yes. Specifically, the communication device of the same document is stored in a processing storage unit that stores a processing rule that associates identification information of a received packet with a process for the received packet, and the processing storage unit for the received packet. An alternative processing storage unit that stores a processing rule including processing different from processing, and the received packet according to the processing rule obtained by searching the processing storage unit or the alternative processing storage unit based on identification information of the received packet And a processing unit that performs the above process.
特開２０１２－４９６７４号公報JP 2012-49654 A
　以下の分析は、本発明によって与えられたものである。オープンフローに代表される集中制御型のネットワークでは、多数のフローエントリを変更する時間が掛かってしまうという問題点がある。非特許文献２のオープンフローでは、Ｆｌｏｗ　Ｍｏｄと呼ばれるフローエントリの操作用メッセージが用意されている（６．４　Ｆｌｏｗ　Ｔａｂｌｅ　Ｍｏｄｉｃａｔｉｏｎ　Ｍｅｓｓａｇｅｓ）。Ｆｌｏｗ　Ｍｏｄコマンドでは、フローエントリの内容を指定したストリクトマッチによる書き換え、削除のほかに、ワイルドカードを用いて指定した条件に適合するエントリを一括して修正、削除することが可能となっている。しかしながら、この場合でも、スイッチ（転送ノード）側では、条件に合致するエントリを１つずつ書き換える処理が必要となってしまう。書き換え対象のエントリが多数に及ぶこともあり、その場合、エントリ数に比例した変更時間が必要となり、通信が可能となるまでの時間も長くなってしまう。 The following analysis is given by the present invention. In a centralized control network represented by OpenFlow, there is a problem that it takes time to change a large number of flow entries. In the open flow of Non-Patent Document 2, a flow entry operation message called Flow Mod is prepared (6.4 Flow Table Modulation Messages). In the Flow Mod command, in addition to rewriting and deleting by strict match specifying the contents of the flow entry, it is possible to collectively correct and delete entries that meet the conditions specified using the wildcard. However, even in this case, the switch (forwarding node) side needs to rewrite the entries that match the conditions one by one. There may be a large number of entries to be rewritten. In this case, a change time proportional to the number of entries is required, and the time until communication becomes possible is also increased.
　本発明は、集中制御型ネットワークの転送ノードにおけるパケット処理用エントリの書き換えコストの低減に貢献できる転送ノード、制御装置、通信システム、パケット処理方法及びプログラムを提供することを目的とする。 It is an object of the present invention to provide a transfer node, a control device, a communication system, a packet processing method, and a program that can contribute to reducing the cost of rewriting a packet processing entry in a transfer node of a centralized control network.
　第１の視点によれば、マッチ条件と該マッチ条件に適合するパケットに適用する処理内容とを対応付けたエントリを保持する第１のテーブルと、前記マッチ条件の少なくとも一部を置き換えた識別子と、前記置き換え前の内容と、の対応関係を定めたエントリを保持する第２のテーブルと、前記第１のテーブルにおいて前記マッチ条件の一部に前記識別子が設定されているエントリについて、前記第２のテーブルを参照して、受信パケットと前記マッチ条件が適合するか否かを判定し、受信パケットに適用する処理内容を決定するパケット処理部と、を備える転送ノードが提供される。 According to the first aspect, a first table that holds an entry in which a match condition is associated with a processing content to be applied to a packet that matches the match condition, an identifier that replaces at least a part of the match condition, A second table holding an entry defining a correspondence relationship with the content before replacement, and an entry in which the identifier is set as a part of the match condition in the first table. A forwarding node is provided that includes a packet processing unit that determines whether or not the matching condition matches the received packet and determines the processing content to be applied to the received packet.
　第２の視点によれば、上記した転送ノードと接続され、前記転送ノードの第１、第２のテーブルを操作する制御装置が提供される。 According to the second aspect, there is provided a control device that is connected to the forwarding node described above and operates the first and second tables of the forwarding node.
　第３の視点によれば、上記した転送ノードと制御装置とを含む通信システムが提供される。 According to the third aspect, a communication system including the transfer node and the control device described above is provided.
　第４の視点によれば、マッチ条件と該マッチ条件に適合するパケットに適用する処理内容とを対応付けたエントリを保持する第１のテーブルと、前記マッチ条件の少なくとも一部を置き換えた識別子と、前記置き換え前の内容と、の対応関係を定めたエントリを保持する第２のテーブルと、を備える転送ノードにおいて、前記第１のテーブルにおいて前記マッチ条件の一部に前記識別子が設定されているエントリについて、前記第２のテーブルを参照して、受信パケットと前記マッチ条件が適合するか否かを判定するステップと、前記受信パケットと前記マッチ条件が適合する場合、該エントリに設定された処理内容を、受信パケットに適用するステップと、を含むパケット処理方法が提供される。本方法は、前記第１、第２のテーブルを参照して受信パケットを処理する転送ノードという、特定の機械に結びつけられている。 According to the fourth aspect, a first table holding an entry in which a match condition is associated with a processing content applied to a packet that matches the match condition, an identifier that replaces at least a part of the match condition, In a forwarding node comprising a second table that holds an entry that defines a correspondence relationship with the content before replacement, the identifier is set as part of the match condition in the first table For the entry, refer to the second table to determine whether or not the received packet matches the match condition, and if the received packet and the match condition match, the processing set in the entry Applying a content to the received packet. This method is linked to a specific machine called a forwarding node that processes received packets with reference to the first and second tables.
　第５の視点によれば、マッチ条件と該マッチ条件に適合するパケットに適用する処理内容とを対応付けたエントリを保持する第１のテーブルと、前記マッチ条件の少なくとも一部を置き換えた識別子と、前記置き換え前の内容と、の対応関係を定めたエントリを保持する第２のテーブルと、を備える転送ノードに搭載されたコンピュータに、前記第１のテーブルにおいて前記マッチ条件の一部に前記識別子が設定されているエントリについて、前記第２のテーブルを参照して、受信パケットと前記マッチ条件が適合するか否かを判定する処理と、前記受信パケットと前記マッチ条件が適合する場合、該エントリに設定された処理内容を、受信パケットに適用する処理と、を実行させるプログラムが提供される。なお、このプログラムは、コンピュータが読み取り可能な（非トランジエントな）記憶媒体に記録することができる。即ち、本発明は、コンピュータプログラム製品として具現することも可能である。 According to the fifth aspect, a first table that holds entries in which match conditions are associated with processing contents applied to packets that match the match conditions, an identifier that replaces at least a part of the match conditions, A second table that holds an entry that defines a correspondence relationship with the content before replacement, and the identifier is added to a part of the match condition in the first table. For the entry in which the received packet and the match condition are matched with reference to the second table, and when the received packet and the match condition are matched, the entry is set. And a process for applying the processing content set to the received packet to the received packet. This program can be recorded on a computer-readable (non-transient) storage medium. That is, the present invention can be embodied as a computer program product.
　本発明によれば、集中制御型ネットワークの転送ノードにおけるパケット処理用エントリの書き換えコストの低減に貢献することが可能となる。 According to the present invention, it is possible to contribute to the reduction of the rewriting cost of the packet processing entry in the forwarding node of the centralized control network.
本発明の一実施形態の構成を示す図である。It is a figure which shows the structure of one Embodiment of this invention. パケット処理用エントリを複数書き換える場合のコストを説明するための図である。It is a figure for demonstrating the cost in the case of rewriting multiple packet processing entries. 本発明の一実施形態におけるエントリの書き換えコストを説明するための図である。It is a figure for demonstrating the rewriting cost of the entry in one Embodiment of this invention. 本発明の第１の実施形態の通信システムの構成を示す図である。It is a figure which shows the structure of the communication system of the 1st Embodiment of this invention. スイッチＡに設定されるエントリの例を示す図である。6 is a diagram illustrating an example of entries set in a switch A. FIG. スイッチＢに設定されるエントリの例を示す図である。6 is a diagram illustrating an example of entries set in a switch B. FIG. 端末Ａから端末Ｂへのパケット転送経路の計算例を示す図である。FIG. 6 is a diagram illustrating a calculation example of a packet transfer path from terminal A to terminal B. 端末Ａから端末Ｂへのパケット転送経路を変更した例を示す図である。It is a figure which shows the example which changed the packet transfer path | route from the terminal A to the terminal B. スイッチＡに設定されるエントリの変更箇所を示す図である。FIG. 6 is a diagram illustrating a change location of an entry set in a switch A. スイッチＢに設定されるエントリの変更箇所を示す図である。FIG. 6 is a diagram illustrating a change location of an entry set in a switch B. 本発明の第２の実施形態で用いるテーブルの構成を示す図である。It is a figure which shows the structure of the table used in the 2nd Embodiment of this invention. 本発明の第３の実施形態で用いるテーブルの構成を示す図である。It is a figure which shows the structure of the table used in the 3rd Embodiment of this invention.
　はじめに本発明の一実施形態の概要について図面を参照して説明する。なお、この概要に付記した図面参照符号は、理解を助けるための一例として各要素に便宜上付記したものであり、本発明を図示の態様に限定することを意図するものではない。 First, an outline of an embodiment of the present invention will be described with reference to the drawings. Note that the reference numerals of the drawings attached to this summary are attached to the respective elements for convenience as an example for facilitating understanding, and are not intended to limit the present invention to the illustrated embodiment.
　本発明は、その一実施形態において、図１に示すように、マッチ条件と該マッチ条件に適合するパケットに適用する処理内容とを対応付けたエントリを保持する第１のテーブル２０１と、前記マッチ条件の少なくとも一部を置き換えた識別子（仮想マッチ条件）と、前記置き換え前の内容（実マッチ条件）と、の対応関係を定めたエントリを保持する第２のテーブル２０２と、パケット処理部２０３と、を備える転送ノード２００にて実現できる。 In one embodiment of the present invention, as shown in FIG. 1, the first table 201 holding an entry in which a match condition is associated with a processing content applied to a packet that matches the match condition, and the match A second table 202 that holds an entry defining a correspondence relationship between an identifier (virtual match condition) in which at least a part of the condition is replaced, and the content (actual match condition) before the replacement, a packet processing unit 203, Can be realized by the forwarding node 200 including.
　より具体的には、前記パケット処理部２０３は、前記第１のテーブル２０１において前記マッチ条件の一部に前記識別子が設定されているエントリについて、前記第２のテーブル２０２を参照して、受信パケットと前記マッチ条件が適合するか否かを判定し、受信パケットに適用する処理内容を決定する。 More specifically, the packet processing unit 203 refers to the second table 202 for an entry in which the identifier is set as part of the match condition in the first table 201, and receives a received packet And whether or not the match condition is satisfied, and determines the processing contents to be applied to the received packet.
　以上のように構成することで、第１のテーブル２０１に、マッチ条件の少なくとも一部を置き換えた識別子を用いたエントリを設定することができる。 By configuring as described above, it is possible to set an entry using an identifier obtained by replacing at least a part of the match condition in the first table 201.
　上記形態の効果について説明する。上記マッチ条件中に前記識別子を用いることができない場合、エントリの変更コストは次のとおりとなる。例えば、制御対象の通信の送信元の端末に変更が生じた場合、図２に示すように、３つのエントリのマッチ条件中に用いられている送信元ＩＰ（Ｉｎｔｅｒｎｅｔ　Ｐｒｏｔｏｃｏｌ）アドレスを変更する必要が生じることがある。この場合、転送ノード２００は、制御装置からの指示（例えば、非特許文献２のオープンフローの場合、Ｆｌｏｗ　ｍｏｄメッセージが使用される）に従い、これら３つのエントリを更新する必要がある。 The effect of the above form will be described. If the identifier cannot be used in the match condition, the entry modification cost is as follows. For example, when a change occurs in a transmission source terminal of communication to be controlled, it is necessary to change a transmission source IP (Internet Protocol) address used in a match condition of three entries as shown in FIG. May occur. In this case, the forwarding node 200 needs to update these three entries in accordance with an instruction from the control device (for example, in the case of the open flow of Non-Patent Document 2, the Flow mod message is used).
　一方、上記マッチ条件中に前記識別子を用いることができる場合、図３のように、第２のテーブルの識別子「Ａ」に置き換えられた、送信元ＩＰアドレス１９２．１６８．１０．１を１９２．１６８．１０．２に変更すればよく、図２のように３つのエントリを変更する必要はない。なお、図２、図３の例では、共通する変更内容のエントリが３つである例を示したが、変更内容が共通するエントリが多くなればなるほど、エントリの変更に要する処理量を大きく軽減できることになる。 On the other hand, when the identifier can be used in the match condition, the source IP address 192.168.10.1 replaced with the identifier “A” in the second table is changed to 192. What is necessary is just to change to 168.10.2, and it is not necessary to change three entries like FIG. 2 and 3 show an example in which there are three entries with common change contents. However, as the number of entries with common change contents increases, the amount of processing required to change the entries is greatly reduced. It will be possible.
［第１の実施形態］
　続いて、本発明の第１の実施形態について図面を参照して詳細に説明する。図４は、本発明の第１の実施形態の通信システムの構成を示す図である。図４を参照すると、複数のスイッチ２００Ａ、２００Ｂと、これらスイッチ２００Ａ、２００Ｂにフローエントリを設定することにより制御する制御装置１００と、スイッチ２００Ａ、２００Ｂを介して通信する端末Ａ、端末Ｂが示されている。 [First Embodiment]
Next, a first embodiment of the present invention will be described in detail with reference to the drawings. FIG. 4 is a diagram illustrating the configuration of the communication system according to the first embodiment of this invention. Referring to FIG. 4, a plurality of switches 200A and 200B, a control device 100 that is controlled by setting flow entries in these switches 200A and 200B, and terminals A and B that communicate via the switches 200A and 200B are shown. Has been.
　スイッチ２００Ａ、２００Ｂは、それぞれ複数のポート１～３と、第１、第２のテーブル２０１／２０２と、パケット処理部２０３とを備えている。 Each of the switches 200A and 200B includes a plurality of ports 1 to 3, first and second tables 201/202, and a packet processing unit 203.
　第１のテーブル２０１は、図５、図６に示すように、受信パケットのヘッダ等と照合して処理対象のパケットを特定するためのマッチ条件と、このマッチ条件に適合するパケットに適用する処理内容とを対応付けたエントリを格納するテーブルである。なお、第１のテーブル２０１として、非特許文献２に仕様化されているオープンフロースイッチのフローテーブルと同様のテーブルを用いることもできる。 As shown in FIGS. 5 and 6, the first table 201 includes a match condition for identifying a packet to be processed by collating with a header of a received packet, and a process applied to a packet that matches the match condition. It is a table which stores the entry which matched the content. As the first table 201, a table similar to the flow table of the OpenFlow switch specified in Non-Patent Document 2 can be used.
　第２のテーブル２０２は、図６に示すように、第１のテーブル２０１のマッチ条件の少なくとも一部を置き換えた識別子（図６の「Ｘ」）と、前記置き換え前の内容と、の対応関係を定めたエントリを保持するテーブルである。 As shown in FIG. 6, the second table 202 is a correspondence relationship between an identifier (“X” in FIG. 6) obtained by replacing at least a part of the match condition in the first table 201 and the content before the replacement. It is a table that holds entries that define
　パケット処理部２０３は、ポート１～３からパケットを受信すると、第１のテーブル２０１から受信パケットに適合するマッチ条件が設定されたエントリを検索する。前記検索の結果、該当するエントリが見つかった場合、パケット処理部２０３は、そのエントリのアクションフィールドに設定された処理内容を、受信パケットに適用する。一方、前記検索の結果、該当するエントリが見つからなかった場合、パケット処理部２０３は、制御装置１００に対して、第１のテーブル２０１に設定するエントリの送信を要求する。 When the packet processing unit 203 receives a packet from the ports 1 to 3, the packet processing unit 203 searches the first table 201 for an entry in which a matching condition matching the received packet is set. If a corresponding entry is found as a result of the search, the packet processing unit 203 applies the processing content set in the action field of the entry to the received packet. On the other hand, if the corresponding entry is not found as a result of the search, the packet processing unit 203 requests the control device 100 to transmit the entry set in the first table 201.
　前記受信パケットに適合するエントリの検索時に、第１のテーブル２０１のエントリのマッチ条件の一部に、具体のマッチ条件（実マッチ条件）が設定されておらず、通信を特定するための識別子が設定されている場合がある。この場合、パケット処理部２０３は、第２のテーブル２０２を参照して、前記識別子に対応付けられている実マッチ条件を探し出し、その内容にてマッチングを行う。なお、具体のマッチ条件（実マッチ条件）とは、例えば、非特許文献２のフローエントリに設定可能なマッチ条件（「Ｔｕｐｌｅ」とも呼ばれている。）が挙げられる。 When searching for an entry that matches the received packet, a specific match condition (actual match condition) is not set in part of the match condition of the entry in the first table 201, and an identifier for specifying communication is not set. May be set. In this case, the packet processing unit 203 refers to the second table 202, finds the actual match condition associated with the identifier, and performs matching based on the content. Specific match conditions (actual match conditions) include, for example, match conditions (also referred to as “Tuple”) that can be set in the flow entry of Non-Patent Document 2.
　なお、第１、第２のテーブル２０１／２０２は、ＣＡＭ（Ｃｏｎｔｅｎｔ　Ａｄｄｒｅｓｓａｂｌｅ　Ｍｅｍｏｒｙ）等に格納することが好ましい。また、パケット処理部２０３は、スイッチ２００Ａ／２００Ｂに搭載されたコンピュータに実行させるプログラムにより実現することも可能であるが、ＡＳＩＣ（Ａｐｐｌｉｃａｔｉｏｎ　Ｓｐｅｃｉｆｉｃ　Ｉｎｔｅｇｒａｔｅｄ　Ｃｉｒｃｕｉｔ）等の専用回路にて構成することで処理速度を向上させることができる。 The first and second tables 201/202 are preferably stored in a CAM (Content Addressable Memory) or the like. The packet processing unit 203 can be realized by a program executed by a computer mounted on the switch 200A / 200B. However, the packet processing unit 203 is configured by a dedicated circuit such as ASIC (Application Specific Integrated Circuit). Can be improved.
　また、以下の説明では、スイッチ２００Ａのポート１は、端末Ａと接続されており、スイッチ２００Ｂのポート１は、端末Ｂと接続されている。また、スイッチ２００Ａのポート２は、スイッチ２００Ｂのポート１と接続され、スイッチ２００Ａのポート３は、スイッチ２００Ｂのポート３と接続されている。 In the following description, port 1 of switch 200A is connected to terminal A, and port 1 of switch 200B is connected to terminal B. The port 2 of the switch 200A is connected to the port 1 of the switch 200B, and the port 3 of the switch 200A is connected to the port 3 of the switch 200B.
　制御装置１００は、スイッチ２００Ａ、スイッチ２００Ｂに、それぞれ、受信パケットのヘッダ等と照合して処理対象のパケットを特定するためのマッチ条件と、このマッチ条件に適合するパケットに適用する処理内容とを対応付けたエントリを設定することにより、端末Ａと端末Ｂ間の通信を実現する。また、制御装置１００は、スイッチ２００Ａ、スイッチ２００Ｂの第１のテーブル２０１に設定する複数のエントリのマッチ条件の一部に共通する内容が用いられている場合、その内容を一意の識別子に置き換え、第２のテーブル２０２に、前記識別子と置き換えた内容とを対応付けたエントリを設定する。このような制御装置１００は、スイッチからの要求（非特許文献２のＰａｃｋｅｔ－Ｉｎメッセージ）や、初期設定動作として、制御対象のスイッチにフローエントリを設定する非特許文献２のオープンフローコントローラをベースに、前記識別子を用いた２種類のエントリの作成機能を追加することでも実現できる。 The control device 100 matches the switch 200A and the switch 200B with a match condition for identifying a packet to be processed by collating with the header of the received packet, etc., and a process content to be applied to a packet that matches the match condition. Communication between the terminal A and the terminal B is realized by setting the associated entry. In addition, when content common to some of the match conditions of the plurality of entries set in the first table 201 of the switch 200A and the switch 200B is used, the control device 100 replaces the content with a unique identifier, In the second table 202, an entry in which the identifier is replaced with the replaced content is set. Such a control device 100 is based on an open flow controller of Non-Patent Document 2 that sets a flow entry in a switch to be controlled as a request from a switch (Packet-In message of Non-Patent Document 2) or an initial setting operation. Further, it can be realized by adding a function for creating two types of entries using the identifier.
　以下の説明では、制御装置１００が、図７の矢線に示すように、端末Ａからスイッチ２００Ａがポート１にて受信した端末Ａからのパケットを、スイッチ２００Ａのポート２、スイッチ２００Ｂのポート１を経て、スイッチ２００Ｂのポート２から出力する経路を決定したものとする。 In the following description, as shown by the arrow in FIG. 7, the control device 100 receives a packet from the terminal A received by the switch 200A from the terminal A at the port 1 as port 2 of the switch 200A and port 1 of the switch 200B. It is assumed that the route to be output from the port 2 of the switch 200B is determined through the above.
　図５は、上記経路に沿ったパケット転送を実現するために、制御装置１００がスイッチ２００Ａの第１のテーブル２０１と、第２のテーブル２０２に設定したエントリを示す図である。図５の例では、第１のテーブル２０１に、ポート１から受信というマッチ条件（他はワイルドカード「ａｎｙ」）、該当パケットをポート２から転送するアクションとを対応付けたエントリが示されている。このため、スイッチ２００Ａのパケット処理部２０３は、ポート１からパケットを受信すると、ポート２へ転送する動作を行うことになる。なお、スイッチ２００Ａの第１のテーブル２０１のマッチ条件には、識別子は用いられていないため、第２のテーブル２０２には、エントリは設定されていない。 FIG. 5 is a diagram showing entries set in the first table 201 and the second table 202 of the switch 200A by the control device 100 in order to realize packet transfer along the route. In the example of FIG. 5, the first table 201 shows an entry that associates a match condition of receiving from port 1 (others are a wild card “any”) and an action of transferring the packet from port 2. . For this reason, when the packet processing unit 203 of the switch 200A receives a packet from the port 1, the packet processing unit 203 performs an operation of transferring the packet to the port 2. Note that no identifier is used in the match condition of the first table 201 of the switch 200A, so no entry is set in the second table 202.
　図６は、上記経路に沿ったパケット転送を実現するために、制御装置１００がスイッチ２００Ｂの第１のテーブル２０１と、第２のテーブル２０２に設定したエントリを示す図である。図６の例では、第１のテーブル２０１に、一部が識別子「Ｘ」に置き換えられたマッチ条件１と、その他マッチ条件（便宜上ａ～ｅで表す。）と、該当パケットをポート２から転送するアクションとを対応付けたエントリが示されている。このため、スイッチ２００Ｂのパケット処理部２０３は、パケットを受信すると、第２のテーブル２０２も参照し、ポート１から受信したパケットであるかどうかも判定する。ポート１から受信し、かつ、マッチ条件２に定められた内容がａ～ｅのいずれかに適合する場合、パケット処理部２０３は、該当パケットをポート２へ転送する動作を行うことになる。 FIG. 6 is a diagram illustrating entries set in the first table 201 and the second table 202 of the switch 200B by the control device 100 in order to realize packet transfer along the route. In the example of FIG. 6, the first table 201 is transferred from the port 2 with the match condition 1 partially replaced with the identifier “X”, other match conditions (represented by a to e for convenience), and the corresponding packet. An entry that associates an action to be performed is shown. For this reason, when receiving a packet, the packet processing unit 203 of the switch 200B also refers to the second table 202 and determines whether the packet is received from the port 1 or not. If the content received from the port 1 and the content defined in the match condition 2 matches any of a to e, the packet processing unit 203 performs an operation of transferring the corresponding packet to the port 2.
　以上、第１、第２のテーブル２０１／２０２に、図５、図６のようなエントリが設定されることにより、図７の矢線に示すようなパケット転送が行われることになる。 As described above, when entries as shown in FIGS. 5 and 6 are set in the first and second tables 201/202, packet transfer as shown by the arrow in FIG. 7 is performed.
　続いて、本実施形態の動作について図面を参照して詳細に説明する。以下の説明では、図８に示すように、スイッチ２００Ａのポート１とスイッチ２００Ｂのポート１間のリンクに障害が発生した例を挙げて説明する。なお、スイッチ間のポート障害は、制御装置１００がスイッチからポート情報等を収集することで検出することが可能である（非特許文献２の「Ｐｏｒｔ　ｓｔａｔｕｓメッセージ」参照）。 Subsequently, the operation of the present embodiment will be described in detail with reference to the drawings. In the following description, as shown in FIG. 8, an example in which a failure has occurred in the link between the port 1 of the switch 200A and the port 1 of the switch 200B will be described. Note that a port failure between switches can be detected by the control device 100 collecting port information and the like from the switches (see “Port status message” in Non-Patent Document 2).
　この場合、制御装置１００は、図７に示したパケット転送経路が不通になったと判断し、代替経路を計算する。ここでは、図８の矢線に示すように、端末Ａからスイッチ２００Ａがポート１にて受信した端末Ａからのパケットを、スイッチ２００Ａのポート３、スイッチ２００Ｂのポート３を経て、スイッチ２００Ｂのポート２から出力する代替経路を決定したものとする。 In this case, the control device 100 determines that the packet transfer route shown in FIG. 7 is disconnected, and calculates an alternative route. Here, as indicated by the arrow in FIG. 8, the packet from terminal A received by switch 200A from terminal A at port 1 passes through port 3 of switch 200A and port 3 of switch 200B, and the port of switch 200B. It is assumed that the alternative route output from 2 is determined.
　この場合、制御装置１００は、図５、図６に示したスイッチ２００Ａ、２００Ｂに設定済みのエントリに対して、次のような変更を行う。図９は、スイッチ２００Ａに設定されているエントリに対する変更内容を示す図である。図８に示したように、端末Ａから受信したパケットのスイッチ２００Ａの出力ポートをポート２からポート３に変更する必要がある。そこで、図９の例では、図５に示した第１のテーブル２０１の該当エントリのアクションを「ポート３から転送」に変更している。これにより、端末Ａから受信したパケットは、スイッチ２００Ａのポート３から出力されるようになる。 In this case, the control device 100 makes the following changes to the entries already set in the switches 200A and 200B shown in FIGS. FIG. 9 is a diagram showing changes to the entry set in the switch 200A. As shown in FIG. 8, it is necessary to change the output port of the switch 200A for the packet received from the terminal A from the port 2 to the port 3. Therefore, in the example of FIG. 9, the action of the corresponding entry in the first table 201 shown in FIG. 5 is changed to “transfer from port 3”. Thereby, the packet received from the terminal A is output from the port 3 of the switch 200A.
　図１０は、スイッチ２００Ｂに設定されているエントリに対する変更内容を示す図である。図８に示したように、端末Ａから受信したパケットは、スイッチ２００Ｂのポート３から入力されるようになるため、マッチ条件中の入力ポートに関する内容を変更する必要がある。そこで、図１０の例では、図６に示した第２のテーブル２０２のマッチ条件１の「Ｘ」に対応付けられている入力ポートに関するマッチ条件「Ｉｎ　ｐｏｒｔ＝ポート１」を「Ｉｎ　ｐｏｒｔ＝ポート３」に変更している。これにより、第１のテーブルの該当エントリ（５エントリ）すべてで用いられているマッチ条件１の「Ｘ」の内容が「Ｉｎ　ｐｏｒｔ＝ポート３」に変更されたことになる。そして、スイッチ２００Ａのポート３から出力されたパケットを受信すると、スイッチ２００Ｂのパケット処理部２０３は、前記変更後の第２のテーブル２０２を参照し、ポート３から受信したパケットであるかどうかも判定する。ポート３から受信し、かつ、マッチ条件２に定められた内容がａ～ｅのいずれかに適合する場合、スイッチ２００Ｂのパケット処理部２０３は、該当パケットをポート２へ転送する動作を行うことになる。 FIG. 10 is a diagram showing changes to the entry set in the switch 200B. As shown in FIG. 8, since the packet received from the terminal A comes to be input from the port 3 of the switch 200B, it is necessary to change the contents regarding the input port in the match condition. Therefore, in the example of FIG. 10, the match condition “In port = port 1” related to the input port associated with “X” of the match condition 1 of the second table 202 shown in FIG. 6 is changed to “In port = port”. 3 ”. As a result, the contents of “X” of match condition 1 used in all corresponding entries (5 entries) in the first table are changed to “In port = port 3”. When the packet output from the port 3 of the switch 200A is received, the packet processing unit 203 of the switch 200B refers to the second table 202 after the change and determines whether the packet is received from the port 3 or not. To do. When the content received in port 3 and the content defined in the match condition 2 matches any of a to e, the packet processing unit 203 of the switch 200B performs an operation of forwarding the corresponding packet to the port 2. Become.
　以上のように、本実施形態によれば、スイッチにおいてマッチ条件が共通する複数のエントリの変更に要する時間を減少させることができる。その理由は、複数のエントリの変更に要するエントリの数が減少するためである。上記実施形態の動作で説明したように、利用中の経路に障害が発生し、不通となった場合、制御装置からのエントリ変更指示と、スイッチ側の変更処理が完了するまでの期間は、対象のパケットを転送することができない。本発明によれば、その通信不通時間を劇的に短縮することができる。 As described above, according to the present embodiment, the time required for changing a plurality of entries having a common match condition in the switch can be reduced. This is because the number of entries required to change a plurality of entries is reduced. As described in the operation of the above embodiment, when a failure occurs in the route being used and the communication is interrupted, the entry change instruction from the control device and the period until the change processing on the switch side is completed are the target. Unable to forward the packet. According to the present invention, the communication interruption time can be dramatically shortened.
［第２の実施形態］
　続いて、上記第１の実施形態に変更を加えた本発明の第２の実施形態について図面を参照して詳細に説明する。本発明の第２の実施形態は、スイッチ側で取り扱うテーブルを追加しただけであり、その他の構成は、第１の実施形態と共通するので、以下、その相違点を中心に説明する。 [Second Embodiment]
Subsequently, a second embodiment of the present invention in which a change is made to the first embodiment will be described in detail with reference to the drawings. In the second embodiment of the present invention, only a table to be handled on the switch side is added, and other configurations are common to the first embodiment. Therefore, the differences will be mainly described below.
　図１１は、本発明の第２の実施形態で用いるテーブルの構成を示す図である。第１の実施形態で説明した第１のテーブル２０１、第２のテーブル２０２に加えて、第３のテーブル２０４が追加されている。 FIG. 11 is a diagram showing a configuration of a table used in the second embodiment of the present invention. In addition to the first table 201 and the second table 202 described in the first embodiment, a third table 204 is added.
　第３のテーブル２０４は、第２のテーブル２０２と同様に、第１のテーブル２０１のマッチ条件の別の一部を置き換えた識別子（図１１の「ａ」）と、前記置き換え前の内容（図１１の送信元ＭＡＣアドレス（ＳＭＡＣ））と、の対応関係を定めたエントリを保持するテーブルである。 Similarly to the second table 202, the third table 204 includes an identifier (“a” in FIG. 11) obtained by replacing another part of the match condition of the first table 201, and the contents before the replacement (FIG. 11 is a table that holds entries that define a correspondence relationship with 11 transmission source MAC addresses (SMAC).
　前記受信パケットに適合するエントリの検索時に、パケット処理部２０３は、第２のテーブル２０２に加え、第３のテーブル２０４も参照して、識別子に対応付けられている実マッチ条件を探し出し、その内容にてマッチングを行う。 When searching for an entry that matches the received packet, the packet processing unit 203 refers to the third table 204 in addition to the second table 202 to find the actual match condition associated with the identifier, and its contents Perform matching at.
　そして、例えば、エントリのマッチ条件２のフィールドにおいて同一の識別子が設定されている複数のエントリを変更しようとする場合には、第３のテーブル２０４のエントリを変更することで、実質的に複数のエントリの変更が完了する。 For example, when a plurality of entries for which the same identifier is set in the field of the match condition 2 of the entry is to be changed, by substantially changing a plurality of entries in the third table 204, a plurality of entries The entry change is complete.
　マッチ条件１と、マッチ条件２の双方を変更したい場合も、第１のテーブル２０１の個々のエントリを変更する必要は無く、第２のテーブル２０２と第３のテーブル２０４の該当エントリを変更すればよい。 Even if it is desired to change both the match condition 1 and the match condition 2, it is not necessary to change each entry in the first table 201. If the corresponding entry in the second table 202 and the third table 204 is changed, Good.
　以上のように、本実施形態によれば、マッチ条件のうち複数の部分について識別子にて内容を指定可能とし、これらを一括して変更することが可能となる。 As described above, according to the present embodiment, it is possible to specify the contents with an identifier for a plurality of portions of the match condition, and to change them collectively.
［第３の実施形態］
　続いて、上記第１の実施形態に変更を加えた本発明の第３の実施形態について図面を参照して詳細に説明する。本発明の第３の実施形態は、スイッチ側で取り扱うテーブルをさらに追加しただけであり、その他の構成は、第１の実施形態と共通するので、以下、その相違点を中心に説明する。 [Third Embodiment]
Next, a third embodiment of the present invention in which a change is made to the first embodiment will be described in detail with reference to the drawings. In the third embodiment of the present invention, only a table to be handled on the switch side is further added, and other configurations are the same as those in the first embodiment. Therefore, the difference will be mainly described below.
　図１２は、本発明の第３の実施形態で用いるテーブルの構成を示す図である。第１の実施形態で説明した第１のテーブル２０１、第２のテーブル２０２に加えて、第４のテーブル２０５が追加されている。 FIG. 12 is a diagram showing a configuration of a table used in the third embodiment of the present invention. In addition to the first table 201 and the second table 202 described in the first embodiment, a fourth table 205 is added.
　第４のテーブル２０５は、第１のテーブル２０１のアクションフィールドの内容を置き換えた識別子（図１２の「ＡＣＴ０１」）と、前記置き換え前の内容（図１２のアクション「ポート２から転送」）と、の対応関係を定めたエントリを保持するテーブルである。 The fourth table 205 includes an identifier (“ACT01” in FIG. 12) obtained by replacing the content of the action field of the first table 201, the content before the replacement (action “transfer from port 2” in FIG. 12), It is a table holding entries that define the correspondence relationship.
　前記受信パケットに適合するエントリのアクションフィールドに、前記アクションフィールドの内容を置き換えた識別子（図１２の「ＡＣＴ０１」）が設定されている場合、パケット処理部２０３は、第４のテーブル２０５を参照して、識別子に対応付けられているアクションを探し出し、その内容にてパケット処理を行う。 When an identifier (“ACT01” in FIG. 12) that replaces the content of the action field is set in the action field of the entry that matches the received packet, the packet processing unit 203 refers to the fourth table 205. Then, the action associated with the identifier is found, and packet processing is performed based on the action.
　そして、例えば、エントリのアクションフィールドにおいて同一の識別子が設定されている複数のエントリを変更しようとする場合には、第４のテーブル２０５のエントリを変更することで、実質的に複数のエントリの変更が完了する。 For example, when a plurality of entries having the same identifier set in the action field of the entry are to be changed, by changing the entry in the fourth table 205, the plurality of entries are substantially changed. Is completed.
　以上のように、本実施形態によれば、アクションフィールドについても識別子にて内容を指定可能とし、これらを一括して変更することが可能となる。 As described above, according to the present embodiment, it is possible to specify the contents of an action field with an identifier, and to change these collectively.
　以上、本発明の各実施形態を説明したが、本発明は、上記した実施形態に限定されるものではなく、本発明の基本的技術的思想を逸脱しない範囲で、更なる変形・置換・調整を加えることができる。例えば、各図面に示したネットワーク構成や要素の構成は、本発明の理解を助けるための一例であり、これらの図面に示した構成に限定されるものではない。 Although the embodiments of the present invention have been described above, the present invention is not limited to the above-described embodiments, and further modifications, substitutions, and adjustments are possible without departing from the basic technical idea of the present invention. Can be added. For example, the network configuration and the configuration of elements shown in the drawings are examples for helping understanding of the present invention, and are not limited to the configurations shown in these drawings.
　また、上記した実施形態で用いたマッチ条件やアクションは、あくまでその一例を示しただけであり、マッチ条件やアクションとして設定可能な内容であればよい。例えば、非特許文献２のオープンフローのフローエントリと同様のマッチ条件を用いるのであれば、ＭＡＣ（Ｍｅｄｉａ　Ａｃｃｅｓｓ　Ｐｒｏｔｏｃｏｌ）アドレス（送信元／宛先）やＩＰ（Ｉｎｔｅｒｎｅｔ　Ｐｒｏｔｏｃｏｌ）アドレス（送信元／宛先）、ＴＣＰ／ＵＤＰ（Ｔｒａｎｓｍｉｓｓｉｏｎ　Ｃｏｎｔｒｏｌ　Ｐｒｏｔｏｃｏｌ／Ｕｓｅｒ　Ｄａｔａｇｒａｍ　Ｐｒｏｔｏｃｏｌ）のポート番号（送信元／宛先）、ＶＬＡＮ　ＩＤ（Ｖｉｒｔｕａｌ　Ｌｏｃａｌ　Ａｒｅａ　Ｎｅｔｗｏｒｋ　ＩＤ）等を識別子に置き換えて設定することができる。また、アクションとしても、指定ポートからの転送だけでなく、各種ヘッダの書き換えや、レイヤ２機能による転送、パケット廃棄などを設定することが可能である。 In addition, the match conditions and actions used in the above-described embodiment are merely examples, and may be contents that can be set as match conditions and actions. For example, if the same match condition as the flow entry of the open flow of Non-Patent Document 2 is used, a MAC (Media Access Protocol) address (source / destination), an IP (Internet Protocol) address (source / destination), The port number (source / destination) of TCP / UDP (Transmission Control Protocol / User Datagram Protocol), VLAN ID (Virtual Local Network ID), etc. can be replaced with an identifier. As actions, it is possible to set not only transfer from a designated port but also rewrite of various headers, transfer by a layer 2 function, packet discard, and the like.
　また、制御装置１００からスイッチ２００Ｂに対する第２のテーブル２０２、第３のテーブル２０４、第４のテーブル２０５の変更指示は、制御装置１００からスイッチ２００Ｂ間の制御用プロトコル（例えば、非特許文献２のオープンフロープロトコル）の拡張制御メッセージ（例えば、非特許文献２のＥｘｐｅｒｍｅｎｔｅｒメッセージという追加機能用の制御メッセージを用いることができる。）を用いて送信することが好ましい。このようにすることで、制御装置１００からスイッチ２００Ｂ間の制御チャネルを用いて指示を送ることが可能となり、制御装置及び１００及びスイッチ２００Ａ／２００Ｂ側の実装も容易化される。 In addition, a change instruction of the second table 202, the third table 204, and the fourth table 205 from the control device 100 to the switch 200B is a control protocol between the control device 100 and the switch 200B (for example, Non-Patent Document 2). It is preferable to transmit using an extended control message of the OpenFlow protocol (for example, a control message for an additional function called an Expert message of Non-Patent Document 2 can be used). In this way, an instruction can be sent from the control device 100 using the control channel between the switches 200B, and the mounting on the control device and the 100 and switch 200A / 200B side is facilitated.
　最後に、本発明の好ましい形態を要約する。
［第１の形態］
　（上記第１の視点による転送ノード参照）
［第２の形態］
　第１の形態の転送ノードにおいて、
　さらに、前記マッチ条件のさらに別の一部を置き換えた識別子と、前記置き換え前の内容と、の対応関係を定めたエントリを保持する第３のテーブルを備え、
　前記パケット処理部は、前記第１のテーブルにおいて前記マッチ条件の前記別の一部に前記識別子が設定されているエントリについて、前記第３のテーブルを参照して、受信パケットと前記マッチ条件が適合するか否かを判定し、受信パケットに適用する処理内容を決定する転送ノード。
［第３の形態］
　第１又は第２の形態の転送ノードにおいて、
　さらに、前記第１のテーブルのエントリの処理内容を置き換えた識別子と、前記置き換え前の処理内容と、の対応関係を定めたエントリを保持する第４のテーブルを備え、
　前記パケット処理部は、前記第１のテーブルにおいて前記処理内容に前記識別子が設定されているエントリについて、前記第４のテーブルを参照して、受信パケットに適用する処理内容を決定する転送ノード。
［第４の形態］
　第１から第３いずれか一の形態の転送ノードにおいて、
　前記第２のテーブルのエントリを変更することで、前記第１のテーブルのエントリを実質的に２以上変更可能である転送ノード。
［第５の形態］
　第１から第４いずれか一の形態の転送ノードにおいて、
　前記第２のテーブルのエントリを変更するための制御メッセージが定義されており、所定の制御装置から前記制御メッセージを受信することで、前記第２のテーブルの操作を受け付ける転送ノード。
［第６の形態］
　（上記第２の視点による制御装置参照）
［第７の形態］
　（上記第３の視点による通信システム参照）
［第８の形態］
　（上記第４の視点によるパケット処理方法参照）
［第９の形態］
　（上記第５の視点によるプログラム参照）
　なお、上記第６～第９の形態は、第１の形態と同様に、第２～第５の形態に展開することが可能である。 Finally, a preferred form of the invention is summarized.
[First embodiment]
(Refer to the forwarding node from the first point of view)
[Second form]
In the forwarding node of the first form,
And a third table for holding an entry defining a correspondence relationship between an identifier obtained by replacing another part of the match condition and the content before the replacement,
The packet processing unit refers to the third table for an entry in which the identifier is set in the another part of the match condition in the first table, and the received packet and the match condition are matched. A forwarding node that determines whether or not to perform processing and determines the processing content to be applied to the received packet.
[Third embodiment]
In the forwarding node of the first or second form,
And a fourth table for holding an entry defining a correspondence relationship between the identifier of the processing content of the entry in the first table and the processing content before the replacement,
The packet processing unit refers to the fourth table for an entry in which the identifier is set in the processing content in the first table, and determines a processing content to be applied to a received packet with reference to the fourth table.
[Fourth form]
In the forwarding node according to any one of the first to third modes,
A forwarding node that can substantially change two or more entries in the first table by changing an entry in the second table.
[Fifth embodiment]
In the forwarding node according to any one of the first to fourth modes,
A transfer node in which a control message for changing an entry in the second table is defined and receives the control message from a predetermined control device, and accepts an operation on the second table.
[Sixth embodiment]
(Refer to the control device according to the second viewpoint)
[Seventh form]
(Refer to the communication system according to the third viewpoint)
[Eighth form]
(Refer to the packet processing method according to the fourth aspect above)
[Ninth Embodiment]
(Refer to the program from the fifth viewpoint above)
Note that the sixth to ninth embodiments can be developed into the second to fifth embodiments in the same manner as the first embodiment.
　なお、上記の特許文献および非特許文献の各開示を、本書に引用をもって繰り込むものとする。本発明の全開示（請求の範囲を含む）の枠内において、さらにその基本的技術思想に基づいて、実施形態ないし実施例の変更・調整が可能である。また、本発明の全開示の枠内において種々の開示要素（各請求項の各要素、各実施形態ないし実施例の各要素、各図面の各要素等を含む）の多様な組み合わせ、ないし選択が可能である。すなわち、本発明は、請求の範囲を含む全開示、技術的思想にしたがって当業者であればなし得るであろう各種変形、修正を含むことは勿論である。特に、本書に記載した数値範囲については、当該範囲内に含まれる任意の数値ないし小範囲が、別段の記載のない場合でも具体的に記載されているものと解釈されるべきである。 It should be noted that the disclosures of the above patent documents and non-patent documents are incorporated herein by reference. Within the scope of the entire disclosure (including claims) of the present invention, the embodiments and examples can be changed and adjusted based on the basic technical concept. Also, various combinations or selections of various disclosed elements (including each element of each claim, each element of each embodiment or example, each element of each drawing, etc.) within the scope of the entire disclosure of the present invention. Is possible. That is, the present invention of course includes various variations and modifications that could be made by those skilled in the art according to the entire disclosure including the claims and the technical idea. In particular, with respect to the numerical ranges described in this document, any numerical value or small range included in the range should be construed as being specifically described even if there is no specific description.
　１００　制御装置
　２００　転送ノード
　２００Ａ、２００Ｂ　スイッチ
　２０１　第１のテーブル
　２０２　第２のテーブル
　２０３　パケット処理部
　２０４　第３のテーブル
　２０５　第４のテーブル DESCRIPTION OF SYMBOLS 100 Control apparatus 200 Forwarding node 200A, 200B Switch 201 1st table 202 2nd table 203 Packet processing part 204 3rd table 205 4th table

Claims (9)

  1. 　マッチ条件と該マッチ条件に適合するパケットに適用する処理内容とを対応付けたエントリを保持する第１のテーブルと、
    　前記マッチ条件の少なくとも一部を置き換えた識別子と、前記置き換え前の内容と、の対応関係を定めたエントリを保持する第２のテーブルと、
    　前記第１のテーブルにおいて前記マッチ条件の一部に前記識別子が設定されているエントリについて、前記第２のテーブルを参照して、受信パケットと前記マッチ条件が適合するか否かを判定し、受信パケットに適用する処理内容を決定するパケット処理部と、
    　を備える転送ノード。     A first table holding an entry in which a matching condition is associated with a processing content to be applied to a packet that matches the matching condition;
    A second table holding an entry defining a correspondence relationship between an identifier that replaces at least a part of the match condition and the content before the replacement;
    For an entry in which the identifier is set as a part of the match condition in the first table, refer to the second table to determine whether or not the received packet matches the match condition, and receive A packet processing unit for determining processing contents to be applied to the packet;
    A forwarding node comprising:
  2. 　さらに、前記マッチ条件のさらに別の一部を置き換えた識別子と、前記置き換え前の内容と、の対応関係を定めたエントリを保持する第３のテーブルを備え、
    　前記パケット処理部は、前記第１のテーブルにおいて前記マッチ条件の前記別の一部に前記識別子が設定されているエントリについて、前記第３のテーブルを参照して、受信パケットと前記マッチ条件が適合するか否かを判定し、受信パケットに適用する処理内容を決定する請求項１の転送ノード。     And a third table for holding an entry defining a correspondence relationship between an identifier obtained by replacing another part of the match condition and the content before the replacement,
    The packet processing unit refers to the third table for an entry in which the identifier is set in the another part of the match condition in the first table, and the received packet and the match condition are matched. The forwarding node according to claim 1, which determines whether or not to perform processing and determines processing contents to be applied to the received packet.
  3. 　さらに、前記第１のテーブルのエントリの処理内容を置き換えた識別子と、前記置き換え前の処理内容と、の対応関係を定めたエントリを保持する第４のテーブルを備え、
    　前記パケット処理部は、前記第１のテーブルにおいて前記処理内容に前記識別子が設定されているエントリについて、前記第４のテーブルを参照して、受信パケットに適用する処理内容を決定する請求項１又は２の転送ノード。     And a fourth table for holding an entry defining a correspondence relationship between the identifier of the processing content of the entry in the first table and the processing content before the replacement,
    The packet processing unit determines a processing content to be applied to a received packet with reference to the fourth table for an entry in which the identifier is set in the processing content in the first table. 2 forwarding nodes.
  4. 　前記第２のテーブルのエントリを変更することで、前記第１のテーブルのエントリを実質的に２以上変更可能である請求項１から３いずれか一の転送ノード。 The forwarding node according to any one of claims 1 to 3, wherein two or more entries in the first table can be substantially changed by changing an entry in the second table.
  5. 　前記第２のテーブルのエントリを変更するための制御メッセージが定義されており、所定の制御装置から前記制御メッセージを受信することで、前記第２のテーブルの操作を受け付ける請求項１から４いずれか一の転送ノード。 5. A control message for changing an entry in the second table is defined, and an operation on the second table is received by receiving the control message from a predetermined control device. One forwarding node.
  6. 　マッチ条件と該マッチ条件に適合するパケットに適用する処理内容とを対応付けたエントリを保持する第１のテーブルと、
    　前記マッチ条件の少なくとも一部を置き換えた識別子と、前記置き換え前の内容と、の対応関係を定めたエントリを保持する第２のテーブルと、
    　前記第１のテーブルにおいて前記マッチ条件の一部に前記識別子が設定されているエントリについて、前記第２のテーブルを参照して、受信パケットと前記マッチ条件が適合するか否かを判定し、受信パケットに適用する処理内容を決定するパケット処理部と、
    　を備える転送ノードと接続され、
    　前記転送ノードの第１、第２のテーブルを操作する制御装置。     A first table holding an entry in which a matching condition is associated with a processing content to be applied to a packet that matches the matching condition;
    A second table holding an entry defining a correspondence relationship between an identifier that replaces at least a part of the match condition and the content before the replacement;
    For an entry in which the identifier is set as a part of the match condition in the first table, refer to the second table to determine whether or not the received packet matches the match condition, and receive A packet processing unit for determining processing contents to be applied to the packet;
    Connected to a forwarding node comprising
    A control device for operating the first and second tables of the forwarding node.
  7. 　マッチ条件と該マッチ条件に適合するパケットに適用する処理内容とを対応付けたエントリを保持する第１のテーブルと、
    　前記マッチ条件の少なくとも一部を置き換えた識別子と、前記置き換え前の内容と、の対応関係を定めたエントリを保持する第２のテーブルと、
    　前記第１のテーブルにおいて前記マッチ条件の一部に前記識別子が設定されているエントリについて、前記第２のテーブルを参照して、受信パケットと前記マッチ条件が適合するか否かを判定し、受信パケットに適用する処理内容を決定するパケット処理部と、
    　を備える転送ノードと、
    　前記転送ノードの第１、第２のテーブルを操作する制御装置と、
    　を含む通信システム。     A first table holding an entry in which a matching condition is associated with a processing content to be applied to a packet that matches the matching condition;
    A second table holding an entry defining a correspondence relationship between an identifier that replaces at least a part of the match condition and the content before the replacement;
    For an entry in which the identifier is set as a part of the match condition in the first table, refer to the second table to determine whether or not the received packet matches the match condition, and receive A packet processing unit for determining processing contents to be applied to the packet;
    A forwarding node comprising:
    A control device for operating the first and second tables of the forwarding node;
    A communication system including:
  8. 　マッチ条件と該マッチ条件に適合するパケットに適用する処理内容とを対応付けたエントリを保持する第１のテーブルと、
    　前記マッチ条件の少なくとも一部を置き換えた識別子と、前記置き換え前の内容と、の対応関係を定めたエントリを保持する第２のテーブルと、を備える転送ノードにおいて、
    　前記第１のテーブルにおいて前記マッチ条件の一部に前記識別子が設定されているエントリについて、前記第２のテーブルを参照して、受信パケットと前記マッチ条件が適合するか否かを判定するステップと、
    　前記受信パケットと前記マッチ条件が適合する場合、該エントリに設定された処理内容を、受信パケットに適用するステップと、を含むパケット処理方法。     A first table holding an entry in which a matching condition is associated with a processing content to be applied to a packet that matches the matching condition;
    In a forwarding node comprising: an identifier that replaces at least a part of the match condition; and a second table that holds an entry that defines a correspondence relationship between the content before replacement and the content before replacement.
    For an entry in which the identifier is set as part of the match condition in the first table, referring to the second table to determine whether the received packet matches the match condition; ,
    And a step of applying the processing content set in the entry to the received packet when the matching condition matches the received packet.
  9. 　マッチ条件と該マッチ条件に適合するパケットに適用する処理内容とを対応付けたエントリを保持する第１のテーブルと、
    　前記マッチ条件の少なくとも一部を置き換えた識別子と、前記置き換え前の内容と、の対応関係を定めたエントリを保持する第２のテーブルと、を備える転送ノードに搭載されたコンピュータに、
    　前記第１のテーブルにおいて前記マッチ条件の一部に前記識別子が設定されているエントリについて、前記第２のテーブルを参照して、受信パケットと前記マッチ条件が適合するか否かを判定する処理と、
    　前記受信パケットと前記マッチ条件が適合する場合、該エントリに設定された処理内容を、受信パケットに適用する処理と、を実行させるプログラム。     A first table holding an entry in which a matching condition is associated with a processing content to be applied to a packet that matches the matching condition;
    A computer mounted on a forwarding node comprising an identifier that replaces at least a part of the match condition, and a second table that holds an entry that defines a correspondence relationship between the content before the replacement, and
    A process of referring to the second table for an entry in which the identifier is set as part of the match condition in the first table, and determining whether or not the received packet matches the match condition; ,
    A program for executing, when the received packet matches the matching condition, processing for applying the processing content set in the entry to the received packet.
PCT/JP2014/056209 2013-03-12 2014-03-10 Transfer node, control device, communication system, packet processing method and program WO2014142081A1 (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
JP2013-049168 2013-03-12
JP2013049168 2013-03-12

Publications (1)

Publication Number Publication Date
WO2014142081A1 true WO2014142081A1 (en) 2014-09-18

Family

ID=51536737

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/JP2014/056209 WO2014142081A1 (en) 2013-03-12 2014-03-10 Transfer node, control device, communication system, packet processing method and program

Country Status (1)

Country Link
WO (1) WO2014142081A1 (en)

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2005333220A (en) * 2004-05-18 2005-12-02 Hitachi Ltd Network node device
JP2006129213A (en) * 2004-10-29 2006-05-18 Hitachi Ltd Packet communication equipment

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2005333220A (en) * 2004-05-18 2005-12-02 Hitachi Ltd Network node device
JP2006129213A (en) * 2004-10-29 2006-05-18 Hitachi Ltd Packet communication equipment

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
SHIGEAKI MAEDA: "OpenFlow ver1.1 Oyobi verl.2 no Tsuika Kino to Katsuyo Rei, Rensai: OpenFlow -Imamade no Gainen o Kutsugaesu Atarashii Network no Jitsugen", THINKIT, IMPRESS BUSINESS MEDIA CORPORATION, 23 February 2012 (2012-02-23) *

Similar Documents

Publication Publication Date Title
JP5994851B2 (en) Transfer device control device, transfer device control method, communication system, and program
JP5850068B2 (en) Control device, communication system, communication method, and program
US9590898B2 (en) Method and system to optimize packet exchange between the control and data plane in a software defined network
WO2016071843A1 (en) Explicit block encoding of multicast group membership information with bit index explicit replication (bier)
WO2011087085A1 (en) Calculator, network connection switching method, and program
JP5939353B2 (en) Control device, communication system, switch control method, and program
JP5858141B2 (en) Control device, communication device, communication system, communication method, and program
WO2014112616A1 (en) Control apparatus, communication apparatus, communication system, switch control method and program
JP5999251B2 (en) COMMUNICATION SYSTEM, SWITCH, CONTROL DEVICE, PACKET PROCESSING METHOD, AND PROGRAM
JP5861772B2 (en) Network appliance redundancy system, control device, network appliance redundancy method and program
JP5725236B2 (en) Communication system, node, packet transfer method and program
US20150003291A1 (en) Control apparatus, communication system, communication method, and program
WO2014175423A1 (en) Communication node, communication system, packet processing method and program
US20150256455A1 (en) Communication system, path information exchange apparatus, communication node, forwarding method for path information and program
JP5747997B2 (en) Control device, communication system, virtual network management method and program
US20150381775A1 (en) Communication system, communication method, control apparatus, control apparatus control method, and program
JP5991427B2 (en) Control device, communication system, control information transmission method and program
US20150312206A1 (en) Control apparatus, communication system, communication method, and program
WO2014142081A1 (en) Transfer node, control device, communication system, packet processing method and program
WO2014119602A1 (en) Control apparatus, switch, communication system, switch control method and program
US20160094357A1 (en) Control apparatus, computer system, communication control method, and program
JP6314970B2 (en) COMMUNICATION SYSTEM, CONTROL DEVICE, COMMUNICATION METHOD, AND PROGRAM
JP6175766B2 (en) Communication node, control device, communication system, entry aggregation method, and program
JP5768600B2 (en) COMMUNICATION SYSTEM, CONTROL DEVICE, PACKET TRANSFER METHOD, AND PROGRAM
WO2015129727A1 (en) Communication terminal, communication method and program

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 14765503

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 14765503

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: JP