Switch system, and monitoring centralized control method
A switch system allows free change of a grain degree of monitoring without being conscious of a routing control. For example, a control protocol of a transmitter is used based on the open flow (OpenFlow) technique to control the monitoring function of the switch system, and the centralized control of the monitoring can be realized as the whole network and the monitoring result is reflected on the routing control. Here, the switch has a flow table for packet transfer and a flow table for monitoring. Both of the tables are searched to one packet and a multi-hit operation is performed to execute the operation of each of the entries. That is, both the tables are searched and the packet is transferred according to corresponding flow entries.
1. A switch apparatus, comprising:
a memory storing a first flow table and a second flow table;
and a processor configured to execute instructions to:
receive, from an external control apparatus which connects with the switch apparatus, a first flow entry stored in the first flow table and a second flow entry stored in the second flow table, include a matching rule to identify a received packet and an action to forwarding the packet;
compare the received packet to the matching rule of the first flow table;
compare the received packet to the matching rule of the second flow table;
process the received packet, based on the action of the first flow table and the action of the second flow table, in response to the received packet that matches both the matching rule of the first flow table and the matching rule of the second flow table; and
forward, from the first flow table, the received packet to the control apparatus;
wherein the first flow table comprises a transfer table, and the second flow table comprises a monitoring table,
wherein the monitoring table comprises a mirroring entry and a statistic entry,
wherein the mirroring entry comprises a flow entry to transfer the received packet to an optional destination.
2. The switch apparatus according to claim 1 , wherein the processor is further configured to execute the instructions to:
forward, from the second flow table, the received packet to a second switch apparatus.
3. The switch apparatus according to claim 1 , wherein the processor is further configured to execute the instructions to:
copy the received packet; and
create two identical packets.
4. The switch apparatus according to claim 3 , wherein the processor is further configured to execute the instructions to:
transfer one of the two identical packets to a destination; and
transfer another one of the two identical packets to the control apparatus.
5. The switch apparatus according to claim 1 ,
wherein the first flow table relates to transfer actions, and the second flow table relates to monitoring actions.
6. A switch apparatus system, comprising:
a switch;
a control apparatus connected with the switch; and
a neighboring switch connected with the switch,
wherein the switch comprises:
a memory storing a first flow table and a second flow table; and
a processor configured to execute instructions to:
receive, from the control apparatus, a first flow entry stored in the first flow table and a second flow entry stored in the second flow table, wherein the first flow entry and the second flow entry include a matching rule to identify a received packet and an action to forwarding the packet;
compare the received packet to the matching rule of the first flow table;
compare the received packet to the matching rule of the second flow table;
process the received packet, based on the action of the first flow table and the action of the second flow table, in response to the received packet that matches both the matching rule of the first flow table and the matching rule of the second flow table; and
forward, from the first flow table, the received packet to the control apparatus;
wherein the first flow table comprises a transfer table, and the second flow table comprises a monitoring table,
wherein the monitoring table comprises a mirroring entry and a statistic entry,
wherein the mirroring entry comprises a flow entry to transfer the received packet to an optional destination.
7. The switch apparatus system according to claim 6 , wherein the processor is further configured to execute the instructions to:
forward, from the second flow table, the received packet to a second switch apparatus.
8. The switch apparatus system according to claim 6 , wherein the processor is further configured to execute the instructions to:
copy the received packet; and
create two identical packets.
9. The switch apparatus system according to claim 8 , wherein the processor is further configured to execute the instructions to:
transfer one of the two identical packets to a destination; and
transfer another one of the two identical packets to the control apparatus.
10. A method for a switch apparatus, the method comprising:
receiving, from an external control apparatus which connects with the switch apparatus, a first flow entry stored in a first flow table and a second flow entry stored in a second flow table, wherein the first flow entry and the second flow entry include a matching rule to identify a received packet and an action to forwarding the packet;
comparing a received packet to the matching rule of the first flow table;
comparing the received packet to the matching rule of the second flow table;
processing the received packet, based on the action of the first flow table and the action of the second flow table, in response to the received packet that matches both the matching rule of the first flow table and the matching rule of the second flow table: and
forwarding, from the first flow table, the received packet to the control apparatus;
wherein the first flow table comprises a transfer table, and the second flow table comprises a monitoring table,
wherein the monitoring table comprises a mirroring entry and a statistic entry,
wherein the mirroring entry comprises a flow entry to transfer the received packet to an optional destination.
11. The method for a switch apparatus according to claim 10 , further comprising:
forwarding, from the second flow table, the received packet to a second switch apparatus.
12. The method for a switch apparatus according to claim 10 , further comprising:
copying the received packet; and
creating two identical packets.
13. The method for a switch apparatus according to claim 12 , further comprising:
transferring one of the two identical packets to a destination; and
transferring another one of the two identical packets to the control apparatus.
14. A non-transitory computer-readable storage medium which stores a control program of a switch apparatus, wherein the control program, when executed by a computer, causes the switch apparatus to execute a method, the method comprising:
receiving, from an external control apparatus which connects with the switch apparatus, a first flow entry stored in a first flow table and a second flow entry stored in a second flow table, wherein the first flow entry and the second flow entry include a matching rule to identify a received packet and an action to forwarding the packet;
comparing a received packet to the matching rule of the first flow table;
comparing the received packet to the matching rule of the second flow table;
processing the received packet, based on the action of the first flow table and the action of the second flow table, in response to the received packet that matches both the matching rule of the first flow table and the matching rule of the second flow table; and
forwarding, from the first flow table, the received packet to the control apparatus;
wherein the first flow table comprises a transfer table, and the second flow table comprises a monitoring table,
wherein the monitoring table comprises a mirroring entry and a statistic entry,
wherein the mirroring entry comprises a flow entry to transfer the received packet to an optional destination.
15. The computer-readable storage medium according to claim 14 , further comprising:
forwarding, from the second flow table, the received packet to a second switch apparatus.
16. The computer-readable storage medium according to claim 15 , further comprising:
copying the received packet; and
creating two identical packets.