Abstract: A storage area network system includes a storage apparatus, a plurality of hosts, a switch arranged between the storage apparatus and the hosts, a controller and an access control apparatus. The controller sets the control information in the switch so as to control the communication between the hosts and the storage apparatus, and the access control apparatus provides the controller with information on whether or not accessing between the hosts and the storage apparatus is allowable. The controller sets, in the switch, the control information corresponding to an access accept/deny that is delivered by the access control apparatus.

Abstract: A communication system includes a control device configured to calculate a packet forwarding path and set a flow based on the packet forwarding path in a node, and a plurality of nodes configured to forward a received packet based on a flow set by the control device. The control device, when receiving a detour instruction, calculates a new packet forwarding path which detours a detour target node and sets a flow based on the new packet forwarding path in the plurality of nodes on the new packet forwarding path.

Abstract: A control server is connected to a plurality of physical nodes that keep control information defining an operation to be taken in accordance with input/output packet characteristics and process the input/output packets according to the control information. The control server includes a first storage unit that stores configuration information about a virtual network configured to include virtual nodes that are virtualized versions of the physical nodes, and a second storage unit that stores virtual network identifying information identifying the virtual network from characteristics of an input packet, and the control server identifies a physical node that configures a virtual network that handles a packet having a characteristic in common with the packet received by the physical node based on a request from the physical node and updates control information for each physical node.

Abstract: A communication system includes: a plurality of nodes each of which requests a processing rule for processing a received packet; and a control apparatus that determines in response the request a processing rule corresponding to the received packet and notifies the determined processing rule to at least one of the plurality of nodes. One of the plurality of nodes forwards to the control apparatus a first packet for acquiring a destination address for a predetermined communication. The control apparatus in response to determination of the destination address determines a processing rule for processing a second packet to be transmitted to the destination address and notifies the determined processing rule to at least one of the plurality of nodes.

Abstract: A method of distributing contents including steps of: calculating feature quantities of contents written in a plurality of files by using a common calculation operation; allotting a common ID to feature quantities which are equivalent to each other among the calculated feature quantities; associating the plurality of files with the IDs corresponding to said files, and storing the associated files and IDs into a node of a network; gathering, when obtaining the stored file from the node, information on ID of said file and said node through the network; requesting the node shown in the gathered information to transmit the file corresponding to the ID shown in said information; and transmitting the requested file from the node.

Abstract: A control apparatus comprises: a switch extraction unit extracting a second switch adjacent to a first switch that stops in a communication system including a plurality of switches having a predetermined topology; a flow extraction unit extracting a flow transferred to the first switch after the second switch from a plurality of flows passing through the communication system; a path determination unit determining, assuming that, among the plurality of switches, switches located at start and end nodes of the flow are third and fourth switches, respectively, a path from the second switch to the fourth switch, based on a topology obtained by excluding the first switch from the predetermined topology; and a path generation unit connecting a path from the third switch to the second switch in an initial path of the flow and a path determined by the path determination unit to generate a new path of the flow.

Abstract: A controller removes a node to be bypassed from topology information that prescribes the network configuration and calculates a new path not passing the bypass node. For the nodes that form the path, the controller creates flow information that prescribes operation on the flow at nodes to set the flow information at the nodes on the path.

Abstract: In shifting a flow that passes through a node onto a different alternative path which does not pass through the node passed through by the flow, a controller that controls a flow of each node under control determines alternative candidate paths, each of which has a same source and a same destination as a path associated with the flow to be shifted and does not pass through the node passed through by the flow to be shifted, determines the alternative path from the alternative candidate paths according to a predetermined criterion, and aggregates flows of each node on the alternative path.

Abstract: A forwarding node processes a packet between a supplicant and a prescribed authentication device, in accordance with a processing rule that has been set. The authentication device performs a prescribed authentication procedure with the supplicant and notifies a result thereof to a control server. In a case where an authentication procedure with the authentication device succeeds, the control server creates a first forwarding path between the supplicant and a destination node, and transmits a processing rule for a packet received or transmitted between the supplicant and a destination node, following the first forwarding path, in at least one forwarding node in the first forwarding path.

Abstract: A server management apparatus monitors activity state of an active server that provides a service to a client(s) via a plurality of switches, instructs a route control apparatus, managing routing for the plurality of switches, to change a packet forwarding route if there is no reply from the active server; and recognizes that the active server is stopped if there is no reply from the active server after a forwarding route is changed and instructs a standby server to provide the service instead of the active server.

Abstract: A communication system includes: a plurality of nodes each of which forwards a packet; a terminal device to establish a connection with at least one of the nodes, and to access a network through at least one of the nodes; and a control device to control a packet forwarding route in response to a request which is sent from at least one of the nodes to request for setting the packet forwarding route. The control device includes: a unit that stores a plurality of location information respectively corresponding to the respective nodes; a unit that receives the request sent from at least one of the nodes connected to the terminal device; and a unit that identifies a location of the terminal device based on the location information corresponding to the at least one of the nodes, and controls the packet forwarding route by using the location of the terminal device.

Abstract: A communication system includes a plurality of nodes and a control device. Each node includes a packet processor that processes a packet in accordance with a processing rule when the packet is received. The processing rule correlates the processing applied to the packet with a matching rule that identifies the packet the processing is to be applied to. The control device calculates a packet forwarding path in response to a request for setting processing rules from any node, sets processing rules that implement the packet forwarding path on the node on the packet forwarding path and records the processing rules in a manner coordinated with one another. The control device inquires at the node on the packet forwarding path about state of setting of processing rule and, upon detecting failure in the processing rule set in at least one node, executes rollback operation on the correlated processing rules set in other node.

Abstract: In shifting a flow that passes through a node onto a different alternative path which does not pass through the node passed through by the flow, a controller that controls a flow of each node under control determines alternative candidate paths, each of which has a same source and a same destination as a path associated with the flow to be shifted and does not pass through the node passed through by the flow to be shifted, determines the alternative path from the alternative candidate paths according to a predetermined criterion, and aggregates flows of each node on the alternative path.

Abstract: Devices and interior equipments that need not operate in a server room are stopped and thereby power saving can be achieved. More specifically, consolidation of virtual machines (VMs) providing a service is performed to concentrate processing in a server in a certain rack among a group of racks in the server room, a rack having no operating server is stopped, processing by an interior equipment controlling the rack and its circumference environment also is stopped or adjusted, and thereby power saving can be achieved.

Abstract: There is provided a distributed data storage system for splitting content-data into a plurality of split data and storing a plurality of copy data corresponding to at least one of the plurality of split data in a plurality of memory devices. The system comprises a copying management information storing unit and a access location determining unit. The copying management information storing unit stores copying management information indicating a storage location of the copy data corresponding to the split data. The access location determining unit determines at least one of the plurality of memory devices storing the copy data corresponding to the split data as an access location for accessing split data.

Abstract: A computer system of the present invention is provided with a switch for transferring a received packet data to a destination according to a flow set to itself, an integrated management apparatus which specifies a maintenance object unit and a controller. The controller separates the maintenance object unit from the computer system by controlling the setting or deletion of the flow to the switch. Thus, the maintenance processing of the computer system can be performed without stopping the function by controlling the side of the network and the side of the computer integratedly.

Abstract: A control server is connected to a plurality of physical nodes that keep control information defining an operation to be taken in accordance with input/output packet characteristics and process the input/output packets according to the control information. The control server includes a first storage unit that stores configuration information about a virtual network configured to include virtual nodes that are virtualized versions of the physical nodes, and a second storage unit that stores virtual network identifying information identifying the virtual network from characteristics of an input packet, and the control server identifies a physical node that configures a virtual network that handles a packet having a characteristic in common with the packet received by the physical node based on a request from the physical node and updates control information for each physical node.

Abstract: A computer system of the present invention is provided with an open flow controller 3, and a switch 4i. The switch 4i notifies a MAC address contained in packet data to the open flow controller 3 when the packet data from the virtual machine that the migration has completed does not fit with a rule shown by the flow set to the switch itself. The open flow controller 3 sets a communication flow for a migration destination VM generated according to the notified MAC address to the switch 4i. The switch 4i transfers the packet data for said virtual machine which follows a rule 444 shown by the communication flow for said migration destination VM, to the migration destination virtual machine based on an action 445 shown by the communication flow for said migration destination VM.

Abstract: Communication allowance determination means determines, using information of a packet received by a packet relay unit and based on a policy which is information associating a match condition with communicability information, whether to allow or not to allow communication to a destination unit for the packet that meets the match condition, the match condition being information identifying the packet, and the communicability information indicating whether to allow or not to allow the communication to the destination unit for the packet that meets the match condition. Rule setting means sets, at least in the packet relay unit receiving the packet, a rule of executing a process for suppressing forwarding of the packet to the destination unit, on condition that the communication allowance determination means determines not to allow the communication to the destination unit for the packet that meets the match condition.

Abstract: A communication system comprises control devices, and forwarding nodes each includes packet processing unit that performs processing of a received packet based on a processing rule set in advance or received from control device associated with the node. First control device among the control devices, in response to a predetermined trigger, refers to correspondence between forwarding nodes and control devices, and transmits, among forwarding path information, at least forwarding path information that includes a forwarding node associated with the first control device, to second control device associated with a forwarding node that is not associated with first control device, among forwarding nodes on a forwarding path of the received packet. Second control device generates and sends the processing rule to a forwarding node on the forwarding path, among forwarding nodes associated with the second control device, based on the forwarding path information.