Abstract: A control apparatus, includes a first unit configured to be capable of specifying an identification rule to identify a packet based on a user of a virtual network including a plurality of virtual nodes; and a second unit configured to be capable of sending an instruction to a physical node corresponding to each of the virtual nodes of the virtual network, wherein each of the virtual nodes includes a predetermined network function being capable of providing a first packet operation to the packet, wherein the instruction includes that the physical node provides a second packet operation to the packet so as to emulate the first packet operation.

Abstract: To reduce the labor for the setting operation performed when a virtual network service is provided by using a communication system in which a packet forwarding node(s) is controlled in a central manner.

Abstract: A control apparatus, includes a first unit configured to be capable of specifying an identification rule to identify a packet based on a user of a virtual network including a plurality of virtual nodes; and a second unit configured to be capable of sending an instruction to a physical node corresponding to each of the virtual nodes of the virtual network, wherein each of the virtual nodes includes a predetermined network function being capable of providing a first packet operation to the packet, wherein the instruction includes that the physical node provides a second packet operation to the packet so as to emulate the first packet operation.

Abstract: A control apparatus, includes a first unit configured to be capable of specifying an identification rule to identify a packet based on a user of a virtual network including a plurality of virtual nodes; and a second unit configured to be capable of sending an instruction to a physical node corresponding to each of the virtual nodes of the virtual network, wherein each of the virtual nodes includes a predetermined network function being capable of providing a first packet operation to the packet, wherein the instruction includes that the physical node provides a second packet operation to the packet so as to emulate the first packet operation.

Abstract: A control apparatus, includes a first unit configured to be capable of specifying an identification rule to identify a packet based on a user of a virtual network including a plurality of virtual nodes; and a second unit configured to be capable of sending an instruction to a physical node corresponding to each of the virtual nodes of the virtual network, wherein each of the virtual nodes includes a predetermined network function being capable of providing a first packet operation to the packet, wherein the instruction includes that the physical node provides a second packet operation to the packet so as to emulate the first packet operation.

Abstract: In a method and a configuration for forming a processing rule, number of entries for packet processing, maintained by a forwarding node, may be decreased. The processing rule includes processing contents and information to become a matching key to identify a packet to be applied with the processing contents. An aggregation tree is used which has a depth corresponding to a length of information that becomes matching key in the processing rule. A plurality of nodes branched from a root of the aggregation tree and levels of nodes represent value of the matching key and mask length, respectively. The processing rule or the policy is registrable in each of the individual nodes. The policy is registered in a relevant node of the aggregation tree. For each received packet, processing contents and ad-hoc matching key to identify the packet to be applied with the processing contents are determined by having reference to the policy.

Abstract: A control server is connected to a plurality of physical nodes that keep control information defining an operation to be taken in accordance with input/output packet characteristics and process the input/output packets according to the control information. The control server includes a first storage unit that stores configuration information about a virtual network configured to include virtual nodes that are virtualized versions of the physical nodes, and a second storage unit that stores virtual network identifying information identifying the virtual network from characteristics of an input packet, and the control server identifies a physical node that configures a virtual network that handles a packet having a characteristic in common with the packet received by the physical node based on a request from the physical node and updates control information for each physical node.

Abstract: A control apparatus includes: a virtual network configuration information storage unit storing a configuration(s) of a virtual network(s); a terminal point information storage unit associating a virtual terminal point(s) on the virtual network(s) with a terminal point(s) of the packet forwarding node(s) and storing the associated nodes; a control unit controlling packet forwarding on the virtual network(s) configured by the packet forwarding node(s); and a virtual network updating unit performing, when the control apparatus receives a packet from a source that is not connected to an existing virtual terminal point, addition of a virtual terminal point to the virtual network(s) and addition of a new entry to the terminal point information storage unit, based on a virtual terminal point addition rule(s) defining a correspondence relationship between a value in a predetermined field in a packet header and a virtual terminal point connection position on the virtual network(s).

Abstract: In a method and a configuration for forming a processing rule, number of entries for packet processing, maintained by a forwarding node, may be decreased. The processing rule includes processing contents and information to become a matching key to identify a packet to be applied with the processing contents. An aggregation tree is used which has a depth corresponding to a length of information that becomes matching key in the processing rule. A plurality of nodes branched from a root of the aggregation tree and levels of nodes represent value of the matching key and mask length, respectively. The processing rule or the policy is registrable in each of the individual nodes. The policy is registered in a relevant node of the aggregation tree. For each received packet, processing contents and ad-hoc matching key to identify the packet to be applied with the processing contents are determined by having reference to the policy.

Abstract: A control server is connected to a plurality of physical nodes that keep control information defining an operation to be taken in accordance with input/output packet characteristics and process the input/output packets according to the control information. The control server includes a first storage unit that stores configuration information about a virtual network configured to include virtual nodes that are virtualized versions of the physical nodes, and a second storage unit that stores virtual network identifying information identifying the virtual network from characteristics of an input packet, and the control server identifies a physical node that configures a virtual network that handles a packet having a characteristic in common with the packet received by the physical node based on a request from the physical node and updates control information for each physical node.