KR20170058201A - System for providing virtual network service in multi cloud environment and method thereof - Google Patents

Abstract

A system and method for providing a virtual network in a multi-cloud environment are disclosed. A virtual network providing system according to an embodiment includes a plurality of clouds including a cloud operating system, a switch controller, and a gateway controller, a resource provisioning manager that manages virtual machines created in each cloud in cooperation with a cloud operating system of each cloud, And a virtual tenant network coordinator that links the virtual machines created in each cloud to the virtual tenant network in cooperation with the switch controller and gateway controller of the cloud.

Description

Technical Field [0001] The present invention relates to a system and a method for providing a virtual network in a multi-

The present invention relates to virtual network management and service technology.

A large number of cloud systems for various services are being built around large data centers, and new policies and measures are being proposed to revitalize the cloud computing industry and upgrade services based on cloud computing technology. However, there is a growing need for mid- and small-scale cloud systems in physical and geographically separated environments, and the utilization of services based on small- and medium-sized cloud systems is increasing.

A Software Defined Network (SDN) supports centralized programmability of infrastructure based on hierarchical and open APIs to provide the structural flexibility and openness required for the infrastructure. do. Infrastructure providers want to evolve the network infrastructure by applying the SDN structure to software programming and control management similar to computer infrastructure. In the case of wireless and wireline operators, SDN technology is aimed at reducing costs through simplification and efficiency of infrastructure, creating new revenue models, and solving dependency problems on existing equipment vendors.

According to an embodiment, a virtual network providing system and method for efficient virtual network configuration between clouds in a distributed multi-cloud environment are proposed.

A virtual network providing system according to an embodiment includes a plurality of clouds including a cloud operating system, a switch controller, and a gateway controller, a resource provisioning manager that manages virtual machines created in each cloud in cooperation with the cloud operating system of each cloud, And a virtual tenant network coordinator that links the virtual machines created in each cloud to the virtual tenant network in cooperation with the switch controller and gateway controller of the cloud.

The gateway controller according to an embodiment controls a cloud gateway network composed of gateway switches connected to the outside of the cloud. A switch controller according to one embodiment controls a cloud internal network comprised of in-the-cloud switches.

The resource provisioning manager according to an embodiment configures a network environment of each virtual machine so that each virtual machine can be connected to the outside when receiving a virtual machine creation request from each user from the user.

The resource provisioning manager according to an exemplary embodiment generates a multi-cloud virtual tenant network identifier, requests the cloud operating system of each cloud to create a virtual network, and receives the cloud virtual network identifier generated from each cloud operating system as a result.

The cloud operating system of each cloud according to an embodiment transmits the cloud virtual network identifier to the resource provisioning manager and the switch controller of the cloud, and transmits the virtual machine port identifier to the resource provisioning manager.

The resource provisioning manager according to an exemplary embodiment maps a virtual tenant network identifier to a cloud virtual network identifier received from an operating system of each cloud, and transmits the mapping to a virtual tenant network coordinator.

The virtual tenant network coordinator according to an exemplary embodiment maps the virtual tenant network identifier to each cloud virtual network identifier and transmits it to the gateway controller of each cloud.

The resource provisioning manager according to an exemplary embodiment requests a cloud operating system of each cloud to create a virtual machine to receive a virtual machine port identifier from a cloud operating system of each cloud, and transmits the received virtual machine port identifier together with cloud information to a virtual tenant network coordinator Lt; / RTI >

The virtual tenant network coordinator according to an embodiment receives the virtual machine port identifier and the cloud information from the resource provisioning manager, requests the switch controller of each cloud for the virtual machine network information, and receives the virtual machine network information as a result.

The virtual tennenth network coordinator according to an embodiment may be configured to transmit the second virtual machine network information of the second cloud to the gateway controller of the first cloud and the second virtual machine network information of the second cloud to connect the information of each virtual machine to the virtual tenant network 1 < / RTI > virtual machine network information of the cloud.

Another method of providing a virtual network in another embodiment comprises the steps of creating a virtual network in each of the distributed clouds and registering the cloud virtual network information in the gateway controller of each of the clouds and creating virtual machines respectively in the distributed clouds, Registering the virtual machine network information in each cloud with the gateway controller of the cloud to which the target virtual machine to be connected belongs.

The step of registering the cloud virtual network information according to an embodiment in the gateway controller of each cloud includes: a resource provisioning manager generating a multi-cloud virtual tenant network identifier, requesting the cloud operating system of each cloud to create a virtual network, Mapping the virtual tenant network identifier to the cloud virtual network identifier received from each cloud operating system and transmitting the mapping to the virtual tenant network coordinator; The coordinator maps the virtual tenant network identifier to each cloud virtual network identifier and transmits it to the gateway controller of each cloud.

The step of registering the virtual machine network information according to one embodiment in the gateway controller of each cloud includes the steps of the resource provisioning manager requesting the cloud operating system of each cloud to create a virtual machine and receiving the virtual machine port identifier from the cloud operating system of each cloud Receiving a virtual machine port identifier and a cloud information from a resource provisioning manager; and transmitting a virtual machine network identifier to the switch controller of each cloud, wherein the virtual machine port identifier and the virtual machine port identifier are transmitted to the virtual tenant network coordinator together with the cloud information. And receiving virtual machine network information as a result thereof.

In the step of registering with the gateway controller of the cloud according to an embodiment, in order to associate the information of each virtual machine with the virtual tenant network coordinator to the virtual tenant network, the gateway controller of the first cloud includes the second virtual machine network information And transmits the first virtual machine network information of the first cloud to the gateway controller of the second cloud.

According to one embodiment, a cloud service provider can provide a virtual network between clouds desired by the user. In this way, when a specific virtual machine (VM) in a distributed cloud is connected to one virtual network segment and operated independently of other virtual network segments, it is physically connected to the external network By positioning and controlling the switching function in a cloud edge gateway (GW), it is possible to efficiently use IP resources and provide a secure independent network to users. In addition, by separating the physical device from the virtual network, the physical device dependency can be reduced and the network can be operated easily and quickly.

By controlling the circuit connection of the GW switch group at the end of the cloud network where the cloud is connected to the external network and the WAN section connected to the transport network leased from the network operator, Can manage its own virtual network topology and control traffic to the virtual network.

1 is a configuration diagram of a distributed multi-cloud virtual tenant network (VTN) providing system according to an embodiment of the present invention;
FIG. 2 is a hierarchical diagram illustrating a connection between a switch and a user VM in the cloud of FIG. 1 according to an embodiment of the present invention;
FIG. 3 is a reference view showing a control range of a multi-cloud distributed multi-cloud VTN providing system according to an embodiment of the present invention;
4A and 4B are a message flow diagram illustrating a process of generating a multi-cloud multi-cloud VTN distributed across two regions according to an embodiment of the present invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings. In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear. In addition, the terms described below are defined in consideration of the functions of the present invention, which may vary depending on the intention of the user, the operator, or the like. Therefore, the definition should be based on the contents throughout this specification.

1 is a configuration diagram of a distributed multi-cloud virtual tenant network (VTN) system according to an embodiment of the present invention.

Referring to FIG. 1, a VTN providing system between two distributed clouds 100-1 and 100-2 includes a resource provisioning manager 300, a VTN coordinator 400, a cloud 1 100 -1) and cloud 2 (100-2). The cloud 1 100-1 includes a cloud operating system (OS) 1 110-1, a switch controller 1 120-1, a gateway GW controller 130- 1), switches 121-1 and 122-1, and GW switches 131-1 and 132-1. The cloud 2 100-2 includes the cloud OS 2 110-2, the switch controller 2 120-2, the GW controller 2 130-2, the switches 121-2 and 122-2, the GW switches 131- 2). 1, for convenience, like the switches in the cloud 121-1, 122-1, 121-2, 122-2 and the GW switches 131-1, 132-1, 131-2, 132-2, Are shown in the embodiment, but a plurality of such units may be provided.

According to one embodiment, the two distributed clouds 100-1 and 100-2 are connected to a wide area network (WAN) 500 rented to a network operator. The VTN providing system between the dispersed clouds 100-1 and 100-2 and the WAN 500 work together to form a multi-cloud VTN 600 for virtual machines (VMs) 601 to 604 resources. . The VM is a request made by the user to the cloud OSs 110-1 and 110-2 through the resource provisioning manager 300. [

The resource provisioning manager 300 requests the resource (VM or storage) required by the user to the cloud OSs 110-1 and 110-2 of the single domain and acquires the generated resource information according to the request. The cloud OS is, for example, an open stack. The switch controllers 120-1 and 120-2 in the clouds 100-1 and 100-2 are SDN controllers and transmit network information of the user VMs 601 to 604 from the cloud OSs 110-1 and 110-2 And controls and manages a routing table for the switches 121-1, 122-1, 121-2, and 122-2 in the cloud. The switches 121-1, 122-1, 121-2, and 122-2 may be physical switches or virtual switches.

The GW switches 131-1, 132-1, 131-2, and 132-2 in the inside of the cloud are connected to the lines of the external network WAN 500 through the external connection paths of the cloud networks 140-1 and 140-2. The GW controllers 130-1 and 130-2 are SDN controllers under the control of the VTN coordinator 400 to control and manage the GW switch groups 131-1, 132-1, 131-2, and 132-2 in the respective clouds. The GW controllers 130-1 and 130-2 control and manage a plurality of GW switch groups 131-1, 132-1, 131-2, and 132-2.

According to an exemplary embodiment of the present invention, the multi-cloud multi-cloud VTN providing system distributed in two regions is composed of the SDN which is the cloud internal network 140-1 and 140-2 and the GW SDN including the GW switches.

The resource provisioning manager 300, the VTN coordinator 400, the switch controllers 120-1 and 120-2, the GW controllers 130-1 and 130-2, the switches 121-1 and 122-1, The servers 131-1 and 132-1 may be a network device or a server, and may be a memory for storing information, a communication unit for transmitting and receiving information, and a processor for processing information to provide a virtual network service in a distributed multi- Configure the system.

FIG. 2 is a hierarchical diagram illustrating a connection of a switch and a user VM in the cloud of FIG. 1 according to an embodiment of the present invention.

Each cloud internal network has a number of switches and a user VM for each switch. Each switch may be a physical switch or a virtual switch. The switch controller 120 in the cloud is an SDN controller that works with the cloud OS, and controls routing by modifying the switch internal routing table.

FIG. 3 is a reference view showing a control range of a multi-cloud multi-cloud VTN providing system distributed in two regions according to an embodiment of the present invention.

The control range of the switch controller 1 (120-1) is the cloud 1 internal network 140-1, and the control range of the switch controller 2 (120-2) is the cloud 2 internal network 140-2. The control range of the GW controller 1 (130-1) is the cloud 1 GW network 150-1, and the control range of the GW controller 2 (130-2) is the cloud 2 GW network 150-2. The VTN coordinator 400 includes an inter-DC GW network 160 to which the cloud 1 GW network 150-1 and the cloud 2 GW network 150-2 are connected, a cloud 1 internal network 140-1 and 140-2, 1 GW networks 150 - 1 and 150 - 2 in the entire global cloud network 170.

In order to provide a multi-cloud VTN for the VM resources requested by the user, the distributed multi-cloud to multi-cloud VTN providing system has a hierarchical control and management structure as shown in FIG.

4A and 4B are a message flow diagram illustrating a process of generating a multi-cloud multi-cloud VTN distributed across two regions according to an embodiment of the present invention.

Referring to FIG. 4A, when the resource provisioning manager 300 receives a multi-cloud VM creation request 4000 from the user in the cloud 1 100-1, the network environment of the VM is first created so that the VM can be connected to the outside .

Specifically, the resource provisioning manager 300 first generates a multi-cloud VTN ID, requests the cloud OS 110-1 in the cloud 1 100-1 to create a virtual network 1 4002, -1) as a result (4004). The cloud OS1 110-1 transmits the cloud 1 virtual network 1 ID to the switch controller 120-1 of the cloud 1 (100-1) (4006).

The resource provisioning manager 300 maps the multiple cloud VTN IDs to the cloud 1 virtual network 1 ID received from the cloud OS1 110-1 and transmits it to the VTN coordinator 400 (4008).

The VTN coordinator 400 maps the multiple cloud VTN IDs and the cloud 1 virtual network 1 IDs for the cloud 1 external connection and transmits them to the GW controller 1 130-1 of the cloud 1 100-1 (4010). The above-described steps 4000 to 4010 are performed to prepare the network environment of the VM.

Next, the resource provisioning manager 300 requests the VM1 creation requested by the user to the cloud OS1 110-1 (4012). The cloud OS1 110-1 allocates resources in the cloud 1 (100-1) and transmits a VM1 Port ID to the resource provisioning manager 300 (4014) capable of identifying the VM1. At this time, the resource provisioning manager 300 links the Port ID, VTN ID, and Cloud 1 virtual network 1 ID of VM1. The information transmitted to the resource provisioning manager 300 is utilized to create, control, and manage virtual networks between distributed clouds.

The cloud OS1 110-1 transmits information for controlling the virtual network of the VM1 such as the port ID and port information of the VM1, the network information, and the subnetwork information to the switch controller 120-1 (4016). The information transmitted to the switch controller 1 (120-1) is utilized to control and manage the cloud internal virtual network.

The resource provisioning manager 300 transmits the VM1 Port ID received from the cloud OS1 110-1 to the VTN coordinator 400 together with the cloud 1 information (4018). The VTN coordinator 400 having received the VM1 Port ID requests (4020) the detailed network information of the VM1 to the switch controller 1 (120-1), and as a result, receives the virtual network information of the VM1 (4022). The virtual network information may include VM1 Port ID, Port information, network information, sub-network information, etc.,

The VTN coordinator 400 transmits the virtual network information of the VM1 generated by the user for the connection of the multiple cloud VTN to the outside of the cloud 1 to the GW controller 1 130-1 of the first cloud 100-1 (4024) . The above steps 4000 to 4024 are procedures for creating a VM in the cloud 1 (100-1), and the procedure for creating the VM in the cloud 2 (100-2) is continued.

Referring to FIG. 4B, when the resource provisioning manager 300 receives a multi-cloud VM creation request 4100 from the user in the cloud 2 100-2, the network environment of the VM is first created so that the VM can be connected to the outside .

Specifically, the resource provisioning manager 300 first generates a multi-cloud VTN ID, requests the cloud OS 2 110-2 in the cloud 2 100-2 to create a virtual network 2 (4102), and requests the cloud OS 2 110 2) as a result (4104). The cloud OS2 110-2 transmits the cloud 2 virtual network 2 ID to the switch controller 2 120-2 of the cloud 2 100-2 (4106).

The resource provisioning manager 300 maps the multiple cloud VTN IDs to the cloud 2 virtual network 2 ID received from the cloud OS 2 110-2 and transmits them to the VTN coordinator 400 (4108).

The VTN coordinator 400 maps the multiple cloud VTN IDs and the cloud 2 virtual network 2 IDs for the cloud 2 external connection to the multiple cloud VTNs and transmits them to the GW controller 2 130-2 of the cloud 2 100-2 (4110). Steps 4100 through 4110 are performed to prepare the network environment of the VM.

Then, the resource provisioning manager 300 requests the VM2 creation requested by the user to the cloud OS2 110-2 (4112). The cloud OS2 110-2 allocates resources in the cloud 2 (100-2) and transmits a VM2 Port ID to the resource provisioning manager 300 (4114) that can identify the VM2. At this time, the resource provisioning manager 300 associates the Port ID, the VTN ID, and the ID of the cloud 2 virtual network 2 of the VM 2. The information transmitted to the resource provisioning manager 300 is utilized to create, control, and manage virtual networks between distributed clouds.

The cloud OS2 110-2 transmits information for controlling the virtual network of the VM2 such as the port ID and port information of the VM2, the network information, and the subnetwork information to the switch controller 2 (120-2) (4116). The information transmitted to the switch controller 2 (120-2) is utilized to control and manage the cloud internal virtual network.

The resource provisioning manager 300 transmits the VM2 Port ID received from the cloud OS2 110-2 together with the cloud 2 information to the VTN coordinator 400 (4118). The VTN coordinator 400 having received the VM2 Port ID requests 4120 the detailed network information of the VM 2 to the switch controller 2 120-2, and as a result, receives the virtual network information of the VM 2 4122. The virtual network information may include VM2 Port ID and Port information, network information, sub-network information, and the like received through step 4116.

The VTN coordinator 400 transmits the virtual network information of the VM 2 generated by the user for connection to the outside of the cloud 2 VTN to the GW controller 2 130-2 of the cloud 2 100-2 (4124) .

When the network environment of the VMs in each of the clouds is set and the VM creation is completed and the preparations for connecting between the clouds are completed, the VTN coordinator 400 transmits the information of each VM to the multiple cloud VTNs by the GW controller in the partner cloud, VTN ID, own GW information, and VM MAC information. For example, information for identifying the VM1 is transmitted to the GW controller 2 130-2 of the cloud 2 100-2 and information for identifying the VM2 is transmitted to the GW controller 1 130- 1) so that information constituting the multiple cloud VTNs is registered (4126, 4128).

The embodiments of the present invention have been described above. It will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention as defined by the appended claims. Therefore, the disclosed embodiments should be considered in an illustrative rather than a restrictive sense. The scope of the present invention is defined by the appended claims rather than by the foregoing description, and all differences within the scope of equivalents thereof should be construed as being included in the present invention.

100-1,100-2: Cloud
110-1,110-2: Cloud OS
120-1, 120-2: switch controller
121-1, 122-1, 121-2,
130-1, 130-2: GW controller
131-1,132-1,131-2,132-2: GW switch
300: Resource Provisioning Manager
400: VTN coordinator
500: WAN
600: Multi-Cloud Virtual Tethered Network

Claims (16)

A plurality of clouds including a cloud operating system, a switch controller and a gateway controller;
Resource Provisioning Manager that manages virtual machines created in each cloud in conjunction with each cloud's cloud operating system; And
A virtual tenant network coordinator interworking with a switch controller and a gateway controller of each cloud to connect virtual machines created in each cloud to a virtual tenant network;
The virtual network providing system comprising: The method of claim 1, wherein the gateway controller
And controlling the cloud gateway network composed of gateway switches connected to the outside of the cloud. The apparatus of claim 1, wherein the switch controller
And controls the cloud internal network composed of the internal switches of the cloud. 2. The method of claim 1, wherein the resource provisioning manager
Wherein a network environment of each virtual machine is configured so that each virtual machine can be connected to the outside when receiving a virtual machine creation request from each user in each cloud. 2. The method of claim 1, wherein the resource provisioning manager
The method comprising: generating a multi-cloud virtual tenant network identifier, requesting a cloud operating system of each cloud to create a virtual network, and receiving a cloud virtual network identifier generated from each cloud operating system as a result. The method of claim 1, wherein each cloud's cloud operating system
And transmits the cloud virtual network identifier to the resource provisioning manager and the switch controller of the cloud, and transmits the virtual machine port identifier to the resource provisioning manager. 2. The method of claim 1, wherein the resource provisioning manager
Maps the virtual tenant network identifier to the cloud virtual network identifier received from the operating system of each cloud, and transmits the mapping to the virtual tenant network coordinator. 4. The method of claim 1, wherein the virtual tenant network coordinator
Mapping the virtual tenant network identifier to each cloud virtual network identifier, and transmitting the mapping to the gateway controller of each cloud. 2. The method of claim 1, wherein the resource provisioning manager
Requesting the cloud operating system of each cloud to create a virtual machine, receiving a virtual machine port identifier from the cloud operating system of each cloud, and transmitting the received virtual machine port identifier together with the cloud information to the virtual tenant network coordinator. Delivery system. 4. The method of claim 1, wherein the virtual tenant network coordinator
Wherein the cloud-to-cloud virtual network is integrally controlled in a hierarchical structure in which a software defined network composed of gateway switches in each cloud is interlocked with gateway controllers. 4. The method of claim 1, wherein the virtual tenant network coordinator
Receives the virtual machine port identifier and the cloud information from the resource provisioning manager, requests the switch controller of each cloud for the virtual machine network information, and receives the virtual machine network information as a result. 4. The method of claim 1, wherein the virtual tenant network coordinator
To connect the information of each virtual machine to the virtual tenant network, the second virtual machine network information of the second cloud is sent to the gateway controller of the first cloud and the first virtual machine network information of the first cloud is sent to the gateway controller of the second cloud To the virtual network. Creating virtual networks in a distributed cloud and registering cloud virtual network information in a gateway controller of each cloud;
Creating virtual machines in distributed clouds and registering virtual machine network information in a gateway controller of each cloud; And
Registering virtual machine network information in each cloud with a gateway controller of a cloud to which a target virtual machine to be connected belongs;
The method comprising the steps of: 14. The method of claim 13, wherein registering the cloud virtual network information in a gateway controller of each cloud comprises:
The resource provisioning manager generates a multi-cloud virtual tenant network identifier, requests a cloud operating system of each cloud to create a virtual network, and receives a cloud virtual network identifier generated from each cloud operating system as a result;
Mapping the virtual tenant network identifier to the cloud virtual network identifier received from each cloud operating system and transmitting the mapping to the virtual tenant network coordinator; And
Mapping a virtual tenant network identifier to each cloud virtual network identifier and transmitting the virtual tenant network identifier to a gateway controller of each cloud;
The method comprising the steps of: 14. The method of claim 13, wherein registering the virtual machine network information in a gateway controller of each cloud comprises:
The resource provisioning manager requests creation of a virtual machine in the cloud operating system of each cloud, receives the virtual machine port identifier from the cloud operating system of each cloud, and transmits the received virtual machine port identifier together with the cloud information to the virtual tenant network coordinator; And
Receiving a virtual machine port identifier and cloud information from the resource provisioning manager, requesting virtual machine network information from a switch controller of each cloud, and receiving virtual machine network information as a result;
The method comprising the steps of: 14. The method of claim 13, wherein registering with the gateway controller of the cloud
The virtual tennin network coordinator transmits the second virtual machine network information of the second cloud to the gateway controller of the first cloud to link the information of each virtual machine to the virtual tenant network and the gateway controller of the second cloud transmits the second virtual machine network information of the first cloud And transmitting the first virtual machine network information.

Images