Non-volatile memory express over fabric (NVMe-oF) zone subsets for packet-by-packet enforcement

    公开(公告)号:US11520518B2

    公开(公告)日:2022-12-06

    申请号:US17386120

    申请日:2021-07-27

    Abstract: A current technique to enforce a Zoning configuration is referred to as “Hard Zoning”. Hard Zoning is a technique in which network switches in a fabric inspect packets to ascertain if a packet should be forwarded or discarded, according to the communication between nodes allowed by the Zoning configuration. For the network switches to be able to perform this packet-by-packet filtering, Zoning information needs to be supplied to the network switches. However, current approaches involve sending duplicate data to switches. These approaches are very inefficient and cumbersome. Accordingly, embodiments comprise a Centralized Discovery Controller (CDC) that collects network information, generates, for a switch, its appropriate zoning information, and sends the switch-specific zoning information to that switch.

    SYSTEMS AND METHODS FOR TRANSPORT LAYER SECURITY (TLS) CONCATENATION

    公开(公告)号:US20250030736A1

    公开(公告)日:2025-01-23

    申请号:US18357109

    申请日:2023-07-22

    Abstract: Systems and methods for Transport Layer Security (TLS) concatenation are described. In an illustrative, non-limiting embodiment, an Information Handling System (IHS) may include: a processor; and a memory coupled to the processor, wherein the memory comprises program instructions store thereon that, upon execution by the processor, cause the IHS to: derive a shared session key during a first Transmission Control Protocol (TCP) connection with a second IHS; and after disconnection of the first TCP connection, perform a Transport Layer Security (TLS) negotiation with the second IHS via a second TCP connection using the shared session key.

    Discovery controller-based nonvolatile memory express namespace resolution services

    公开(公告)号:US12008380B2

    公开(公告)日:2024-06-11

    申请号:US17714154

    申请日:2022-04-06

    CPC classification number: G06F9/4408 G06F3/0604 G06F3/0638 G06F3/0679

    Abstract: Currently, there is no scalable methodologies defined to locate a namespace on an NVMe-oF fabric. Therefore, it is necessary to configure a host with the NVMe™ Qualified Name (NQN) and transport information of the storage subsystem where the boot namespace is located or discover and enumerate all namespaces available to the host on an NVMe-oF fabric. With the current protocols, a host may need to perform many operations to locate the proper namespace and boot from the NVMe-oF fabric, making booting in a SAN environment an extremely slow operation and computationally expensive process. Embodiments herein support discovery, via a discovery controller, to provide a namespace resolution service able to facilitate a host to efficiently resolve a given namespace identifier to the corresponding subsystem port(s) through which that namespace is accessible.

    Dynamic connectivity management through zone groups

    公开(公告)号:US11463521B2

    公开(公告)日:2022-10-04

    申请号:US17194251

    申请日:2021-03-06

    Abstract: To address concerns with administration of zones in storage area network (SAN) environments, presented are embodiments of a “zone group,” including systems and methods for configuring, implementing, and managing such. While zone group embodiments may comprise one or more zones, unlike traditional zone sets, a zone group includes additional features. For example, a zone group includes an “Owner” and also allows for multiple zone groups to be active on a fabric at one time. By adding the concept of an owner to a zone group, changes made by a user or entity impact the zone group to which the owner has rights to access or modify. Also, by allowing multiple zone groups to be active at the same time, embodiments enable multiple administrators or entities to make unrelated modifications to connectivity and dramatically reduce the impact of unintentional changes. Additional features and benefits are described herein.

    SYSTEMS AND METHODS FOR DETERMINING A PRE-SHARED KEY (PSK) IDENTITY FOR TRANSPORT LAYER SECURITY (TLS)

    公开(公告)号:US20250030735A1

    公开(公告)日:2025-01-23

    申请号:US18357108

    申请日:2023-07-22

    Abstract: Systems and methods for determining a pre-shared key (PSK) identity for Transport Layer Security (TLS) are described. In an illustrative, non-limiting embodiment, an Information Handling System (IHS) may include: a processor; and a memory coupled to the processor, wherein the memory comprises program instructions store thereon that, upon execution by the processor, cause the IHS to: establish a Transmission Control Protocol (TCP) connection with a another IHS; generate a TLS PSK; derive based, at least in part, on the TLS PSK, a unique PSK identity associated with the TLS PSK; and perform a TLS negotiation with the other IHS using the TLS PSK and the unique PSK identity.

    Systems and methods for NVMe over fabric (NVMe-oF) namespace-based zoning

    公开(公告)号:US12118231B2

    公开(公告)日:2024-10-15

    申请号:US17386305

    申请日:2021-07-27

    CPC classification number: G06F3/0655 G06F3/0604 G06F3/067

    Abstract: A traditional storage platform performs many basic functions, such as storage partitions allocation (i.e., namespace masking) and many advanced functions, such as deduplication or dynamic storage allocation. These functions need to be managed and this results in a multiple management system paradigm in which a fabric management application manages the fabric connectivity policies (i.e., zoning), while a storage management application manages the storage namespace mappings and advanced functions. Embodiments herein provide for centralized management for both connectivity and storage namespace mapping, among other advanced features. Namespace zoning information may comprise namespace zone groups, namespace zones, namespace zone members, namespace zone aliases, and namespace zone alias members, which expand the Non-Volatile Memory Express (NVMe) over Fabrics (NVMe-oF) zoning framework from just connectivity control to full namespace allocation.

    Storage subsystem-driven zoning protocol embodiments in a nonvolatile memory express environment

    公开(公告)号:US12105989B2

    公开(公告)日:2024-10-01

    申请号:US17699005

    申请日:2022-03-18

    CPC classification number: G06F3/0659 G06F3/0604 G06F3/0635 G06F3/067

    Abstract: Embodiments presented herein solve issues related to non-volatile memory express (NVMe®) protocol differences from other protocols, such as Fibre Channel Common Transport, which is the protocol used for Zoning management in Fibre Channel. Fibre Channel Common Transport supports bidirectional transfers of data. However, NVMe® commands support transfer of data either with the command (e.g., host-to-controller data transfer (e.g., a “write” operation)) or with the response (e.g., controller-to-host data transfer (e.g., a “read” operation)), but not both creates a problem related to zoning in NVMe® networks. Furthermore, data size limits for submission queue entries and completion queue entries for NVMe® commands add other obstacles. Embodiments herein address these limitations.

    Scalable quality of service (QoS) for a nonvolatile memory express™ environment

    公开(公告)号:US11907530B2

    公开(公告)日:2024-02-20

    申请号:US17705076

    申请日:2022-03-25

    CPC classification number: G06F3/0604 G06F3/0655 G06F3/0679

    Abstract: Centralized quality-of-service (QoS) policies administration in a storage area network (SAN) is a problem without meaningful solutions. Current implementations require explicit administration of end points, which is error-prone and not scalable. Zoning for NVMe-oF is defined as a method to specify connectivity access control information on the Discovery Controller (DC) of an NVMe-oF fabric, not as a way to specify QoS policies. Embodiments comprise centrally specifying one or more QoS parameters as part of NVMe-oF zoning definitions maintained at an NVMe-oF DC to centrally controlled QoS parameters. Accordingly, embodiments provide mechanisms to specify QoS parameters in a centralized manner to eliminate requiring a system administrator having to perform per-connection QoS provisioning.

Patent Agency Ranking