VIRTUAL SYSTEM AND METHOD IN A VIRTUAL SYSTEM

• US 20090222542A1
• Filed: 02/25/2009
• Published: 09/03/2009
• Est. Priority Date: 02/29/2008
• Status: Active Grant

• Current Assignee: NEC Corporation
• Original Assignee: NEC Corporation
• Inventors: MIYAJIMA, HIROAKI
• Granted Patent: US 8,015,288 B2
• Time in Patent Office: Days
• US Class Current: 709/222
• CPC Class Codes: G06F 9/5077 Logical partitioning of resources; Management or configuration of virtualized resources specific details on emulation or internal functioning of virtual machines G06F9/455
• CPC Class Codes: H04L 2101/622 Layer-2 addresses, e.g. medium access control [MAC] addresses
• CPC Class Codes: H04L 61/50 Address allocation
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 69/32 Architecture of open systems interconnection [OSI] 7-layer type protocol stacks, e.g. the interfaces between the data link level and the physical level
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

A virtual system, which realizes virtual computing environments for performing communication processing, includes a user virtual machine which is provided as a virtual machine environment to be used by users, and a service virtual machine which has a physical communication interface with a real network for communication between the real network and the user virtual machine, provides a virtual communication interface with the user virtual machine by Ethernet (registered trademark), and performs an interface conversion process for the communication between the real network and the user virtual machine if the physical communication interface is not by using Ethernet (registered trademark), in which the physical communication interface is converted to an equivalent interface using Ethernet (registered trademark).

Claims

1. A virtual system, which realizes virtual computing environments for performing communication processing, comprising:

a user virtual machine which is provided as a virtual machine environment to be used by users; and

a service virtual machine which has a physical communication interface with a real network for communication between the real network and the user virtual machine, provides a virtual communication interface with the user virtual machine by Ethernet (registered trademark), and performs an interface conversion process for the communication between the real network and the user virtual machine if the physical communication interface is not by using Ethernet (registered trademark), in which the physical communication interface is converted to an equivalent interface to the virtual communication interface using Ethernet (registered trademark).

2. The virtual system according to claim 1, wherein, the service virtual machine comprising:

a network setting and communication control part which performs control processing for making an MAC address to be set to both of the physical communication interface and the virtual communication interface identical when the physical communication interface is Ethernet (registered trademark), and performs control processing for setting an IP address of the physical communication interface to the IP address of the virtual communication interface.

3. The virtual system according to claim 1, wherein,

the user virtual machine comprising:

a virtual network interface card (NIC) which is an opposed interface of the virtual communication interface at the user virtual machine side;

the service virtual machine comprising;

a real network interface card (NIC) which is connected to the real network as the physical communication interface;

a virtual node which is provided as an opposed node of the virtual NIC and performs control processing necessary for the interface conversion process for the communication between the real network and the user virtual machine;

a real network processing part which is connected with the real NIC and performs control processing for communication relating to the real network being connected; and

a network setting and communication control part which performs control processing for making the MAC address to be set to both of the real NIC and the virtual NIC identical when the physical communication interface is Ethernet (registered trademark), and performs control processing for setting an IP address of the real network processing part to the IP address of the virtual NIC.

4. The virtual system according to claim 3, wherein,

the network setting and communication control part comprising:

a virtual network interface setting unit which sets a value given to a MAC address of the real NIC to the MAC address of the virtual NIC before starting the user virtual machine in case where the physical communication interface is Ethernet (registered trademark); and

a real network interface setting unit which sets a changed value of the MAC address of the virtual NIC to the MAC address of the real NIC when a value of the MAC address of the virtual NIC being changed by a request of the user virtual machine in a start operation of the user virtual machine.

5. The virtual system according to claim 4, wherein,

the network setting and communication control part further comprising:

a DHCP (Dynamic Host Configuration Protocol) server which is dedicatedly used by the virtual NIC and distributes IP address information only to the virtual NIC on an acquiring request by using DHCP protocol; and

a DHCP server setting unit which sets the IP address of the real network processing part to the DHCP server as the IP address information to be distributed by the DHCP server.

6. The virtual system according to claim 4, wherein,

the network setting and communication control part further comprising:

a virtual node setting unit which sets the virtual node to frame processing mode, which does not perform the interface conversion process for the communication between the real network and the user virtual machine, before starting the user virtual machine in case where the physical communication interface is Ethernet (registered trademark), and sets the virtual node to IP packet processing mode, which performs the interface conversion process for the communication between the real network and the user virtual machine, before starting the user virtual machine in case where the physical communication interface is not Ethernet (registered trademark); and

a proxy ARP setting unit which activates operation of a proxy ARP after the virtual node being set to the IP packet mode for acting as a proxy for giving an answer of MAC address resolution requested by the virtual NIC.

7. The virtual system according to claim 6, wherein,

the network setting and communication control part further comprising:

a communication control part which judges a destination of an Ethernet (registered trademark) frame inputted to the virtual node from the virtual NIC whether the destination is one of the DHCP server, the proxy ARP and the real network processing part by discriminating communication category information included in the Ethernet (registered trademark) frame, and transmits the Ethernet (registered trademark) frame to each destination as a result of the judgment,

wherein the Ethernet (registered trademark) frame is transmitted to the real network processing part as it is when the judged destination is the real network processing part and the virtual node being set to the frame processing mode, and an IP packet is extracted from the Ethernet (registered trademark) frame and the IP packet is transmitted to the real network processing part when the judged destination is the real network processing part and the virtual node being set to the IP packet processing mode.

8. The virtual system according to claim 7, wherein, the communication control part performs an inward communication processing in which a data frame inputted to the virtual node from the physical communication interface is transmitted to the virtual NIC as it is when the virtual node is set to the frame processing mode, and an IP packet inputted to the virtual node from the real network processing part is transmitted to the virtual NIC by assembling the IP packet into the Ethernet (registered trademark) frame when the virtual node is set to the IP packet processing mode.

9. The virtual system according to claim 2, wherein, the physical communication interface is Ethernet (registered trademark) VPN (Virtual Private Network), and the network setting and communication control part performs control processing for making the MAC address to be set to both of the physical communication interface and the virtual communication interface identical when the physical communication interface is the Ethernet (registered trademark) VPN.

10. A method in a virtual system, which realizes virtual computing environments for performing communication processing by a user virtual machine for user'"'"'s environment and a service virtual machine having a physical communication interface with a real network, the method comprising:

providing a virtual communication interface between the user virtual machine and the service virtual machine by Ethernet (registered trademark); and

performing an interface conversion process for communication between the real network and the user virtual machine if the physical communication interface is not by using Ethernet (registered trademark),

wherein the physical communication interface is converted, by the interface conversion process, to an equivalent interface to the virtual communication interface using Ethernet (registered trademark).

11. The method in the virtual system according to claim 10, further comprising:

a MAC address setting step for making a MAC address to be set to both of the physical communication interface and the virtual communication interface identical when the physical communication interface is Ethernet (registered trademark); and

an IP address setting step for setting an IP address of the physical communication interface to the IP address of the virtual communication interface.

12. The method in the virtual system according to claim 11, wherein, the physical communication interface having the MAC address is a real network interface card (NIC) which is connected to the real network, the physical communication interface having the IP address is a real network processing part which is connected with the real NIC and performs control processing for communication relating to the real network being connected, and the virtual communication interface is a virtual network interface card (NIC) which is provided in the user virtual machine,

wherein, the MAC address of the real NIC and the MAC address of the virtual NIC become identical by the MAC address setting step, and the IP address of the real network processing part is set to the IP address of the virtual NIC by the IP address setting step.

13. The method in the virtual system according to claim 12, wherein, the MAC address setting step comprising:

a virtual network interface setting step for setting a value given to the MAC address of the real NIC to the MAC address of the virtual NIC before starting the user virtual machine in case where the physical communication interface is Ethernet (registered trademark); and

a real network interface setting step for setting a changed value of the MAC address of the virtual NIC to the MAC address of the real NIC when a value of the MAC address of the virtual NIC being changed by a request of the user virtual machine in a start operation of the user virtual machine.

14. The method in the virtual system according to claim 13, wherein, the IP address setting step comprising:

a DHCP (Dynamic Host Configuration Protocol) server setting step for setting the IP address of the real network processing part to a DHCP server as IP address information to be distributed by the DHCP server; and

a DHCP server using step for using the DHCP server dedicatedly by the virtual NIC, and distributing the IP address information only to the virtual NIC on an acquiring request by using DHCP protocol.

15. The method in the virtual system according to claim 14, further comprising:

a virtual node setting step for setting a virtual node, which is provided as an opposed node of the virtual NIC, to necessary operation mode before starting the user virtual machine depending on whether the physical communication interface is Ethernet (registered trademark) or not,

wherein, frame processing mode, which does not perform the interface conversion process for the communication between the real network and the user virtual machine, is set in case where the physical communication interface is Ethernet (registered trademark), and IP packet processing mode, which performs the interface conversion process for the communication between the real network and the user virtual machine, is set in case where the physical communication interface is not Ethernet (registered trademark).

16. The method in the virtual system according to claim 15, further comprising:

a proxy ARP setting step for activating operation of a proxy ARP, which acts as a proxy for giving an answer of MAC address resolution requested by the virtual NIC, after the virtual node being set to the IP packet mode.

17. The method in the virtual system according to claim 16, further comprising:

a communication control step for judging a destination of an Ethernet (registered trademark) frame inputted to the virtual node from the virtual NIC whether the destination is one of the DHCP server, the proxy ARP and the real network processing part by discriminating communication category information included in the Ethernet (registered trademark) frame, and transmitting the Ethernet (registered trademark) frame to each destination as a result of the judgment,

wherein transmitting the Ethernet (registered trademark) frame to the real network processing part as it is when the judged destination is the real network processing part and the virtual node being set to the frame processing mode, and extracting an IP packet from the Ethernet (registered trademark) frame and transmitting the IP packet to the real network processing part when the judged destination is the real network processing part and the virtual node being set to the IP packet processing mode.

18. The method in the virtual system according to claim 17, further comprising:

an inward communication processing step including;

transmitting a data frame inputted to the virtual node from the physical communication interface to the virtual NIC as it is when the virtual node is set to the frame processing mode; and

assembling an IP packet inputted to the virtual node from the real network processing part into the Ethernet (registered trademark) frame, and transmitting the assembled Ethernet (registered trademark) frame to the virtual NIC when the virtual node is set to the IP packet processing mode.

19. The method in the virtual system according to claim 11, wherein, the physical communication interface is Ethernet (registered trademark) VPN (Virtual Private Network), and the MAC address setting step for making the MAC address to be set to both of the physical communication interface and the virtual communication interface identical when the physical communication interface is the Ethernet (registered trademark) VPN.

20. A computer readable medium having a virtual system control program stored thereon to control a virtual system, which realizes virtual computing environments for performing communication processing by a user virtual machine for user'"'"'s environment and a service virtual machine having a physical communication interface with a real network, for causing a processing device to execute:

a providing step for providing a virtual communication interface between the user virtual machine and the service virtual machine by Ethernet (registered trademark); and

a performing step for performing an interface conversion process for communication between the real network and the user virtual machine if the physical communication interface is not by using Ethernet (registered trademark),

wherein the physical communication interface is converted, by the interface conversion process, to an equivalent interface to the virtual communication interface using Ethernet (registered trademark).

21. The computer readable medium having a virtual system control program stored thereon according to claim 20, further comprising:

a MAC address setting step for making a MAC address to be set to both of the physical communication interface and the virtual communication interface identical when the physical communication interface is Ethernet (registered trademark); and

an IP address setting step for setting an IP address of the physical communication interface to the IP address of the virtual communication interface.

22. The computer readable medium having a virtual system control program stored thereon according to claim 21, wherein, the physical communication interface having the MAC address is a real network interface card (NIC) which is connected to the real network, the physical communication interface having the IP address is a real network processing part which is connected with the real NIC and performs control processing for communication relating to the real network being connected, and the virtual communication interface is a virtual network interface card (NIC) which is provided in the user virtual machine,

wherein, the MAC address of the real NIC and the MAC address of the virtual NIC become identical by the MAC address setting step, and the IP address of the real network processing part is set to the IP address of the virtual NIC by the IP address setting step.

23. The computer readable medium having a virtual system control program stored thereon according to claim 22, wherein, the MAC address setting step comprising:

a virtual network interface setting step for setting a value given to the MAC address of the real NIC to the MAC address of the virtual NIC before starting the user virtual machine in case where the physical communication interface is Ethernet (registered trademark); and

a real network interface setting step for setting a changed value of the MAC address of the virtual NIC to the MAC address of the real NIC when a value of the MAC address of the virtual NIC being changed by a request of the user virtual machine in a start operation of the user virtual machine.

24. The computer readable medium having a virtual system control program stored thereon according to claim 23, wherein, the IP address setting step comprising:

a DHCP (Dynamic Host Configuration Protocol) server setting step for setting the IP address of the real network processing part to a DHCP server as IP address information to be distributed by the DHCP server; and

a DHCP server using step for using the DHCP server dedicatedly by the virtual NIC, and distributing the IP address information only to the virtual NIC on an acquiring request by using DHCP protocol.

25. The computer readable medium having a virtual system control program stored thereon according to claim 24, further comprising:

a virtual node setting step for setting a virtual node, which is provided as an opposed node of the virtual NIC, to necessary operation mode before starting the user virtual machine depending on whether the physical communication interface is Ethernet (registered trademark) or not,

wherein, frame processing mode, which does not perform the interface conversion process for the communication between the real network and the user virtual machine, is set in case where the physical communication interface is Ethernet (registered trademark), and IP packet processing mode, which performs the interface conversion process for the communication between the real network and the user virtual machine, is set in case where the physical communication interface is not Ethernet (registered trademark).

26. The computer readable medium having a virtual system control program stored thereon according to claim 25, further comprising:

a proxy ARP setting step for activating operation of a proxy ARP, which acts as a proxy for giving an answer of MAC address resolution requested by the virtual NIC, after the virtual node being set to the IP packet mode.

27. The computer readable medium having a virtual system control program stored thereon according to claim 26, further comprising:

a communication control step for judging a destination of an Ethernet (registered trademark) frame inputted to the virtual node from the virtual NIC whether the destination is one of the DHCP server, the proxy ARP and the real network processing part by discriminating communication category information included in the Ethernet (registered trademark) frame, and transmitting the Ethernet (registered trademark) frame to each destination as a result of the judgment,

wherein transmitting the Ethernet (registered trademark) frame to the real network processing part as it is when the judged destination is the real network processing part and the virtual node being set to the frame processing mode, and extracting an IP packet from the Ethernet (registered trademark) frame and transmitting the IP packet to the real network processing part when the judged destination is the real network processing part and the virtual node being set to the IP packet processing mode.

28. The computer readable medium having a virtual system control program stored thereon according to claim 27, further comprising:

an inward communication processing step including;

transmitting a data frame inputted to the virtual node from the physical communication interface to the virtual NIC as it is when the virtual node is set to the frame processing mode; and

assembling an IP packet inputted to the virtual node from the real network processing part into the Ethernet (registered trademark) frame, and transmitting the assembled Ethernet (registered trademark) frame to the virtual NIC when the virtual node is set to the IP packet processing mode.

29. The computer readable medium having a virtual system control program stored thereon according to claim 21, wherein, the physical communication interface is Ethernet (registered trademark) VPN (Virtual Private Network), and the MAC address setting step for making the MAC address to be set to both of the physical communication interface and the virtual communication interface identical when the physical communication interface is the Ethernet (registered trademark) VPN.