Management server, virtual machine system, computer-readable recording medium, and connection method

• US 9,413,595 B2
• Filed: 08/14/2013
• Issued: 08/09/2016
• Est. Priority Date: 10/31/2012
• Status: Expired due to Fees

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Imai, Yuji
• Primary Examiner(s): Chan, Wing F
• Assistant Examiner(s): Tseng, Leon Y
• Application Number:
  US13/966,373
• Publication Number:
  US 20140122681A1
• Time in Patent Office: 1,091 Days
• Field of Search: 709/223
• US Class Current: 1/1
• CPC Class Codes: G06F 2009/45587 Isolation or security of virtual machine instances
• CPC Class Codes: G06F 2009/45595 Network integration; Enabling network access in virtual machine instances
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects
• CPC Class Codes: H04L 41/04 Network management architectures or arrangements
• CPC Class Codes: H04L 41/342 between virtual entities, e.g. orchestrators, SDN or NFV entities
• CPC Class Codes: H04L 61/251 between different IP versions
• CPC Class Codes: H04L 61/2525 Translation at a client
• CPC Class Codes: H04L 61/5014 using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP]

Abstract

A management server 10 includes a vSW usage management table 11 for storing an index for identifying an interface for each customer intranet 4, where the interface is used to connect a VM 23 and a PC5 in the customer intranet 4 connected via a router 3 and is being used. When the management server 10 is compatible with an IPv4 network and when receiving a connection request for a connection to the router 3 connected to the customer intranet 4, the management server specifies an identifier for identifying an interface that is not stored in the vSW usage management table 11, connects the router 3 and the VM 23 by using the interface indicated by the specified identifier.

Claims

1. A management server comprising a memory and a processor connected to the memory, the processor being configured to execute a process including managing a physical server that operates a virtual machine, the process further comprising:

specifying, when the management server is compatible with an IPv4 network and when receiving a connection request to establish a connection to the physical server from a relay device via a virtual private network, the relay device being connected to a client network to which an information processing apparatus belongs, an identifier, an interface identified thereby being not used for a virtual machine meeting the connection request, wherein the interface is used for connecting the information processing apparatus to the virtual machine and the identifier corresponds to a zone index of an IPv6 address for distinguishing the client network from another client network, an identifier that is stored in association with a virtual machine in a storage unit indicating that an interface identified thereby is currently used;

instructing the virtual machine to virtually generate an address translating unit, the generated address translating unit translating an IPv4 address of a transmission destination of the information processing apparatus belonging to the client network to an IPv6 address and setting the translated IPv6 address on an interface side of the generated address translating unit, the interface side corresponding to the interface identified by the specified identifier;

connecting the relay device and the virtual machine based on an address of a virtual switch corresponding to the interface identified by the specified identifier and an address of the relay device, the virtual machine distinguishing the client network to which the information processing apparatus belongs from another client network by the translated IPv6 address and the specified identifier; and

storing the specified identifier in the storage unit in association with the virtual machine and the client network connected to the relay device that is connected to the virtual machine at the connecting.

2. The management server according to claim 1, the process further comprising, when the process includes assigning an IPv4 address of a transmission destination of the information processing apparatus belonging to the client network, searching for the stored identifier of the interface corresponding to the client network of the information processing apparatus in the storage unit, wherein the instructing includes instructing the virtual machine to virtually generate an address translating unit, the generated address translating unit translating the assigned IPv4 address to an IPv6 address and setting the translated IPv6 address on an interface side of the generated address translating unit, the interface side corresponding to the interface indicated by the searched identifier.

3. The management server according to claim 1, the process further comprising, when a client network side to which the information processing apparatus belongs assigns an IPv4 address of a transmission destination of the information processing apparatus, searching for the stored identifier of the interface corresponding to the client network of the information processing apparatus in the storage unit, wherein the instructing includes instructing the virtual machine to virtually generate an address translating unit, the generated address translating unit translating the assigned IPv4 address to an IPv6 address and setting the translated IPv6 address on an interface side of the generated address translating unit, the interface side corresponding to the interface indicated by the searched identifier.

4. A virtual machine system in which a physical server that operates a virtual machine and a management server are connected to each other, and the management server comprises a memory and a processor connected to the memory, the processor being configured to execute a process including managing the physical server, wherein

the process further includes

specifying, when the management server is compatible with an IPv4 network and when receiving a connection request to establish a connection to the physical server from a relay device via a virtual private network, the relay device being connected to a client network to which an information processing apparatus belongs, an identifier, an interface identified thereby being not used for a virtual machine meeting the connection request, wherein the interface is used for connecting the information processing apparatus to the virtual machine and the identifier corresponds to a zone index of an IPv6 address for distinguishing the client network from another client network, an identifier that is stored in association with a virtual machine in a storage unit indicating that an interface identified thereby is currently used;

instructing the virtual machine to virtually generate an address translating unit, the generated address translating unit translating an IPv4 address of a transmission destination of the information processing apparatus belonging to the client network to an IPv6 address and setting the translated IPv6 address on an interface side of the generated address translating unit, the interface side corresponding to the interface identified by the specified identifier;

connecting the relay device and the virtual machine based on an address of a virtual switch corresponding to the interface identified by the specified identifier and an address of the relay device, the virtual machine distinguishing the client network to which the information processing apparatus belongs from another client network by the translated IPv6 address and the specified identifier; and

storing the specified identifier for identifying the interface used for the connection in the storage unit in association with the client network connected to the relay device that is connected to the virtual machine at the connecting and the virtual machine.

5. The virtual machine system according to claim 4, wherein the process further includes, when the process includes assigning an IPv4 address of a transmission destination of the information processing apparatus belonging to the client network,

searching for the stored identifier of the interface corresponding to the client network of the information processing apparatus in the storage unit,

wherein the instructing includes instructing the virtual machine to virtually generate an address translating unit, the generated address translating unit translating the assigned IPv4 address into an IPv6 address that is a virtual IPv4 address, setting the translated IPv6 address on an interface side of the generated address translating unit, the interface side corresponding to the interface indicated by the searched identifier, and setting the assigned IPv4 address on an output side of the generated address translating unit for output to the client network of the information processing apparatus.

6. The virtual machine system according to claim 4, wherein the process further includes, when a client network side to which the information processing apparatus belongs assigns an IPv4 address of a transmission destination of the information processing apparatus,

searching for the stored identifier of the interface corresponding to the client network of the information processing apparatus in the storage unit,

wherein the instructing includes instructing the virtual machine to virtually generate an address translating unit, the generated address translating unit requesting the client network side of the information processing apparatus to send an IPv4 address of a destination, receiving the IPv4 address from the client network side, translating the received IPv4 address into an IPv6 address that is a virtual IPv4 address, setting the translated IPv6 address on an interface side of the generated address translating unit, the interface side corresponding to the interface indicated by the searched identifier, and setting the IPv4 address received from the client network side on an output side of the generated address translating unit for output to the client network of the information processing apparatus.

7. The virtual machine system according to claim 5, wherein the generated address translating unit translates an IPv4 address indicating a transmission source in a packet transmitted by the information processing apparatus into an IPv6 address, and sends the translated IPv6 address to the interface corresponding to the generated address translating unit.

8. The virtual machine system according to claim 6, wherein the generated address translating unit translates an IPv4 address indicating a transmission source in a packet transmitted by the information processing apparatus into an IPv6 address, and sends the translated IPv6 address to the interface corresponding to the generated address translating unit.

9. A non-transitory computer-readable recording medium having stored therein a program causing a management server for managing a physical server that operates a virtual machine to execute a process, the process comprising:

receiving, when the management server is compatible with an IPv4 network, a connection request to establish a connection to the physical server from a relay device connected to the management server via a virtual private network;

specifying an identifier, an interface identified thereby being not used for a virtual machine meeting the connection request, wherein the interface is used for connecting the virtual machine and an information processing apparatus that belongs to a client network to which the relay device connects and the identifier corresponds to a zone index of an IPv6 address for distinguishing the client network from another client network, an identifier that is stored in association with a virtual machine in a storage unit indicating that an interface identified thereby is currently used;

instructing the virtual machine to virtually generate an address translating unit, the generated address translating unit translating an IPv4 address of a transmission destination of the information processing apparatus belonging to the client network to an IPv6 address and setting the translated IPv6 address on an interface side of the generated address translating unit, the interface side corresponding to the interface identified by the specified identifier;

connecting the relay device and the virtual machine based on an address of a virtual switch corresponding to the interface identified by the specified identifier and an address of the relay device, the virtual machine distinguishing the client network to which the information processing apparatus belongs from another client network by the translated IPv6 address and the specified identifier; and

storing the specified identifier for identifying the interface used for the connection in association with the client network connected to the relay device and the virtual machine.

10. A connection method implemented by a management server for managing a physical server that operates a virtual machine, the connection method comprising:

receiving, when the management server is compatible with an IPv4 network, a connection request to establish a connection to the physical server from a relay device connected to the management server via a virtual private network;

specifying an identifier, an interface identified thereby being not used for a virtual machine meeting the connection request, wherein the interface is used for connecting the virtual machine and an information processing apparatus that belongs to a client network to which the relay device connects and the identifier corresponds to a zone index of an IPv6 address for distinguishing the client network from another client network, an identifier that is stored in association with a virtual machine in a storage unit indicating that an interface identified thereby is currently used;

instructing the virtual machine to virtually generate an address translating unit, the generated address translating unit translating an IPv4 address of a transmission destination of the information processing apparatus belonging to the client network to an IPv6 address and setting the translated IPv6 address on an interface side of the generated address translating unit, the interface side corresponding to the interface identified by the specified identifier;

connecting the relay device and the virtual machine based on an address of a virtual switch corresponding to the interface identified by the specified identifier and an address of the relay device, the virtual machine distinguishing the client network to which the information processing apparatus belongs from another client network by the translated IPv6 address and the specified identifier; and

storing the specified identifier for identifying the interface used for the connection in association with the client network connected to the relay device and the virtual machine.