Control apparatus, communication system, switch control method and program

1. A control apparatus, connected to a switch provided with a function to process packets by sequentially referring to a plurality of flow tables having priorities, the control apparatus comprising:

a processor configured to execute program instructions to:

generate entry information to be set in each of a first flow table having predetermined item(s) as match conditions among information that is configured to be set as match conditions, and a second flow table that has item(s), as match conditions, that are different from the first flow table, and that is referred to when an entry of the first flow table is hit;

instruct the switch to update the first flow table and the second flow table, based on the generated entry information; and

manage content of the first flow table and the second flow table of the switch.

2. The control apparatus according to claim 1 , wherein

said entry generation unit additionally determines change content of said first and second flow tables by referring to said entry management unit when a necessity occurs to change an existing flow, and

said entry operation unit instructs said switch to update said first and second flow tables, based on said determined change content.

3. The control apparatus according to claim 2 , wherein, according to M entries stored in said first flow table and N entries stored in said second flow table, said control apparatus controls M N flows that have different match conditions, by M+N entries.

4. The control apparatus according to claim 2 , wherein

said entry management unit stores setting information determining item(s) to be used as match conditions by a first flow table, and item(s) to be used as match conditions by a second flow table, decided in advance, and

said entry generation unit, after generating an assumed entry having a match condition for distinguishing a packet requested by said switch, refers to said setting information, decomposes said match condition, and generates entry information to be set in said first and second flow tables.

5. The control apparatus according to claim 2 , wherein

said entry generation unit additionally generates entry information to be set in a third flow table that has item(s), as match conditions, that are different from said second flow table, and that is referred to when an entry of said second flow table is hit, and

said entry operation unit instructs said switch to update said first to third flow tables, based on said generated entry information.

6. The control apparatus according to claim 1 , wherein, according to M entries stored in said first flow table and N entries stored in said second flow table, said control apparatus controls M N flows that have different match conditions, by M+N entries.

7. The control apparatus according to claim 6 , wherein

said entry management unit stores setting information determining item(s) to be used as match conditions by a first flow table, and item(s) to be used as match conditions by a second flow table, decided in advance, and

said entry generation unit, after generating an assumed entry having a match condition for distinguishing a packet requested by said switch, refers to said setting information, decomposes said match condition, and generates entry information to be set in said first and second flow tables.

8. The control apparatus according to claim 6 , wherein

said entry generation unit additionally generates entry information to be set in a third flow table that has item(s), as match conditions, that are different from said second flow table, and that is referred to when an entry of said second flow table is hit, and

said entry operation unit instructs said switch to update said first to third flow tables, based on said generated entry information.

9. The control apparatus according to claim 1 , wherein

said entry management unit stores setting information determining item(s) to be used as match conditions by a first flow table, and item(s) to be used as match conditions by a second flow table, decided in advance, and

said entry generation unit, after generating an assumed entry having a match condition for distinguishing a packet requested by said switch, refers to said setting information, decomposes said match condition, and generates entry information to be set in said first and second flow tables.

10. The control apparatus according to claim 9 , wherein

said entry generation unit additionally generates entry information to be set in a third flow table that has item(s), as match conditions, that are different from said second flow table, and that is referred to when an entry of said second flow table is hit, and

said entry operation unit instructs said switch to update said first to third flow tables, based on said generated entry information.

11. The control apparatus according to claim 1 , wherein

said entry generation unit additionally generates entry information to be set in a third flow table that has item(s), as match conditions, that are different from said second flow table, and that is referred to when an entry of said second flow table is hit, and

said entry operation unit instructs said switch to update said first to third flow tables, based on said generated entry information.

12. The control apparatus according to claim 1 , wherein the switch comprises the plurality of flow tables including the first and second flow tables that have priorities, and

wherein the switch comprises the second flow table that is referred to by the entry generation unit when an entry of the first flow table is hit.

13. A communication system, comprising:

a switch provided with a function to process packets by sequentially referring to a plurality of flow tables having priorities; and

a control apparatus connected to the switch, comprising:

a processor configured to execute program instructions to:

generate entry information to be set in each of a first flow table having predetermined item(s) as match conditions among information that is configured to be set as match conditions, and a second flow table that has item(s), as match conditions, that are different from said first flow table, and that is referred to when an entry of said first flow table is hit;

instruct said switch to update said first and second flow tables, based on said generated entry information; and

manage content of each flow table of said switch.

14. The communication system according to claim 13 , wherein, according to M entries stored in said first flow table and N entries stored in said second flow table, said control apparatus controls M N flows that have different match conditions, by M+N entries.

15. The communication system according to claim 13 , wherein

when generating, said processor stores setting information that determines item(s) to be used as match conditions by a first flow table, and item(s) to be used as match conditions by a second flow table, decided in advance, and

when managing, said processor, after generating an assumed entry having a match condition for distinguishing a packet requested from said switch, refers to said setting information, decomposes said match condition, and generates entry information to be set in said first and second flow tables.

16. The communication system according to claim 13 , wherein the switch comprises the plurality of flow tables that have priorities, and

wherein the switch comprises the first flow table, and the second flow table that is referred to when an entry of the first flow table is hit.

17. The communication system according to claim 13 , wherein the switch comprises a single switch comprising the plurality of flow tables including the first and second flow tables that have priorities, and

wherein the single switch comprises the first flow table, and the second flow table that is referred to when an entry of the first flow table is hit.

18. A switch control method, comprising:

generating entry information, by a processor, to be set in each of a first flow table having predetermined item(s) as match conditions among information that is configured to be set as match conditions, and a second flow table that has item(s), as match conditions, that are different from said first flow table, and that is referred to when an entry of said first flow table is hit, and

instructing, by the processor, a switch provided with a function to process packets by sequentially referring to a plurality of flow tables having priorities, to update said first and second flow tables, based on said generated entry information, and

managing content, by the processor, of each flow table of said switch.

19. The switch control method according to claim 18 , wherein the switch comprises the plurality of flow tables including the first and second flow tables that have priorities, and

wherein the switch comprises the first flow table, and the second flow table that is referred to when an entry of the first flow table is hit.

20. A non-transitory computer-readable storage medium storing a program that executes, in a computer that controls a switch provided with a function to process packets by sequentially referring to a plurality of flow tables having priorities:

a process of generating entry information to be set in each of a first flow table having predetermined item(s) as match conditions among information that can be set as match conditions, and a second flow table that has item(s), as match conditions, that are different from said first flow table, and that is referred to when an entry of said first flow table is hit, and

a process of instructing a switch provided with a function to process packets by sequentially referring to a plurality of flow tables having priorities, to update said first and second flow tables, based on said generated entry information.