The present invention relates to a cloud-configuration visualization system, a
cloud-configuration visualization method and a cloud-configuration visualization
program that acquires configuration information of a cloud environment and displays
the acquired information, so as to allow the configuration to be apprehended easily.
[Background Art]
[0002]
Recently, in the field of computer technology, a service of constructing a cloud
environment using a combination of various virtualization techniques and providing the
constructed cloud environment to users is spreading rapidly. In the cloud environment,
it is necessary to allow the configuration to be apprehended, and since the
configuration changes dynamically, it is necessary to save the information before and
after the change to correspond to occurrence of failure or to improve performance.
[0003]
Techniques disclosed in Patent Literatures 1 and 2 are examples of documents
related to the above-described art. Patent Literature 1 discloses an art of generating a
logical topology information of a virtual network related to a virtual network composed of
virtualization techniques including a virtual LAN, a virtual interface, and a virtual router.
Therefore, according to the art disclosed in Patent Literature 1, (1) a setting pattern
related to the generation of multiple kinds of virtual resources and a setting pattern
related to connections between the multiple kinds of virtual resources are extracted
from setting information (config) on network apparatuses constituting the virtual network.
(2) Identifiers necessary to generate the virtual resources, or to generate connection
relations between the virtual resources are extracted from the extracted setting pattern.
(3) Configuration components of a logical topology corresponding to the virtual
resources or connections between the virtual resources are generated by using
information which includes the extracted identifiers. (4) The generated configuration
components of individual logical topologies are integrated to generate logical topology
information expressed as one topology, the information of which is stored in a storage.
[0004]
The art disclosed in Patent Literature 2 provides a configuration information
acquisition method in a cloud environment which implements an efficient monitoring
operation while reducing the amount of data to be handled, by reducing a load to a
physical server to be monitored in a system of the cloud environment, and an
apparatus for implementing the method. The art of Patent Literature 2 includes the
2
steps of collecting a mirrored packet from packets flowing between a plurality of virtual
machines, analyzing traffic/route information from the collected packet; determining
whether a corresponding relationship between a physical server and the virtual
machines is changed, as a result of the analysis; instructing a monitoring device which
monitors an entire configuration, to acquire configuration information when it is
recognized that the corresponding relationship is changed; and acquiring and storing
the configuration information in the monitoring device after the change.
[Citation List]
[Patent Literature]
[0005]
[PTL 1] Japanese Unexamined Patent Application Publication No 2013-081053
[PTL 2] Japanese Unexamined Patent Application Publication No. 2012-004781
[Summary of Invention]
[Technical Problem]
[0006]
According to the aforementioned technique, regarding an infrastructure
configured of a cloud environment formed using a plurality of cloud service provider
companies, there were no means to apprehend the entire environment being
configured, and no means to apprehend the change of the configured environment.
Therefore, there was a drawback in that in a state where failure has occurred, a long
time was required to specify and fix the failure, and a cloud configuration preferable for
changing the cloud environment could not be constructed. Therefore, the present
invention aims at providing a system environment capable of apprehending the
configuration of the cloud environment.
[Solution to Problem]
[0007]
In order to solve the above-described problems, one typical aspect of the
present invention provides a cloud-configuration visualization system configured to
connect to one or more cloud service provision systems providing a cloud service, the
system including a client apparatus and a server apparatus, the client apparatus
including a cloud connection information reception part configured to receive a cloud
connection information constructing a cloud environment from a user, and a
configuration display processing part configured to perform display control on a screen
displaying a configuration of the cloud environment, the server apparatus including a
cloud connection information part configured to store and register the cloud connection
information received by the cloud connection information reception part of the client
apparatus in a cloud connection information DB, and a configuration information
acquisition processing part configured to acquire the cloud configuration information
constructed in the cloud service provision system from the cloud service provision
system according to a cloud configuration information acquisition request from the
configuration display processing part of the client apparatus, wherein the configuration
3
display processing part having received a request command for displaying cloud
configuration from the user is configured to extract a cloud ID for acquiring cloud
configuration information from the cloud configuration display request command, and
transmit the configuration display command of the extracted cloud ID to the
configuration information acquisition processing part, wherein the configuration
information acquisition processing part is configured to acquire a cloud connection
information from the cloud connection information DB based on the cloud ID, specify a
cloud service provision system acquiring the cloud configuration information based on
the acquired cloud connection information, and transmit the cloud configuration
information acquired from the specified cloud service provision system to the
configuration display processing part, and the configuration display processing part is
configured to generate a cloud configuration diagram using configuration component
icons of each configuration component and connection information, based on the cloud
configuration information received from the configuration information acquisition
processing part, and display the generated cloud configuration diagram on the screen.
[Advantageous Effects of Invention]
[0008]
According to the cloud-configuration visualization system of the present
invention, information acquired from the cloud service providers are collected and
acquired, and based thereon, a visual configuration diagram is generated. Thereby,
the entire configuration of the infrastructure environment can be apprehended speedily
and easily. Problems, configurations and effects other than those described above will
be clarified by the following description of embodiments.
[Brief Description of Drawings]
[0009]
[FIG. 1] FIG. 1 is a view illustrating an outline of invention of a cloud-configuration
visualization system according to one embodiment of the present invention.
[FIG. 2] FIG. 2 is a view illustrating an entire configuration of a system using the cloudconfiguration
visualization system according to one embodiment of the present
invention.
[FIG. 3] FIG. 3 is a block diagram illustrating an internal configuration of a client PC
(client terminal).
[FIG. 4] FIG. 4 is a block diagram illustrating an internal configuration of a physical
server.
[FIG. 5] FIG. 5 is a view illustrating a configuration example of a cloud connection
information.
[FIG. 6] FIG. 6 is a view illustrating a configuration example of a cloud configuration
information provided in a cloud service.
[FIG. 7] FIG. 7 is a flowchart illustrating a main processing for acquiring the cloud
configuration information.
4
[FIG. 8] FIG. 8 is a flowchart illustrating an acquisition processing of cloud configuration
information in a configuration information acquisition processing part.
[FIG. 9] FIG. 9 is a flowchart illustrating an acquisition processing of cloud configuration
information in a configuration information display processing part.
[FIG. 10] FIG. 10 is a view illustrating a display image example of an inter-resource
configuration.
[FIG. 11] FIG. 11 is a view illustrating a configuration example of a main pull-down
menu.
[FIG. 12] FIG. 12 is a view illustrating a configuration example of a sub pull-down menu.
[FIG. 13] FIG. 13 is a flowchart illustrating a display processing of a network (NW)
routing information.
[FIG. 14A] FIG. 14A is an image view illustrating a display example of a first network
(NW) routing information.
[FIG. 14B] FIG. 14B is an image view illustrating a display example of a second
network (NW) routing information.
[FIG. 14C] FIG. 14C is an image view illustrating a display example of a third network
(NW) routing information.
[FIG. 15] FIG. 15 is a flowchart illustrating a display processing of a security group
information.
[FIG. 16] FIG. 16 is an image view illustrating a display example of the security group
information.
[FIG. 17] FIG. 17 is a flowchart illustrating a display processing of a status information.
[FIG. 18] FIG. 18 is an image view illustrating a display example of the status
information.
[FIG. 19] FIG. 19 is a flowchart illustrating a display processing of search processing
and search results of inter-configuration-information.
[FIG. 20] FIG. 20 is an image view illustrating a first display example according to the
search results of inter-configuration-information.
[FIG. 21] FIG. 21 is an image view illustrating a second display example according to
the search results of inter-configuration-information.
[Description of Embodiments]
[0010]
Embodiments of the present invention will now be described with reference to
the drawings. In the following description, various information are referred to as
"management tables", for example, but the various information can also be expressed
by data structures other than tables. Further, the "management table" can also be
referred to as "management information" to indicate that the information does not
depend on the data structure.
[0011]
The processes are sometimes described using the term “program” as the
subject. The program is executed by a processor such as an MP (Micro Processor) or
5
a CPU (Central Processing Unit) for performing determined processes. A processor
can also be the subject of the processes, since the processes are performed by a
processor using appropriate storage resources (such as memories) and communication
interface devices (such as communication ports). The processor can also use
dedicated hardware in addition to the CPU. The computer programs can be installed to
each computer from a program source. The program source can be provided via a
program assignment server or storage media, for example.
[0012]
Each element, such as each controller, can be identified by numbers, but other
types of identification information such as names can be used as long as they are
identifiable information. The equivalent elements are denoted with the same reference
numbers in the drawings and the description of the present invention, but the present
invention is not restricted to the present embodiments, and other modified examples in
conformity with the idea of the present invention are included in the technical scope of
the present invention. The number of each component can be one or more than one,
unless defined otherwise.
[0013]
FIG. 1
FIG. 1 is a view illustrating an outline of the invention in a cloud-configuration
visualization system according to one embodiment of the present invention.
[0014]
The following problems occur in constructing an intra-company infrastructure
environment using a public cloud provided to unspecified large number of general users
through the Internet by a cloud provider (cloud service provider).
(p1) It was indispensable to utilize a standard tool unique to the cloud provider,
and the result of the infrastructure environment of the cloud constructed using the
standard tool is merely displayed in the form of lists of respective configuration
components (resources: servers, networks, data centers and so on). Therefore, it was
difficult to apprehend the connection statuses of the respective configuration
components and the entire configuration.
For example, a server list 1a of FIG. 1 stores information on data center
(hereinafter abbreviated as DC) ID to which a server belongs and a network ID being
connected, in addition to the server ID. Similarly, a network list 1b stores information on
the server ID being connected, in addition to the network ID. A DC list 1c stores
information on server ID of the servers existing within the DC, in addition to the DC ID.
Therefore, overview of the infrastructure configuration (relationship between
resources) cannot be apprehended speedily from the lists.
(p2) Verification of IDs
It was necessary to copy lists and check the relationship between the
respective IDs and the resources, in order to apprehend the overview of infrastructure
configuration (relationship between resources), according to which errors and leaks of
6
relationship between resources occurred, and the check required much time and
workload.
[0015]
Therefore, one preferred embodiment of the present invention proposes a
cloud-configuration visualization system that allows the resource configuration to be
recognizable at a glance, and association between resources to be apprehended easily.
This cloud-configuration visualization system enables to provide a configuration viewer
screen 2 of FIG. 1 to the user. Therefore, the following effects are achieved.
(s1) Information acquired from the cloud service provider is collected, and a
visual configuration diagram is generated. Thereby, the entire configuration of the
infrastructure environment can be apprehended speedily and easily.
(s2) Notations and icons easily recognized and understood by a system
administrator (for example, virtual server 111, name of virtual server: SVS-INS3,
connection port address: 10.0.0.63 of FIG. 1) are adopted to improve intelligibility of the
entire configuration of the infrastructure environment, and to facilitate confirmation.
(s3) Information on added resources is overlay-displayed, and a configuration
view conforming to viewpoint of checking is provided.
In further detail, the cloud configuration information on the cloud service
(hereinafter abbreviated as configuration information) is displayed as a configuration
diagram on a screen. An example of the displayed contents and displayed
configuration include the following:
(c1) a structure is adopted where relationships between respective resources
can be apprehended;
(c2) network routing information is displayed using arrows;
(c3) the same settings are linked to a plurality of virtual servers;
(c4) status conditions (such as power on/off, network
connection/disconnection) of virtual servers and networks are displayed;
(c5) cross search of configuration information is enabled within the same cloud
environment.
Thus, an effect of facilitating apprehension of configuration in a cloud
environment is achieved.
Further, the cloud-configuration visualization system has a function to display
operation statuses (such as CPU and memory utilization) of a virtual server or a
function to output files, such that information showing the operation statuses of a
predetermined period can be displayed in graphs, and files can be output. Thereby, an
operation status of the constructed cloud infrastructure can be apprehended, and
determination of extension of server, analysis of failure, and analysis of performance
bottleneck can be facilitated.
Further, a resource selected on the configuration diagram can be set to
execute a predetermined operation, such as by designating the operation of a virtual
server (power on/off, restart, discard virtual server), and mistakes related to operating
7
the wrong virtual server can be prevented. The items and contents described above
will be described in detail in the following description.
[0016]
FIG. 2
FIG. 2 is a view illustrating an entire configuration of a system adopting the
cloud-configuration visualization system according to an embodiment of the present
invention. The system is composed of a cloud-configuration visualization system 20
and a cloud service (IaaS: Infrastructure as a Service) 24. The cloud-configuration
visualization system 20 and the cloud service (IaaS) 24 are connected via a network 25
such as a LAN (Local Area Network).
[0017]
A cloud service API (Application Programming Interface) 241 in the drawing
refers to a software for operating the cloud service (IaaS) 24 provided by the cloud
service provider. Further, cloud connection information refers to information such as
IDs and keys necessary for using the cloud service API 241. The configuration
information refers to information on resources (such as a virtual DC, a virtual server,
and a virtual network) in the cloud service 24. The cloud service (IaaS) 24 includes
hardware resources such as a large number of server apparatuses, storage devices,
and network devices, and software resources such as various OSs (Operating
Systems) and APs (Application Programs), wherein the resources are provided virtually
to the users.
[0018]
The cloud-configuration visualization system 20 is composed of a client PC
(hereinafter abbreviated as client) 21, and a physical server (hereinafter abbreviated as
server) 22. The client 21 has function blocks called a cloud connection information
reception part 211 and a configuration display processing part 212. The cloud
connection information reception part 211 is a function part for receiving registration of
a cloud connection information (refer to FIG. 5) for a user 23 to construct the
infrastructure environment. Further, the configuration display processing part 212 is a
function part for receiving cloud information whose configuration is designated to be
displayed by the user 23, and for displaying the configuration information of the cloud
environment on the aforementioned configuration viewer screen 2 (screen serving as
display part of the client 21). The configuration information is acquired by the
configuration display processing part 212 requesting execution of acquisition of
configuration information to a configuration information acquisition processing part 222
of the server 22.
[0019]
The server 22 has three function blocks, a cloud connection information
registration part 221, a configuration information acquisition processing part 222, and a
cloud connection information DB 223. The cloud connection information registration
part 221 is a function part for storing and saving a cloud connection information 50
8
received by the cloud connection information reception part 211 of the client 21 in the
cloud connection information DB 223. The configuration information acquisition
processing part 222 acquires the cloud connection information 50 stored in the cloud
connection information DB 223, and based on the acquired cloud connection
information 50, requests acquisition of configuration information 60 with respect to the
cloud service (IaaS) 24, and acquires the configuration information 60. Further, the
configuration information acquisition processing part 222 has a function to transmit the
acquired configuration information 60 to the configuration display processing part 212 of
the client 21.
[0020]
The user 23 registers the cloud connection information and designates the
cloud whose configuration is to be displayed to the cloud-configuration visualization
system 20. The cloud-configuration visualization system 20 acquires the configuration
information 60 from the cloud service (IaaS) 24 based on the received registration
information (cloud connection information) and the designated cloud information. The
user 23 can register a plurality of cloud services (IaaS) 24 provided by different
providers to constitute the infrastructure environment of the cloud. Therefore, even in
the cloud-configuration visualization system 20, the configuration information 60 in
cloud environments constructed for each of the different cloud services (IaaS) 24 can
be distinguished and displayed per service as the configuration diagram. Therefore,
the cloud-configuration visualization system 20 has a function to acquire the
configuration information 60 of a plurality of cloud services (IaaS) 24 provided by
different cloud service providers, and a function to display the configuration information
60. The detailed description will be illustrated later.
[0021]
FIG. 3
FIG. 3 is a block diagram illustrating an internal configuration of a client PC
(client terminal).
[0022]
The client 21 includes a CPU 2101, a memory 2102, a storage part 2103, an
input part 2104, an output part 2105, a display part 2106, and a communication part
2107.
[0023]
The CPU 2101 is a processor that controls the entire client 21. The memory
2102 is a device that temporarily stores various programs and various data described
later. For example, OS and AP are stored in the memory 2102. The storage part 2103
is a device that permanently stores various programs and various data described later.
[0024]
The input part 2104 is a device that receives input, such as a keyboard or a
mouse. The output part 2105 is a device that outputs information and data, such as a
speaker or a printer.
9
[0025]
The display part 2106 is a device that displays information and data, such as a
liquid crystal display. The communication part 2107 is a device that connects the client
210 with other devices (such as the server 22 or the apparatus of the cloud service
(IaaS) 24) via a network. The above-described configuration components are mutually
connected via an internal bus.
[0026]
FIG. 4
FIG. 4 is a block diagram illustrating an internal configuration of a physical
server. The server 22 includes a CPU 2201, a memory 2202, a storage part 2203, an
input part 2204, an output part 2205, a display part 2206, and a communication part
2207.
[0027]
The CPU 2201 is a processor that controls the entire server 22. The memory
2202 is a device that temporarily stores various programs and various data described
later. The storage part 2203 is a device that permanently stores various programs and
various data described later.
[0028]
The input part 2204 is a device that receives input, such as a keyboard or a
mouse. The output part 2205 is a device that outputs information and data, such as a
speaker or a printer.
[0029]
The display part 2206 is a device that displays information and data, such as a
liquid crystal display. The communication part 2207 is a device that connects the
server 22 with other devices (such as the client 21 or the apparatus of the cloud service
(IaaS) 24) via a network. The above-described configuration components are mutually
connected via an internal bus.
[0030]
The server 22 is not necessarily equipped with the input part 2204, the output
part 2205 and the display part 2206 illustrated by the dotted lines, and in that case, the
server 22 should merely have an interface to which these configuration components
can be connected.
[0031]
FIG. 5
FIG. 5 is a view illustrating a configuration example of a cloud connection
information. The cloud connection information 50 is composed of a cloud management
table 51, a cloud service management table of company A 52, and a cloud service
management table of company M 53. The tables are provided to enable handling of
multiple types of cloud services. Therefore, a table for managing the connection
information specific to each cloud service is provided for each cloud service, and
information is stored and managed in each table.
10
[0032]
The cloud management table 51 is composed of a cloud ID for uniquely
identifying the cloud type, a cloud provider ID for uniquely identifying the type of the
cloud provider (cloud service provider 24), a cloud name which is the name of the cloud
being used, and a cloud information expressed in the form of an IP address serving as
the connection information to the cloud. A predetermined information is stored in each
entry corresponding to the cloud ID. For example, "acs" is stored in the cloud provider
ID where the cloud ID is "1", "vdc-001" is stored in the cloud name, and "10.0.0.0/16" is
stored in the cloud information, and managed.
[0033]
The cloud service management table of company A 52 is composed of a cloud
ID for uniquely identifying the cloud type, a region ID for uniquely identifying the range
of area managed by a cloud, an access ID for uniquely identifying the user 23, an
access key used for access by the user 23, and a virtual DC_ID for uniquely identifying
the virtual DC. A predetermined information is stored in each entry corresponding to
the cloud ID. For example, "ap-northeast-1" is stored in the region ID where the cloud
ID is "2", "HJSERHSDFGJS" is stored in the access ID, "JUTFGJJDDGHJFDS" is
stored in the access key, and "vdc-g48gwy4r" is stored in the virtual DC_ID, and
managed.
[0034]
The cloud service management table of company M 53 is composed of a cloud
ID for uniquely identifying the cloud type, a subscription ID for identifying the contents of
the provided service, a region ID for uniquely identifying the area range managed by
the cloud, a certification information for using the cloud service, and a virtual DC_ID for
uniquely identifying the virtual DC. Predetermined information is stored in each entry
corresponding to the cloud ID. For example, "74urjhjuy4uygulsdfhg" is stored in the
subscription ID where the cloud ID is "3", "East Asia" is stored in the region ID, "RTokyo-
7-2-2014-credentials" is stored in the certification, and "website001" is stored in
the virtual DC_ID, and managed.
[0035]
In the cloud management table 51, the cloud ID is set as a foreign key
(common key) to associate the cloud service management table of company A 52 and
the cloud service management table of company M 53 for management.
[0036]
As for the cloud connection information 50, the user 23 enters necessary
information to the cloud connection information reception part 211 of the client 21, and
the information is registered. Specifically, predetermined selection and input of
information using a menu or input area displayed on the display part 2106 of the client
21 in FIG. 3 is performed form the input part 2104. Then, the CPU 2101 temporarily
stores the cloud connection information 50 received through the input part 2104 in the
memory 2102 or the storage part 2103. The registration operation of the cloud
11
connection information is executed by the cloud connection information reception part
211 controlling the CPU 2101.
[0037]
FIG. 6
FIG. 6 is a view illustrating a configuration example of a cloud configuration
information in the cloud service. The configuration information 60 in the cloud service is
information corresponding to the cloud ID in the configuration information acquisition
request transmitted to the cloud service 24 from the configuration information
acquisition processing part 222 of the cloud-configuration visualization system 20.
[0038]
The configuration information 60 is composed of an item number (#), a
configuration apparatus, a configuration component, and a configuration information
setting content. For example, regarding the virtual DC whose item number (#) is "1",
based on the configuration information setting content, it can be recognized that the
virtual DC_ID is "vdc-001". Further, according to this virtual DC, the setting content of
the virtual network whose item number (#) is "2" is "subnets" :[{"subnet_id" : "subnet-
01", "netaddr" : "10.0.0.0/24", so that it can be recognized that the subnet_id is "subnet-
01" and that it is connected to a network having a network address of "10.0.0.0/24".
[0039]
In item number (#) "3" where the configuration apparatus is a "virtual network
device", the configuration components are "load balancer", "Internet gateway", "ＶＰＮ
(Virtual Private Network) gateway", "VPN connection", and "user connection", and
although not illustrated, the setting contents of the configuration information are stored
in each configuration component. Although not illustrated, the aforementioned cloud ID
information is added to the configuration information 60.
[0040]
According to the present embodiment, the configuration diagram is displayed
on the configuration viewer screen 2 illustrated in FIG. 1 based on this configuration
information 60, to allow the association and statuses of the configuration components
to be viewed as a list. The configuration components are not restricted to the list of FIG.
6, and various configuration components are supported in each cloud service.
[0041]

FIGs. 7 - 9
FIG. 7 is a flowchart illustrating a main processing for acquiring the cloud
configuration information. FIG. 8 is a flowchart illustrating an acquisition processing of
configuration information in the configuration information acquisition processing part.
FIG. 9 is a flowchart illustrating an acquisition processing of configuration information in
a configuration information display processing part. The subject of the processing is set
as the function part of the client 21 (the cloud connection information reception part 211
or the configuration display processing part 212) or the function part of the server 22
12
(the cloud connection information registration part 221, the configuration information
acquisition processing part 222, or the cloud connection information DB 223), but the
subject can also be the CPU 2101 of the client 21 or the CPU 2201 of the server 22.
The generation of the configuration diagram is performed by decomposing the acquired
configuration information for each configuration component, applying a predetermined
icon to each configuration component, and computing the relationship from the
connection information in the configuration information.
[0042]
In S701, the configuration display processing part 212 acquires a virtual DC
(cloud) information selected by the user 23. Specifically, a virtual DC_ID (cloud ID) is
entered in the cloud list on the configuration viewer screen 2 displayed on a display part
2104, the information of the virtual DC_ID is received by the input part 2104, and the
information is transferred to the configuration display processing part 212.
In S702, the configuration display processing part 212 transmits the virtual
DC_ID (cloud ID) to the configuration information acquisition processing part 222 of the
server 22, and requests acquisition of the configuration information 60.
[0043]
In S703, the configuration information acquisition processing part 222 executes
the acquisition processing of the configuration information. The acquisition processing
of the configuration information 60 relates to executing a subroutine processing
illustrated in FIG. 8. The configuration information acquisition processing part 222
transmits the acquired configuration information 60 to the configuration display
processing part 212.
In S704, the configuration display processing part 212 generates a
configuration diagram to be displayed on the configuration viewer screen 2 from the
received configuration information 60. Then, the configuration display processing part
212 transmits the information of the generated configuration diagram to the display part
2106 of the client 21, and requests the display part 2106 to display the configuration
viewer screen 2.
[0044]
In S801, the configuration information acquisition processing part 222 of the
server 22 acquires the cloud connection information 50 from the cloud connection
information DB 223 based on the received virtual DC_ID (cloud ID).
In S802, the configuration information acquisition processing part 222
determines whether the designated cloud is provided by company A based on the
cloud provider ID corresponding to the designated cloud ID. If the designated cloud is
provided by company A (S802: Yes), the configuration information acquisition
processing part 222 executes S803, and if not, (S802: No), it executes S804.
In S803, the configuration information acquisition processing part 222 transmits
an acquisition request of the configuration information 60 to the cloud service (ACS),
and acquires the configuration information 60 in the cloud service (ACS).
13
[0045]
In S804, the configuration information acquisition processing part 222
determines whether the designated cloud is provided by company M based on the
cloud provider ID corresponding to the designated cloud ID. If the designated cloud is
provided by company M (S804: Yes), the configuration information acquisition
processing part 222 executes S805, and if not, (S804: No), it executes S806.
In S805, the configuration information acquisition processing part 222 transmits
an acquisition request of the configuration information 60 to the cloud service (MCS),
and acquires the configuration information 60 in the cloud service (MCS).
[0046]
In S806, the configuration information acquisition processing part 222
determines whether the designated cloud is provided by company H based on the
cloud provider ID corresponding to the designated cloud ID. If the designated cloud is
provided by company H (S806: Yes), the configuration information acquisition
processing part 222 executes S807, and if not, (S806: No), although not shown, it
determines whether the cloud is provided by a cloud service provide company other
than A, M and H.
In S807, the configuration information acquisition processing part 222 transmits
an acquisition request of the configuration information 60 to the cloud service of
company H, and acquires the configuration information 60 in the cloud service of
company H.
[0047]
In S808, the configuration information acquisition processing part 222
determines whether the configuration information of all designated clouds has been
acquired. If the configuration information of all designated clouds has been acquired
(S808: Yes), the configuration information acquisition processing part 222 executes
S809, and if it has not been acquired (S808: No), the processes of S801 and
subsequent steps are executed again.
In S809, the configuration information acquisition processing part 222 transmits
the acquired configuration information 60 to the configuration display processing part
212 of the client 21. Then, the acquisition processing of the configuration information in
the configuration information acquisition processing part 222 is ended.
Next, the details of the acquisition processing of the configuration information in
S803, S805 and S807 will be described with reference to FIG. 9.
[0048]
In S901, the configuration information acquisition processing part 222 acquires
the configuration information setting content of the configuration information 60 where
the configuration apparatus and the configuration component corresponds to the virtual
DC (item number (#) is "1"). Then, an icon corresponding to the configuration
component that corresponds to the acquired configuration information setting content is
selected, and the connection information is added.
14
In S902, the configuration information acquisition processing part 222 acquires
the configuration information setting content of the configuration information 60 where
the configuration apparatus and the configuration component corresponds to the virtual
network (item number (#) is "2"). Then, an icon corresponding to the configuration
component that corresponds to the acquired configuration information setting content is
selected, and the connection information is added.
In S903, the configuration information acquisition processing part 222 acquires
the configuration information setting content corresponding to the virtual server (item
number (#) is "4"). Then, an icon corresponding to the configuration component that
corresponds to the acquired configuration information setting content is selected, and
the connection information is added.
In S904, the configuration information acquisition processing part 222 acquires
the configuration information setting content where the configuration component
corresponds to the load balancer in the virtual network device (item number (#) is "3").
Then, it selects an icon corresponding to the configuration component that corresponds
to the acquired configuration information setting content is selected, and the connection
information is added.
[0049]
In S905, the configuration information acquisition processing part 222
determines whether all configuration information has been acquired. If not all the
configuration information are acquired (S905: No), the configuration information
acquisition processing part 222 executes S906, and if all information are acquired
(S905: Yes), the processing is returned to any one of the processes S803, S805 or
S807 of the call destination.
In S906, the configuration information acquisition processing part 222 acquires
the configuration information of other configuration apparatuses or configuration
components. Then, an icon corresponding to the configuration component that
corresponds to the acquired configuration information setting content is selected, and
the connection information is added. The configuration information acquisition
processing part 222 executes the processing of S905 again.
[0050]
By the processing of FIGs. 7 through 9, the configuration diagram of the cloud
required by the user 23 can be displayed on the configuration viewer screen 2, and the
cloud configuration can be easily apprehended. Further, the configuration diagram can
be created using notation and icons easily recognized by engineers. The specific interresource
configuration display will be described with reference to FIG. 10.
[0051]
FIG. 10
FIG. 10 is a view illustrating a display image example of an inter-resource
configuration. The configuration viewer screen 2 includes a main pull-down menu 11, a
display information selection menu 100, a selected cloud entry area 101, a
15
configuration diagram display area 102, an individual information display area 118, and
a search condition entry area 119.
[0052]
The main pull-down menu 11 is a menu for selecting and displaying the
resource to be displayed or the status of the displayed resource (such as the operation
status or the connection status).
The display information selection menu 100 is a menu for switching between a
basic information entry screen, a cloud setting screen, and a configuration viewer
screen. Necessary setting of information or viewing of the configuration information is
enabled by the user 23 selecting the necessary screen from the display information
selection menu 100 and displaying the screen on the display.
[0053]
The selected cloud entry area 101 is an area for entering the type of cloud to
be displayed on the configuration diagram display area 102.
The configuration diagram display area 102 is an area in which the
configuration diagram generated from the configuration information 60 is displayed.
The configuration and connection status are displayed in the configuration diagram
display area 102 using notations and icons easily recognized by engineers. For
example, in the example of FIG. 10, a screen configuration is adopted where a user
connection 103, a VPN connection (VPNC) 104, a VPN gateway (VPNG) 105, a virtual
DC 106, an Internet gateway (GW) 107, a load balancer 108, a network segment
(NWS) 109, a global IP 110, and a virtual server 111 are displayed as icons, such that
the connection configuration and the entire configuration can be apprehended at a
glance.
[0054]
The individual information display area 118 is a display area for displaying
property information related to a resource in a state where a resource icon (such as a
virtual server 111) in the configuration diagram display area 102 is clicked 112 using a
mouse, for example.
The search condition entry area 119 is an area where the user 23 enters a
condition for searching the resource that the user wishes to find, and in the example of
FIG. 10, a condition of "x66_128" is entered to search for a CPU with an x66
architecture capable of performing processing in 128-bit units. The virtual server using
the CPU matching this condition is highlight-displayed (highlighted). This processing is
described in detail with reference to FIGs. 20 and 21.
[0055]
As described, the configuration diagram of a cloud that the user 23 needs can
be displayed on the configuration viewer screen 2, and the cloud configuration can be
easily apprehended. Further, the status of respective resources can be displayed and
resources matching the entered condition can be highlighted, and the visibility can be
improved.
16
[0056]
FIGs. 11 – 12
FIG. 11 is a view illustrating a configuration example of a main pull-down menu.
FIG. 12 is a view illustrating a configuration example of a sub pull-down menu. The
main pull-down menu 11 includes an acquired configuration information area, a load
balancer connection status, a key pair, a status, an IP address, a virtual machine image,
a security group information, a check box 11a, and a radio button 11b. If an icon of the
main pull-down menu 11 illustrated in FIG. 10 is clicked using a mouse, for example,
this pull-down menu is displayed on the screen.
[0057]
For example, if the user wishes to display a security group information in the
configuration diagram display area 102, the user enters a checkmark in the check box
11a, and further uses the radio button to switch between an individual display (where
only one kind of security group information is displayed) and a compound display
(where all security group information is displayed). Further, the same applies for
network routing information. Thereby, the security group to which the virtual server 111
belongs can be apprehended speedily.
[0058]
The sub pull-down menu 12 is a submenu for designating operations of the
virtual server 111. The types of the sub pull-down menu 12 include "power on", "power
off", "sleep", "suspend", "restart", "discard", and "add". For example, if a resource to be
operated is right-clicked on the sub pull-down menu 12, a pull-down menu is displayed.
[0059]
FIGs. 13 – 14
FIG. 13 is a flowchart illustrating a display processing of network (NW) routing
information. The subject of the processing is set as the configuration display
processing part 212 of the client 21, but it can also be the CPU 2101 of the client 21.
[0060]
FIG. 14A is an image illustrating a display example of a first network (NW)
routing information. FIG. 14B is an image illustrating a display example of a second
network (NW) routing information. FIG. 14C is an image illustrating a display example
of a third network (NW) routing information.
[0061]
In S1301, the configuration display processing part 212 determines whether a
display of NW routing configuration has been selected in the main pull-down menu 11.
That is, the configuration display processing part 212 determines whether a checkmark
is entered in the NW routing information check box of the main pull-down menu 11. If
display is selected (S1301: Yes), the configuration display processing part 212
executes S1302, and if display is not selected, the present processing is ended.
[0062]
17
In S1302, the configuration display processing part 212 acquires the status of a
NW icon 1101 (refer to FIG. 14A).
In S1303, the configuration display processing part 212 determines whether
the NW icon 1101 has been clicked. If the icon has been clicked (S1303: Yes), the
configuration display processing part 212 executes S1304, and if not (S1303: No),
S1302 is executed again.
[0063]
In S1304, the configuration display processing part 212 specifies a NW routing
to be associated with the clicked NW icon from the configuration information 60.
In S1305, the configuration display processing part 212 determines whether to
display the entire network. In the present embodiment, the entire network is displayed
if the entire display has been selected by the radio button of the network routing
information of the main pull-down menu 11. The entire network can also be determined
to be displayed when a connecting line (link line) 1102 illustrated in FIG. 14A is clicked.
If the entire network is to be displayed (S1305: Yes), the configuration display
processing part 212 executes S1306, and if not (S1305: No), S1307 is executed.
In S1306, the configuration display processing part 212 displays the routing
information (link information) of the entire network. Then, the processing is ended.
[0064]
In S1307, the configuration display processing part 212 displays the connection
information of the clicked NW icon 1101 and the next link destination (NW icon 1103,
final IP address, "0.1.2.3/4" in the example of FIG. 14A). Then, the NW icon 1103 is
colored and highlighted.
In S1308, the configuration display processing part 212 acquires the status of a
NW icon 1103.
In S1309, the configuration display processing part 212 determines whether
the NW icon 1103 has been clicked. If the icon has been clicked (S1309: Yes), the
configuration display processing part 212 executes S1301, and if it is not clicked
(S1309: No), S1311 is executed.
In S1310, the configuration display processing part 212 displays the next link
destination.
[0065]
In S1311, the configuration display processing part 212 acquires the status of a
link line 1102.
In S1312, the configuration display processing part 212 determines whether
the link line 1102 has been clicked. If the link line 1102 has been clicked (S1312: Yes),
the configuration display processing part 212 executes S1313, and if not (S1312: No),
S1308 is executed again.
In S1313, the configuration display processing part 212 displays the final link
destination, and ends the processing.
[0066]
18
By the processing described above, the network (NW) routing information
illustrated in FIGs. 14A through 14C is displayed.
[0067]
In FIG. 14A, if the user 23 clicks the NW icon 1101, the cloud-configuration
visualization system 20 highlights the connection destination NW icon 1103, displays
the connection of the NW icon 1101 and the NW icon 1103 via the link line 1102, and
displays the final connection destination IP address ("0.1.2.3/4") near the link line 1102.
Thereby, the user 23 can recognize the information of the connection status of the
network and the final connection destination information speedily.
[0068]
In FIG. 14B, if the user 23 clicks the link line 1102, the cloud-configuration
visualization system 20 displays the link lines 1104 and 1106 on the path to the final
connection destination IP address ("0.1.2.3/4"). Thereby, the user can apprehend the
path through which a virtual server VSV-INS2 (IP address: "10.0.0.6") is connected to a
device at the final connection destination IP address ("0.1.2.3/4"). In the present
example, it can be recognized that the virtual server VSV-INS2 is connected via a
virtual server VSV-INS3 (IP address: "10.0.0.163") and a virtual network gateway
VPNGW-1 (IP address: "8.7.6.5/4") to the final connection destination IP address
("0.1.2.3/4").
[0069]
In FIG. 14C, if the entire display has been selected by the radio button of the
network routing information of the main pull-down menu 11 as described earlier, the
cloud-configuration visualization system 20 displays the entire network. That is, a link
line 1105 and a final connection destination IP address "2.3.4.5/6" are displayed in
addition to the link line information of FIG. 14B. Thus, the cloud-configuration
visualization system 20 can visually display the entire network information connected to
the virtual server VSV-INS2. Therefore, the user 23 can apprehend the entire network
information in the virtual server VSV-INS2.
[0070]
FIGs. 15 – 16
FIG. 15 is a flowchart illustrating a display processing of a security group
information. FIG. 16 is an image view illustrating a display example of the security
group information. The subject of the processing is set as the configuration display
processing part 212 of the client 21, but it can also be the CPU 2101 of the client 21.
[0071]
In S1501, the configuration display processing part 212 determines whether a
display of security group (Gr) configuration is selected in the main pull-down menu 11.
That is, the configuration display processing part 212 determines whether a checkbox
of the security group information is selected. If it is selected (S1501: Yes), the
configuration display processing part 212 executes S1502, and if not (S1501: No), the
processing is ended.
19
In S1502, the configuration display processing part 212 acquires the security
group information from the configuration information 60.
In S1503, the configuration display processing part 212 determines whether to
display the security group via individual display or composite display. Individual display
refers to a display method of discriminating virtual servers to which the same security
group is linked. Compound display refers to a display method of discriminating virtual
servers of the same security condition (having the same combination of security
groups). If composite display is determined (S1503: Yes), the configuration display
processing part 212 executes S1504, and if individual display is determined (S1503:
No), it executes S1508.
[0072]
In S1504, the configuration display processing part 212 classifies the acquired
security group information, and divides the classified security groups into groups.
In S1505, the configuration display processing part 212 determines whether all
security groups have been grouped. If all have not been grouped (S1505: No), the
configuration display processing part 212 executes S1506, and if completed (S1505:
Yes), it executes S1507.
In S1506, the configuration display processing part 212 groups the next
security group. Then, the configuration display processing part 212 executes S1505
again.
In S1507, the configuration display processing part 212 displays the grouped
security group on the screen (configuration diagram display area 102: composite
display of FIG. 16 (2)), and the process is ended.
[0073]
In S1508, the configuration display processing part 212 displays the security
group on the screen (configuration diagram display area 102).
In S1509, the configuration display processing part 212 determines whether all
the grouped security groups have been displayed. If not all have been displayed
(S1509: No), the configuration display processing part 212 executes S1510, and if all
have been displayed (S1509: Yes), the processing is ended.
In S1510, the next security group is displayed on the screen (configuration
diagram display area 102).
[0074]
According to the (1) individual display of FIG. 16, it can be recognized that:
virtual servers VSV-INS2 through VSV-INS5 are linked to security group
"SCGr-WZ1" (reference number 1201);
virtual servers VSV-INS1 through VSV-INS3 and VSV-INS5 are linked to
security group "SCGr-WZ2" (reference number 1202); and
virtual server VSV-INS5 is linked to security group "SCGr-WZ3" (reference
number 1203).
20
Further, according to the (2) composite display of FIG. 16, it can be recognized
that:
security group "SCGr-WZ2" is linked to the virtual server VSV-INS1;
security groups"SCGr-WZ1" and "SCGr-WZ2" (reference number 1204) are
linked to the virtual server VSV-INS2;
the virtual server VSV-INS3 is the same as the virtual server VSV-INS2;
security group "SCGr-WZ1" is linked to the virtual server VSV-INS4; and
three security groups "SCGr-WZ1", "SCGr-WZ2" and "SCGr-WZ3" are linked
to the virtual server VSV-INS5.
Thus, a virtual server to which the same security group is linked can be
recognized by the individual display. Further, the virtual server in the same security
condition (having the same combination of security groups) can be recognized by the
composite display.
[0075]
FIGs. 17 – 18
FIG. 17 is a flowchart illustrating a display processing of status information.
FIG. 18 is an image view illustrating a display example of the status information. The
subject of the processing is set as the configuration display processing part 212 of the
client 21, but it can also be the CPU 2101 of the client 21.
[0076]
In S1701, the configuration display processing part 212 determines whether
status display is selected in the main pull-down menu 11. If the display is selected
(S1701: Yes), the configuration display processing part 212 executes S1702, and if not
(S1701: No), it executes S1705.
[0077]
In S1702, the configuration display processing part 212 acquires the status of
the configuration component whose status is to be displayed from the configuration
information 60.
In S1703, the configuration display processing part 212 displays the acquired
status in the configuration component (resource icon). For example, a status icon 1404
displaying the status is displayed near a VPN connection (VPNC) icon 104.
In S1704, the configuration display processing part 212 determines whether all
statuses have been displayed in the configuration components (resource icons). If all
statuses have been displayed (S1704: Yes), the configuration display processing part
212 executes S1705, and if not (S1704: No), it executes the processes after S1703
again.
[0078]
In S1705, the configuration display processing part 212 determines whether
the display of load balancer status is selected in the main pull-down menu 11. If display
is selected (S1705: Yes), the configuration display processing part 212 executes S1706,
and if not (S1705: No), the process is ended.
21
In S1706, the configuration display processing part 212 acquires the load
balancer status from the configuration information 60.
In S1707, the configuration display processing part 212 displays the connection
status of a load balancer icon 108 and the virtual server 111 based on the acquired
load balancer status.
In S1708, the configuration display processing part 212 determines whether
display of connection status of all load balancer icons 108 and the virtual server 111 are
completed. If display is not completed (S1708: No), the configuration display
processing part 212 executes S1707 again, and if display is completed (S1708), the
process is ended.
[0079]
In FIG. 18, the icons subjected to status display are, for example, a status icon
1404 of the aforementioned VPN connection icon (VPNC) 104, load balancer status
icons 1407/1408 of the load balancer 108, a global IP status icon 1410 of a global IP
110, and virtual server status icons 1411/1412 of the virtual server 111. However, the
display is not restricted to the status display of these icons, and it is possible to
generate and display status icons of the virtual DC 106 or the Internet gateway 107.
The virtual server status icon 1411 of the virtual server 111 is shown in green to
indicate an operated status, and the virtual server status icon 1412 is shown in red to
indicate a stopped status. The color indication of icons can be changed to allow
statuses of resources to be apprehended immediately, such that failure locations can
be specified easily, for example. Further, the virtual server status icon can be shown in
yellow, for example, to indicate a startup/discarding/high-load status.
[0080]
As described, the use of the cloud-configuration visualization system 20 has an
effect of facilitating apprehension of cloud configuration.
[0081]
FIGs. 19 – 21
FIG. 19
FIG. 19 is a flowchart illustrating an inter-configuration-information search
processing, and a display processing of the search result. The configuration display
processing part 212 starts the operation of the present processing at a timing in which a
search condition is entered to the search condition entry area 119 or the generation of a
click to the highlighted icon. The subject of the processing is set as the configuration
display processing part 212 of the client 21, but it can also be the CPU 2101 of the
client 21.
[0082]
In S1901, the configuration display processing part 212 acquires the
information of the search condition entry area 119.
In S1902, the configuration display processing part 212 determines whether a
search condition has been entered to the search condition entry area 119. If the user
22
23 has entered the search condition in the search condition entry area 119 (S1902:
Yes), the configuration display processing part 212 executes S1903, and if not (S1902:
No), it executes S1905.
[0083]
In S1903, the configuration display processing part 212 acquires a
configuration component (resource icon) matching the search condition from the
configuration information 60.
In S1904, the configuration display processing part 212 highlights the acquired
configuration component (resource icon).
In S1905, the configuration display processing part 212 determines whether
there is a highlighted configuration component (resource icon). If there is a highlighted
configuration component (resource icon) (S1905: Yes), the configuration display
processing part 212 executes S1906, and if not, ends the process.
[0084]
In S1906, the configuration display processing part 212 acquires the status of
the highlighted icon (status of click).
In S1907, the configuration display processing part 212 determines whether a
left-click has been performed. If left-click has been performed (S1907: Yes), the
configuration display processing part 212 executes S1908, and if not (S1907: No), it
executes S1909.
In S1908, the configuration display processing part 212 displays a CPU load
graph and a memory usage graph in a display area 2002. It is also possible to display
either one of the CPU load graph and the memory usage graph. Further, the status of
a virtual resource can be displayed instead of the physical CPU load or memory usage
graph.
[0085]
In S1909, the configuration display processing part 212 determines whether a
right-click has been performed. If right-click has been performed (S1909: Yes), the
configuration display processing part 212 executes S1910, and if not (S1909: No), the
processing is ended.
In S1910, the configuration display processing part 212 displays the sub pulldown
menu 12, and ends the processing. In the processes from S1907 to S1910, if
clicks are performed for two times or more in a row, processing can be performed to
execute operations such as displaying a different display, such as displaying the main
pull-down menu 11, displaying only the CPU load graph, displaying only the memory
usage graph, displaying only the CPU load graph and the memory usage graph, or to
switch the graphs being displayed.
[0086]
FIG. 20
FIG. 20 is an image view illustrating a first display example according to interconfiguration-
information search result.
23
[0087]
The user 23 enters a search condition in the search condition entry area 119.
In the example of FIG. 20, "X66_128" is entered to search for a virtual server using a
x66-architecture 128-bit CPU. The configuration display processing part 212 of the
cloud-configuration visualization system 20 extracts the virtual server matching the
entered search condition from the configuration information 60. According to this
search, three virtual servers, VSV-INS1, VSV-INS3 and VSV-INS5, that match the
search condition are extracted.
[0088]
Thereafter, the configuration display processing part 212 highlights the
extracted virtual server icons. In the drawing, the highlights are illustrated as meshed
display, but it can be any display, such as surrounding the icon with a bold frame, or
having the icon flash, as long as the display indicates that the icon is different from the
other icons.
[0089]
The configuration display processing part 212 determines whether the
extracted virtual server icon has been clicked. In FIG. 20, it is assumed that a left-click
2091 has been performed to the virtual server VSV-INS5. Therefore, the CPU load
graph and the memory usage graph are displayed in the display area 2002 on the right
side of the configuration diagram display area 102. The configuration display
processing part 212 not only displays the CPU load graph and the memory usage
graph on the display part 2106 of the client 21, but also enables the graphs to be output
on paper using a printer of the output part 2105. Further, the configuration display
processing part 212 can output and store the graphs as file in the storage part 2103, or
output the same as file from the communication part 2107 to an external storage device.
[0090]
FIG.
21
FIG. 21 is an image diagram illustrating a second display example according to
the inter-configuration-information search result.
[0091]
FIG. 21 highlights the virtual servers matching the search condition, similar to
FIG. 20. The difference is that a right-click 2191 is performed instead of the left-click
2091 to the VSV-INS5 among the highlighted virtual servers. The configuration display
processing part 212 detects this right-click 2191, and displays the sub pull-down menu
12 near the icon of the virtual server ＶＳＶ－ＩＮＳ５. In a state where the user 23 selects
a predetermined operation from the sub pull-down menu 12, the virtual server VSVINS5
can be operated. In the present drawing, it executes power off of the virtual
server ＶＳＶ－ＩＮＳ５.
[0092]
24
By highlighting the configuration component (resource icon) matching the
search condition as described above and clicking the highlighted icon, the recognition
of necessary configuration component and operation can be improved, and userfriendliness
can be enhanced.
[0093]
As described, according to the cloud-configuration visualization system, the
information acquired from the cloud service providers can be collected to generate a
visual configuration diagram. Thereby, the entire configuration of the infrastructure
environment (constructed cloud environment) can be apprehended speedily and easily.
[0094]
The present invention is not restricted to the above-illustrated preferred
embodiments, and can include various modifications. The above-illustrated
embodiments are described in detail to help understand the present invention, and the
present invention is not restricted to a structure including all the components illustrated
above. Further, a portion of the configuration of an embodiment can be replaced with
the configuration of another embodiment, or the configuration of a certain embodiment
can be added to the configuration of another embodiment. Moreover, a portion or all of
the configurations of each embodiment can be added to, deleted from or replaced with
other configurations. The configurations and functions described above can be realized
through software by having a processor interpret and execute programs for realizing
the respective functions. The respective configurations, functions and the like
described above can be realized by software by the processor interpreting and
executing programs for realizing the respective functions.
[0095]
The information such as the programs, tables and files for realizing the
respective functions can be stored in storage devices such as memories, hard disks or
SSDs (Solid State Drives), or in memory media such as IC cards, SD cards or DVDs.
Only the control lines and information lines considered necessary for description are
illustrated in the drawings, and not necessarily all the control lines and information lines
required for production are illustrated. In actual application, it can be considered that
almost all the components are mutually coupled.
[Reference Signs List]
[0096]
2: Configuration viewer screen, 11: main pull-down menu, 11a: checkbox, 11b: radio
button, 12: sub pull-down menu, 20: cloud-configuration visualization system, 21: client,
22: physical server, 24: cloud service (IaaS), 50: cloud connection information, 51:
cloud management table, 52: cloud service management table of company A, 53: cloud
service management table of company M, 60: cloud service configuration information,
100: display information selection menu, 101: selection cloud entry area, 102:
configuration diagram display area, 103: user connection, 104:VPN connection, 105:
VPN gateway, 106: virtual DC, 107: Internet gateway 108: load balancer, 109: network
25
segment, 110: global IP, 111: virtual server, 112: click, 118: individual information
display area, 119: search condition entry area, 211: cloud connection information
reception part, 212: configuration display processing part, 221: cloud connection
information registration part, 222: configuration information acquisition processing part,
223: cloud connection information DB, 241: cloud service API, 1101/1103: network icon,
1102/1104/1105/1106: link line, 1201/1202: security group information, 1404: VPN
connection status icon, 1407/1408: load balancer status icon, 1410: global IP status
icon, 1411/1412: virtual server status icon, 2001: highlight, 2002: graph display, 2091:
left-click, 2101/3101: CPU, 2191: right-click.

[CLAIMS]
[Claim 1]
A cloud-configuration visualization system configured to connect to one or
more cloud service provision systems providing a cloud service, the system comprising:
a client apparatus and a server apparatus,
the client apparatus comprising
a cloud connection information reception part configured to receive a cloud
connection information constructing a cloud environment from a user, and
a configuration display processing part configured to perform display control on
a screen displaying a configuration of the cloud environment,
the server apparatus comprising
a cloud connection information part configured to store and register the cloud
connection information received by the cloud connection information reception part of
the client apparatus in a cloud connection information DB, and
a configuration information acquisition processing part configured to acquire
the cloud configuration information constructed in the cloud service provision system
from the cloud service provision system according to a cloud configuration information
acquisition request from the configuration display processing part of the client
apparatus,
wherein the configuration display processing part having received a request
command for displaying cloud configuration from the user is configured to
extract a cloud ID for acquiring cloud configuration information from the cloud
configuration display request command, and
transmit the configuration display command of the extracted cloud ID to the
configuration information acquisition processing part,
wherein the configuration information acquisition processing part is configured
to
acquire a cloud connection information from the cloud connection information
DB based on the cloud ID,
specify a cloud service provision system acquiring the cloud configuration
information based on the acquired cloud connection information, and
transmit the cloud configuration information acquired from the specified cloud
service provision system to the configuration display processing part, and
the configuration display processing part is configured to
generate a cloud configuration diagram using configuration component icons of
each configuration component and connection information, based on the cloud
configuration information received from the configuration information acquisition
processing part, and
display the generated cloud configuration diagram on the screen.
[Claim 2]
27
The cloud-configuration visualization system according to claim 1, wherein the
client apparatus or the server apparatus comprises
a CPU configured to control an entire apparatus,
a memory configured to store information temporarily,
a storage part configured to store information permanently, and
one or more of a communication part configured to control communication with
an external device, an input part configured to receive information from outside, an
output part configured to output information to the external device, and a display part
configured to display information.
[Claim 3]
The cloud-configuration visualization system according to claim 2, wherein the
cloud connection information includes at least a cloud ID configured to uniquely identify
the cloud environment, a cloud provider ID configured to uniquely identify the cloud
service provision system, a cloud name, and a network connection information to the
cloud.
[Claim 4]
The cloud-configuration visualization system according to claim 3,
wherein the cloud configuration information is composed of a cloud ID, a
configuration apparatus, a configuration component, and a configuration information
setting content,
the configuration apparatus at least includes a virtual data center name, a
virtual network name, a virtual network equipment name, a virtual server name, and a
virtual server associated information,
the configuration component corresponding to the virtual network equipment
name at least includes configuration components of a load balancer, an Internet
gateway, a VPN gateway, a VPN connection, and a user connection,
the configuration component corresponding to the virtual server associated
information at least includes configuration components of a global IP, a security group,
a machine image, a virtual CPU, a virtual memory, and a virtual storage, and
the cloud-configuration virtualization system generates an icon for each
configuration apparatus or configuration component, and generates a configuration
diagram.
[Claim 5]
The cloud-configuration visualization system according to claim 4, wherein the
screen at least comprises
a select menu area configured to select a display information,
a cloud entry area configured to enter a type of the cloud environment to be
displayed,
a configuration diagram display area configured to display the configuration
diagram,
28
a main menu configured to select information related to configuration
component icons of the configuration diagram,
a search condition entry area configured to search a configuration component
of the configuration diagram,
an individual configuration information display area configured to display a
property of the configuration component of the configuration diagram, and
a submenu configured to select an operation information to be executed to the
configuration component of the configuration diagram.
[Claim 6]
The cloud-configuration visualization system according to claim 4,
wherein the main menu at least comprises items of an acquired configuration
information area, a load balancer connection status, a key pair, a status, an IP address,
a virtual machine image, a security group information, and a network routing
information, and
the configuration display processing part acquires the corresponding
configuration information setting content from the cloud configuration information based
on the item selected in the main menu, and displays the configuration information
setting content to the configuration component icon in the configuration diagram display
area on the screen.
[Claim 7]
The cloud-configuration visualization system according to claim 4,
wherein the submenu at least comprises power on, power off, sleep, suspend,
restart, discard, and add, serving as operation contents performed to the configuration
component, and
the configuration display processing part requests the cloud service provision
system to perform the selected operation content to an operation target configuration
component.
[Claim 8]
The cloud-configuration visualization system according to claim 6, wherein if a
display of network routing information is selected in the main menu,
the configuration display processing part sets the selected configuration
component as a link source of a network, and switches the following displays;
(1) display of a link line and a final connection IP address by connecting the link
source and a next link destination of the link source via the link line,
(2) display of a link line and the final connection IP address by connecting a
path between the link source and a final link destination via the link line, and
(3) display of link lines of all link destinations connected to the link source and
the final IP address,
and the network routing information is displayed on the screen.
[Claim 9]
The cloud-configuration visualization system according to claim 6,
29
wherein the item of the security group information of the main menu comprises
a radio button for selecting an individual display for displaying only one security group
information, and an integrated display of all security group information, and
the configuration display processing part switches display of the security group
information to the screen by selecting the radio button.
[Claim 10]
The cloud-configuration visualization system according to claim 6,
wherein if the configuration display processing part detects that a status display
of the main menu has been selected,
the configuration display processing part adds an operation status icon
indicating an operation status of the configuration component of the configuration
component icon, and displays the icon on the screen.
[Claim 11]
The cloud-configuration visualization system according to claim 6,
wherein if the configuration display processing part detects that the load
balancer connection status of the main menu has been selected,
the configuration display processing part specifies a virtual server icon
connected to the load balancer icon based on the configuration information, and the
connection status is displayed on the screen.
[Claim 12]
The cloud-configuration visualization system according to claim 6,
wherein if the configuration display processing part detects that the search
condition has been entered to the search condition entry area,
the configuration display processing part extracts a configuration component
matching the search condition from the cloud configuration information, and highlights
the configuration component icon of the extracted configuration component on the
screen.
[Claim 13]
The cloud-configuration visualization system according to claim 6,
wherein if the configuration display processing part detects that the highlighted
configuration component icon has been selected, the configuration display processing
part selects to either display an operation status of the configuration component icon on
the screen, or output the information of the operation status as a file to a storage part of
the client or an external storage device.
[Claim 14]
The cloud-configuration visualization system according to claim 6,
wherein if the configuration display processing part detects that the highlighted
configuration component icon has been selected, the configuration display processing
part displays the submenu corresponding to the configuration component icon on the
screen.
[Claim 15]
A cloud-configuration visualization method of a cloud-configuration visualization
system configured to connect to one or more cloud service provision systems providing
a cloud service, the system comprising:
a client apparatus and a server apparatus,
the client apparatus comprising
a cloud connection information reception part configured to receive a cloud
connection information constructing a cloud environment from a user, and
a configuration display processing part configured to perform display control on
a screen displaying a configuration of the cloud environment,
the server apparatus comprising
a cloud connection information part configured to store and register the cloud
connection information received by the cloud connection information reception part of
the client apparatus in a cloud connection information DB, and
a configuration information acquisition processing part configured to acquire
the cloud configuration information constructed in the cloud service provision system
from the cloud service provision system according to a cloud configuration information
acquisition request from the configuration display processing part of the client
apparatus,
wherein the configuration display processing part having received a request
command for displaying cloud configuration from the user executes the following steps
of
extracting a cloud ID for acquiring cloud configuration information from the
cloud configuration display request command, and
transmitting the configuration display command of the extracted cloud ID to the
configuration information acquisition processing part,
wherein the configuration information acquisition processing part executes the
steps of
acquiring a cloud connection information from the cloud connection information
DB based on the cloud ID,
specifying a cloud service provision system acquiring the cloud configuration
information based on the acquired cloud connection information, and
transmitting the cloud configuration information acquired from the specified
cloud service provision system to the configuration display processing part, and
the configuration display processing part executes the steps of
generating a cloud configuration diagram using configuration component icons
of each configuration component and connection information, based on the cloud
claims-16.configuration information received from the configuration information acquisition
processing part, and
displaying the generated cloud configuration diagram on the screen. A cloud-configuration visualization program of a cloud-configuration
visualization system configured to connect to one or more cloud service provision
systems providing a cloud service, the system comprising:
a client apparatus and a server apparatus,
the client apparatus comprising
a cloud connection information reception part configured to receive a cloud
connection information constructing a cloud environment from a user, and
a configuration display processing part configured to perform display control on
a screen displaying a configuration of the cioud environment,
the server apparatus comprising
a cloud connection information part configured to store and register the cloud
connection information received by the cJoud connection infonnation reception part of
the client apparatus in a cloud connection information DB, and
a configuration information acquisition processing part configured to acquire
the cloud configuration information constructed in the cloud service provision system
from the cloud service provision system according to a cloud configuration information
acquisition request from the configuration display processing part of the client
apparatus,
wherein the configuration display processing part having received a request
command for displaying cloud configuration from the user executes the functions of
extracting a doud ID for acquiring cioud configuration information from the
cloud configuration display request command, and
transmitting the configuration display command of the extracted cloud ID to the
configuration information acquisition processing part,
wherein the configuration information acquisition processing part executes the
functions of
acquiring a cloud connection information from the cloud connection information
DB based on the cloud ID,
specifying a cloud service provision system acquiring the cloud configuration
infonnation based on the acquired cioud connection information, and
transmitting the cioud configuration information acquired from the specified
doud service provision system to the configuration display processing part, and
the configuration display processing part executes the functions of
generating a cloud configuration diagram using configuration component icons
of each configuration component and connection information, based on the cloud
configuration information received from the configuration information acquisition
processing part, and
displaying the generated cioud configuration diagram on the screen.