Access control device, access control method, and recording medium containing access control program
To avoid degradation of access performance and resource use efficiency when a multi-node system utilizing a resource-disaggregated architecture makes data access across nodes under the control of software and the like which are not compatible with the resource-disaggregated architecture, an access control unit 410 - 1 is a unit included in an access control system 2 , wherein remote access from a first processor 420 - 1 to a second information processing resource 440 - 2 is made via first and second communication networks, and is equipped with: a determination part 411 - 1 for determining whether or not the access made by the first processor 420 - 1 is remote access; and an access conversion part 412 - 1 for converting, when the access is remote access, the remote access to local access by updating access destination management information 432 - 1 such that the second information processing resource is associated with a first information processing device.
1. An access control device which controls communication access in a system configured in such a way that a first processor included in a first information processing device and a second processor included in a second information processing device are communicably connected by a first communication network, the first processor, a first information processing resource included in the first information processing device and a second information processing resource included in the second information processing device are communicably connected by a second communication network, local access to the first information processing resource from the first processor is performed via the second communication network, and remote access to the second information processing resource from the first processor is performed via the first and second communication networks, the access control device comprising:
a determination unit configured to, when the first processor gives a different value as an identifier by which the second information processing device is able to be identified according to a classification of the remote access, determine whether or not the identifier being classification information by which the classification of the remote access is able to be distinguished indicates the particular value; and
a conversion unit configured to, when the determination unit determines that the access is the remote access whose classification information indicates the particular value, convert the remote access into the local access by updating access destination management information associating the second information processing resource with the second information processing device, in such a way as to associate the second information processing resource with the first information processing device.
2. The access control device according to claim 1 , wherein
the conversion unit converts the remote access into the local access by updating the access destination management information managed by a domain name system, or a file system of an operating system.
3. The access control device according to claim 1 , wherein
the conversion unit converts the remote access into the local access by updating the access destination management information managed by a metadata server.
4. The access control device according to claim 1 , wherein
the conversion unit converts the remote access into the local access by updating the access destination management information managed by a module included in distributed processing middleware executed by the first information processing device.
5. The access control device according to claim 1 , wherein,
when the second information processing device includes a storage cache storing data on access to the second information processing resource being a storage device,
the determination unit determines whether or not data targeted for the remote access are in the storage cache, and
the conversion unit stops conversion from the remote access into the local access when data targeted for the remote access are in the storage cache.
6. An access control device according to claim 1 further comprising:
the first and second information processing devices; and
the first and second communication networks.
7. An access control method comprising: in a system configured in such a way that a first processor included in a first information processing device and a second processor included in a second information processing device are communicably connected by a first communication network, the first processor, a first information processing resource included in the first information processing device and a second information processing resource included in the second information processing device are communicably connected by a second communication network, local access to the first information processing resource from the first processor is performed via the second communication network, and remote access to the second information processing resource from the first processor is performed via the first and second communication networks,
by a third information processing device,
when the first processor gives a different value as an identifier by which the second information processing device is able to be identified according to a classification of the remote access, determining whether or not the identifier being classification information by which the classification of the remote access is able to be distinguished indicates the particular value; and,
when the access is determined to be the remote access whose classification information indicates the particular value, converting the remote access into the local access by updating access destination management information associating the second information processing resource with the second information processing device, in such a way as to associate the second information processing resource with the first information processing device.
8. A non-transitory computer readable recording medium storing an access control program causing a computer included in a system configured in such a way that a first processor included in a first information processing device and a second processor included in a second information processing device are communicably connected by a first communication network, the first processor, a first information processing resource included in the first information processing device and a second information processing resource included in the second information processing device are communicably connected by a second communication network, local access to the first information processing resource from the first processor is performed via the second communication network, and remote access to the second information processing resource from the first processor is performed via the first and second communication networks, to execute
determination processing of, when the first processor gives a different value as an identifier by which the second information processing device is able to be identified according to a classification of the remote access, determining whether or not the identifier being classification information by which the classification of the remote access is able to be distinguished indicates the particular value; and
conversion processing of, when the determination processing determines that the access is the remote access whose classification information indicates the particular value, converting the remote access into the local access by updating access destination management information associating the second information processing resource with the second information processing device, in such a way as to associate the second information processing resource with the first information processing device.