Patent ID: 9654394
Date: 2017-05-16
CPC Classifications: H04L

Claim:
1. A multi-tenant system comprising: a server apparatus on which a virtual machine with tenant identification data given operates; a plurality of switches, each of which comprises a processing section which processes a packet based on a flow entry set to said switch; and a controller configured to set the flow entry to each of said plurality of switches, wherein said plurality of switches includes a first switch connected with said server apparatus and a second switch connected with an equipment whose tenant identification data cannot be recognized, wherein said controller comprises a flow entry setting section configured to set to said first switch, the flow entry which prescribes an operation of encapsulating a packet which is transmitted from said virtual machine on said server apparatus, by adding addition data which includes the tenant identification data, and set to said second switch, the flow entry which prescribes a decapsulating operation of removing the addition data from the encapsulated packet, and wherein said second switch comprises: an address translating section configured to translate a source address of the decapsulated packet by said processing section, into an IP address managed by said second switch; and a transfer processing section configured to transfer the packet, whose source address has been translated, for said equipment, wherein said second switch stores in said address translation table, an IP address of said first switch, a IP address of said virtual machine as a transmission source and the tenant identification data which are contained in the encapsulated packet when the encapsulated packet is received, wherein said flow entry setting section of said controller sets to said second switch, the flow entry which prescribes the operation of encapsulating the packet transmitted from said equipment by adding the addition data containing the tenant identification data, and sets to said first switch, the flow entry which prescribes the decapsulating operation of removing the addition data from the encapsulated packet, wherein said transfer processing section of said second switch receives a reply packet transmitted to said virtual machine from said equipment, wherein said address translating section of said second switch translates a destination IP address of the reply packet into the IP address of said virtual machine based on said address translation table, wherein said the processing section of said second switch encapsulates the reply packet subjected to the translation of the source IP address, to the encapsulated reply packet in which the addition data containing the tenant identification data of said virtual machine has been added, wherein an IP address of said first switch of said address translation table is set as a destination IP address of an L3 header of the addition data, wherein said processing section of said first switch decapsulates the encapsulated reply packet by removing the addition data from the encapsulated reply packet, and wherein said transfer processing section of said first switch transmits the decapsulated reply packet to said virtual machine.