Optimizing data reduction, security and encryption requirements in a network environment

• US 10,333,984 B2
• Filed: 02/21/2017
• Issued: 06/25/2019
• Est. Priority Date: 02/21/2017
• Status: Active Grant

• Current Assignee: Kyndryl Incorporated (Kyndryl Holdings, Inc.)
• Original Assignee: International Business Machines Corporation
• Inventors: Best, Nathan B., Lindstrom, Mikael H., Rybczyk, Kurt A., Trevisan, Daniela Kern Mainieri
• Primary Examiner(s): Vaughan, Michael R
• Application Number:
  US15/437,562
• Publication Number:
  US 20180241777A1
• Time in Patent Office: 854 Days
• Field of Search: None
• CPC Class Codes: G06F 16/2365 Ensuring data consistency and integrity
• CPC Class Codes: G06F 16/24578 using ranking
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]

Abstract

A specification of a target network environment including target devices is received. The specification includes an identity of each of the target devices and a compression feature requirement, a deduplication feature requirement, and an encryption feature requirement of the target network environment. A performance parameter corresponding to each of the requirements is computed based on the specification. Possible combinations of the target devices and enabled features in the target devices are determined to meet the specification. Each possible combination is compared to a knowledge base to determine a performance reduction for each of the enabled features based upon the performance parameters. A desired combination of the enabled features is determined from the possible combinations for each target device based upon the comparison. The desired combination includes a combination having a performance reduction that does not exceed a threshold value for data reduction in one or more enabled features.

Claims

1. A method comprising:

receiving a specification of a target network environment including a plurality of target devices, the specification including an identity of each of the plurality of target devices and a compression feature requirement, a deduplication feature requirement, and an encryption feature requirement of the target network environment;

computing, using a processor and a memory, a performance parameter corresponding to each of the compression feature requirement, the deduplication feature requirement, and the encryption feature requirement based on the specification of the target network environment;

determining possible combinations of the plurality of target devices and enabled features in the plurality of target devices to meet the specification, the enabled features including one or more of a compression feature, a deduplication feature, and an encryption feature;

comparing each possible combination to a knowledge base to determine, for each possible combination, a performance reduction for each of the enabled features based upon the performance parameters;

determining a desired combination of the enabled features from the possible combinations for each target device based upon the comparison, wherein the desired combination of enabled features for each target device includes a combination having a performance reduction that does not exceed a threshold value for data reduction in one or more enabled features; and

configuring each of the plurality of target devices according to the determined desired combination.

2. The method of claim 1, wherein the desired combination is based upon at least one of implications of enabling each feature on each combination of target devices, dependencies between each of the target devices, and data reduction threshold values for each feature.

3. The method of claim 1, further comprising:

ranking each possible combination by one or more of a data reduction capacity for the possible combination.

4. The method of claim 1, further comprising:

ranking each possible combination by the performance hit for each of the enabled features for the possible combination.

5. The method of claim 1, wherein the knowledge base includes historical information of a plurality of previously deployed devices of a previously deployed network environment.

6. The method of claim 5, wherein the historical information includes an identity of the plurality of previously deployed network devices and performance data related to one or more of a compression feature, deduplication feature and encryption feature that are enabled for each previously deployed device.

7. The method of claim 6, wherein the historical information includes data reduction threshold values for each of the deployed devices.

8. A computer usable program product comprising one or more computer-readable storage devices, and program instructions stored on at least one of the one or more storage devices, the stored program instructions comprising:

program instructions to receive a specification of a target network environment including a plurality of target devices, the specification including an identity of each of the plurality of target devices and a compression feature requirement, a deduplication feature requirement, and an encryption feature requirement of the target network environment;

program instructions to compute, using a processor and a memory, a performance parameter corresponding to each of the compression feature requirement, the deduplication feature requirement, and the encryption feature requirement based on the specification of the target network environment;

program instructions to determine possible combinations of the plurality of target devices and enabled features in the plurality of target devices to meet the specification, the enabled features including one or more of a compression feature, a deduplication feature, and an encryption feature;

program instructions to compare each possible combination to a knowledge base to determine, for each possible combination, a performance reduction for each of the enabled features based upon the performance parameters;

program instructions to determine a desired combination of the enabled features from the possible combinations for each target device based upon the comparison, wherein the desired combination of enabled features for each target device includes a combination having a performance reduction that does not exceed a threshold value for data reduction in one or more enabled features; and

program instructions to configure each of the plurality of target devices according to the determined desired combination.

9. The computer usable program product of claim 8, wherein the desired combination is based upon at least one of implications of enabling each feature on each combination of target devices, dependencies between each of the target devices, and data reduction threshold values for each feature.

10. The computer usable program product of claim 8, further comprising:

program instructions to rank each possible combination by one or more of a data reduction capacity for the possible combination.

11. The computer usable program product of claim 8, further comprising:

program instructions to rank each possible combination by the performance hit for each of the enabled features for the possible combination.

12. The computer usable program product of claim 8, wherein the knowledge base includes historical information of a plurality of previously deployed devices of a previously deployed network environment.

13. The computer usable program product of claim 12, wherein the historical information includes an identity of the plurality of previously deployed network devices and performance data related to one or more of a compression feature, deduplication feature and encryption feature that are enabled for each previously deployed device.

14. The computer usable program product of claim 13, wherein the historical information includes data reduction threshold values for each of the deployed devices.

15. The computer usable program product of claim 8, wherein the computer usable code is stored in a computer readable storage device in a data processing system, and wherein the computer usable code is transferred over a network from a remote data processing system.

16. The computer usable program product of claim 8, wherein the computer usable code is stored in a computer readable storage device in a server data processing system, and wherein the computer usable code is downloaded over a network to a remote data processing system for use in a computer readable storage device associated with the remote data processing system.

17. A computer system comprising one or more processors, one or more computer-readable memories, and one or more computer-readable storage devices, and program instructions stored on at least one of the one or more storage devices for execution by at least one of the one or more processors via at least one of the one or more memories, the stored program instructions comprising:

program instructions to receive a specification of a target network environment including a plurality of target devices, the specification including an identity of each of the plurality of target devices and a compression feature requirement, a deduplication feature requirement, and an encryption feature requirement of the target network environment;

program instructions to compute, using a processor and a memory, a performance parameter corresponding to each of the compression feature requirement, the deduplication feature requirement, and the encryption feature requirement based on the specification of the target network environment;

program instructions to determine possible combinations of the plurality of target devices and enabled features in the plurality of target devices to meet the specification, the enabled features including one or more of a compression feature, a deduplication feature, and an encryption feature;

program instructions to compare each possible combination to a knowledge base to determine, for each possible combination, a performance reduction for each of the enabled features based upon the performance parameters;

program instructions to determine a desired combination of the enabled features from the possible combinations for each target device based upon the comparison, wherein the desired combination of enabled features for each target device includes a combination having a performance reduction that does not exceed a threshold value for data reduction in one or more enabled features; and

program instructions to configure each of the plurality of target devices according to the determined desired combination.

18. The computer system of claim 17, the stored program instructions further comprising:

program instructions to rank each possible combination by one or more of a data reduction capacity for the possible combination.

19. The computer system of claim 17, further comprising:

program instructions to rank each possible combination by the performance hit for each of the enabled features for the possible combination.