Communication system, control apparatus, communication apparatus, communication control method, and program

Abstract

A communication system includes a communication apparatus configured to process a packet, and a controller configured to set the communication apparatus for processing a packet. The controller includes a memory storing instructions, and a processor configured to execute program instructions to determine a forwarding path for a packet addressed to a virtual machine based on an access rule indicating connectivity between virtual machines in accordance with an arrangement of the virtual machine, and set the communication apparatus for processing the packet.

What is claimed is: 
     
         1 . A communication system, comprising:
 a communication apparatus configured to process a packet; and   a controller configured to set the communication apparatus for processing a packet,   wherein the controller comprises:
 a memory storing instructions; and 
 a processor configured to execute program instructions to:
 determine a forwarding path for a packet addressed to a virtual machine based on an access rule indicating connectivity between virtual machines in accordance with an arrangement of the virtual machine; and 
 set the communication apparatus for processing the packet. 
 
   
     
     
         2 . The communication system according to  claim 1 , further comprising a communication policy management apparatus configured to manage the access rule, and to create the access rule in accordance with the arrangement of the virtual machine. 
     
     
         3 . The communication system according to  claim 2 , further comprising an authentication apparatus to authenticate a user terminal,
 wherein the authentication apparatus sends authentication information to the communication policy management apparatus when the authentication apparatus succeeds in authentication of the user terminal, and   wherein the communication policy management apparatus creates the access rule based on the authentication information.   
     
     
         4 . The communication system according to  claim 3 , further comprising a virtual machine movement apparatus configured to:
 store a duplication of the virtual machine which is arranged in an arbitrary resource; and   arrange the virtual machine in another resource after the virtual machine is deleted.   
     
     
         5 . The communication system according to  claim 2 , further comprising a virtual machine movement apparatus configured to:
 store a duplication of the virtual machine which is arranged in an arbitrary resource; and   arrange the virtual machine in another resource after the virtual machine is deleted.   
     
     
         6 . The communication system according to  claim 1 , further comprising a virtual machine movement apparatus configured to:
 store a duplication of the virtual machine which is arranged in an arbitrary resource; and   arrange the virtual machine in another resource after the virtual machine is deleted.   
     
     
         7 . A controller, comprising:
 a first processor that sets a communication apparatus for processing a packet; and   a second processor that determines a forwarding path for a packet addressed to a virtual machine based on an access rule indicating connectivity between virtual machines in accordance with an arrangement of the virtual machine, and sets the communication apparatus for processing the packet.   
     
     
         8 . A communication method, comprising:
 processing a packet;   determining a forwarding path for a packet addressed to a virtual machine based on an access rule indicating connectivity between virtual machines in accordance with an arranging of the virtual machine; and   setting a communication apparatus for the processing of the packet.