HOST PROVIDING SYSTEM AND COMMUNICATION CONTROL METHOD

摘要

A host providing system includes a physical host network switch which determines permission and non-permission of communication on the basis of whether or not information pieces indicating users correlated with information indicating a transmission source and information indicating a transmission destination included in communication data from a physical instance match each other, and controls the communication data on the basis of a determination result. Accordingly, since only communication between instances of the same user is permitted, and thus communication from a physical instance is appropriately controlled, it is possible to ensure security in the system.

主权项

1. A host providing system providing an instance constituted by predetermined hardware resources to a user terminal as a host computer via a first network so that the instance can be used, in compliance with a request from the user terminal, including a plurality of physical servers which can communicate with each other via a second network, and providing a physical instance that is physically formed alone in the physical server as a physical host, the system comprising:
a communication data receiving unit configured to receive communication data having another instance as a transmission destination from a physical instance via the second network; a determination unit configured to determine permission and non-permission of communication on the basis of whether or not information pieces indicating users which are respectively correlated with information indicating a transmission source and information indicating a transmission destination included in the communication data received by the communication data receiving unit match each other; and a communication data control unit configured to permit communication with the transmission destination and to send the communication data to the transmission destination when communication permission is determined by the determination unit, and not to permit communication with the transmission destination and not sending the communication data to the transmission destination when communication permission is not determined.