JP2014525155A - Computer-implemented method, computer program, and data processing system for configuration and management of virtual network - Google Patents

Abstract

【Task】
A hardware management console (HMC) forms a virtual network. The HMC extends Internal Queued Direct I / O to an intra-ensemble data network (IEDN) in a cluster of virtual servers to define single channel path identifiers and to define channel parameters. The HMC defines at least one virtual network. The HMC defines a bridge port in each CPC that supports at least one of the virtual servers. The HMC defines a network interface for each virtual server in each cluster. The HMC grants access to the corresponding virtual network for each virtual server.
[Selection] Figure 8

Description

  The present invention relates generally to computer-implemented methods, data processing systems, and computer program products for networking. More specifically, the present invention relates to the provision and / or configuration of virtual machines on corresponding virtual networks.

  Current data center customers need to address the business environment where a new service provider (or customer) can become a disruptor in a year and be destroyed in the following year. Thus, if a customer seeks scalable data processing resources, the customer may require computing power beyond one data processing center.

  In a grid or cloud computing environment, several virtual servers can be assigned to customer tasks by the data center operator. Virtual servers are geographically distributed and can rely on the Internet to exchange work units between them, which can complicate the network topology that establishes system integrity. In conventional solutions, the data center operator will dedicate multiple HMCs (Hardware Management Consoles) to the operations that make up each virtual server set within each data center. In addition to assigning separate internal and external virtual and physical LAN segments to customer virtual servers in each data center, customers are addressing multiple administrative domains. Therefore, it takes time to set up daily administrative management and expansion to a plurality of LAN segments, which may delay the introduction of special functions to the service to customers. Further, conventionally, single data center operations are often assigned to administrators one at a time. Thus, multiple data centers have been managed by multiple administrators, and the task of linking all these functions has been assigned to another administrator.

US Pat. No. 6,854,021 US Patent Application No. 13155153 (reference number AUS920110134US1)

  Accordingly, improvements and improvements are sought.

  The present invention provides a computer-implemented method, a data processing system, and a computer program product for configuring a virtual network using a hardware management root source (HMC). HMC extends the internal network of multiple central processing complexes (CPC) provided by Internal Queued Direct I / O to an intra-ensemble data network (IEDN) in a cluster of virtual servers called ensembles. . The Internal Queued Direct I / O network within each CPC is extended to IEDN by defining a single channel path identifier with channel parameters. The HMC defines a plurality of virtual networks. The HMC defines a virtual switch with a bridge port in each CPC. The HMC defines a network interface for each virtual server in each cluster. The HMC defines and controls access to the corresponding virtual network for each virtual server.

  Viewed from a first aspect, the present invention provides a computer-implemented method for configuring a virtual network, the computer-implemented method for defining a single channel path identifier and for defining channel parameters. Extending Internal Queued Direct I / O to an intra-ensemble data network (IEDN) in a cluster of virtual servers, defining at least one virtual network, at least within each CPC that supports at least one virtual server Including defining one bridge port, defining a network interface for each virtual server in each cluster, and allowing access to the corresponding virtual network for each virtual server.

  Viewed from another aspect, the present invention provides a computer program product for configuring a virtual network, the computer program product being readable by a processing circuit, and a method for performing the steps of the present invention. A computer-readable storage medium storing instructions for execution by the processing circuitry to execute

  Viewed from another aspect, the present invention provides a data processing system for configuring a virtual network, the processing system comprising one or more processors, one or more computer readable memories, and one or more Multiple computer readable tangible storage devices and Internal Queued Direct I / O to define a single channel path identifier and channel parameters in an intra-ensemble data network (IEDN) within a cluster of virtual servers To define at least one bridge port in each CPC that supports at least one of the virtual servers; and defining means for defining at least one virtual network; Definition means that can further operate in each cluster and each virtual server in each cluster. Comprising the further operable definition means to define the network interface, and a more operable definition means to define access to the corresponding virtual network for each virtual server for server.

  Viewed from another aspect, the present invention provides a data processing system for configuring a virtual network, the processing system comprising one or more processors, one or more computer readable memories, and one or more Multiple computer readable tangible storage devices and Internal Queued Direct I / O to define a single channel path identifier and channel parameters in an intra-ensemble data network (IEDN) within a cluster of virtual servers Of one or more storage devices for execution by at least one of the one or more processors via at least one of the one or more memories Program instructions stored on at least one and at least one virtual net Of one or more storage devices for execution by at least one of the one or more processors via at least one of the one or more memories to define a Via at least one of one or more memories to define at least one program instruction stored on at least one and at least one bridge port in each CPC that supports at least one virtual server Program instructions stored on at least one of the one or more storage devices for execution by at least one of the one or more processors and a network for each virtual server in each cluster One or more via at least one of one or more memories to define the interface Defines program instructions stored on at least one of the one or more storage devices for execution by at least one of the plurality of processors and access to the corresponding virtual network for each virtual server On at least one of the one or more storage devices for execution by at least one of the one or more processors via at least one of the one or more memories Are stored with program instructions.

  Viewed from another aspect, the present invention is stored on a computer readable medium and can be loaded into the internal memory of a digital computer to perform the steps of the present invention when the program is executed on the computer. A computer program comprising a software code portion of

  The present invention will now be described by way of example only with reference to preferred embodiments as illustrated in the following drawings.

1 is a block diagram illustrating a data processing system according to an exemplary embodiment of the present invention. FIG. 3 illustrates a central processing complex in accordance with an exemplary embodiment of the present invention. FIG. 4 shows a data structure for a channel path identifier (CHPID) configuration according to an exemplary embodiment of the present invention. FIG. 4 illustrates a data structure for a virtual server configuration according to an exemplary embodiment of the present invention. FIG. 4 illustrates a data structure for a virtual network configuration according to an exemplary embodiment of the present invention. FIG. 4 illustrates a data structure for bridge port configuration, in accordance with an exemplary embodiment of the present invention. FIG. 2 is a block diagram illustrating a virtual switch or vswitch configuration and virtualization within a central processing complex (CPC), in accordance with an exemplary embodiment of the present invention. 4 is a flow diagram illustrating an administrator's operation for configuring a virtual network, in accordance with an exemplary embodiment of the present invention. FIG. 3 illustrates a logical configuration of at least one virtual network in accordance with an exemplary embodiment of the present invention. FIG. 6 illustrates a logical arrangement of vswitches and other configuration mechanisms to allow two virtual servers to communicate according to an exemplary embodiment of the present invention.

  With reference now to the figures and in particular with reference to FIG. 1, a block diagram of a data processing system is shown in which aspects of an illustrative embodiment may be implemented. Data processing system 100 is an example of a computer in which code or instructions implementing the process of the present invention may be located. In the example shown, data processing system 100 includes north bridge and memory controller hub (NB / MCH) 102 and south bridge and input / output (I / O) controller hub (SB / ICH)) 104. Including a hub architecture. Processor 106, main memory 108, and graphics processor 110 are connected to north bridge and memory controller hub 102. The graphics processor 110 can be connected to the NB / MCH through, for example, an accelerated graphics port (AGP).

  In the example shown, network adapter 112 connects to south bridge and I / O controller hub 104, and includes audio adapter 116, keyboard and mouse adapter 120, IBM (R) HiperSockets (TM) physical interface 122, Read-only memory (ROM) 124, hard disk drive (HDD) 126, CD-ROM drive 130, universal serial bus (USB) and other ports 132, and PCI / PCIe device 134 include bus 138 and bus 140 connects to the South Bridge and I / O controller hub 104. IBM, z9, z / VM, and HiperSockets are trademarks of International Business Machines Corporation, registered in many jurisdictions around the world. HiperSockets is referred to herein as equivalent to Internal Queued Direct Input / Output (IQDIO). PCI / PCIe devices can include, for example, Ethernet adapters, add-in cards, and PC cards for notebook computers. PCI uses a card bus controller, but PCIe is not used. ROM 124 can be, for example, a flash binary input / output system (BIOS). The hard disk drive 126 and the CD-ROM drive 130 may use, for example, an Integrated Drive Electronics (IDE) or Serial Advanced Technology Attachment (SATA) interface. Super I / O (SIO) device 136 may be connected to south bridge and I / O controller hub 104 through bus 138, for example.

  An operating system runs on processor 106 and coordinates and provides control of various components within data processing system 100 of FIG. The operating system can be a commercially available operating system such as Microsoft® Windows® XP. Microsoft and Windows are trademarks of Microsoft Corporation in the United States, other countries, or both. An object-oriented programming system, such as a Java (TM) programming system, can be executed in connection with the operating system and called into the operating system from a Java (TM) program or application running on the data processing system 100 I will provide a. Java and all Java-based trademarks and logos are trademarks or registered trademarks of Oracle and / or its affiliates.

  Instructions for operating systems, object-oriented programming systems, and applications or programs are located on a computer-readable tangible storage device, such as hard disk drive 126, in main memory 108 for execution by processor 106. Can be loaded. The process of the present invention may be performed by processor 106 using computer-implemented instructions that may be located in memory, such as main memory 108, read-only memory 124, or one or more peripheral devices.

  One skilled in the art will appreciate that the hardware in FIG. 1 can vary depending on the implementation. Other internal hardware or peripheral devices such as flash memory, equivalent non-volatile memory can be used in addition to or instead of the hardware shown in FIG. Further, the processes of the exemplary embodiments are applicable to multiprocessor data processing systems.

  In some examples, the data processing system 100 is a personal digital assistant configured with flash memory to provide non-volatile memory for storing operating system files and / or user generated data. (PDA). A bus system may consist of one or more buses, such as a system bus, an I / O bus, and a PCI bus. Of course, the bus system can be implemented using any type of communication fabric or architecture that provides for the transfer of data between different components or devices connected to the fabric or architecture. The communication unit may include one or more devices used to send and receive data, such as HiperSockets physical interface 122 or network adapter 112. The memory can be, for example, the main memory 108 or a cache such as found in the North Bridge and Memory Controller Hub 102. The processing unit can include one or more processors or CPUs. The example shown in FIG. 1 is not meant to imply architectural limitations. For example, in addition to taking the form of a PDA, the data processing system 100 can be a tablet computer, a laptop computer, or a telephone device.

  The operation of the communication unit can form the terminal point of the channel. A channel provides a path between an I / O device and memory or between I / O devices. A channel can be identified by a channel path identifier (CHPID). The physical location of the channel is described using its physical channel identifier (PCHID). Data processing system 100 may be entirely on a single card that can be placed in a frame that houses many data processing systems, such as, for example, a central processing complex (CPC) of a z9 (TM) mainframe. it can. It will be appreciated that some functions, such as storage functions, can be located either in the frame or in the data center.

  The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the invention. As used herein, the singular forms “a”, “an”, and “the” are intended to include the plural forms as well, unless the context clearly indicates otherwise. In addition, the terms “include” and / or “include”, as used herein, specify the indicated function, integer, step, action, element, or component, or the presence of all of them. It will be understood, however, that it does not exclude the presence or addition of one or more other functions, integers, steps, operations, elements, components, or groups thereof, or all of them.

  The corresponding structures, materials, acts, and equivalents of all means or steps and functional elements within the scope of the following claims are intended to perform functions in combination with other specifically claimed elements. It is intended to include any structure, material, or operation. The description of the present invention has been presented for purposes of illustration and description, and is not intended to be exhaustive or limited to the invention in the form disclosed. Many modifications and variations will be apparent to those skilled in the art without departing from the scope and spirit of the invention. The embodiments are intended to best illustrate the principles and practical applications of the present invention, as well as to various embodiments with various modifications suitable for the particular application contemplated by others skilled in the art. It has been chosen and described for clarity.

  As will be appreciated by one skilled in the art, aspects of the present invention may be embodied as a system, method, or computer program product. Accordingly, aspects of the present invention may be implemented entirely in hardware embodiments, entirely software embodiments (including firmware, resident software, microcode, etc.), or all herein as “circuits”, “modules”, Or, it may take the form of an embodiment combining software and hardware aspects that may be referred to as a “system”. Furthermore, aspects of the invention may take the form of a computer program product embodied in one or more computer readable media having computer readable program code embodied thereon.

  Any combination of one or more computer readable media can be used. The computer readable medium may be a computer readable signal medium or a computer readable storage medium. The computer readable storage medium can be, for example but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any suitable combination thereof. More specific examples (non-exhaustive list) of computer readable storage media are electrical connections with one or more wires, portable computer diskettes, hard disks, random access memory (RAM), read Dedicated memory (ROM), erasable programmable read only memory (EPROM or flash memory), optical fiber, portable compact disk read only memory (CD-ROM), optical storage device, magnetic storage device, or any of them Suitable combinations are included. In the context of this specification, a computer-readable storage medium is any tangible that can contain or store a program for use by or in connection with an instruction execution system, apparatus, or device. It can be a medium.

  A computer readable signal medium may include a propagated data signal with computer readable program code embodied therein, for example, in baseband or as part of a carrier wave. Such propagated signals can take any of a variety of forms including, but not limited to, electromagnetic, light, or any suitable combination thereof. The computer readable signal medium is not a computer readable storage medium but any computer capable of communicating, propagating, or transporting a program for use by or in connection with an instruction execution system, apparatus, or device. It can be a readable medium.

  Program code embodied on a computer readable medium may be any suitable medium including, but not limited to, wireless, wired, fiber optic cable, RF, etc., or any suitable combination thereof. Can be transmitted.

  Computer program code for performing operations relating to aspects of the present invention includes object-oriented programming languages such as Java, Smalltalk, C ++, and conventional procedural programming languages such as the “C” programming language or similar programming languages. Including any combination of one or more programming languages. The program code may be entirely on the user's computer, partly on the user's computer, as a stand-alone software package, partly on the user's computer and partly on a remote computer, or completely It can be executed on a remote computer or server. In the latter scenario, the remote computer can be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN) (eg, Internet Can connect to an external computer (via the Internet using a service provider).

  Aspects of the present invention are described below with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems) and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to the processor of a general purpose computer, application specific computer, or other programmable data processing device for creating machines, resulting in a computer or other programmable data processing. The instructions executed through the processor of the device will produce a means for implementing the specified function / operation in the flow diagram and / or block diagram.

  These computer program instructions may also be stored in a computer readable medium, with the instructions stored in the computer readable medium being a function / designated in a flow chart and / or block diagram. A computer, other programmable data processing apparatus, or other device can be instructed to function in a particular manner, such as manufacturing a product that includes instructions that implement the operations.

  Computer program instructions cause a sequence of operational steps to be performed on a computer, other programmable device, or other device to create a computer-implemented process, resulting in instructions executing on the computer or other programmable device. May be loaded on a computer, other programmable data processing device, or other device to provide a process for implementing the specified function / operation in the block diagram and / or block diagram Is possible.

  The exemplary embodiment operates at different rates to route packets between servers in a central processing complex (CPC) as well as between servers that exceed a CPC that relies on two networks coupled to a physical interface. Allow users to benefit from using one physical interface. A virtual server can have two physical interfaces, but each server functions as if only a single interface is used, so it can be IPv4, IPv6, or a combination of IPv4 and IPv6 addresses Single IP address is assigned. The exemplary embodiment provides for high-speed communication for virtual servers that communicate within a central processing complex (CPC), although the administrator simplifies network configuration despite the geographically separate data center nodes. Make sure you can still benefit. When processing is complete, for example in FIG. 5 below, a virtual server residing on multiple physical segments of the network actually has a logical connection using the common data link layer 2 local area network segment. . Furthermore, the operation of FIG. 5 can be managed from a single management node, as will be described in comparison with the operation of the prior art.

  The data link layer (2) local area network segment relies on multiple physical segments to behave as a single virtual network segment according to the layer 2 Open Systems Interconnection (OSI) model A logical network segment that can Thus, a device transmitting on the first physical segment can communicate transparently with a device physically connected to the second physical segment.

  FIG. 2 is a medium processing complex according to an exemplary embodiment of the present invention. A central processing complex (CPC) is a mechanical support frame and an electrical connection that provides a fixed path along which data processing system components can communicate. For example, the central processing complex 1 (CPC) 211 may be a shelf, backplane, power / power board that supports one or more logical partitions or virtual servers when installed with memory, non-volatile storage, processors, etc. The main frame. In this example, three virtual servers are virtual server (VS) A.A. 1 251, VS A.1. 2 253, and VS C.I. 1 254. Each server may be in accordance with the data processing system 100 of FIG. Each server can be interconnected using an intra-ensemble data network (IEDN) 250, for example, via an Ethernet network 220 using an Ethernet adapter. In addition, servers on the same CPC can be interconnected using the HiperSockets network 210 (which is a subset of IEDN) via the HiperSockets interface.

  A server and a virtual server can be distinguished in that the server is a collection of cooperating physical parts that make up the data processing system. On the other hand, a virtual server is a logically defined server that can share server resources with multiple virtual servers while still maintaining isolation between virtual servers. A distributed resource of the system. Thus, failure of logical operations within a virtual server can occur without affecting other virtual servers that share the underlying physical server resources. An example of a virtual server is a logical partition. Virtual servers are sometimes known as guest virtual machines that are loaded with an operating system image. A logical partition can support a single operating system image or an instance of z / VM that supports multiple virtual machines (servers). The z / VM hypervisor (or z / VM) is a system that virtualizes an actual hardware environment. With this function, a separate virtual environment can be created for anything running on the computer. During operation, the z / VM controls all hardware, memory, and processors that provide resources to its “guest” as needed. z / VM is a virtual machine hypervisor based on z / Architecture® computer software, hardware and firmware. z / Architecture is a trademark of International Business Machines Corporation.

  Server C. Servers such as 1 254 may connect to other servers using separate media in the Ethernet network 220 or HiperSockets network 210. The server selects, for example, the HiperSockets network 210 if the target server is in the same CPC as the source server, and selects the Ethernet network 220 if the target server is not in the same CPC, and so on. You can choose from two networks. In either case, the server can identify itself by using a single IP address (IP address 217) regardless of the physical interface to the Ethernet or HiperSockets network. The target server is the destination to which the packet is sent. The source server is the point of origin for the packet. An intra-ensemble data network (IEDN) is a network of servers that connect using an Ethernet physical interface. Intra-ensemble data networks can only rely on planar media to distribute packets among nodes of IEDN. Planar media can consist of untwisted physical conductors. Planar media can include backplanes, connectors, ribbon cables, and bundle cables. Ethernet media, on the other hand, can rely on twisted pairs of cables or planar media in the frame of the CPC. A twisted pair medium is any wire with at least one conductor pair that swaps positions at least twice along the length of the cable. Thus, benefits may arise if there are two HiperSockets physical interfaces on a common planar medium such as a backplane in a central processing complex (CPC). In such a configuration, embodiments of the present invention transparently use faster HiperSockets connections when available on both the source and destination servers and when the servers rely on a common planar medium. Can do. In contrast, to the extent that the stream will be transported from a server in the CPC to a server located outside the CPC, the stream is routed through the IEDN 250 according to a smaller MTU setting than if the stream relied on the HiperSockets interface. Can be transported as Ethernet packets.

  The HiperSockets physical interface is a device driver on the corresponding server, as described in US Pat. No. 6,854,021, entitled “Communications Between Partitions Within A Logically Partitioned Computer” by Schmidt et al. It can be a dependent bus connector. A HiperSockets physical interface is identified in the hardware I / O configuration by its channel path identifier (CHPID). The CHPID is a data structure or other serial number that identifies the logical identifier of the channel. A channel is a communication path to an I / O device. When an operating system or any application performs I / O to a device through a specific channel, it uses the channel's CHPID to address the physical channel port. The CHPID number is in the range of hexadecimal 00 to hexadecimal FF. The physical layer may include one or more cables according to the Cat-6 standard 802.3z standard, 802.3ab standard, or similar standards.

  The virtual server of CPC 1 211 passes through the intra-ensemble data network 250, for example, the CPC in CPC 3 231; 2 237 and virtual server C.I. Exceeding 3239, data can be exchanged with the virtual server. Other servers in CPC 4 241, ie virtual servers A. 3 243 exists. Physically, each CPC can be disjoint. In other words, the CPC 221 servers can be connected to each other using a planar backplane or a common Ethernet cable. However, in order to address the server beyond CPC 221, a mechanism of intra-ensemble data network 250 is required. These mechanisms can include virtual switches or v-switches. A virtual switch is a virtualized representation of a hardware local area network (LAN) switch. The virtual switch can perform bridging of the z / VM guest LAN or HiperSockets network to an associated real LAN connected by, for example, an Open System Adapter Express (OSA Express) adapter. The vswitch can be configured to handle IEDN traffic. Alternatively, the v-switch can be configured to handle traffic on the customer's external network. When configured to handle IEDN traffic, the virtual switch is referred to as an intra-ensemble data network (IEDN) virtual switch. An IEDN virtual switch is a virtual switch that interconnects IEDN media, such as planar buses and / or Ethernet wiring. The IEDN medium can include other media that support the TCP / IP protocol.

  Each CPC can host one or more virtual servers. For example, CPC 1 211 is a virtual server A.1. 1 251 and virtual server A.1. 2 Host 253. An IP address can be assigned to each virtual server. In the following example, an IPv4 address is assigned to each virtual server. However, it should be understood that IPv6 addresses can be assigned in addition to or as an alternative to IPv4 addresses. For example, virtual server A.I. 1 251 can be assigned an IP address 10.0.1.1, and virtual server A.1. 2 253 can be assigned an IP address 10.0.1.2, and virtual server C.1. 1 254 can be assigned an IP address of 10.0.3.3.1.

  3-6 are data structures for CHPID configuration, virtual server configuration, virtual network configuration, and bridge port configuration, respectively, according to an exemplary embodiment of the present invention. The virtual network is a network composed of both an internal queued direct I / O segment and an IEDN LAN segment.

  FIG. 3 is a relationship between CHPID and one or more channel parameters according to an exemplary embodiment of the present invention. Data in data structure 300 can be stored in non-volatile memory. Each CPC is assigned a CHPID. For example, when defining CPC parameters, CPC 1 in row 301 is assigned IQD CHPID xF1 and channel parameter IQDX. Similar assignments are performed for CPC 2, CPC 3, and CPC 4 in rows 303, 305, and 307, respectively.

  FIG. 4 is a relationship between a virtual server and an Internet Protocol (IP) address according to an exemplary embodiment of the present invention. Data in the data structure 320 can be stored in non-volatile memory. As an example, virtual servers can be assigned as shown in rows 321, 322, and 323. In these lines, server A. 1, A. 2, and A.I. 3 are assigned IP addresses 10.0.1.1, 10.0.1.2, and 10.0.1.11. Similar assignments are performed in rows 324-329. It will be appreciated that the assignments shown are exemplary. Many additional assignments can be made in data structure 320.

  FIG. 5 is a relationship between a virtual network name and a virtual server assigned to that virtual network, according to an illustrative embodiment of the invention. Data in data structure 330 can be stored in non-volatile memory. In line 331, the IP subnet 10.0.1 / 24 can be assigned to the virtual network A, and “A.1, A.2, A.3 to A.16” which are part of the virtual network A collectively. Can have a set of servers defined as Similar assignments can be made for virtual networks B, C, and D in rows 333, 335, and 337.

  FIG. 6 is a relationship between each bridge port and an identifier according to an exemplary embodiment of the present invention. Data in the data structure 340 can be stored in non-volatile memory. Each row of data structure 340 has a corresponding bridge port and an uplink port to the virtual switch or vswitch. Bridge ports and uplink ports are configured by the user using the HMC. The QDIO architecture provides a means for identifying bridge and uplink connections as special or privileged connections. For example, v-switch A is assigned in row 341 the bridge port identified by the identifier “device A1” and the uplink port identified by the identifier “device A2”. The v switch A can be a virtual switch used in the virtual network A. Similar assignments can be made for virtual networks B, C, and D in rows 343, 345, and 347.

  FIG. 7 is a block diagram of a virtual switch or vswitch configuration as well as virtualization within a CPC according to an exemplary embodiment of the present invention. While FIG. 2 shows a logical diagram of virtual server interaction, FIG. 7 shows the physical layout of how a set of virtual servers in a CPC can be connected to a local area network (LAN). The configuration is shown. A virtual switch can include multiple guest ports connecting operating systems running in one or more virtual machines. Virtual switches such as vswitch 430 may be z / VM virtual switches. The z / VM virtual switch is a virtual switch that relies on resources managed by the z / VM hypervisor. In other words, the virtual switch can be part of the z / VM hypervisor. Guest ports are connected through a simulated network interface card (NIC). Guest ports support virtual servers, such as virtual servers 401, 403, 405, and 407. In addition to guest ports (simulated virtual switch NIC guest ports) vswitches may also have one or more uplink ports, eg, Open System Adapter (OSA) uplink port 423 it can. These uplink ports are physical ports that are used by the virtual switch to merge its simulated LAN 435 into an external LAN, eg, LAN 460. Both guest ports and uplink ports provide the necessary infrastructure to enable Ethernet connectivity between simulated guest ports and physical ports on the external LAN, eg, OSA 409 and OSA 411.

  outside of z / VM, the virtual server A. 1 261 and A.I. 2 263 are connected to the external OSA interface via their respective OSA NICs. Further, each virtual server A. 1 and A.I. 2 can rely on IQD NIC to interconnect with HiperSockets LAN450. Virtual server A.1. 1 261 and A.I. 2 263 are respectively the virtual server A.2 in FIG. 1 261 and A.I. 2 263 can be the same virtual server.

  The bridge port is a hybrid port that extends the simulated LAN segment of the v-switch with a logical port in an internal HiperSockets LAN, eg HiperSockets LAN 450. For example, FIG. 7 uses bridge port 421 to connect to HiperSockets uplink port 425. The bridge port extends the vswitch 430 to include both simulated guest ports (vNICs) and real ports (NICs) equivalent to IQD NICs. The guest port and real port can each communicate with each other and with an external LAN destination via the virtual switch uplink port.

  The vswitch 430 maintains a hash table or other data structure to record the correspondence between MAC addresses and Internet protocol addresses. In response to receiving a packet with a mismatched MAC address (not present in the hash table), the vswitch sends such packet to the OSA uplink port 423 or vswitch HiperSockets bridge port 421. . As a result, packets sent to the uplink port are sent to physical ports on the physical network, such as IQD NIC 402 and IQD NIC 404.

  At least one implementation of the present invention by the ability to use a physical network (using an Open System Adapter (OSA)) in two forms: HiperSockets Processor Resource / System Manager (PR / SM) 440 and LAN 460 Through the form, the virtual network 435 and the two physical networks can be bridged. In the example of FIG. 7, the two physical networks are HiperSockets LAN450 and LAN460. The LAN 460 can implement IEDN. The operation of the bridge port is shown in FIG. 9 below in a more expanded arrangement.

  In particular, it is possible to connect to a LAN using a v-switch in one CPC. This LAN can then relay communications to other vswitches in the second CPC. Thus, the combined operation of vswitches and LANs within each CPC is the same for virtual servers in a manner that allows a virtual server within one CPC to address directly to a virtual server within a second CPC. A layer 2 network can be simulated as if it were on a LAN segment. Blocks 401-407, 421, 423, 435, and 440 of part 7 may be under the control of the z / VM logical partition.

  FIG. 8 is a flow diagram of an administrator's operation for configuring a virtual network, according to an illustrative embodiment of the invention. The steps of FIG. 8, the configuration procedure 500, activate the HiperSockets interface as shown in US Patent Application No. 13155153 (reference number AUS920110134US1) entitled “Transparent Heterogenous Link Pairing” filed on the same date as this application. Can include. The administrator operates through a hardware maintenance console (HMC) and can be considered logically part of it. The hardware maintenance console is a data processing system that presents the correct proof to the processor in the CPC. The HMC can display the system console as a window or other display area on a personal computer or other administrator tool. The HMC is thus the main device by which logical connections and other management functions are performed with respect to one or more CPCs.

  Initially, the HMC extends the internal network of multiple CPCs provided by the intra-ensemble data network (IEDN) within the cluster of virtual servers (step 501). Thus, the IQDIO network within each CPC is extended to IEDN by defining a single CHPID with channel parameters. Internal Queued Direct Input / Output (IQDIO) can be implemented as a form of Open System Adapter Express (OSA Express) Queued Direct I / O, known as having HiperSockets as described above. OSA Express is an integrated hardware feature that allows the System z9 (TM) platform and others to provide direct industry standard connectivity to clients on a LAN or wide area network (WAN). System z9 is a trademark of International Business Machines Corporation, registered in many jurisdictions around the world.

  Next, the HMC defines at least two virtual networks (step 503). First, the HMC can define a virtual network name and a virtual LAN identifier (VLAN ID) for the virtual network. Second, the HMC can associate each virtual server with each virtual network. Third, the operating system administrator can define the IP address and IP interface for each allowed virtual network using the matching VLAN ID. Virtual network setup can include activation of the HiperSockets interface for each virtual server. Further, virtual network setup or definition may include defining a network interface for each virtual server for the corresponding virtual network. Setting up a network interface can include assigning only one Internet protocol address to each virtual server in the virtual network. FIG. 9 below shows some examples of Internet protocol address assignment.

  The HMC can then define a bridge port within each CPC (step 505). A bridge port can include assigning a specific bridge port to a specific uplink port. For example, v switch 430 (of FIG. 7) can be identified using “v switch A” or other unique identifier. The vswitch A can be assigned a specific port, ie, device A1 as a bridge port 421 and device A2 as an uplink port 423. Defining a bridge port can include defining a virtual switch. Thus, the bridge port setup identifies the corresponding part of the vswitch by linking the vswitch, bridge port, and uplink port within each row of the bridge port data structure 340 in FIG. Can be established.

  The HMC can then define a network interface for each virtual server in each cluster (step 507). A cluster or ensemble is a collection of virtual servers that are assigned to coordinate together for common tasks under customer control. A cluster can be a set of virtual servers that are isolated from other clusters but respond to a common LAN segment. FIG. 9 below provides an example of four clusters of virtual servers, such as cluster A consisting of at least virtual servers A1, A2, and A3.

  The HMC can then grant each virtual server access to its respective virtual network (step 509). Granting access includes setting permissions by the virtual server for a logical adapter or Ethernet adapter based on the HiperSockets physical interface. For example, for virtual network A, virtual servers A1, A2, A. 3 to A.1. 16 can grant permissions based on their logical adapters, so that they each have access to the virtual switch mechanisms that reside in their respective CPCs.

  Thereafter, the process can end.

  In a preferred embodiment of the present invention, the method for activating the HiperSockets interface is as follows. Within the device and application framework of the present invention, the TCP / IP stack can initially configure a logical Ethernet interface. The TCP / IP stack can then activate the logical Ethernet interface. A logical Ethernet interface can be activated based on attributes previously associated with the Ethernet interface. Attributes are parameters of a logical Ethernet interface that can make the logical Ethernet interface the source of the packet as well as a destination, such as an Internet protocol address assigned to the logical Ethernet interface. An attribute is a configured attribute if a field in the data structure for the logical Ethernet interface is filled with valid data. All configured attributes are attributes. Activating can include the TCP / IP stack exchanging Internet protocol addresses with a router or other network infrastructure and negotiating the connection speed. In addition, the TCP / IP stack can register a configured virtual local area network identifier (VLAN ID) with the Ethernet adapter. Furthermore, the TCP / IP stack can detect whether the HiperSockets CHPID is present. The CHPID can be set in advance by an engineer who manages the hardware I / O configuration. Thus, the technician can set the configuration attribute to specify whether a particular CHPID is available on the IEDN. An attribute that the TCP / IP stack can use to determine whether a CHPID exists is this CHPID attribute. If no CHPID is detected, the process can end.

  On the other hand, if a CHPID is detected, the TCP / IP stack can create a logical HiperSockets interface. The TCP / IP stack convergence interface can then associate the logical HiperSockets interface with the logical Ethernet interface. Associating a logical HiperSockets interface with a logical Ethernet interface is either for the logical Ethernet interface and the logical HiperSockets interface to fill the output packet, or to assemble the input data payload for other processing Setting up at least one buffer to use can be included. In addition, the logical HiperSockets interface and the logical Ethernet interface are logically linked to exchange traffic corresponding to a single internet protocol address. Switching includes sending or receiving packets. A single IP address is an IP address according to either IPv4 or IPv6 protocol. Furthermore, the single IP address is an IPv4 IP address and an IPv6 IP address, or a combination of an IPv4 IP address and an IPv6 IP address.

  The TCP / IP stack then copies the configured attributes of the logical Ethernet interface to the logical HiperSockets interface. The configured attributes include, for example, an IP address and virtual local area network (VLAN ID) copied from the logical Ethernet interface. Thus, the first interface and the second interface are logically linked to share traffic corresponding to a single internet protocol address. The TCP / IP stack then activates the logical HiperSockets interface. During activation, the TCP / IP stack can register a VLAN identifier (VLAN ID) with the HiperSockets firmware. Furthermore, the TCP / IP stack can obtain a virtual medium access control (VMAC) address from HiperSockets firmware. Furthermore, the TCP / IP stack can maintain a control block for each physical interface including the HiperSockets interface. Upon successful activation of the logical HiperSockets interface, the TCP / IP stack can update the status field in its control block to represent ACTIVE. Thereafter, the process can be terminated.

  FIG. 9 is a logical configuration of at least one virtual network according to an exemplary embodiment of the present invention. FIG. 9 includes the CPCs described above with reference to FIG. 2, namely CPC 1 211, CPC 2 221, CPC 3 231, and CPC 4 241. Virtual server A.1. 1, A. 2, and C.I. 1 exists and uses IP addresses 10.0.1.1, 10.0.1.2, and 10.0.3.3.1, respectively. As a result of the bridge port formation in step 405 above, an integrated LAN segment is formed across all CPCs for the A cluster. For example, bridge 621 links CPC 1 211 to CPC 2 221. Virtual server A.1. 3 crosses the bridge port and the virtual server A.3. 1 and A.I. Two additional bridges complete the cluster so that 2 can be connected transparently. The bridge port can be operated by a virtual switch. Additional bridge ports can support Cluster B, Cluster C, and Cluster D on networks B, C, and D. These bridge ports are bridge port 622, bridge port 632, and bridge port 642, respectively. The HMC 610 can write to the configuration memory 620 and read from the configuration memory 620. The HMC 610 can store the data structures 300, 320, 330, and 340 of FIGS. 3, 4, 5, and 6 in the configuration store 620, respectively. Accordingly, the HMC 610 can perform the configuration procedure 500 of FIG. 8 to configure the entire bridge.

  FIG. 10 is a logical arrangement of vswitches and other configured mechanisms to allow two virtual servers to communicate according to an exemplary embodiment of the present invention. CPC 1 701 and CPC 4 741 are virtual servers VS A. 1 and VS A.I. 3 is supported. CPC 1 701 may be CPC 1 211 in FIGS. For example, CPC 4 may be CPC 4 241 of FIGS. These virtual servers communicate with the v-switch HiperSockets bridge ports 705 and 745, respectively. Each v-switch HiperSockets bridge port then communicates with OSA uplink ports 707 and 747. For each CPC, the v-switch HiperSockets bridge port can be placed as the v-switch HiperSockets bridge port 421 is shown in FIG. Similarly, each OSA uplink port can be arranged as OSA uplink port 423 is shown in FIG. OSA uplink port 707 communicates with a local area network (LAN) 750. Similarly, OSA uplink port 747 communicates with LAN 750.

  Creation of bridge ports and their maintenance and expansion can be coordinated from a hardware maintenance console (HMC) 610. The HMC can be a hypervisor manufactured by, for example, zManager, International Business Machines Corporation. The HMC 610 can also establish an IP address for each virtual server. Configuration information can be stored in configuration 620. The details of the configuration can be distributed to each node in the CPC. Furthermore, configuration details can be backed up to a single storage medium.

  By using one or more embodiments, an administrator can control the configuration of virtual servers and virtual networks on local and remote CPCs. Further, rather than configuring multiple IP addresses per virtual server, a single IP address is assigned (using IPv4, IPv6, or hybrid). By focusing on a single logical interface per virtual server, an administrator can achieve multiple virtual server placements within multiple CPCs more quickly than conventional methods. In addition, administrators with reduced management burdens are geographically distributed according to a streamlined flow diagram using HMC, but logically connected data through the operation of HiperSockets LAN and conventional LAN.・ The center can be managed remotely. Thus, operation, deployment, and maintenance can be performed directly through a single HMC.

  The flowcharts and block diagrams in the figures illustrate the architecture, functionality, and operation of possible implementations of systems, methods and computer program products according to various embodiments of the present invention. In this regard, each block in the flowchart or block diagram may represent a module, segment, or portion of code that includes one or more executable instructions for implementing a specified logical function. It should also be noted that in some alternative implementations, the functions shown in the blocks can be performed out of the order shown in the drawings. For example, two blocks shown in succession can actually be executed almost simultaneously, depending on the function involved, or sometimes the blocks can be executed in reverse order. Each block in the block diagram and / or flow diagram, and combinations of blocks in the block diagram and / or flow diagram, can be used in application-specific hardware-based systems or application-specific hardware that perform specified functions or operations. Note also that it can be implemented by a combination of computer instructions.

  The invention can take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment containing both hardware and software elements. In a preferred embodiment, the present invention is implemented in software, including but not limited to firmware, resident software, microcode, etc. The firmware can reside in a tangible storage device, such as a programmable logic array, read-only memory, flash memory, solid state disk, or the like.

  The present invention further relates to a computer program product accessible from a computer usable or computer readable medium that provides program code for use by or in connection with a computer or any instruction execution system. Can take shape. For purposes of illustration, a computer-usable or computer-readable medium includes, stores, communicates, and propagates a program for use by or in connection with an instruction execution system, apparatus, or device. Or any tangible device that can be transported.

  A data processing system suitable for storing and / or executing program code will include at least one processor coupled directly or indirectly to memory elements through a system bus. The memory element includes program code, mass storage, and cache memory that provides temporary storage of at least some program code to reduce the number of times code must be retrieved from mass storage during execution. It can include local memory used during actual execution.

  Input / output or I / O devices (including but not limited to keyboards, displays, pointing devices, etc.) can be coupled to the system either directly or through intervening I / O controllers. .

  A network adapter is coupled to the system so that the data processing system can be coupled to other data processing systems or remote printers or computer-readable tangible storage devices via an intervening dedicated or public network It is also possible. Modems, cable modems, and Ethernet cards are just some of the currently available types of network adapters.

  The description of the present invention has been presented for purposes of illustration and description, and is not intended to be exhaustive or limited to the invention in the form disclosed. Many modifications and variations will be apparent to practitioners skilled in this art. The embodiments are described in order to best explain the principles of the invention, practical applications, and with respect to various embodiments with various modifications to suit the particular application contemplated by others skilled in the art. Selected and explained for the sake of understanding.

Claims (19)

A computer-implemented method for configuring a virtual network,
Extending Internal Queued Direct I / O to an intra-ensemble data network (IEDN) in a cluster of virtual servers to define single channel path identifiers and to define channel parameters;
Defining at least one virtual network;
Defining at least one bridge port in each CPC that supports at least one of the virtual servers;
Defining a network interface for each virtual server in each cluster; and
Allow access to the corresponding virtual network for each virtual server;
A computer-implemented method comprising:   The computer-implemented method of claim 1, wherein defining a bridge port further comprises defining a virtual switch.   The computer-implemented method according to claim 1, wherein the virtual switch is an intra-ensemble data network virtual switch. Defining a network interface for the corresponding virtual network for each virtual server;
The computer-implemented method of any one of the preceding claims, further comprising:   The computer-implemented method according to any one of the preceding claims, wherein the cluster of virtual servers is at least two virtual servers in a common virtual network and a common CPC. Defining at least one virtual network,
Assigning only one internet protocol address to each virtual server of the cluster of virtual servers in the at least one virtual network;
The computer-implemented method of any one of the preceding claims, further comprising: Defining at least one virtual network,
Activating the HiperSockets interface for each virtual server,
The computer-implemented method of claim 6, further comprising:   The computer-implemented method according to claim 6 or 7, wherein the one internal protocol address is an IPv4 address and an IPv6 address. A computer program for configuring a virtual network,
A computer readable storage medium readable by a processing circuit and storing instructions for execution by the processing circuit to perform the method of any one of claims 1 to 8;
A computer program comprising:   The computer program product of claim 9, wherein the one or more computer-readable storage media is selected from the group consisting of a programmable logic array, read-only memory, flash memory, and a solid-state disk. . A data processing system for configuring a virtual network, comprising one or more processors, one or more computer readable memories, and one or more computer readable tangible storage devices;
An extension means for extending Internal Queued Direct I / O to an intra-ensemble data network (IEDN) in a cluster of virtual servers to define a single channel path identifier and to define channel parameters;
Defining means for defining at least one virtual network;
Defining means further operable to define at least one bridge port in each CPC that supports at least one of the virtual servers;
Defining means further operable to define a network interface for each virtual server in each cluster;
Defining means further operable to define access to a corresponding virtual network for each virtual server;
A data processing system comprising:   The definition means further operable to define a bridge port further comprises program instructions stored on at least one of the one or more storage devices to define a virtual switch. Item 12. The data processing system according to Item 11.   The data processing system according to claim 11, wherein the virtual switch is an intra-ensemble data network virtual switch. Definition means operable to define a network interface for the corresponding virtual network for each virtual server;
The data processing system according to claim 11, further comprising:   The data processing system according to any one of claims 11 to 14, wherein at least the cluster of virtual servers is in a common virtual network and a common CPC. Said definition means further operable to define at least one virtual network;
Allocating means for allocating only one internet protocol address to each virtual server of the cluster of virtual servers in the at least one virtual network;
The data processing system according to claim 11, further comprising: The defining means operable to further define the at least one virtual network;
An activation means operable to activate the HiperSockets interface for each virtual server;
The data processing system of claim 16, further comprising:   18. A data processing system according to claim 16 or 17, wherein the one internal protocol address is an IPv4 address and an IPv6 address.   9. A computer program stored on a computer readable medium and loadable into an internal memory of a digital computer when the program is executed on a computer. A computer program comprising a piece of software code for performing the method.

Images