DISPLAY CONTROL SYSTEM, DISPLAY METHOD, AND PROGRAM

Abstract

Provided is a display control system that causes a user terminal to display a GUI screen, the system comprising a settings GUI unit that: causes the terminal to display a screen that depicts a network configuration including a plurality of clouds that can be selected; and causes the terminal, if a specific cloud and a resource to be connected to said specific cloud are selected on the terminal, to display a parameter input screen pertaining to the connection between the specific cloud and the resource.

Description

[Technical field]

[0001] The present invention relates to graphical user interfaces. [Background technology]

[0002] In recent years, cloud services have become widespread, and the use of cloud services is now a prerequisite for the construction and operation of corporate systems. In addition, interconnect services for connecting clouds with on-premise environments are becoming more and more common.

[0003] By using the interconnection service, users can build a variety of cloud-based networks for a variety of purposes. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] JP 2018-092565 A Summary of the Invention [Problem to be solved by the invention]

[0005] However, conventional interconnection services do not provide a graphical user interface that visually displays the network configuration including multiple connectable clouds, and new applications and settings must be made using a text-based user interface.

[0006] Therefore, with conventional interconnection services, it was not easy to set up a desired connection configuration, such as a connection between a certain location and the cloud, and it was a time-consuming task.

[0007] The present invention has been made in consideration of the above-mentioned points, and an object of the present invention is to provide a graphical user interface that enables a desired interconnection configuration to be easily constructed. [Means for solving the problem]

[0008] According to the disclosed technology, there is provided a display control system for displaying a GUI screen on a user terminal, comprising: A setting GUI unit that displays a screen depicting a network configuration including a plurality of selectable clouds on the terminal, The setting GUI unit includes: When a router is selected on the screen of the terminal and an add-on setting is selected, a screen for selecting a firewall or NAT as an additional function for the router is displayed on the terminal. a screen on which the user can select either a new purchase, a setting, or an abolition for each of the firewall and the NAT; and displaying a specific additional function on the terminal. Settings in When the item "a" is selected, a parameter input screen for the specific additional function is displayed on the terminal. A display control system is provided. Effect of the Invention

[0009] According to the disclosed technology, it is possible to provide a graphical user interface that enables a desired interconnection configuration to be easily constructed. [Brief description of the drawings]

[0010] [Figure 1] 1 is a diagram showing an example of a connection configuration using an interconnection system according to an embodiment of the present invention; [Diagram 2] FIG. 1 is a diagram showing the relationship between areas, locations, etc. [Diagram 3] FIG. 1 is a diagram illustrating a comparison between a proposed model and a conventional model. [Figure 4] 1 is a diagram for explaining components of an interconnection system according to an embodiment of the present invention; [Diagram 5] FIG. 1 is a diagram for explaining a resource management method. [Figure 6] FIG. 2 is a diagram for explaining connections between resources. [Figure 7] FIG. 13 is a diagram illustrating a connection example. [Figure 8] FIG. 13 is a diagram for explaining a routing group. [Figure 9] FIG. 13 is a diagram illustrating a connection example. [Figure 10] FIG. 13 is a diagram illustrating a connection example. [Figure 11] FIG. 13 is a diagram for explaining in and out. [Figure 12] FIG. 13 is a diagram illustrating an example of FW settings. [Figure 13] FIG. 13 is a diagram illustrating an example of NAT settings. [Figure 14] FIG. 2 is a diagram illustrating an example of the configuration of an operation system. [Figure 15] FIG. 2 illustrates an example of a hardware configuration of the apparatus. [Figure 16] FIG. 13 is a diagram showing a basic process flow of setting. [Figure 17] FIG. 1 is a diagram showing a basic process flow of monitoring. [Figure 18] FIG. 13 is a diagram showing an example of a screen displayed on a user terminal. [Figure 19] FIG. 13 is a diagram showing an example of a screen displayed on a user terminal. [Figure 20] FIG. 13 is a diagram showing an example of a screen displayed on a user terminal. [Figure 21] FIG. 13 is a diagram showing an example of a screen displayed on a user terminal. [Figure 22] FIG. 13 is a diagram showing an example of a screen displayed on a user terminal. [Figure 23] FIG. 13 is a diagram showing an example of a screen displayed on a user terminal. [Figure 24] FIG. 13 is a diagram showing an example of a screen displayed on a user terminal. [Diagram 25] FIG. 13 is a diagram showing an example of a screen displayed on a user terminal. [Figure 26] FIG. 13 is a diagram showing an example of a screen displayed on a user terminal. [Figure 27] FIG. 13 is a diagram showing an example of a screen displayed on a user terminal. [Figure 28] FIG. 13 is a diagram showing an example of a screen displayed on a user terminal. [Figure 29]FIG. 13 is a diagram showing an example of a screen displayed on a user terminal. [Diagram 30] FIG. 13 is a diagram showing an example of a screen displayed on a user terminal. [Diagram 31] FIG. 13 is a diagram showing an example of a screen displayed on a user terminal. [Diagram 32] FIG. 13 is a diagram showing an example of a screen displayed on a user terminal. [Diagram 33] FIG. 13 is a diagram showing an example of a screen displayed on a user terminal. [Diagram 34] FIG. 13 is a diagram showing an example of a screen displayed on a user terminal. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0011] Hereinafter, an embodiment of the present invention (the present embodiment) will be described with reference to the drawings. The embodiment described below is merely an example, and the embodiment to which the present invention is applied is not limited to the following embodiment.

[0012] The following describes an interconnection system that allows users to freely select a combination of resources such as ports, connections, and components to provide the most suitable connection for the user.

[0013] (System Configuration) FIG. 1 shows an overview of an interconnection system according to an embodiment of the present invention. Although FIG. 1 shows area A and area B, there is no limit to the number of areas. The number of areas may be one, or three or more. The areas may be regions such as "East Japan" and "West Japan," or may be regions defined by other divisions. In addition, a region having a connection point with a cloud may be set as an area. Note that in this specification, "cloud" refers to cloud services such as AWS (registered trademark), Azure (registered trademark), and Office365 (registered trademark). Also, a "closed network" refers to a VPN service, for example.

[0014] In the example of FIG. 1, area A and area B are connected by an inter-area network, and communication is possible between area A and area B.

[0015] A system consisting of a core 60 and one or more leaves 30 shown in each of area A and area B is called an interconnect system. As will be described in detail later, the core 60 is a functional unit consisting of components 20 such as a router 10 and a firewall (FW), and the leaf 30 is a functional unit consisting of a network device (router, switch, etc.) that accommodates a port.

[0016] The leaf 30 and the core 60 are connected by a physical communication line. A virtual private line (VPN) constructed as a connection is constructed by setting one or more network devices constituting the leaf 30 and the core 60. Note that the network devices (routers, switches, servers, etc.) used in this embodiment may be physical devices or devices realized by virtual machines.

[0017] Core 60 in the interconnection system is installed, for example, in a data center (hereinafter, DC) 1 of a business that provides the interconnection system. Leaf 30 is installed in DC 1, as well as DCs 2 and 3 that are DCs of any business or user. There is no particular limitation on where each function constituting the interconnection system is located, and the configuration shown in FIG. 1 is merely an example.

[0018] 1 is an abbreviation of collocation, and means that a user installs his / her own equipment in a DC equipped with a leaf 30 and connects the equipment to the leaf 30. The leaf 30 is connected to the user equipment via a physical cable, a dedicated line, a closed network service, etc. The leaf 30 is also connected to the cloud.

[0019] 1 shows a user terminal 500, a display control system 100, and a control device 200. The control device 200 is connected to the display control system 100, which provides a GUI (Graphical User Interface) to the user terminal 500. Setting information (parameters, etc.) input from the user terminal 500 through the GUI is transmitted to the display control system 100, and then transmitted from the display control system 100 to the control device 200. Based on the setting information, the control device 200 performs settings on one or more network devices that constitute the interconnection system. The control device 200 also performs settings on the cloud to be connected. These settings establish a connection between, for example, a router and a cloud.

[0020] 2 is a diagram for explaining the relationship between the core 60, leaf 30, area, and location in a DC. A location is where the leaf 30 exists, and is the location where the physical connection device (port) is arranged (where the patch panel is located). The port is accommodated in the leaf 30. The core 60 belongs to one area.

[0021] Although this is also related to the GUI described later, even if there are multiple DCs equipped with cores 60 in the same area, these DCs are shown to the user as a single entity. Also, if there are multiple locations in the same area and each location is equipped with a leaf 30, each leaf can be connected to the core 60 in the area in the same way.

[0022] A menu that takes area and location into consideration is presented to the user, without making the user aware of cores and leaves. Such display control is performed by the display control system 100 (specifically, the setting GUI unit 110). However, this is just an example, and the cores and leaves may be displayed explicitly.

[0023] The leaves of a certain area are not connected to the cores of other areas, but this is just an example, and a configuration in which the leaves of a certain area are connected to the cores of other areas is also possible.

[0024] FIG. 3 is a diagram showing a comparison between a conventional interconnection system (conventional model) and an interconnection system according to the present embodiment (proposed model).

[0025] In the conventional model shown in the upper part of Figure 3, users themselves must bring in and install their own equipment (routers, firewalls, etc.) in racks provided in the DC of the conventional model operator, and the users themselves must also prepare lines to the user equipment provided in the user DC (DC that has the user equipment).

[0026] On the other hand, in the proposed model, the user can connect the user equipment to the cloud simply by connecting the user equipment to the leaf 30, and then purchasing and configuring router components, etc., from the GUI.

[0027] In addition, in the conventional model, the connection from the user equipment to the cloud is only an L2 (layer 2) connection. In other words, the user himself has to control FW / NAT and other settings on his own equipment. On the other hand, the proposed model can provide L3 connections in addition to L2 connections. In L3 connections, the addition and configuration of FW / NAT and other settings can be performed on the GUI.

[0028] (Services provided through interconnected systems, etc.) FIG. 4 is a diagram showing a functional configuration of an interconnection system (and services provided) from the viewpoint of services provided by the interconnection system in this embodiment.

[0029] Here, a "resource" is a function that provides connectivity to users. Resources include ports (indicated by "P" in Figure 4), routers, connections, and components.

[0030] The Buyer in Fig. 4 is a person who uses the service provided by the interconnection system in this embodiment. The Seller is a person who provides a service to the Buyer. The businesses that provide AWS (registered trademark), Azure (registered trademark), Office365 (registered trademark), etc., mentioned above, are examples of the Seller.

[0031] In this specification, the "user" is assumed to be a buyer, but the "user" may also be a seller. The overview of each resource is as follows:

[0032] A port is a resource (physical port) for connecting user equipment to the interconnection system. For example, user equipment can be connected to a port via an optical fiber cable, a leased line, a closed network, etc. In addition, users can purchase multiple ports to achieve a redundant configuration.

[0033] A connection is a resource that connects ports or between a port and a router, and is realized by a VPN (Virtual Private Line) in this embodiment. A connection is an L3 connection when at least one of the source (src) and destination (dst) is a router, and is an L2 connection when both the source and destination are ports.

[0034] Routers are resources that provide L3 routing functions and become peers for BGP connections. Routing groups (RGs) function within routers, and connections that have a router as the src or dst connect to the routing group. Users can achieve a redundant configuration by purchasing multiple routers (Paired Routers).

[0035] A routing group is a virtual router (VRF) contained in a router. Connections that belong to the same routing group can communicate with each other, but connections that belong to different routing groups must go through a firewall.

[0036] A component is a resource that provides additional functions, and in this embodiment, there are L2 components and L3 components. The L2 component is a component of an L2 connection. The L3 component is, for example, a FW and NAT that function between routing groups in a router. In addition, a component may be used as an additional function for a port.

[0037] A firewall (FW) is a resource that has a communication function and a filter function between routing groups. A firewall is used when you want to allow connections that belong to different routing groups to communicate with each other, or when you want to apply rules to communication between routing groups.

[0038] NAT is a resource with an address conversion function. NAT is mainly required when connecting to SaaS (operation with Global IP). Specifically, in the case of communication from a user to SaaS, the user-specified address (private IP address) set in the source IP address is converted to a global IP address, and in the case of communication from SaaS to a user, the global IP address set in the destination IP address is converted to a user-specified address (private IP address).

[0039] Users can build end-end (e.g. user equipment-cloud) connectivity by selecting and purchasing various resources. Depending on how they combine resources, users can also build simple end-end L2 virtual private line connections, L3 connections via router functions, and L3 connections with additional functions.

[0040] As shown in FIG. 4, the equipment of a user (buyer) who connects to a port is connected to the port by a VLAN in an access line.

[0041] An example is shown in which network devices, clouds A to E, and other businesses are connected on the seller side. For example, a user can select a port in a location desired by the user, a router, and a cloud that the user wishes to use on the GUI, thereby building an L3 connection as shown in Fig. 4. Also, for example, a user can select a port in a location desired by the user and a cloud that the user wishes to use (or a port in a location to which the cloud is connected) on the GUI, thereby building an L2 connection as shown in Fig. 4.

[0042] Figure 5 is a diagram showing an image of resource management. As shown in Figure 5, resource management is performed in units of tenants and users. A user can also create multiple tenants for one contract.

[0043] When a user starts using a service, he or she first creates a tenant. Resources are managed on a tenant-by-tenant basis. Access rights to a tenant are set on a user-by-user basis for each tenant.

[0044] Figure 6 shows connections between resources. The granularity of whether or not approval for a connection is required is the tenant. In the example of Figure 6, approval is not required when connecting to resources of the same tenant (example: connection #1). Approval is required when connecting to resources of a different tenant (example: connection #2). Approval is required when connecting to resources of a different contractor (example: connection #3). For connections with clouds such as connection #4, whether or not approval is required at the time of connection is determined for each cloud. Each resource is explained in more detail below.

[0045] (About ports) A user purchases a port by specifying an area and location on the GUI screen. When purchasing a new port, a Letter of Authorization (LOA) is issued to the user. The LOA contains information about the port connection location, and the user notifies the network operator of this information so that the user's equipment can be connected (wired) to the port.

[0046] After the wiring is completed, the user activates the port from the GUI screen, and the port is activated (specifically, the port transitions from "Shut" to "No Shut"). When the port is activated, packets can be passed through the port, and billing begins.

[0047] Users can acquire VLANs from the GUI screen in units of 16. The number of VLANs acquired here becomes the number of connections that can be established from the relevant port.

[0048] When the user specifies a port as the src of a connection from the GUI screen, the user selects the VLAN-ID to be set for the connection from the VLAN range. This creates a VLAN interface in the interconnection system. When specifying a port as the dst of a connection, the destination VLAN information is provided in advance, and that information (VLAN-ID, etc.) is entered from the GUI. The port bandwidth is selectable, for example, 1G or 10G. The user can also select the type of the selected port (0 system, 1 system, ...) on the GUI screen.

[0049] Fig. 7 shows an example of a case where ports are used. In the example of Fig. 7, a connection #1 is established for VLAN:x between one port of src (or dst) and two ports of dst (or src), and a connection #2 is established for VLAN:y.

[0050] (About the router) A user purchases a router by specifying an area. In this embodiment, when a user purchases a router, eight routing groups are created. Figure 8 shows an image of when routing groups are used. Figure 8 shows an example in which a FW is placed between routing groups.

[0051] The communication in Fig. 8 can also be achieved by replacing the routing group in Fig. 8 with a router. In other words, the configuration shown in Fig. 8 is essentially the same as a router-FW-router configuration. However, by using a routing group as in Fig. 8, it is possible to show the internal settings of the router to the user.

[0052] When a user designates a router as the src or dst of a connection on the GUI screen, the user designates to which routing group the connection should belong from among a plurality of routing groups of the router.

[0053] When a router is specified as the src or dst of a connection, the connection is configured as an L3 connection. An interface is created for each connection, and an IPv4 or IPv6 address is assigned to the interface. Routing is configured for each connection. Routing can be BGP or Static.

[0054] (About connections) As already explained, if a port is specified for either src or dst, the connection becomes an L2 connection, and if a router is specified for either src or dst or both, the connection becomes an L3 connection.

[0055] When a user selects a provider such as a cloud as the dst of a connection, the user selects the port to which the provider is connected, and a connection is established between the src and the selected port. In other words, the user can establish a connection to a cloud by simply selecting the cloud, without being aware of the connection point of the cloud, which may differ for each cloud.

[0056] In this embodiment, the user can select from the GUI screen either a single connection, which is a single connection, or a paired connection, which is a set of two connections.

[0057] Fig. 9 shows an example of a single connection between ports and a single connection between a router and a port, and Fig. 10 shows an example of a paired connection between ports and a paired connection between a router and a port.

[0058] In a paired connection, the same parameters are applied to both connections as a general rule. Also, in a paired connection, when a two-line redundant configuration is used and connections are routed through a FW or NAT, the two connections are controlled as a set.

[0059] For L3 connections, routing is configured for each connection. The settings include making it possible to receive 4-Byte-AS routes, setting MED / AS-PATH prepend (in / out), and setting route filters (in / out). In addition, out is configured to convert route advertisements to default routes / summarized routes only, and in is configured to convert route reception to default routes only.

[0060] As shown in FIG. 11, out is route advertisement from the interconnection system to the outside, and in is route reception from the outside to the interconnection system.

[0061] (About FW) This section explains FW, one of the L3 components. FW is a component that can be used in combination with a router, and is used to connect different routing groups. It can also be used in conjunction with NAT.

[0062] It is possible to specify applications (TCP / UDP port numbers) and IP addresses as rules for traffic matching conditions in the FW communication policy. Policies have an order, and the FW evaluates traffic in order from the top of the list. If traffic matches the conditions of any policy, the FW will not evaluate subsequent rules. The FW will discard communications that are not permitted by policy. The smallest unit of a policy is an address-set, and multiple address-sets can be set within a group.

[0063] Fig. 12 shows an example of a communication policy in a FW. In the example of Fig. 12, a connection connected to base 1 belongs to routing group #X, and a connection connected to cloud B belongs to routing group #Y. Fig. 12 shows a policy in which, for example, SSH to address-set #1 is OK, but Telnet to address-set #4 is NG.

[0064] (About NAT) Next, we will explain NAT. NAT is a component that can be used in combination with a router and can be used in conjunction with a firewall. NAT rules are applied between routing groups, and TCP / UDP / ICMP are provided as target protocols.

[0065] NAT has a NAPT function that converts private IP addresses to global IP addresses, and a NAT function that converts global IP addresses to private IP addresses. Figure 13 shows an example of when NAT rules are applied between routing groups.

[0066] (Operation System) 14 is a diagram showing an example of the configuration of an operation system according to this embodiment. The operation system according to this embodiment includes a display control system 100, a control device 200, and a monitoring device 300.

[0067] The target network 400 has network devices that realize the ports, connections, routers, etc. described above, is a network that is a target of configuration and monitoring, and is a network that includes the interconnection system according to this embodiment. The network includes one or more network devices. Note that a system that includes the interconnection system and the control device 200 may be called a network system.

[0068] In the setting from the control device 200 to the target network 400, the setting of the L3 connection involves setting at least the network devices on the path of the L3 connection in the interconnection system, and the setting of the L2 connection involves setting at least the network devices on the path of the L2 connection in the interconnection system. The setting itself in the network devices for establishing the L2 / L3 connection can be done using existing technology. In addition, when connecting to a cloud, the setting from the control device 200 to the cloud is also done, but this setting itself can be done using existing technology. In addition, the setting itself when establishing a router, FW, NAT, etc. can be done using existing technology.

[0069] The user terminal 500 is a terminal operated by a user who configures settings on a GUI screen, such as ports, connections, routers, etc. Note that "configuration" is a general term for adding, changing, deleting, etc. of resources.

[0070] The display control system 100 transmits information of a GUI screen to the user terminal 500 and causes the user terminal 500 to display the GUI screen. In other words, transmitting information of a GUI screen to the user terminal 500 and causing the user terminal 500 to display the GUI screen may be rephrased as displaying a GUI screen on the user terminal 500. In addition, the display control system 100 receives information input to the user terminal 500 via the GUI screen from the user terminal 500 and performs processing based on the received information.

[0071] The display control system 100 has a setting GUI unit 110 and a monitoring GUI unit 120. The setting GUI unit 110 displays a GUI screen on a user terminal 500 for performing settings such as adding, changing, and abolishing resources such as ports, connections, and routers, receives information input to the user terminal 500 via the GUI screen from the user terminal 500, and performs processing based on the received information.

[0072] The monitoring GUI unit 120 displays a GUI screen on the user terminal 500 for checking traffic and normality in resources set by the user, receives information entered into the user terminal 500 via the GUI screen from the user terminal 500, and performs processing based on the received information.

[0073] The setting GUI unit 110 and the monitoring GUI unit 120 cooperate with each other. For example, when a user operates the GUI screen displayed on the user terminal 500 by the setting GUI unit 110 to select "monitoring," the monitoring GUI unit 120 displays a monitoring GUI screen on the user terminal 500.

[0074] The control device 200 includes a management database that stores configuration information (area information, location information, facility information for each area and location in the target network 400, etc.) and setting information indicating what settings have been made for each user (what resources are being used). The control device 200 receives information input via a setting GUI screen from the setting GUI unit 110, and sets ports, connections, routers, clouds, etc. based on the information. The setting GUI unit 110 may also include the above-mentioned management database.

[0075] The monitoring device 300 has a management database similar to the management database of the control device 200 by receiving information from the control device 200. Alternatively, the monitoring device 300 may be able to access the management database of the control device 200. Furthermore, the monitoring device 300 has a monitoring database, and based on configuration information in the management database, for example, periodically collects monitoring information such as traffic, flow information, and alarm information from each NW device, and stores the collected information in the monitoring database. Furthermore, the monitoring GUI unit 120 may have the above-mentioned management database. Furthermore, the monitoring GUI unit 120 may have the above-mentioned monitoring database.

[0076] For example, the monitoring GUI unit 120 acquires monitoring information corresponding to the resources of a specific user from the monitoring database of the monitoring device 300 based on the resource setting information of the specific user, creates a GUI screen, and displays it on the user terminal 500.

[0077] The display control system 100 may be one or more devices having the setting GUI unit 110 and the monitoring GUI unit 120, or may be one or more devices each of the setting GUI unit 110 and the monitoring GUI unit 120. These devices may be physical machines or virtual machines. Furthermore, when the setting GUI unit 110 and the monitoring GUI unit 120 are provided as devices, these may be called a setting GUI device and a monitoring GUI device. Furthermore, the display control system 100 may be a device having only the setting GUI unit 110.

[0078] The control device 200 and the monitoring device 300 may each be a physical machine or a virtual machine. The control device 200 and the monitoring device 300 may be integrated into a single device.

[0079] The display control system 100, the control device 200, the monitoring device 300, the setting GUI device, and the monitoring GUI device can all be realized, for example, by executing a program on a computer.

[0080] Fig. 15 is a diagram showing an example of the hardware configuration of the computer in this embodiment. If the computer is a virtual machine, the hardware configuration is a virtual hardware configuration. The computer in Fig. 15 has a drive device 1000, an auxiliary storage device 1002, a memory device 1003, a CPU 1004, an interface device 1005, a display device 1006, and an input device 1007, which are mutually connected by a bus B.

[0081] The program for realizing the processing on the computer is provided by a recording medium 1001 such as a CD-ROM or a memory card. When the recording medium 1001 storing the program is set in the drive device 1000, the program is installed from the recording medium 1001 to the auxiliary storage device 1002 via the drive device 1000. However, the program does not necessarily have to be installed from the recording medium 1001, but may be downloaded from another computer via a network. The auxiliary storage device 1002 stores the installed program as well as necessary files, data, etc.

[0082] The memory device 1003 reads out and stores the program from the auxiliary storage device 1002 when an instruction to start the program is received. The CPU 1004 realizes the functions related to the device in accordance with the program stored in the memory device 1003. The interface device 1005 is used as an interface for connecting to a network. The display device 1006 displays a GUI (Graphical User Interface) or the like according to a program. The input device 1007 is composed of a keyboard and mouse, buttons, a touch panel, or the like, and is used to input various operational instructions.

[0083] (Sequence example) Fig. 16 shows a sequence when a user sets resources such as ports, connections, and routers. The sequence is explained below. An example of a GUI screen will be described later. Note that the sequence shown in Fig. 16 (and Fig. 17) is one example.

[0084] In S101, the setting GUI unit 110 acquires configuration information from the management database of the control device 200. In S102, the setting GUI unit 110 creates information for a GUI screen based on the configuration information, and transmits the information to the user terminal 500. On the user terminal 500, a GUI screen depicting, for example, a network configuration connecting multiple clouds and areas is displayed.

[0085] When the user operates the user terminal 500 to, for example, select and purchase a desired resource on a GUI screen and input setting information (parameters), the setting information is sent to the setting GUI unit 110 in S103.

[0086] In S104, the setting GUI unit 110 transmits the setting information to the control device 200. In S105, the control device 200 generates a setting command for the target NW device corresponding to the selected resource based on the setting information, and transmits the setting command to the target NW device.

[0087] When the setting in the target network device is completed, in S106, a setting completion is returned to the control device 200. The control device 200 that received the setting completion records information indicating that the setting is completed as information of the corresponding device in the management database.

[0088] In S107, a notification of completion of setting is sent to the setting GUI unit 110. The setting GUI unit 110 that has received the notification of completion of setting creates a GUI screen indicating that the setting of the resource has been completed, and in S108 displays the GUI screen on the user terminal 500. Note that the GUI screen indicating that the setting of the resource has been completed may be displayed based on a request from the user terminal 500.

[0089] FIG. 17 shows an example of a sequence in which a user views monitoring information (eg, traffic volume) of a certain resource (eg, connection) on a GUI screen.

[0090] In S201, the monitoring device 300 collects monitoring information from NW devices and clouds that configure the target network 400, and stores the collected monitoring information in a monitoring database. Note that S201 is performed, for example, periodically.

[0091] For example, assume that at this point in time, the user issues an instruction to display specific monitoring information for a specific resource on the GUI screen displayed on the user terminal 500. In S202, instruction information is sent from the user terminal 500 to the monitoring GUI unit 120.

[0092] Based on the instruction information, the monitoring GUI unit 120 acquires the monitoring information of the resource designated by the user from the monitoring database of the monitoring device 300 (S203 to S204).

[0093] In S205, the monitoring GUI unit 120 creates information for a GUI screen that displays the monitoring information of the resource designated by the user, and displays the GUI screen on the user terminal 500.

[0094] (GUI screen example) 18 to 34 show examples of GUI screens displayed on the user terminal 500 by the setting GUI unit 110 or the monitoring GUI unit 120. Note that the screen examples shown in Figs. 18 to 34 are merely examples. The display positions of elements shown in each screen example (for example, the group of buttons displayed on the left edge) may be changed as desired. In addition, the "start point" below may be replaced with the "end point," and the "end point" below may be replaced with the "start point."

[0095] FIG. 18 is an example of a GUI screen displayed on the user terminal 500 in the first stage of setting, showing the area in which the interconnection system exists and the clouds etc. that can be connected from that area. "Connectable" means that a connection can be established. In the example of FIG. 18, for example, cloud A and area A can be connected, so they are connected with a line. That cloud A and area A can be connected means that cloud A is connected to a port of the interconnection system in area A, and that port can be connected to other ports or routers in area A. Area B is also shown, but because tenant A belongs to area A, the connection to area A is shown.

[0096] In the example of FIG. 18, the connection for area A is shown, but it is also possible to display the connection details for each of a plurality of areas, as in FIG.

[0097] It should be noted that displaying a network configuration in which areas and clouds are connected by lines as in Figures 18 and 19 is just an example. For example, lines do not have to be shown. Furthermore, the objects connected to the clouds by lines may be location names, company names, service names, etc., instead of area names.

[0098] When the user selects (clicks) area A on the screen while the GUI screen shown in FIG. 18 is displayed, the GUI screen shown in FIG. 20 is displayed.

[0099] As shown in Figure 20, an overview of the facilities in Area A is displayed within the frame of Area A. Note that Figure 20 shows one location (the location indicated by "2", where the port is located) as an example, but typically multiple locations are displayed.

[0100] Figures 21 to 24 show examples of GUI screens that are displayed when purchasing a port. As shown in Figure 21, when you click on the "Port" section in the upper right corner of the screen, a screen will appear that allows you to choose to purchase, activate, or deactivate the port, as shown on the right. The field above "Purchase" displays an overview of the port, an explanation of the lead time (the need to request physical construction after purchase), etc.

[0101] When the user clicks "Purchase", the screen shown in Fig. 22 is displayed. Fig. 22 displays the guidance "A port will be set in the specified location (data center)."

[0102] When the user selects a location marked "2," the screen shown in Figure 23 is displayed. The user selects (enters) parameters such as bandwidth, number of VLANs, and SW, and clicks "Confirm." Note that selecting a location also means selecting a port.

[0103] After that, the system side (e.g., the control device 200) issues an LOA. The user notifies the NW operator of the LOA, and, for example, the user equipment is connected to the port with an optical cable. When the user activates the port, packet transmission and reception becomes possible, and billing begins.

[0104] When the user selects "Router" on the left side of the screen in Figure 20, a screen appears on which they can select "Purchase," "Add-on Settings," or "Discontinue," and when they select "Purchase" there, the screen shown in Figure 24 appears. Here the user can select whether or not to have redundancy (one of the parameters). If there is no redundancy, a single router will be purchased, and if there is redundancy, a paired router will be purchased.

[0105] On the screen in Figure 20, if you select "Router" on the left and then select "Add-on Settings," the screen in Figure 25 will be displayed. As shown in Figure 25, for FW you can select "New Purchase," "Settings," or "Cancel," and for NAT you can select "New Purchase," "Global IP Address Settings," "Policy Settings," or "Cancel."

[0106] For example, when "Settings" of FW is selected, the screen shown in Fig. 26 is displayed. The user can configure the FW by inputting various parameters on this screen.

[0107] For example, when "Connection" on the left side of the screen in Fig. 20 is selected, the screen in Fig. 27 is displayed. As shown in Fig. 27, various connection patterns are displayed, and the user can select the desired connection pattern.

[0108] For example, if a user wishes to connect his / her own equipment to cloud A, he / she selects "cloud A" in the cloud connection. In this embodiment, by selecting "cloud A", a port in the interconnection system to which "cloud A" is connected is selected as the destination (dst). However, if there are multiple ports (multiple locations) to which "cloud A" is connected, the user may be allowed to select one port (location) from the multiple ports (multiple locations) as the destination.

[0109] When "Cloud A" is selected, the screen shown in Figure 28 is displayed. When the user selects a router (cylindrical image) as the starting point on this screen, a parameter input screen like that shown in Figure 29 is displayed, and the user inputs parameters such as bandwidth, BGP setting information, and information for cloud connection approval. "ABC" in Figure 29 is the name of the cloud.

[0110] The ports and routers that you are required to select when purchasing a "connection" may be ones that you purchased before purchasing the "connection," or they may be purchased when you are required to select them when purchasing the "connection."

[0111] Once you have finished entering the parameters and clicked "Confirm", a screen showing the parameters you entered will be displayed, and by clicking "Purchase", the L3 connection will be established.

[0112] The parameters required to be set for connecting to a cloud differ for each cloud. In this embodiment, the setting GUI unit 110 or the control device 200 knows the parameters required for each cloud. When a certain cloud is selected, the user is prompted to input the parameters required for setting up a connection to that cloud on the screen in FIG. 29, and for the other parameters, the setting GUI unit 110 or the control device 200 automatically determines and sets the parameters required for the target NW device or the cloud.

[0113] Parameters that require user input include, for example, an ID or key issued by the cloud for connection approval (connection authorization). Parameters that are automatically determined by the system include, for example, the bandwidth set on the cloud side. This mechanism allows users to easily connect to various clouds without having to research the parameters for each cloud.

[0114] By clicking "History" on the left side of the screen, the user can view and check the history of past applications (purchased resources, date and time, entered parameters, progress of settings (processing, completed), etc.).The progress of settings can be determined by whether or not the setting completion message shown in Figure 16 has been received.

[0115] Furthermore, when the user selects (clicks) a location (port), router, connection, etc. on the screen shown in Fig. 20, details of the selected part are displayed and the user can check the details. Fig. 30 is an example of the screen that is displayed when the connection between the router and cloud A is clicked.

[0116] Note that the examples in Figures 28 and 29 are examples in which a router is selected as the starting point of the cloud connection, but if a port is selected as the starting point of the cloud connection, a parameter input screen for the L2 connection is displayed, and the L2 connection is established by entering the parameters.

[0117] Furthermore, for example, if you select "Router-to-port connection" on the screen in Figure 27, a screen for selecting the starting router is displayed, and when the starting router is selected, a screen for selecting the ending port is displayed, and when the ending port is selected, an L3 connection between the router and port is established after parameters are entered.

[0118] Furthermore, for example, if "port-to-port connection" is selected on the screen of Figure 27, a screen for selecting a starting port is displayed, and when the starting port is selected, a screen for selecting an end port is displayed, and when the end port is selected, an L2 connection between the ports is established after parameters are entered.

[0119] Resource settings can also be changed easily. For example, by selecting the connection for which you wish to change the settings on the screen and clicking "Change Settings," the settings change screen shown in Figure 31 is displayed. The user can change the settings by entering the changed parameters, etc.

[0120] When settings such as adding and changing resources have been completed and operation has started, for example, by clicking on "Monitoring" at the bottom left of Fig. 20 displayed by the setting GUI unit 110, monitoring information on the resources of the user is displayed on the user terminal 500. This monitoring information is displayed by the monitoring GUI unit 120. This control is realized by, for example, clicking on "Monitoring" on the screen, causing the setting GUI unit 110 to notify the monitoring GUI unit 120 of a display instruction.

[0121] Examples of displayed monitoring information are shown in Figures 32 and 33. As shown in Figures 32 and 33, the resource status ("Normal", "Warning", "Abnormal"), event history, the number of packets blocked by the firewall, connection and port traffic, etc. are displayed in a list.

[0122] When the user selects specific monitoring information on the list display screen, its details will be displayed. Figure 34 shows an example of the screen that is displayed when "Resource Status" is clicked. As shown in Figure 34, the status of each resource is displayed.

[0123] (Effects of the embodiment) According to the present embodiment described above, a connection between a desired start point and a desired end point can be easily established by operating the user interface. In other words, functions such as cloud connection can be easily utilized on demand, whenever necessary, in minutes, without owning assets.

[0124] Moreover, according to the present embodiment, it is possible to provide a graphical user interface that allows a user to easily construct a desired interconnection configuration. That is, it is possible to easily grasp the overall interconnection status of Cloud / closed network / DC / Internet, etc., and to allow a user to easily select a network configuration and establish connectivity. Also, the connection status can be visually confirmed on a monitoring screen.

[0125] (Summary of the embodiment) This specification discloses at least the following network systems. (Section 1) one or more network devices; a control device that receives information on a start point and an end point selected by a user via a user interface and transmits setting information to one or more network devices for constructing a virtual private line connecting the start point and the end point; A network system comprising: (Section 2) Either the starting point or the ending point is a port located in a data center where the user's equipment is located. 2. The network system according to claim 1. (Section 3) When both the starting point and the ending point are ports, a layer 2 virtual private line is established as the virtual private line, and when at least one of the starting point and the ending point is a router, a layer 3 virtual private line is established as the virtual private line. 3. The network system according to claim 1 or 2. (Section 4) When at least one of the start point and the end point is a router, the router is a peer router of the BGP connection. 4. A network system according to claim 1, wherein the network system is a network of a plurality of sub-networks. (Section 5) When at least one of the start point and the end point is a router, the router includes one or more virtual routers that constitute one or more routing groups. 4. A network system according to claim 1, wherein the network system is a network of a plurality of sub-networks. (Section 6) When a user instructs addition of a component via the user interface, the component is added between a certain routing group and another routing group. 6. The network system according to claim 5. (Section 7) The component is a firewall, or a NAT, or a firewall and a NAT. 7. The network system according to claim 6.

[0126] This specification also discloses at least the following display control system, display method, and program. (Section 1) A display control system for displaying a GUI screen on a user's terminal, comprising: displaying on said terminal a screen depicting a network configuration including a plurality of selectable clouds; When a specific cloud and a resource to be connected to the specific cloud are selected on the terminal, a parameter input screen for the connection between the specific cloud and the resource is displayed on the terminal. Setting GUI section A display control system comprising: (Section 2) The setting GUI unit includes: Displaying on the terminal a screen for selecting additional functions for the resource; When a specific additional function is selected on the terminal, a parameter input screen for the specific additional function is displayed on the terminal. 2. A display control system as recited in claim 1. (Section 3) The setting GUI unit transmits parameters input from a parameter input screen to a control device that performs settings for one or more network devices. 3. A display control system according to claim 1 or 2. (Section 4) The setting GUI unit causes the terminal to display a history including a setting state for the one or more network devices. 4. A display control system as recited in claim 3. (Section 5) A monitoring GUI section that causes the terminal to display a screen depicting monitoring information regarding the resources set by the user. 5. The display control system according to any one of claims 1 to 4, further comprising: (Section 6) The monitoring GUI unit is In response to an instruction from the user on a screen displayed on the terminal by the setting GUI unit, a screen depicting the monitoring information is displayed on the terminal. 6. A display control system as recited in claim 5. (Section 7) A display method executed by a display control system that displays a GUI screen on a user's terminal, comprising: displaying on said terminal a screen depicting a network configuration including a plurality of selectable clouds; When a specific cloud and a resource to be connected to the specific cloud are selected on the terminal, a parameter input screen for the connection between the specific cloud and the resource is displayed on the terminal. Display method. (Section 8) A program for causing a computer to function as the setting GUI unit according to any one of claims 1 to 6. (Section 9) A program for causing a computer to function as the monitoring GUI unit described in paragraph 5 or 6.

[0127] Although the present embodiment has been described above, the present invention is not limited to such a specific embodiment, and various modifications and variations are possible within the scope of the gist of the present invention described in the claims. [Explanation of symbols]

[0128] 10 Router 20 Add-on Components 30 Leaf 60 cores 100 Display Control System 110 Setting GUI section 120 Monitoring GUI section 200 Control device 300 Monitoring equipment 500 user terminals 1000 Drive Device 1002 Auxiliary storage device 1003 Memory device 1004 CPU 1005 Interface device 1006 Display device 1007 Input Device

Claims

1. A display control system for displaying a GUI screen on a user terminal, comprising: A setting GUI unit that displays a screen depicting a network configuration including a plurality of selectable clouds on the terminal, The setting GUI unit is When a router and an add-on setting are selected on the screen of the terminal, the terminal is caused to display a screen for selecting a firewall or a NAT as an additional function for the router, the screen allowing the user to select either a new purchase, setting, or cancellation for each of the firewall and the NAT, and when setting for a specific additional function is selected on the terminal, the terminal is caused to display a parameter input screen for the specific additional function. Display control system.

2. The setting GUI unit transmits parameters input from a parameter input screen to a control device that performs settings for one or more network devices. The display control system according to claim 1 .

3. The setting GUI unit causes the terminal to display a history including a state of settings for the one or more network devices. The display control system according to claim 2 .

4. a monitoring GUI section for displaying on the terminal a screen depicting monitoring information regarding the resources set by the user; The display control system according to claim 1 , further comprising:

5. The monitoring GUI unit is In response to an instruction from the user on a screen displayed on the terminal by the setting GUI unit, a screen depicting the monitoring information is displayed on the terminal. The display control system according to claim 4 .

6. A display method executed by a display control system that displays a GUI screen on a user's terminal, comprising: displaying on said terminal a screen depicting a network configuration including a plurality of selectable clouds; When a router and an add-on setting are selected on the screen of the terminal, the terminal is caused to display a screen for selecting a firewall or a NAT as an additional function for the router, the screen allowing the user to select either a new purchase, setting, or cancellation for each of the firewall and the NAT, and when setting for a specific additional function is selected on the terminal, the terminal is caused to display a parameter input screen for the specific additional function. Display method.

7. A program for causing a computer to function as the setting GUI unit according to any one of claims 1 to 5.

Images