Creating virtual private connections between end points across a SAN
First Claim
Patent Images
1. A method for creating virtual private connections between end points in a shared storage area network (SAN), the method comprising:
- providing a virtual connection architecture for a host initiator operatively connected thereto, the virtual connection architecture having a virtual connection manager and a virtual connection cache, the virtual connection cache having a list of existing and previously established virtual connections, wherein an existing virtual connection is indicated between a specific host initiator and a specific target storage device, or a specific logical portion thereof, to provide a one-to-one relationship between a host initiator and a target storage device, or a logical portion thereof, for each virtual connection in the virtual connection cache, the host initiator generating and transmitting I/O commands to the virtual connection manager of the virtual connection architecture;
determining from the virtual connection cache whether a previously established virtual connection exists between the source and destination; and
when the previously established virtual connection does not exist in the virtual connection cache, then comparing, by the virtual connection manager, source and destination information from the I/O commands to a predetermined list of allowable connections; and
when the source and destination information matches the predetermined list of allowable connections, creating a data connection between the host initiator and the storage device, or a logical portion thereof, operatively connected to the virtual connection architecture, thereby establishing a virtual private SAN;
but when the virtual connection exists, using a virtual private SAN indicated by the previously established virtual connection in the virtual connection cache without again determining whether the data connection between the host initiator and the storage device indicated by the destination information is allowable.
19 Assignments
0 Petitions
Accused Products
Abstract
There is disclosed a method and architecture for establishing independent, secure, trusted sub-networks within a storage area network (SAN). These virtual private SANs allow secure, managed interconnections between an initiator host and a target storage device or a logical unit number (LUN) indicating a sub-portion of a target storage device. A table of allowable configurations along with a connections database are used to ensure proper, allowable data connections.
70 Citations
26 Claims
-
1. A method for creating virtual private connections between end points in a shared storage area network (SAN), the method comprising:
-
providing a virtual connection architecture for a host initiator operatively connected thereto, the virtual connection architecture having a virtual connection manager and a virtual connection cache, the virtual connection cache having a list of existing and previously established virtual connections, wherein an existing virtual connection is indicated between a specific host initiator and a specific target storage device, or a specific logical portion thereof, to provide a one-to-one relationship between a host initiator and a target storage device, or a logical portion thereof, for each virtual connection in the virtual connection cache, the host initiator generating and transmitting I/O commands to the virtual connection manager of the virtual connection architecture;
determining from the virtual connection cache whether a previously established virtual connection exists between the source and destination; and
when the previously established virtual connection does not exist in the virtual connection cache, then comparing, by the virtual connection manager, source and destination information from the I/O commands to a predetermined list of allowable connections; and
when the source and destination information matches the predetermined list of allowable connections, creating a data connection between the host initiator and the storage device, or a logical portion thereof, operatively connected to the virtual connection architecture, thereby establishing a virtual private SAN;
butwhen the virtual connection exists, using a virtual private SAN indicated by the previously established virtual connection in the virtual connection cache without again determining whether the data connection between the host initiator and the storage device indicated by the destination information is allowable. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22)
-
-
23. An apparatus for creating virtual private connections between end points in a shared storage area network comprising:
-
means for establishing a virtual connection between a source and a destination, wherein the means for establishing the virtual connection includes a virtual connection manager and a virtual connection cache, the virtual connection cache having a list of existing and previously established virtual connections, wherein an existing virtual connection is indicated between a specific host initiator and a specific target storage device, or a specific logical portion thereof, to provide a one-to-one relationship between a host initiator and a target storage device, or a logical portion thereof, for each virtual connection in the virtual connection cache;
means for receiving I/O commands containing source and destination information;
means for determining whether a previously established connection exists;
means for using a previously established connection when it exists without determining whether the previously established connection is allowable;
means for comparing the source and destination information in the I/O commands to a predetermined list of allowable data connections when a previously established connection does not exist;
means for creating a virtual private storage area network connection between the source and destination when the data connection is allowable but does not exist; and
means for using the virtual private storage area network. - View Dependent Claims (24, 25)
-
-
26. A method for creating virtual private connections between end points in a shared storage area network (SAN), the method comprising:
-
providing a virtual connection architecture for a host initiator operatively connected thereto, the virtual connection architecture having a virtual connection manager and a virtual connection cache, the host initiator generating and transmitting I/O commands to the virtual connection manager of the virtual connection architecture;
the virtual connection cache having a list of existing and previously established virtual connections, wherein an existing virtual connection between a specific host initiator and a specific target storage device or a specific logical portion thereof provides a one-to-one relationship between the host initiator and the target storage device or the logical portion thereof, thereby allowing the virtual connection manager to execute a received I/O command immediately without further qualification using the virtual private connection indicated by the previously established virtual connection in the virtual connection cache; and
in the absence of a previously established virtual connection in the virtual connection cache;
comparing, by the virtual connection manager, source and destination information from the I/O commands to a predetermined list of allowable connections; and
when the source and destination information matches the predetermined list of allowable connections;
creating a virtual connection in the virtual connection cache between the host initiator and a storage device, or a logical portion thereof, operatively connected to the virtual connection architecture, thereby establishing a virtual private SAN; and
the virtual connection now existing, using the virtual private SAN indicated by the established virtual connection.
-
Specification