Network system and network flow tracing method
First Claim
Patent Images
1. A network system, comprising:
- a switch having a function to process a reception packet based on a set entry of a flow table;
a controller having a function to receive an inquiry of the packet from said switch, and to set the entry defining a rule and an operation to uniformly control packets to said flow table of said switch;
an encapsulating module having a function to receive the packet from at least one of said switch and said controller and to encapsulate the packet by using a same header as a header of the packet; and
a header translating unit having a function to receive a packet from said switch, to translate a first header data of a head of the received packet into a second header data thereof, and to transfer to another switch,wherein said encapsulating module has a function to receive a packet to which the first header data before translation and the second header data after the translation are given, when the encapsulated packet is transferred through said header translating unit, and to notify a set of the first header data before the translation and the second header data after the translation to said controller.
3 Assignments
0 Petitions
Accused Products
Abstract
In a flow-based network such as an open flow network system, even when a network appliance such as NAT and NAPT for translating a packet header is passed through, a correspondence relation of two flows before and after the passing can be grasped to make it possible to trace the flow in end-to-end. Specifically, a packet is encapsulated in a switch (or in a controller requested from the switch). By encapsulating by using the same header as a current header, two kinds of headers before the translation and after the translation are attached to the packet after the packet phases through the network appliance.
17 Citations
18 Claims
-
1. A network system, comprising:
-
a switch having a function to process a reception packet based on a set entry of a flow table; a controller having a function to receive an inquiry of the packet from said switch, and to set the entry defining a rule and an operation to uniformly control packets to said flow table of said switch; an encapsulating module having a function to receive the packet from at least one of said switch and said controller and to encapsulate the packet by using a same header as a header of the packet; and a header translating unit having a function to receive a packet from said switch, to translate a first header data of a head of the received packet into a second header data thereof, and to transfer to another switch, wherein said encapsulating module has a function to receive a packet to which the first header data before translation and the second header data after the translation are given, when the encapsulated packet is transferred through said header translating unit, and to notify a set of the first header data before the translation and the second header data after the translation to said controller. - View Dependent Claims (2, 3, 4, 5, 6, 7)
-
-
8. A computer which has a function as an encapsulating module, the computer comprising:
-
means for receiving a packet from at least one of a switch which has a function to process a reception packet based on a set entry of a flow table, and a controller which has a function to receive an inquiry of the packet from said switch, and to set the entry defining a rule and an operation to uniformly control packets to said flow table of said switch; means for encapsulating the packet by using a same header as a header of the packet; and means for receiving a packet to which first header data before translation and second header data after the translation are given, when the encapsulated packet is transferred through header translating means, and for notifying a set of the first header data before the translation and the second header data after the translation. - View Dependent Claims (9, 10, 11, 12, 13)
-
-
14. A network flow tracing method, comprising:
-
processing a reception packet based on a set entry of a flow table in a switch; receiving an inquiry of the packet from said switch, and setting the entry defining a rule and an operation to uniformly control packets to said flow table of said switch, in a controller; receiving the packet from at least one of said switch and said controller and encapsulating the packet by using a same header as a header of the packet, in an encapsulating module; and receiving a packet from said switch, to translate a first header data of a head of the received packet into a second header data thereof, and to transfer to another switch, wherein said encapsulating module has a function to receive a packet to which the first header data before translation and the second header data after the translation are given, when the encapsulated packet is transferred, and to notify a set of the first header data before the translation and the second header data after the translation to said controller. - View Dependent Claims (15, 16)
-
-
17. A non-transitory storage medium which stores a program for making a computer which has a function as an encapsulating module, executing:
-
receiving a packet from at least one of a switch which has a function to process a reception packet based on a set entry of a flow table, and a controller which has a function to receive an inquiry of the packet from said switch, and to set the entry defining a rule and an operation to uniformly control packets to said flow table of said switch; encapsulating the packet by using a same header as a header of the packet, in an encapsulating module; and receiving a packet from said switch, to translate a first header data of a head of the received packet into a second header data thereof, and to transfer to another switch, wherein said encapsulating module has a function to receive a packet to which the first header data before translation and the second header data after the translation are given, when the encapsulated packet is transferred, and to notify a set of the first header data before the translation and the second header data after the translation to said controller. - View Dependent Claims (18)
-
Specification