Abstract: A control apparatus, includes a first unit configured to be capable of specifying an identification rule to identify a packet based on a user of a virtual network including a plurality of virtual nodes; and a second unit configured to be capable of sending an instruction to a physical node corresponding to each of the virtual nodes of the virtual network, wherein each of the virtual nodes includes a predetermined network function being capable of providing a first packet operation to the packet, wherein the instruction includes that the physical node provides a second packet operation to the packet so as to emulate the first packet operation.

Abstract: A communication system includes a control device configured to calculate a packet forwarding path and set a flow based on the packet forwarding path in a node, and a plurality of nodes configured to forward a received packet based on a flow set by the control device. The control device, when receiving a detour instruction, calculates a new packet forwarding path which detours a detour target node and sets a flow based on the new packet forwarding path in the plurality of nodes on the new packet forwarding path.

Abstract: A communication system comprises control devices, and forwarding nodes each includes packet processing unit that performs processing of a received packet based on a processing rule set in advance or received from control device associated with the node. First control device among the control devices, in response to a predetermined trigger, refers to correspondence between forwarding nodes and control devices, and transmits, among forwarding path information, at least forwarding path information that includes a forwarding node associated with the first control device, to second control device associated with a forwarding node that is not associated with first control device, among forwarding nodes on a forwarding path of the received packet. Second control device generates and sends the processing rule to a forwarding node on the forwarding path, among forwarding nodes associated with the second control device, based on the forwarding path information.

Abstract: A communication system includes: a plurality of nodes each of which forwards a packet; a terminal device to establish a connection with at least one of the nodes, and to access a network through at least one of the nodes; and a control device to control a packet forwarding route in response to a request which is sent from at least one of the nodes to request for setting the packet forwarding route. The control device includes: a unit that stores a plurality of location information respectively corresponding to the respective nodes; a unit that receives the request sent from at least one of the nodes connected to the terminal device; and a unit that identifies a location of the terminal device based on the location information corresponding to the at least one of the nodes, and controls the packet forwarding route by using the location of the terminal device.

Abstract: Communication allowance determination means determines, using information of a packet received by a packet relay unit and based on a policy which is information associating a match condition with communicability information, whether to allow or not to allow communication to a destination unit for the packet that meets the match condition, the match condition being information identifying the packet, and the communicability information indicating whether to allow or not to allow the communication to the destination unit for the packet that meets the match condition. Rule setting means sets, at least in the packet relay unit receiving the packet, a rule of executing a process for suppressing forwarding of the packet to the destination unit, on condition that the communication allowance determination means determines not to allow the communication to the destination unit for the packet that meets the match condition.

Abstract: A communication system includes a control device configured to calculate a packet forwarding path and set a flow based on the packet forwarding path in a node, and a plurality of nodes configured to forward a received packet based on a flow set by the control device. The control device, when receiving a detour instruction, calculates a new packet forwarding path which detours a detour target node and sets a flow based on the new packet forwarding path in the plurality of nodes on the new packet forwarding path.

Abstract: A control apparatus, includes a first unit configured to be capable of specifying an identification rule to identify a packet based on a user of a virtual network including a plurality of virtual nodes; and a second unit configured to be capable of sending an instruction to a physical node corresponding to each of the virtual nodes of the virtual network, wherein each of the virtual nodes includes a predetermined network function being capable of providing a first packet operation to the packet, wherein the instruction includes that the physical node provides a second packet operation to the packet so as to emulate the first packet operation.

Abstract: A communication system includes a control device configured to calculate a packet forwarding path and set a flow based on the packet forwarding path in a node, and a plurality of nodes configured to forward a received packet based on a flow set by the control device. The control device, when receiving a detour instruction, calculates a new packet forwarding path which detours a detour target node and sets a flow based on the new packet forwarding path in the plurality of nodes on the new packet forwarding path.

Abstract: A control apparatus, includes a first unit configured to be capable of specifying an identification rule to identify a packet based on a user of a virtual network including a plurality of virtual nodes; and a second unit configured to be capable of sending an instruction to a physical node corresponding to each of the virtual nodes of the virtual network, wherein each of the virtual nodes includes a predetermined network function being capable of providing a first packet operation to the packet, wherein the instruction includes that the physical node provides a second packet operation to the packet so as to emulate the first packet operation.

Abstract: A communication system includes: a plurality of nodes each of which requests a processing rule for processing a received packet; and a control apparatus that determines in response to the request a processing rule corresponding to the received packet and notifies the determined processing rule to at least one of the plurality of nodes. One of the plurality of nodes forwards to the control apparatus a first packet for acquiring a destination address for a predetermined communication. The control apparatus in response to determination of the destination address determines a processing rule for processing a second packet to be transmitted to the destination address and notifies the determined processing rule to at least one of the plurality of nodes.

Abstract: Communication allowance determination means determines, using information of a packet received by a packet relay unit and based on a policy which is information associating a match condition with communicability information, whether to allow or not to allow communication to a destination unit for the packet that meets the match condition, the match condition being information identifying the packet, and the communicability information indicating whether to allow or not to allow the communication to the destination unit for the packet that meets the match condition. Rule setting means sets, at least in the packet relay unit receiving the packet, a rule of executing a process for suppressing forwarding of the packet to the destination unit, on condition that the communication allowance determination means determines not to allow the communication to the destination unit for the packet that meets the match condition.

Abstract: A communication system includes a plurality of nodes each including a packet processor that processes a packet in accordance with a packet handling operation(s) when the packet is received, the packet handling operation(s) correlating a processing to be applied to the packet with a matching rule that identifies the packet to which the processing is to be applied, and a control device that calculates a packet forwarding path in response to a request to set the packet handling operation from any one of the nodes; the control device setting a plurality of the packet handling operations that implement the packet forwarding path for the node(s) on the packet forwarding path and recording the packet handling operations in correlation with one another, the control device inquiring at the node(s) on the packet forwarding path about a setting state(s) of the packet handling operation(s).

Abstract: A communication system comprises control devices, and forwarding nodes each includes packet processing unit that performs processing of a received packet based on a processing rule set in advance or received from control device associated with the node. First control device among the control devices, in response to a predetermined trigger, refers to correspondence between forwarding nodes and control devices, and transmits, among forwarding path information, at least forwarding path information that includes a forwarding node associated with the first control device, to second control device associated with a forwarding node that is not associated with first control device, among forwarding nodes on a forwarding path of the received packet. Second control device generates and sends the processing rule to a forwarding node on the forwarding path, among forwarding nodes associated with the second control device, based on the forwarding path information.

Abstract: A communication system includes: a plurality of nodes each of which requests a processing rule for processing a received packet; and a control apparatus that determines in response the request a processing rule corresponding to the received packet and notifies the determined processing rule to at least one of the plurality of nodes. One of the plurality of nodes forwards to the control apparatus a first packet for acquiring a destination address for a predetermined communication. The control apparatus in response to determination of the destination address determines a processing rule for processing a second packet to be transmitted to the destination address and notifies the determined processing rule to at least one of the plurality of nodes.

Abstract: A computer system of the present invention is provided with a switch for transferring a received packet data to a destination according to a flow set to itself, an integrated management apparatus which specifies a maintenance object unit and a controller. The controller separates the maintenance object unit from the computer system by controlling the setting or deletion of the flow to the switch. Thus, the maintenance processing of the computer system can be performed without stopping the function by controlling the side of the network and the side of the computer integratedly.

Abstract: A computer system of the present invention is provided with an open flow controller 3, and a switch 4i. The switch 4i notifies a MAC address contained in packet data to the open flow controller 3 when the packet data from the virtual machine that the migration has completed does not fit with a rule shown by the flow set to the switch itself. The open flow controller 3 sets a communication flow for a migration destination VM generated according to the notified MAC address to the switch 4i. The switch 4i transfers the packet data for said virtual machine which follows a rule 444 shown by the communication flow for said migration destination VM, to the migration destination virtual machine based on an action 445 shown by the communication flow for said migration destination VM.

Abstract: A control apparatus includes: a communication identification unit that identifies a predetermined communication between or among predetermined apparatuses by matching a packet received via a switch against a preset pattern(s); and a switch control unit that sets, at least in the switch, control information in which match conditions for determining the predetermined communication between or among the predetermined apparatuses and a processing content(s) applied to the communication between or among the apparatuses are associated with each other.

Abstract: A communication system includes a plurality of nodes each including a packet processor that processes a packet in accordance with a packet handling operation(s) when the packet is received, the packet handling operation(s) correlating a processing to be applied to the packet with a matching rule that identifies the packet to which the processing is to be applied, and a control device that calculates a packet forwarding path in response to a request to set the packet handling operation from any one of the nodes; the control device setting a plurality of the packet handling operations that implement the packet forwarding path for the node(s) on the packet forwarding path and recording the packet handling operations in correlation with one another, the control device inquiring at the node(s) on the packet forwarding path about a setting state(s) of the packet handling operation(s).

Abstract: A control apparatus, includes a first unit configured to be capable of specifying an identification rule to identify a packet based on a user of a virtual network including a plurality of virtual nodes; and a second unit configured to be capable of sending an instruction to a physical node corresponding to each of the virtual nodes of the virtual network, wherein each of the virtual nodes includes a predetermined network function being capable of providing a first packet operation to the packet, wherein the instruction includes that the physical node provides a second packet operation to the packet so as to emulate the first packet operation.

Abstract: A communication system includes a plurality of nodes and a control device. Each node includes a packet processor that processes a packet in accordance with a processing rule when the packet is received. The processing rule correlates the processing applied to the packet with a matching rule that identifies the packet the processing is to be applied to. The control device calculates a packet forwarding path in response to a request for setting processing rules from any node, sets processing rules that implement the packet forwarding path on the node on the packet forwarding path and records the processing rules in a manner coordinated with one another. The control device inquires at the node on the packet forwarding path about state of setting of processing rule and, upon detecting failure in the processing rule set in at least one node, executes rollback operation on the correlated processing rules set in other node.