Network system, machine allocation device and machine allocation method

Abstract

There is provided a load distribution function that enables an application of a user to be freely allocated to a machine even if an address of a terminal or the application used by the user is duplicated between VPNs for each user. An access detector of a machine allocation device detects a start packet from received communication packets, and determines the type of the start packet and the type of the application used by the terminal. A machine allocation manager determines a machine on which the determined application operates, and operates the machine. A network manager configures a user virtual network on a second virtual network between the determined machine and the machine allocation device.

What is claimed is: 
     
         1 . A network system having a first virtual network configuring a virtual network for each user which is connected to a terminal of the user, a plurality of machines on which applications to be used from the terminal by the user operate, and a second virtual network configuring a virtual network for each user which is connected to the plurality of machines, the network system comprising:
 a machine allocation device that is connected to the first virtual network and the second virtual network, wherein   the machine allocation device includes:   a transfer processor that relays communication packets of the user between the first virtual network and the second virtual network;   an access detector that detects an access from the user;   a machine allocation manager that determines any one of the plurality of machines;
 a network manager that manages the network; 
   a user service information storage unit that stores user service information including a service state indicative of an operating state of each application and a second virtual network identification information indicative of an identifier of each user over the second virtual network, in correspondence with a preset first virtual network identifier indicative of the identifier of the user over the first virtual network, a preset service identifier for identifying each application providing a service to the user, and a preset service type indicative of each allocatable application;
 a machine allocation information storage unit that stores machine allocation information including a virtual machine identifier for identifying a virtual machine on which the application operates and a service identifier for identifying the application that operates on the virtual machine, in correspondence with a preset machine identifier; 
   a relay information storage unit that stores relay information including an identification information on a second virtual network side, in correspondence with an identification information on a first virtual network side; and   a second virtual network information storage unit that stores the second virtual network identification information configuring a user virtual network over the second virtual network between the machine and the machine allocation device,   wherein   the transfer processor detects a communication packet transmitted from the terminal and received through the first virtual network,   the access detector detects a start packet to be sent when starting the terminal from the received communication packet, determines the first virtual network identifier and the service type indicative of the application to be used by the terminal according to information on the communication packet and the start packet, and obtains the service state on the basis of the first virtual network identifier and the service type with reference to the user service information,   when the service state is non-allocated or stopping,   the machine allocation manager determines the machine on which the determined application operates according to a predetermined procedure, and specifies the virtual machine on the determined machine,   the network manager obtains non-allocated virtual network identification information in one or a plurality of entries indicative of a connection between the determined machine and the machine allocation device, with reference to
 the second virtual network information, 
 the network manager adds the virtual network identification information to the one or the plurality of entries of the second virtual network information or another entry of the second virtual network information, and updates 
   the virtual network identification information to configure the user virtual network on the second virtual network,   the machine allocation manager starts the specified virtual machine on the machine, and operates the application,   the machine allocation manager sets the virtual network identification information to the identification information on the second virtual network side corresponding to the first virtual network identifier with respect to the relay information and, for an entry corresponding to the first virtual network identifier and the service type with respect to the user service information, sets the service state to be allocated or to be operating and sets the virtual network identification information to the second network identifier, and sets the virtual machine identifier of the started virtual machine and the service identifier with respect to the machine allocation information, and   the transfer processor transfers the communication packet of the user between the first virtual network and the second virtual network on the basis of the relay information.