# US 2014/0208317 A1 · Multi-tenant system and control method of multi-tenant system

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2014/0208317 A1
- Document ID: US20140208317A1
- Status: Published application
- Kind: A1
- Application number: 14/084,667
- Filed: 2013-11-20
- Published: 2014-07-24
- Earliest claimed: 2013-01-23
- Assignees: Fujitsu Limited
- Applicants: Fujitsu Limited
- Inventors: Yukihiro NAKAGAWA
- Web page: https://patentgrep.com/patent/US20140208317A1

## CPC

- G06F 9/45533: {Hypervisors; Virtual machine monitors}
- H04L 41/0895: Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements
- H04L 12/4633: {Interconnection of networks using encapsulation techniques, e.g. tunneling}
- H04L 12/4641: {Virtual LANs, VLANs, e.g. virtual private networks [VPN] (LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272)}
- H04L 41/0803: Configuration setting
- H04L 49/354: for supporting virtual local area networks [VLAN]
- H04L 61/103: across network layers, e.g. resolution of network layer into physical layer addresses or address resolution protocol [ARP]
- H04L 61/5038: for local use, e.g. in LAN or USB networks, or in a controller area network [CAN]
- H04L 61/5061: Pools of addresses
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

A management device allocates a first identifier that identifies, from among tenants included in a multi-tenant system, a tenant that uses virtual machines running on the multi-tenant system. The management device performs the following process, for each terminating device, from among tenants in the multi-tenant system, on virtual machines that are running on a second network in which terminating devices are installed. Specifically, the management device allocates a second identifier that identifies a tenant that uses virtual machines running on the multi-tenant system. Furthermore, the management device creates, for each terminating device, conversion information in which the first identifier that is allocated to each of the virtual machines is associated with the second identifier. Then, the management device sets each terminating device such that a packet is encapsulated in accordance with the created conversion information.

## Claims

### Claim 1

A multi-tenant system comprising:
multiple terminating devices each of which transfers, via a first network, a packet that is output from a virtual machine; and
a management device that manages the terminating devices,
the management devices including
a first allocating unit that allocates a first identifier that identifies, from among tenants included in the multi-tenant system, a tenant that uses virtual machines running on the multi-tenant system,
a second allocating unit that, for each terminating device, allocates, to virtual machines running on a second network in which terminating devices are installed, a second identifier that identifies, from among the tenants included in the multi-tenant system, a tenant that uses virtual machines running on the multi-tenant system,
a creating unit that creates, for each terminating device, conversion information in which the first identifier that is allocated to each of the virtual machines by the first allocating unit is associated with the second identifier that is allocated to each of the virtual machines by the second allocating unit, and
a distributing unit that distributes the conversion information created by the creating unit to each of the terminating devices, and
each of the terminating devices includes
a storing unit that stores therein the conversion information distributed by the distributing unit,
an acquiring unit that acquires, from the conversion information stored in the storing unit when the acquiring unit receives a packet, a first identifier that is associated with a second identifier that is allocated to a tenant that uses a virtual machine that transmitted the received packet,
a converting unit that attaches, to the packet, a header that includes the first identifier acquired by the acquiring unit and encapsulates the packet, and
a transmitting unit that transmits the packet encapsulated by the converting unit to a terminating device via the first network.

### Claim 2 (depends on 1)

The multi-tenant system according to claim 1, wherein
when the acquiring unit receives the encapsulated packet from the terminating device, the acquiring unit acquires, from the conversion information stored in the storing unit, the second identifier that is associated with the first identifier included in the encapsulated packet,
the converting unit converts the encapsulated packet to a packet that is addressed to a virtual machine that is identified by the second identifier acquired by the acquiring unit, and
the transmitting unit transmits the packet addressed to the virtual machine to the second network in which the terminating devices are installed.

### Claim 3 (depends on 1)

The multi-tenant system according to claim 1, wherein
when multiple virtual machines that are included in a same tenant and that are running on the second network are present, the second allocating unit allocates a same second identifier to the multiple virtual machines that are included in the same tenant, and
from among the virtual machines running on the second network in which the terminating devices are installed, the converting unit does not encapsulate a packet that is exchanged between the virtual machines to which the same second identifier is allocated.

### Claim 4 (depends on 1)

The multi-tenant system according to claim 1, wherein
the management device includes an identifier storing unit that stores therein, in an associated manner, a terminating device identifier that identifies a terminating device and a second identifier that is not allocated to a virtual machine running on a network in which the terminating device is installed, and
when a virtual machine used by a new tenant is to be run, the second allocating unit selects, from among second identifiers that are stored in the identifier storing unit and that are associated with terminating device identifiers of the terminating devices installed in the second network in which the virtual machine used by the new tenant is running, a second identifier that is allocated to the virtual machine that is used by the new tenant and then allocates the selected second identifier to the virtual machine that is used by the new tenant.

### Claim 5 (depends on 4)

The multi-tenant system according to claim 4, wherein
the management device includes
a use count storing unit that stores therein, in an associated manner, the terminating device identifiers, the second identifiers that are allocated to the virtual machines running on the second network in which the terminating devices indicated by the terminating device identifiers are installed, and the number of virtual machines that use the second identifiers that are allocated to the virtual machines running on the second network,
a subtracting unit that subtracts, when a virtual machine is made to stop, 1 from the number of virtual machines that is stored in the use count storing unit and that is associated with both a second identifier, which is allocated to the virtual machine to be stopped, and a terminating device identifier, which indicates one of the terminating devices installed in the second network in which the virtual machine to be stopped is running, and
a retaining unit that, when the number of virtual machines is zero, retains, in an associated manner in the identifier storing unit, the second identifier that is allocated to the virtual machine to be stopped and the terminating device identifiers that indicate the terminating devices installed in the second network in which the virtual machine to be stopped is running.

### Claim 6 (depends on 1)

The multi-tenant system according to claim 1, wherein a VLAN number, an extended VLAN number, or an external VLAN number used in the network is used as the second identifier.

### Claim 7 (depends on 1)

The multi-tenant system according to claim 1, wherein
the terminating devices each include multiple converting units that are associated with the virtual machines running on a network in which the terminating devices are installed,
the acquiring unit acquires, from the conversion information, a first identifier that is associated with the second identifier that is allocated to a virtual machine that is associated with one of the converting units and notifies each of the converting units of the acquired first identifier, and
the converting unit encapsulates, by using the first identifier that is received from the acquiring unit as a notification, a packet that is output by the associated virtual machine.

### Claim 8

A computer-readable recording medium having stored therein a management program causing a computer to execute a process comprising:
allocating a first identifier that identifies, from among tenants included in a multi-tenant system, a tenant that uses virtual machines running on the multi-tenant system;
allocating, for each terminating device, a second identifier to virtual machines running on a second network in which terminating devices are installed, where the second identifier identifies, from among the tenants included in the multi-tenant system, a tenant that uses virtual machines running on the multi-tenant system;
creating, for each terminating device, conversion information in which the first identifier is associated with the second identifier that is allocated to each of the virtual machines; and
setting each of the terminating devices such that a packet is encapsulated in accordance with the created conversion information.

### Claim 9

A control method of a multi-tenant system that includes multiple terminating devices that transfer, via a first network, a packet output from a virtual machine and that includes a management device that manages the terminating devices, the control method of the multi-tenant system comprising:
firstly allocating by the management device, a first identifier that identifies, from among tenants included in the multi-tenant system, a tenant that uses virtual machines running on the multi-tenant system;
secondly allocating by the management device, for each terminating device, to virtual machines running on the second network in which the terminating devices are installed, a second identifier that identifies, from among tenants included in the multi-tenant system, a tenant that uses virtual machines running on the multi-tenant system;
creating by the management device, for each terminating device, conversion information in which the first identifier that is allocated to each of the virtual machines at the firstly allocating is associated with the second identifier that is allocated at the secondly allocating to each of the virtual machines;
distributing by the management device, the conversion information created at the creating to each of the terminating devices;
storing by the terminating device, the conversion information distributed at the distributing;
acquiring by the terminating device, from the conversion information stored at the storing when the terminating device receives a packet, a first identifier that is associated with a second identifier that is allocated to a tenant that uses a virtual machine that transmitted the received packet;
attaching by the terminating device, a header that includes the first identifier acquired at the acquiring to the packet and encapsulating the packet; and
transmitting by the terminating device, the encapsulated packet to a terminating device via the first network.