Optimizing data reduction, security and encryption requirements in a network environment

• US 10,609,086 B2
• Filed: 04/11/2019
• Issued: 03/31/2020
• Est. Priority Date: 02/21/2017
• Status: Active Grant

• Current Assignee: Kyndryl Incorporated (Kyndryl Holdings, Inc.)
• Original Assignee: International Business Machines Corporation
• Inventors: Best, Nathan B., Lindstrom, Mikael H., Rybczyk, Kurt A., Trevisan, Daniela Kern Mainieri
• Primary Examiner(s): Vaughan, Michael R
• Application Number:
  US16/381,944
• Publication Number:
  US 20190245891A1
• Time in Patent Office: 355 Days
• CPC Class Codes: G06F 16/2365 Ensuring data consistency and integrity
• CPC Class Codes: G06F 16/24578 using ranking
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]

Abstract

A specification of a target network environment including target devices is received. The specification includes an identity of each of the target devices and a compression feature requirement, a deduplication feature requirement, and an encryption feature requirement of the target network environment. A performance parameter corresponding to each of the requirements is computed based on the specification. Possible combinations of the target devices and enabled features in the target devices are determined to meet the specification. Each possible combination is compared to a knowledge base to determine a performance reduction for each of the enabled features based upon the performance parameters. A desired combination of the enabled features is determined from the possible combinations for each target device based upon the comparison. The desired combination includes a combination having a performance reduction that does not exceed a threshold value for data reduction in one or more enabled features.

Claims

1. A method comprising:

receiving a specification of a target network environment including a plurality of target devices, the specification including an identity of each of the plurality of target devices and at least a deduplication feature requirement of the target network environment;

computing, using a processor and a memory, a performance parameter corresponding to the deduplication feature requirement based on the specification of the target network environment;

determining possible combinations of the plurality of target devices and enabled features in the plurality of target devices to meet the specification, the enabled features including one or more of a compression feature, a deduplication feature, and an encryption feature;

comparing each possible combination to a knowledge base to determine, for each possible combination, a performance reduction for each of the enabled features based upon the performance parameters; and

generating an instruction to configure a target device according to a desired combination of the enabled features from the possible combinations for the target device based upon the comparison, wherein the desired combination of enabled features for the target device includes a combination having a performance reduction that does not exceed a threshold value for data reduction in an enabled feature in the target device.

2. The method of claim 1, further comprising:

configuring the target device according to the determined desired combination.

3. The method of claim 1, wherein the desired combination is based upon at least one of implications of enabling each feature on each combination of target devices, dependencies between each of the target devices, and data reduction threshold values for each feature.

4. The method of claim 1, further comprising:

ranking each possible combination by one or more of a data reduction capacity for the possible combination.

5. The method of claim 1, further comprising:

ranking each possible combination by the performance hit for each of the enabled features for the possible combination.

6. The method of claim 1, wherein the knowledge base includes historical information of a plurality of previously deployed devices of a previously deployed network environment.

7. The method of claim 6, wherein the historical information includes an identity of the plurality of previously deployed network devices and performance data related to one or more of a compression feature, a deduplication feature, and an encryption feature that are enabled for each previously deployed device.

8. The method of claim 7, wherein the historical information includes data reduction threshold values for each of the deployed devices.

9. The method of claim 1, wherein the specification further includes a compression feature requirement and an encryption feature requirement of the target network environment.

10. The method of claim 1, wherein the computing the performance parameter further comprises computing the performance parameter corresponding to the compression feature requirement and the encryption feature requirement.

11. A computer usable program product comprising one or more computer-readable storage devices, and program instructions stored on at least one of the one or more storage devices, the stored program instructions comprising:

program instructions to receive a specification of a target network environment including a plurality of target devices, the specification including an identity of each of the plurality of target devices and at least a deduplication feature requirement of the target network environment;

program instructions to compute, using a processor and a memory, a performance parameter corresponding to the deduplication feature requirement based on the specification of the target network environment;

program instructions to determine possible combinations of the plurality of target devices and enabled features in the plurality of target devices to meet the specification, the enabled features including one or more of a compression feature, a deduplication feature, and an encryption feature;

program instructions to compare each possible combination to a knowledge base to determine, for each possible combination, a performance reduction for each of the enabled features based upon the performance parameters; and

program instructions to generate an instruction to configure a target device according to a desired combination of the enabled features from the possible combinations for the target device based upon the comparison, wherein the desired combination of enabled features for the target device includes a combination having a performance reduction that does not exceed a threshold value for data reduction in an enabled feature in the target device.

12. The computer usable program product of claim 11, further comprising:

program instructions to configure the target device according to the determined desired combination.

13. The computer usable program product of claim 11, wherein the desired combination is based upon at least one of implications of enabling each feature on each combination of target devices, dependencies between each of the target devices, and data reduction threshold values for each feature.

14. The computer usable program product of claim 11, further comprising:

program instructions to rank each possible combination by one or more of a data reduction capacity for the possible combination.

15. The computer usable program product of claim 11, further comprising:

program instructions to rank each possible combination by the performance hit for each of the enabled features for the possible combination.

16. The computer usable program product of claim 11, wherein the knowledge base includes historical information of a plurality of previously deployed devices of a previously deployed network environment.

17. The computer usable program product of claim 16, wherein the historical information includes an identity of the plurality of previously deployed network devices and performance data related to one or more of a compression feature, a deduplication feature, and an encryption feature that are enabled for each previously deployed device.

18. The computer usable program product of claim 11, wherein the computer usable code is stored in a computer readable storage device in a data processing system, and wherein the computer usable code is transferred over a network from a remote data processing system.

19. The computer usable program product of claim 11, wherein the computer usable code is stored in a computer readable storage device in a server data processing system, and wherein the computer usable code is downloaded over a network to a remote data processing system for use in a computer readable storage device associated with the remote data processing system.

20. A computer system comprising a processor, a computer-readable memory, and a computer-readable storage device, and program instructions stored on the storage device for execution by the processor via the memory, the stored program instructions comprising:

program instructions to receive a specification of a target network environment including a plurality of target devices, the specification including an identity of each of the plurality of target devices and at least a deduplication feature requirement of the target network environment;

program instructions to compute, using the processor and the memory, a performance parameter corresponding to the deduplication feature requirement based on the specification of the target network environment;

program instructions to determine possible combinations of the plurality of target devices and enabled features in the plurality of target devices to meet the specification, the enabled features including one or more of a compression feature, a deduplication feature, and an encryption feature;

program instructions to compare each possible combination to a knowledge base to determine, for each possible combination, a performance reduction for each of the enabled features based upon the performance parameters; and

program instructions to generate an instruction to configure a target device according to a desired combination of the enabled features from the possible combinations for the target device based upon the comparison, wherein the desired combination of enabled features for the target device includes a combination having a performance reduction that does not exceed a threshold value for data reduction in an enabled feature in the target device.