JP4626544B2 - Complex information platform device and management method of complex information platform device - Google Patents

Description

  The present invention relates to an operation management technology for an information platform device represented by a server device, a storage device, a network switch device (hereinafter also including a router device), and the like. The present invention relates to a technology that is effective for a function that provides a server processing function to another network switch device in a composite information platform device that constitutes a plurality of information platform devices by combining.

  In an IT system typified by an Internet site, an IP (Internet Protocol) network is used to connect server devices, storage devices, client terminals, and the like constituting the system to perform data communication. In recent years, Internet technologies such as WEB (World Wide Web) services have been penetrating, and various data communication between companies and between companies and consumers has been performed on the Internet. Along with the diversification of Internet usage, an additional function for processing data packets in the middle of data communication, such as a security function, a high reliability function, and a protocol capsule function, is required for a network that supports such use. In order to meet this demand, device vendors provide various appliance devices as devices having a function of processing data packets. Examples of appliance devices include an IPsec (Security Architecture for Internet Protocol) appliance, an SSL (SSL) accelerator appliance, and a firewall appliance. Also, such an appliance device requires server-like processing for processing data packets, and is used by being connected to a network switch on the network. For this reason, device vendors provide blade servers, modular routers, Advanced Telecom Computing Architecture (ATCA), and the like as devices in which a server device and a network switch device are mounted in one housing. Such a device constituting a plurality of server devices, network switch devices, or storage devices in one device housing is referred to as a composite information platform device in this specification. For this type of blade server, refer to JP 2002-32153 “Cartridge type server unit and housing for mounting the server unit”, and for this type of module type router, JP 2004-215116 “IP router, communication system and Non-patent document 1 describes ATCA in “Bandwidth setting method and program used therefor”.

  On the other hand, as a processor mounted on a server device used to process the data packet, a multi-core type in which a plurality of processor cores are mounted on one LSI chip is used to improve processing performance. Yes. Since the multi-core type improves the processing performance per chip, so-called server consolidation in which a plurality of server processing functions are operated in one server apparatus is progressing in a server apparatus equipped with a multi-core type processor.

"Advanced TCA: PICMG 3.0 Short Form Specification" published by PICMG (January 2003)

  In the combined information platform device that is equipped with a server device and a network switch device and has a data packet processing function as an additional function of the network, the processing performance of the server device is improved as described above. In order to use the performance effectively, it is required to operate a plurality of data packet processing functions. In addition, when a complex information platform device is introduced into an existing IT system, the system configuration is often mixed with an existing network switch device that does not have a data packet processing function. In order to facilitate the transition to the new system, it is necessary to be able to provide the data packet processing function of the composite information platform device to the existing network switch device.

  However, the present inventors have the following problems in providing the data packet processing function performed by the server device of the composite information platform device as described above to the existing network switch device in the IT system. It was found by. Consider a case where one data packet processing function of a server device of a composite information platform device is used for a plurality of systems. More specifically, for example, when used in two systems for a new system configured with a composite information platform device and for an existing system configured with an existing network switch device, the setting policy of the data packet processing function of the two systems There is a problem that processing cannot be performed by a single data packet processing function because of the difference between the two and the network switching device. In addition, when the data packet processing function of the server device of the composite information platform device is provided to an existing network switch device and the data packet processing function is combined with the function unique to the existing network switch device, the existing network switch device In the case of performing the data packet processing function using the configuration information, the composite information platform device does not hold the specification information and setting information of the existing network switch device, and therefore performs the data packet processing function as described above. There is a problem that can not be. Further, when providing the data packet processing function of the server device of the composite information platform device to an existing network switch device, confirmation of whether the data packet processing function can be provided, setting of the network switch device of the composite information platform device, It is necessary to make settings across multiple devices, such as settings for existing network switch devices, data packet processing functions for server devices, and confirmation of settings. However, manual settings are extremely difficult, and human setting errors can occur. There is a problem that it is likely to happen.

  Accordingly, an object of the present invention is to provide an information processing function (application) of a general-purpose processing module corresponding to the specifications of a network device on which a processing function is provided when a processing function is provided from a composite information platform to an existing network device. ) Can be selected and provided.

  More specifically, it is possible to execute a data packet processing function using a combination of data packet processing provided from a composite information platform and a function unique to an existing network device, or configuration information of an existing network switch device. There is.

  Another object of the present invention is to simplify confirmation of availability, various settings, and confirmation of settings when the data packet processing function of the server device of the composite information platform device is provided to an existing network switch device.

In the present invention, in order to solve the above-described problems, in the composite information platform device, the management module mounted on the composite information platform device provides the specification information of various existing network switch devices and the correspondence information of the data packet processing function. When the management module provides a function of holding and providing a data packet processing function to an existing network switch device, the management module confirms whether or not the data packet processing function can be provided to the existing network switch device. Data packet processing function program corresponding to the above, setting and checking for providing the above functions, and providing a management interface for setting data packet processing functions for an administrator of an existing network switch device. According to one aspect, the present invention is characterized in that one or more general-purpose processing modules having a function of performing general-purpose processing by mounting one or more processors, and switching the communication data by connecting the general-purpose processing module and an external network. One or more switch units to perform, and the general-purpose processing module and a management module for managing the switch unit, and one or more applications for performing one or more types of specific information processing operate in the general-purpose processing module. A compound information platform device,
Whether the management module is capable of providing the information processing function of the application for each type of sub-router device, which is a router device having a routing mechanism other than the composite information platform device, according to the specifications of the sub-router device. Sub-router device specification information,
For each type of application, application policy information that is information indicating whether or not to permit providing an information processing function to a connected subrouter device;
Sub-router device configuration information which is setting information of the sub-router device currently connected to the composite information platform device;
It has a table for holding application provision status information that is allocation status information of the information processing function of the application, and
Further, when the information processing function of the application is provided to the sub-router device, the configuration information of the sub-router device connected to the composite information platform device is acquired, and the information processing of the application is obtained from the sub-router device specification information A sub-router that determines whether or not a function can be provided, and holds the configuration information of the sub-router device in the sub-router configuration information and adds it to the application provision state information as a sub-router device capable of providing the information processing function of the application. Device registration means;
Provided application activation means for activating the application corresponding to the subrouter device from the subrouter device specification information and the subrouter device configuration information on a general-purpose processing module;
Application providing function setting means for setting the providing application started above and starting providing the information processing function of the providing application, and registering the providing state of the providing application in the application providing state information; Is a complex information platform device with

  Other specific features of the present invention will become apparent from the description of the best mode for carrying out the invention and the drawings.

  The effects obtained by typical ones of the inventions disclosed in the present application will be briefly described as follows.

  With the configuration of this patent, the application function of the general-purpose processing module of the composite information platform device can be provided to a general network switch device. Therefore, the resources of the general-purpose processing module can be shared by a plurality of devices. Since the use efficiency of the general-purpose processing module is increased, efficient use is possible.

  In addition, since the application function of the complex information platform device can be provided to the network switch device in the existing IT system, when introducing the complex information platform device, the existing IT system can be used as a new complex information platform device at once. Even if it is not replaced, the application function of the composite information platform apparatus can be used, and it becomes possible to make a gradual transition to a new system.

  In addition, the setting procedure when the application function of the general-purpose processing module of the composite information platform device is provided to a general network switch device requires confirmation of specifications and configuration information of multiple devices, setting to multiple devices, etc. Although it is very complicated, the management module of the composite information platform device automatically performs the setting according to the configuration of the present invention, so that the man-hours for operation management of the administrator and the occurrence rate of human error are reduced. It becomes possible.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. Note that, in all the drawings for explaining the embodiment, the same members are denoted by the same reference numerals in principle, and the repeated description thereof is omitted in principle.

  First, the configuration of the composite information platform apparatus according to the first embodiment of the present invention will be described. FIG. 1 is a block diagram of a composite information platform apparatus according to a first embodiment of the present invention.

  As shown in FIG. 1, in the first embodiment, the composite information platform apparatus 101 includes at least one or more general-purpose processing modules 102, one or more switch units 104, and one or more management modules 103. Only one switch unit 104 and management module 103 are shown in FIG. 1, but two or more may be configured. The general-purpose processing module 102 and the management module 103 are connected to the switch unit 104 via the physical wiring IL, the management physical wiring MIL, and the port 1071 inside the switch unit 104, and can communicate with each other. . The interface used in this communication may be a standard interface, for example, Ethernet (registered trademark), or an interface using a protocol unique to the composite information platform apparatus 101. Further, the composite information platform apparatus 101 is connected to an external port 1072 of the switch unit 104 and a router apparatus 116 that provides the server processing function of the general-purpose processing module 102 via the physical wiring OL. In the first embodiment, this router device is called a sub-router device. The router device 116 may be a general network switch device having a routing function. Furthermore, as a management terminal for the administrator, a management terminal 117 for the administrator A of the composite information platform apparatus 101 is connected via the physical wiring MOL, and for the administrator B of the subrouter apparatus 116 via the physical wiring RMOL. The management terminal 118 is connected.

  The general-purpose processing module 102 includes a general-purpose processor and memory, and performs general-purpose server processing. In the first embodiment, a function of processing a data packet in the middle of data communication such as a security function, a high reliability function, a protocol encapsulation function, etc., particularly in an IP network is performed. Such IP network additional functions include an IPsec encryption function, an SSL encryption function, a packet tunneling function, a firewall function, and an intrusion detection (IDS) function. In the first embodiment, the data packet processing function performed by the general-purpose processing module 102 having such a server function is called an application. In FIG. 1, applications 10611, 10612, and 10621 running on an operation system (OS) 105 running on the general-purpose processing module 102 are shown. As described above, since there are many types of data packet processing functions such as IPsec and SSL, the first embodiment distinguishes them from application X, application Y,. Furthermore, in the first embodiment, when the data packet processing function is used as a function for the composite information platform apparatus 101, the application X-in, the application Y-in,... On the other hand, when the data packet processing function is provided to the sub-router device 116 outside the composite information platform device 101, the application X-a, the application X-b,..., The application Ya, the application Y-b,. In this way, even in the same type of application, if the data packet processing function differs depending on the provided sub-router device, the application is distinguished. The application that performs such a data packet processing function may be a software program or hardware using a hardware accelerator or the like. In the first embodiment, an example of an application using software is shown.

  Next, a data packet transfer mechanism when the function of the application X-b 10612 of the general-purpose processing module 102 of the composite information platform apparatus 101 is provided to the subrouter apparatus 116 will be described. FIG. 2 is a block diagram of the first embodiment of the present invention shown in FIG. 1, showing the configuration of the sub-router device 116 in detail, and a data packet transfer method when the function of the application Xb 10612 is provided to the sub-router device 116. FIG. In FIG. 2, 219 is a management module of the sub-router device 116, 220 is a switch unit of the sub-router device 116, and 221 is an external port of the switch unit 220. The management module 219 is connected to the switch unit 220 via a management physical wiring RMIL, and can communicate with a communication terminal outside the apparatus via the external port 220. In addition, a host 2231 and a host 2232 that communicate with each other via the external physical wiring ROL are connected to the subrouter device 116. Communication between the host 2231 and the host 2232 when the application X-b 10612 function is not provided is performed through a path indicated by ODP in FIG. On the other hand, in the communication between the host 2231 and the host 2232 when receiving the application X-b 10612, the communication path is changed to NDP1 and NDP2 in FIG. That is, the data packet transmitted from the host 2231 is transmitted to the application Xb 10612 on the general-purpose processing module 102 via the physical wiring OL connecting the composite information platform apparatus 101 and the subrouter apparatus 116 as shown in the communication path NDP1. Data packet processing unique to the application Xb 10612 is performed there, and then returned to the sub-router device 116 again via the physical wiring OL as shown in the communication path NDP2, and transferred to the host 2232 of the communication destination .

  Next, the configuration of the management module 103 necessary for realizing providing the application X-b 10612 of the general-purpose processing module 102 to the sub-router device 116 in the first embodiment will be described. As shown in FIG. 1, the management module 103 has at least sub-router device specification information 108, application policy information 109, sub-router device configuration information 110, and application provision status information 111 in order to provide an application function to the sub-router device 116. Further, the management module 103 has at least a sub-router device registration unit 112, a provided application activation unit 113, and an application providing function setting unit 114. The details of each means will be clarified in the description of the management method in the first embodiment to be described later. In FIG. 1, reference numeral 115 denotes an application image in an execution format of applications 10611, 10612, and 10621 that operate on the general-purpose processing module 102. In the first embodiment, the application image 115 is configured in the management module 103. However, the application image 115 may be any place where it can be distributed to the general-purpose processing module 102, and is not necessarily configured in the management module 103. For example, the storage area of the general-purpose processing module 102 may be configured.

  An example of each piece of information configured in the management module 103 is shown in FIGS. FIG. 3 is a diagram showing an example of the subrouter device specification information 108 in the first embodiment. FIG. 4 is a diagram showing an example of the application policy information 109 in the first embodiment. FIG. 5 is a diagram showing an example of the sub-router device configuration information 110 in the first embodiment. FIG. 6 is a diagram showing an example of the application provision state information 111 in the first embodiment.

  The subrouter device specification information 112 includes at least information on the subrouter device type of the subrouter device 116 that receives the application of the composite information platform device 101 and the application that can be provided for each firmware of the subrouter device 116. This sub-router device specification information 112 is represented in a table format as shown in Table FT3 in FIG. 3, sub-router device type K301 indicating the type of sub-router device 116, firmware version K302 operating on the sub-router device 116, sub-router device 116 And a protocol type K303 of an interface for connection to the sub router device 116, and support application information K304 indicating an application that can be provided to the sub-router device 116. The support application information K304 indicates an application identifier that can be provided to the sub-router device 116 or unsupported for each application type (application X, application Y,...) Supported by the composite information platform apparatus 101. It is composed of K3051, K3052, and so on. In the example shown in FIG. 3, the subrouter device 116 whose subrouter device type K301 is CRouter4500 and whose firmware version K302 is 6.0 indicates that the protocol type K303 of the interface for connection is IP. Further, the application that can be provided supported by the composite information platform apparatus 101 indicates that the application X can be supported, the application Xb is supported, and the application Y is not supported, based on the support application information K304. .

  The application policy information 109 has at least information indicating whether or not the function for each application determined by the administrator A of the composite information platform apparatus 101 can be provided. When this application policy information 109 is expressed in a table format, as shown in a table FT4 in FIG. 4, an application identifier K401 indicating an application type, an application provision availability K402 determined by the administrator A of the composite information platform apparatus 101, It is composed of In the example illustrated in FIG. 4, the application providing function is possible for the application X, and the application providing function is not possible for the application Y.

  The subrouter device configuration information 110 has at least a serial number for identifying the subrouter device 116 connected to the composite information platform device 101 and configuration information set in the subrouter device 116. This sub-router device configuration information 110 is expressed in a table format, as shown in Table FT5 of FIG. 5, a serial number K501 that is a unique identifier of the sub-router device 116, and a configuration information item K502 indicating configuration information items of the sub-router device 116. , The configuration information content K503 indicating the content of the configuration information. The configuration information item K502 includes, for example, the device type of the sub-router device, firmware version, management IP address, port configuration information, router-specific function configuration information, and the like.

  The application provision status information 111 is connected to at least the combined information platform device 101 or registered sub-router device identifier information, application information provided to the sub-router device, and the provided application is operating. Information of the general-purpose processing module 102. When this application provision status information 111 is expressed in a table format, as shown in Table FT6 of FIG. 6, the router device serial number K601 unique to each individual device of the subrouter device, the subrouter device type K602, the subrouter device firmware version K603, the subrouter The number of applications provided to the apparatus is K604, the type of provided application is K605, and the identifier of the general-purpose processing module in which the provided application is operating is K606. In the example illustrated in FIG. 6, the application provision status of the sub-router device 116 having the serial number C0001 is that the firmware version is 6.0, the number of applications provided is 1, the type of application provided is application Xb, and the application Xb The general-purpose processing module 102 on which 10612 operates is 1.

  Next, a management method in the case where the application X-b 10612 of the composite information platform apparatus 101 is provided to the subrouter apparatus 116 in the first embodiment will be described using a flowchart. This management method comprises the following three management methods in the first embodiment. The management method (1) is a management method when registering the sub-router device 116 in the composite information platform device 101 (sub-router device registration method). The management method (2) is a management method for starting up an application provided to the subrouter device 116 (application startup method). The management method (3) is a management method for setting an application to be provided to the subrouter device 116 and setting the composite information platform device 101 and the subrouter device 116 (application providing function setting method). Hereinafter, each management method will be described sequentially.

  First, the management method (1) (subrouter device registration method) will be described with reference to FIGS. FIG. 7 is an explanatory diagram showing an example of the management method (1) (sub-router device registration method) of the composite information platform device according to the first embodiment. FIG. 8 is a flowchart of the management method (1) (sub-router device registration method) of the composite information platform device according to the first embodiment. As shown in FIG. 8, the configuration information of the subrouter device 116 is registered by the management terminal 117 of the administrator A who manages the composite information platform device 101 (step S801). The configuration information of the subrouter device 116 is notified to the management module 103 via the communication path M701 in FIG. 7, and the subrouter device 116 is registered by the subrouter device registration means 112 of the management module 103 in the following procedure. The management module 103 acquires the configuration information of the subrouter device 116 from the management terminal 117 (step S802). The management module 103 acquires the subrouter device specification information 108 and the application policy information 109 (step S803 and step S804). Based on these pieces of information, the management module 103 determines whether the application X-b 10612 of the composite information platform apparatus 101 can be provided to the target subrouter apparatus 116 (step S805). If the application X-b 10612 can be provided, the management module 103 registers the configuration information of the subrouter device 116 acquired from the management terminal 117 in the subrouter device configuration information 110 (step S806). Also, the target sub-router device 116 is registered in the application provision state information 111 (step S807). Finally, the management module 103 notifies the management terminal 117 that the registration of the subrouter device 116 has been completed using the communication path M702 of FIG. 7 (step S808). The management terminal 117 receives the notification from the management module 103 and confirms that registration of the subrouter device 116 is completed (step S809). On the other hand, if it is determined in step S805 that the application Xb 10612 cannot be provided, the management module 103 notifies the management terminal 117 that the application Xb 10612 cannot be provided using the communication path M702 in FIG. Notification is made (step S810). The management terminal 117 receives the notification from the management module 103 and confirms that the application X-b 10612 cannot be provided (step S811).

  Next, the management method (2) (application activation method) will be described with reference to FIGS. FIG. 9 is an explanatory diagram showing an example of the management method (2) (application activation method) of the composite information platform apparatus according to the first embodiment. FIG. 10 is a flowchart of the management method (2) (application activation method) of the composite information platform apparatus according to the first embodiment. As shown in FIG. 10, the application type (application X in the first embodiment) to be provided to the sub-router device 116 is registered by the management terminal 117 of the manager A who manages the composite information platform device 101 (step X in the first embodiment). S1001). Information on the type of application to be provided is notified to the management module 103 via the communication path M901 in FIG. 9, and the provided application is activated by the provided application activation means 113 of the management module 103 in the following procedure. The management module 103 acquires the subrouter device specification information 108 and the application policy information 109 (step S1002 and step S1003). Based on these pieces of information, the management module 103 determines whether the application type requested by the management terminal 117 can be provided to the target sub-router device 116 (step S1004). If the target application type can be provided, the management module 103 selects an application corresponding to the target sub-router device 116 from the application image (step S1005). In the first embodiment, as shown in the table FT3 of FIG. 3, since the format K301 of the sub-router device 116 is CRouter4500 and the firmware version K302 is 6.0, the application X can be supported as shown in the column K3051. The application type to be performed is application Xb. Next, the management module 103 selects the general-purpose processing module 102 capable of operating the provided application X-b, and secures resources for starting the application X-b 10612 through the communication path M903 in FIG. 9 (step S1006). The securing of resources performed here includes securing of hardware resources (memory, CPU, etc.) for the operation system 105 running on the general-purpose processing module 102, distribution of the application X-b 10612 to be started, and the like. The general-purpose processing module 102 secures resources in accordance with the request from the management module 103 (step S1007), and notifies the completion of resource securing via the communication path M904 in FIG. 9 (step S1008). The management module 103 receives the notification from the general-purpose processing module 102, confirms the completion of resource reservation (step S1009), and requests the general-purpose processing module 102 to start the application X-b 10612 (step S1010). In response to the request from the management module 103, the general-purpose processing module 102 activates the application X-b 10612 (step S1011), and notifies the management module 103 of the application activation completion after the activation is completed (step S1012). The management module 103 receives the notification from the general-purpose processing module 102, confirms the activation of the application X-b 10612 (step S1013), and updates the application provision state information 111 (step S1014). In the first embodiment, for example, the application provision number K604 to the sub-router apparatus in the row where the router serial number K601 in the table FT6 in FIG. 6 is C0001, the provided application type K605, and the identifier of the general-purpose processing module in which the provided application operates Update K606. Since the activation of the provided application Xb 10612 is completed through the above steps, the management module 103 notifies the management terminal 117 that the activation of the provided application Xb 10612 is completed using the communication path M902 of FIG. S1015). The management terminal 117 receives the notification from the management module 103 and confirms that the activation of the provided application X-b 10612 is completed (step S1016). On the other hand, if it is determined in step S1004 that the target application type cannot be provided, the management module 103 cannot provide the target application to the target subrouter device 116 using the communication path M902 in FIG. Is notified to the management terminal 117 (step S1017). The management terminal 117 receives the notification from the management module 103 and confirms that the target application cannot be provided (step S1018).

  Next, the management method (3) (application providing function setting method) will be described with reference to FIGS. FIG. 11 is an explanatory diagram showing an example of the management method (3) (application providing function setting method) of the composite information platform apparatus according to the first embodiment. 12 and 13 are flowcharts of the management method (3) (application providing function setting method) of the composite information platform apparatus according to the first embodiment. In the first embodiment, the management method (3) is divided into two methods: a management method of the composite information platform apparatus 101 shown in FIG. 12 and a management method of the sub-router apparatus 116 shown in FIG. As shown in FIG. 12, the management method of the composite information platform apparatus 101 is an application provided to the sub-router apparatus 116 by the management terminal 117 of the administrator A who manages the composite information platform apparatus 101 (in the first embodiment, The setting information of the application Xb 10612) is registered (step S1201). The application setting information is notified to the management module 103 through the communication path M1101 in FIG. 11, and the application providing function is set by the application providing function setting unit 114 of the management module 103 in the following procedure. Upon receiving the request from the management terminal 117, the management module 103 makes a setting request for the provided application X-b 10612 to the general-purpose processing module 102 through the communication path M1103 in FIG. 11 (step S1202). The general-purpose processing module 102 sets the provided application Xb 10612 in response to a request from the management module 103 (step S1203), and the setting of the provided application Xb 10612 for the management module 103 is completed through the communication path M1102 in FIG. Is notified (step S1204). The management module 103 receives the notification from the general-purpose processing module 102, confirms that the setting of the provided application X-b 10612 is completed (step S1205), and updates the application providing state information 111 (step S1206). The management module 103 notifies the management terminal 117 that the setting of the provided application X-b 10612 has been completed using the communication path M1102 of FIG. 11 (step S1207). The management terminal 117 receives the notification from the management module 103 and confirms that the setting of the provided application Xb 10612 has been completed (step S1208), and the configuration setting information of the composite information platform apparatus 101 is registered (step S1209). ). The management module 103 acquires the configuration setting information of the composite information platform apparatus 101 from the management terminal 117 through the communication path M1101 of FIG. 11, and sets the configuration of the composite information platform apparatus based on this information (S1210 ). The configuration setting of the composite information platform apparatus 101 here is a setting necessary for providing the provided application Xb 10612 to the sub-router apparatus 116. For example, the route of the data packet communicating with the sub-router apparatus 116 is the communication shown in FIG. For example, the transfer information is set so that the routes are NDP1 and NDP2. Next, the management module 103 notifies the management terminal 117 that the configuration setting of the composite information platform apparatus 101 has been completed using the communication path M1102 of FIG. 11 (step S1211). The management terminal 117 receives the notification from the management module 103 and confirms that the configuration setting of the composite information platform apparatus 101 has been completed (step S1212).

On the other hand, in the management method of the sub-router device 116, as shown in FIG. 12, the configuration setting information of the sub-router device 116 is registered by the management terminal 118 of the administrator B who manages the sub-router device 116 (step S1301). The management module 219 of the subrouter device 116 acquires the configuration setting information of the subrouter device 116 from the management terminal 118 through the communication path M1105 of FIG. 11, and sets the configuration of the subrouter device 116 based on this information (step S1302). ). The configuration setting of the sub-router device 116 here is a setting necessary for providing the provided application Xb 10612 to the sub-router device 116. For example, the route of the data packet communicating with the composite information platform device 101 is the communication shown in FIG. For example, the transfer information is set so that the routes are NDP1 and NDP2. Next, the management module 219 of the subrouter device 116 notifies the management terminal 118 that the configuration setting of the subrouter device 116 has been completed using the communication path M1106 of FIG. 11 (step S1303). The management terminal 118 receives the notification from the subrouter device 116 and confirms that the configuration setting of the subrouter device 116 has been completed (step S1304).
According to the first embodiment of the present invention described above, the application Xb 10612 of the composite information platform apparatus 101 can be provided to the sub-router apparatus 116. Therefore, the resources of the general-purpose processing module 102 are shared by a plurality of apparatuses. Since the use efficiency of the general-purpose processing module 102 is increased, efficient use is possible. In addition, when the complex information platform device 101 is introduced, the application Xb 10612 of the complex information platform device 101 can be used without replacing the existing IT system with the new complex information platform device 101 at a time. It will be possible to make a gradual transition to the new system.

  Next, the configuration of the composite information platform apparatus according to the second embodiment of the present invention will be described with reference to FIGS. FIG. 14 is an explanatory diagram showing an example of the management method (1) (subrouter device registration method) of the composite information platform device according to the second embodiment. FIG. 15 is a flowchart of the management method (1) (subrouter device registration method) of the composite information platform device according to the second embodiment. The configuration of the composite information platform apparatus in the second embodiment is the same as the configuration of the composite information platform apparatus of the first embodiment of this patent shown in FIG. (Sub-router device registration method) is different. Therefore, only the part different from the first embodiment will be described below, and the description of the same part will be omitted. As shown in FIG. 15, the first part is different from the flowchart of the management method (1) (subrouter device registration method) of the composite information platform apparatus according to the first embodiment of FIG. That is, in the first embodiment, the configuration information of the sub-router device 116 is acquired from the management terminal 117, but in the second embodiment, the sub-router device 116 is connected to the composite information platform device 101. In response to this, the management module 103 directly acquires configuration information from the management module 219 of the subrouter device 116. In the management method of the second embodiment, the sub-router device 116 is registered by the sub-router device registration means 112 of the management module 103 in the following procedure. The management module 103 monitors the external port 1072 in FIG. 14 and detects that the subrouter device 116 is connected to the external port 1072 using the physical wiring OL (step S1501). Next, the management module 103 requests the configuration information of the subrouter device 116 from the management module 219 of the subrouter device 116 via the communication path M1401 of FIG. 14 (step S1502). The management module 219 of the subrouter apparatus 116 receives the request from the management module 103 and notifies the configuration information of the subrouter apparatus 116 to the management module 103 (steps S1503 and S1504). The management module 103 receives the notification from the management module 219 of the subrouter device 116 and acquires the configuration information of the subrouter device 116. The contents of the configuration information of the sub-router device 116 acquired here are the same as those in the first embodiment. The above is the part changed by the second embodiment, and the following procedure is the flowchart of the management method (1) (sub-router device registration method) of the composite information platform device according to the first embodiment of FIG. The same as S803 to S811. According to the second embodiment of the present invention described above, the composite information platform apparatus 101 acquires the configuration information of the subswitch apparatus 116 that is automatically connected, not manually input by the administrator A, and registers the subrouter apparatus. It can be performed. As a result, it is possible to reduce the man-hours for operation management of the administrator of the composite information platform apparatus 101 and reduce the occurrence rate of human errors.

  Next, the configuration of the composite information platform apparatus according to the third embodiment of the present invention will be described with reference to FIGS. FIG. 16 is an explanatory diagram showing an example of the management method (3) (application providing function setting method) of the composite information platform apparatus according to the third embodiment. FIG. 17 is a flowchart of the management method (3) (application providing function setting method) of the composite information platform apparatus according to the third embodiment of the present invention. The configuration of the composite information platform apparatus in the third embodiment is the same as the configuration of the composite information platform apparatus of the first embodiment of this patent shown in FIG. (Application providing function setting method) is different. Therefore, only the part different from the first embodiment will be described below, and the description of the same part will be omitted. As shown in FIG. 17, a flowchart of the management method (3) (application providing function setting method) of the composite information platform apparatus according to the first embodiment of the present invention shown in FIGS. The part for setting the sub-router device 116 is different. That is, in the first embodiment, the configuration setting information of the composite information platform apparatus 101 is acquired from the management terminal 117, and the configuration setting information of the sub-router apparatus 116 is acquired from the management terminal 118. In the embodiment, the configuration information of the composite information platform device 101 and the subrouter device 116 is calculated by the management module 103, and the configuration setting of the subrouter device 116 is performed by the management module 103 directly requesting the subrouter device. In the management method of the third embodiment, the application providing function is set by the application providing function setting unit 114 of the management module 103 according to the following procedure. The setting part of the provided application X-b 10612 performed in the first procedure of this management method is the same as the procedure in the first embodiment shown in FIG. 12, step S1201 to step S1206. In the third embodiment, after the provision application Xb 10612 is set, the management module 103 acquires the configuration information of the subrouter device 116 from the subrouter device configuration information 110 (step S1701), and provides the application Xb 10612 to the subrouter device 116. The configuration setting information of the composite information platform device 101 and the subrouter device 116 necessary for this is calculated (step S1702). The management module 103 performs configuration setting based on the calculated configuration setting information of the composite information platform apparatus 101 (step S1703). Further, the management module 103 requests the sub router device 116 to set the configuration of the sub router device 116 via the communication path M1603 of FIG. 16 based on the calculated configuration information of the sub router device 116 (step S1704). The sub-router device 116 receives the request from the management module 103 and sets the configuration of the sub-router device 116 (step S1705), and notifies the management module 103 that the configuration setting of the sub-router device 116 is completed through the communication path M1604 in FIG. (Step S1706). The management module 103 receives the notification from the subrouter device 116, confirms that the configuration setting of the subrouter device 116 is completed (step S1707), and registers the configuration information of the subrouter device 116 in the subrouter device configuration information 110 (step S1707). S1708). The above is the part changed by the third embodiment, and the following procedure is the same as the procedure in the first embodiment shown in FIG. 12, steps S1207 and S1208. According to the third embodiment of the present invention described above, setting to the composite information platform apparatus 101 and the sub switch apparatus 116 for automatically using the application providing function instead of manual input by the administrator can be performed. As a result, it is possible to reduce the man-hours for operation management of the administrator of the composite information platform apparatus 101 and reduce the occurrence rate of human errors.

  Next, the configuration of a composite information platform apparatus according to the fourth embodiment of the present invention will be described with reference to FIGS. FIG. 18 is a block diagram of a composite information platform apparatus according to the fourth embodiment. FIG. 19 is a flowchart of the management method (3) (application providing function setting method) of the composite information platform apparatus according to the fourth embodiment. FIG. 20 is a diagram illustrating an example of a graphical management interface of the composite information platform apparatus according to the fourth embodiment. As shown in FIG. 18, the configuration of the composite information platform apparatus in the fourth embodiment is the same as that of the composite information platform apparatus in the third embodiment of this patent shown in FIG. The application application management interface 1824 for the B management terminal 118 is added. Further, as shown in FIG. 19, the part of the management method (3) (application providing function setting method) of the composite information platform apparatus is different. Therefore, only the part different from the third embodiment will be described below, and the description of the same part will be omitted. As shown in FIG. 19, the flowchart of the management method (3) (application providing function setting method) of the composite information platform apparatus according to the third embodiment of the present invention shown in FIG. The part to be performed using the provided application setting management interface 1824 of the management module 103 is different from the management terminal 118 of the administrator B 116. As illustrated in FIG. 19, activation of the management interface of the provided application X-b 10612 is registered by the management terminal 118 of the administrator B who manages the subrouter device 116 (step S1901). The management interface activation information of the provided application X-b 10612 is notified to the management module 103 via the communication path M1801 in FIG. In response to the notification from the management terminal 118, the management module 103 activates the provided application setting management interface 1824 (step S1902), and provides the provided application setting management interface 1824 to the management terminal 118 via the communication path M1802 in FIG. Is activated (step S1903). The management terminal 118 receives the notification from the management module 103 and confirms the activation of the provided application setting management interface 1824 (step S1904), and the setting information of the provided application X-b 10612 is registered. The setting information of the provided application X-b 10612 is notified to the management module 103 via the communication path M1801 in FIG. 18, and the application providing function is set by the application providing function setting unit 114 of the management module 103. In the fourth embodiment, the setting of the provided application Xb 10612, the setting of the composite information platform apparatus 101, and the setting of the subrouter apparatus 116 are the same as the procedure in the third embodiment shown in FIG. 17, steps S1202 to S1202. This is the same as S1206 and steps S1701 to S1708. Further, in the fourth embodiment, after the above various settings are completed, that is, after the completion of step S1707 in FIG. 19, the management module 103 provides the application Xb provided to the management terminal 118 via the communication path M1802 in FIG. It is notified that the setting of 10612 has been completed (step S1907). The management terminal 118 receives the notification from the management module 103 and confirms that the setting of the provided application X-b 10612 is completed (step S1908). Note that the fourth embodiment includes the procedure for starting the management interface of the provided application X-b 10612, steps S1901 to S1904, but the management interface 1824 may be started simultaneously with the startup of the provided application X-b 10612.

  Next, an example of a graphical interface of the provided application management interface 1824 in the fourth embodiment shown in FIG. 20 will be described. As shown in FIG. 20, the setting management graphical interface 2030 of the application provided for the management terminal 118 of the administrator B of the sub-router device 116 includes an application selection input unit 2031 for selecting at least an application to be set, and an application selection The application X setting input unit 2032 is used to set the application X selected by the input unit 2031. The application selection input unit 2031 includes an application X selection input unit 20331, an application Y selection input unit 20332,... So that the application type provided to the subrouter device 116 can be selected, and the currently selected setting is possible. Indicates the type of application. FIG. 20 shows application types that can be set by setting the application X selection input unit 20331 to a thick frame. In addition, the application X setting input unit includes, for each function of the application X, for example, a setting input unit for each function 1, function 2,..., An application X function 1 setting input unit 20341, an application X function 1 setting input unit 20341,. , And a setting confirmation input unit 2035 for confirming the setting. In FIG. 20, since the application X is selected by the application selection input unit 2031, the application X setting input unit 2032 is selected. However, if another application is selected by the application selection input unit 2031, the application corresponding to that application is selected. Switch to the setting input section. According to the fourth embodiment of the present invention described above, the provided application can be set from the management terminal 118 of the administrator B of the sub-router apparatus 116, and the administrator B knows the setting of the composite information platform apparatus 101. The provided application can be used without it. As a result, it is possible to reduce the man-hours for operation management of the administrator of the sub-router device 116 and reduce the occurrence rate of human errors.

  Next, the configuration of a composite information platform apparatus according to the fifth embodiment of the present invention will be described with reference to FIGS. FIG. 21 is a diagram illustrating an example of application policy information in the fifth embodiment. FIG. 22 is a diagram illustrating an example of application provision state information in the fifth embodiment. FIG. 23 is a flowchart of the management method (2) (application activation method) of the composite information platform apparatus according to the fifth embodiment of the present invention. The configuration of the composite information platform apparatus in the fifth embodiment is the same as that of the composite information platform apparatus of the first embodiment shown in FIG. 1, and is shown in FIG. 4 as shown in FIG. 21 and FIG. Restrictions when providing an application to the sub-router device 116 in the application policy information FT4 in the first embodiment and the application provision state information FT6 in the first embodiment shown in FIG. 6, for example, user authority, CPU usage Conditions such as possible load factor are added. Further, as shown in FIG. 23, the management method of the composite information platform apparatus in the fourth embodiment is the management method (2) (application activation method) of the composite information platform apparatus according to the first embodiment of FIG. ) Is different. Therefore, only the part different from the first embodiment will be described below, and the description of the same part will be omitted. When the application policy information 109 in the fifth embodiment is expressed in a table format, as shown in a table FT21 in FIG. 21, at least an identifier K2101 of a user who uses an application function, an identifier K2102 of an application indicating an application type, and an application type Permission information K2103 indicating availability for each user, maximum number K2104 that can be provided by the composite information platform device 101 for each application type, maximum CPU load that can be used by the composite information platform device 101 application for each application type It is composed of columns of rate K2105. In the example shown in FIG. 21, a user whose user identifier is user B can provide application X, the maximum number that can be provided is 2, and the maximum CPU load factor is 50%, while application Y is provided. It is impossible. Further, when the application provision state information 111 in the fifth embodiment is represented in a table format, as shown in a table FT22 in FIG. CPU load factor K2208. In the example shown in FIG. 22, the application providing status of the sub-router device 116 with the serial number C0001 is that the user is the user B and the set maximum CPU load rate is 30%. As shown in FIG. 23, the flowchart of the management method (2) (application activation method) of the composite information platform apparatus according to the first embodiment of FIG. 10 and the application of FIG. 21 when the provided application Xb 10612 is activated. The part for determining whether or not the provided application Xb 10612 can be provided to the sub-router device 116 using the constraint condition of the policy information FT21 is different. That is, the management module 103 acquires a constraint condition from the application policy information 111 (step S2301), and a procedure for determining whether the provided application X-b 10612 can be provided based on the constraint condition (step S2302) is added. In the fifth embodiment, the management method (2) (application activation method) of the other composite information platform apparatus, the procedure in the first embodiment shown in FIG. 10, steps S1001 to S1003, and steps The same as S1005 to step S1018. According to the fifth embodiment of the present invention described above, when the application of the composite information platform apparatus 101 is provided to the sub-router apparatus 116, a restriction condition can be added to whether or not the application can be provided. This makes it possible to control the plurality of applications 10611, 10612, and 10621 running on the composite information platform apparatus 101 in more detail.

  Next, the configuration of a composite information platform apparatus according to the sixth embodiment of the present invention will be described with reference to FIG. FIG. 24 is a block diagram of a composite information platform apparatus according to the sixth embodiment. As shown in FIG. 24, the composite information platform apparatus in the sixth embodiment virtually operates one general-purpose processing module by causing a general-purpose processing module to operate a virtual machine monitor (VMM) 2425. The system is divided into a plurality of partitions, and an operation system (OS) 2426 for each of the applications 10611, 10621, and 10612 is operated on the partition. Other configurations and management methods are the same as those of the first embodiment shown in FIG. By using the virtual machine monitor 2425 described above, the applications 10611, 10621, and 10612 can be operated on different operation systems 2326, and software faults of the applications 10611, 10621, and 10612 and the operation system 2326 can be isolated and Security can be ensured.

  The invention made by the inventor has been specifically described based on the embodiments. However, the present invention is not limited to the embodiments, and various modifications can be made without departing from the scope of the invention. Not too long.

  The composite information platform device and the management method of the composite information platform device according to the present invention include a data packet processing function such as a security function, a high reliability function, and a protocol encapsulation function in a network for an IT system such as an enterprise data center. Can be applied to an information platform device having

It is a block diagram of the composite type information platform apparatus of 1st Example of this invention. It is explanatory drawing which shows the transfer method of the data packet in the case of providing an application function to a subrouter apparatus in the said Example. It is a data structure figure which shows the subrouter apparatus specification information of the said Example. It is a data structure figure which shows the application policy information in the said Example. It is a data structure figure which shows the subrouter apparatus structure information in the said Example. It is a data structure figure which shows the application provision status information in the said Example. It is explanatory drawing which showed the subrouter apparatus registration method of the said Example. It is a flowchart of the subrouter apparatus registration method of the said Example. It is explanatory drawing which showed the application starting method of the said Example. It is a flowchart of the application starting method of the said Example. It is explanatory drawing which showed the application provision function setting method of the said Example. It is a flowchart of the application provision function setting method by the said Example. It is a flowchart by the side of the subrouter apparatus of the application provision function setting method by the said Example. It is explanatory drawing which showed the subrouter apparatus registration method by the 2nd Example of this invention. It is a flowchart of the subrouter apparatus registration method by the said 2nd Example. It is explanatory drawing which showed the application provision function setting method by the 3rd Example of this invention. It is a flowchart of the application provision function setting method by the said 3rd Example. It is a block diagram of the composite-type information platform apparatus of the 4th Example of this invention. It is a flowchart of the application provision function setting method by the said 4th Example. It is a figure which shows the graphical management interface of the said 4th Example. It is a figure which shows an example of the application policy information in the 5th Example of this invention. It is a figure which shows an example of the application provision status information in the said 5th Example. It is a flowchart of the application starting method by the said 5th Example. It is a block diagram of the composite-type information platform apparatus of the 6th Example of this invention.

Explanation of symbols

101: Complex information platform device,
102: General-purpose processing module
103: Management module,
104: Switch part,
105: Operation system
10611: Application Xa,
10612: Application Xb,
10621: Application Y-in,
1071: Internal port of switch part
1072: Switch external port,
108: Sub-router device specification information,
109: Application policy information,
110: Sub-router device configuration information
111: Application provision status information,
112: Sub-router device registration means,
113: Provided application activation means,
114: Application providing function setting means,
115: Application image
116: Subrouter device
117: Management terminal for administrator A,
118: Management terminal for administrator B
219: Sub-router device management module,
220: Switch part of the sub-router device,
221: External port of the switch part of the subrouter device,
2231, 2232: Host,
1824: Provided application settings management interface,
2030: Provide application settings management graphical interface,
2031: Application selection input section,
2032: Application X setting input part,
20331: Application X selection input section,
20332: Application Y selection input section,
20341: Application X function 1 setting input section,
20342: Application X function 2 setting input part,
2035: Setting confirmation input section,
2425: Virtual machine monitor,
2426: Operation system,
FT3: Sub router device specification information table,
FT4: Application policy information table,
FT5: Sub-router device configuration information table,
FT6: Application provision status information table,
FT21: Application policy information table,
FT22: Application provision status information table,
IL: Physical wiring inside the complex information platform device,
MIL: Physical wiring for management inside the complex information platform equipment,
MOL: external physical wiring for management for complex information platform equipment,
OL: Physical wiring that connects the complex information platform device and the sub-router device,
RMOL: External physical wiring for management for the sub-router device,
RMIL: Physical wiring for management inside the sub-router device
ROL: Physical wiring that connects the sub-router device and the host
ODP: Route of packet data when no application is provided,
NDP1, NDP2: Packet data path when application is provided,
M701, M702, M901, M902, M903, M904, M1101, M1102, M1103, M1104, M1105, M1106, M1401, M1402, M1403, M1601, M1602, M1603, M1604, M1801, M1802: Management method for a composite information platform device Communication path used in

Claims (10)

One or more general-purpose processing modules equipped with one or more processors and having a function of performing general-purpose processing; one or more switch units that connect the general-purpose processing module and an external network to switch communication data; and the general-purpose processing module; In a composite information platform device that includes a management module that manages a switch unit, and in which the general-purpose processing module operates one or more applications that perform one or more types of specific information processing,
The management module is
A subrouter that is information indicating whether it is possible to provide the information processing function of the application for each type of subrouter device that is a router device having a routing mechanism other than the composite information platform device, according to the specifications of the subrouter device Device specification information,
For each type of application, application policy information that is information indicating whether or not to permit providing an information processing function to a sub-router device connected to the composite platform device;
Sub-router device configuration information which is setting information of a sub-router device currently connected to the composite information platform device;
It has a table for holding application provision status information that is allocation status information of the information processing function of the application,
further,
When providing the information processing function of the application to the sub-router device, the configuration information of the sub-router device connected to the composite information platform device can be acquired, and the information processing function of the application can be provided from the sub-router device specification information If it is possible to provide the subrouter device configuration information, the subrouter device configuration information is stored in the subrouter device configuration information and is added to the application provision status information as a subrouter device capable of providing the information processing function of the application. When,
Provided application activation means for activating the application corresponding to the subrouter device from the subrouter device specification information and the subrouter device configuration information on a general-purpose processing module;
Application providing function setting means for setting the provisioning application activated above and starting the provision of the information processing function of the provisioning application, and registering the provision state of the provisioning application in the application provision state information; A combined information platform device characterized by having
The sub-router device registration means acquires configuration information of the sub-router device using a management interface of the sub-router device when the sub-router device is connected to the composite information platform device, and the application information from the sub-router device specification information If the information processing function can be provided, and if it can be provided, the configuration information of the sub-router device is held in the sub-router device configuration information, and the application provision status information as a sub-router device capable of providing the information processing function of the application The composite information platform apparatus according to claim 1, further comprising:   The application providing function setting means calculates sub-router device setting information necessary for providing the information processing function of the application to the sub-router device, and uses the management interface of the sub-router device according to the calculated sub-router device setting information. 2. The composite information platform apparatus according to claim 1, wherein setting is performed for the sub-router apparatus.   2. The composite information platform apparatus according to claim 1, wherein the management module further includes a management interface for setting the providing application for an administrator of the sub-router apparatus.   The application policy information includes user usage authority information of usable users for each type of application, information on the number that can be provided to the sub-router device for each type of application, and a maximum allowable load ratio for each type of application. Information and at least one constraint information of the maximum allowable load ratio of the application for each user, and the provided application activation unit provides the information processing function of the application to the sub-router device based on the constraint information The composite information platform apparatus according to claim 1, wherein whether or not to perform the determination is determined. One or more general-purpose processing modules equipped with one or more processors and having a function of performing general-purpose processing; one or more switch units that connect the general-purpose processing module and an external network to switch communication data; and the general-purpose processing module; In the management method of a composite information platform apparatus, comprising: a management module that manages a switch unit, wherein the general-purpose processing module operates one or more applications that perform one or more types of specific information processing;
When providing an information processing function of the application to a sub-router device that is a router device having a routing mechanism other than the composite information platform device,
Subrouter device specification information, which is information indicating whether it is possible to obtain configuration information of the subrouter device connected to the composite information platform device and provide an information processing function of the application according to the specifications of the subrouter device Determining whether it is possible to provide the information processing function of the application based on :
If it is possible to provide, the step of holding the configuration information of the sub-router device as sub-router device configuration information that is the setting information of the sub-router device currently connected to the composite information platform device;
Adding the identification information of the sub-router device to the application provision state information as a sub-router device capable of providing the information processing function of the application;
Starting the application corresponding to the sub-router device from the sub-router device specification information and the sub-router device configuration information on a general-purpose processing module;
The step of setting the provisioning application launched above,
Starting to provide an information processing function of the providing application;
And registering the provision state of the application for provision in the application provision state information corresponding to the identification information of the added sub-router device.   The composite type information according to claim 6, wherein the acquisition of the configuration information of the subrouter device is performed using a management interface of the subrouter device when the subrouter device is connected to the composite type information platform device. Platform device management method.   When providing the information processing function of the application to the sub-router device, calculate the sub-router device setting information necessary to provide the information processing function of the application to the sub-router device, and according to the calculated sub-router device setting information 7. The management method for a composite information platform apparatus according to claim 6, further comprising a step of setting the sub router apparatus using a management interface of the sub router apparatus.   The method further comprises a step of starting a management interface for setting the providing application for a manager of the sub-router device, and the setting of the providing application is performed based on setting information from the management interface. A method for managing a composite information platform apparatus according to claim 6.   Application policy information that is information indicating whether or not to provide an information processing function to a sub-router device connected to the composite platform device, user usage authority information of a user that can be used for each type of the application, At least one constraint information among information on the number of applications that can be provided to the sub-router device for each application type, information on the maximum allowable load ratio for each application type, and information on the maximum allowable load ratio for each application for each user And determining whether or not to provide an information processing function of the application to the sub-router device based on the constraint information.

Images