System for accessing a region of memory using remote address translation and using a memory window table and a memory region table

• US 6,854,032 B2
• Filed: 12/04/2001
• Issued: 02/08/2005
• Est. Priority Date: 12/04/2001
• Status: Active Grant

• Current Assignee: Oracle America, Inc. (Oracle Corporation)
• Original Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Inventors: Johnson, Mark R., Dearth, Glenn A., Jackson, Christopher J.
• Primary Examiner(s): Bragdon, Reginald G.
• Assistant Examiner(s): CHACE, CHRISTIAN
• Application Number:
  US10/007,154
• Publication Number:
  US 20030105914A1
• Time in Patent Office: 1,162 Days
• Field of Search: 711/2, 711/163, 711/164, 711/152, 711/202, 711/206
• US Class Current: 711/2
• CPC Class Codes: G06F 12/1072 Decentralised address translation, e.g. in distributed shared memory systems
• CPC Class Codes: G06F 12/1475 in a virtual system, e.g. with translation means

Abstract

A system for permitting remote user access to regions of memory that have been exported for remote direct memory access purposes. The system supports dynamically changing access privileges to remote users without requiring intervention from an operating system. The system may include a memory region table and a memory window table for supporting address translations. Entries in the memory window table may include a region remote access key and a window remote access key. The memory region table may include fields for a physical address, an access value, a protection domain value, and a length of memory region.

Claims

1. A system for accessing a region of memory in a computer, the system comprising:

a network interconnect;

a first node coupled to the interconnect, wherein the first node includes;

a memory configured to store data;

a memory region table;

a memory window table, said memory window table being in communication with the memory region table; and

circuitry configured to control access to the memory;

a second node coupled to the first node via the interconnect, wherein the second node is configured to convey a request for access to the memory in the first node, the request including a first virtual address and a remote access key;

wherein in response to receiving the request, the first node is configured to;

determine whether the request corresponds to a memory region or a memory window;

if the request corresponds to a memory region;

combine the first virtual address and the remote access key to form an index into a first entry of the memory region table; and

if the request corresponds to a memory window;

(i) use a first portion of the remote access key to index into a first entry of the memory window table;

(ii) compare a second portion of the remote access key to a window table access key stored within the first entry of the memory window table; and

(iii) allow processing to continue if the second portion of the remote access key matches the window table access key.

2. The system as recited in claim 1, wherein the first node is configured to determine whether the request corresponds to a memory region or a memory window by examining a most significant bit of the remote access key.

3. The system as recited in claim 2, wherein the first entry of the memory window table further includes a new remote access key, and wherein the system is further configured to combine the new remote access key with the first virtual address to form an index into a second entry into the memory region table, in response to determining the second portion of the remote access key matches the window table access key.

4. The system as recited in claim 3, wherein the request includes a first length, and wherein the first entry of the memory window comprises a second virtual address and second length, wherein the first node is configured to combine the new remote access key with the first virtual address in further response to determining the first virtual address and first length are contained within the address space defined by the second virtual address and the second length.

5. The system are recited in claim 2, wherein the first entry of the memory region table includes a first protection domain value, and wherein the first node is further configured to:

compare the first protection domain value with a second protection domain value of a send work queue which initiated the request;

allow access if the first protection domain value matches the second protection domain value; and

deny access if the first protection domain value does not match the second protection domain value.

6. The system as recited in claim 5, wherein in response to allowing access, the first node is further configured to utilize a physical address included within the first entry of the memory region table to access the memory.

7. The system as recited in claim 6, wherein the second entry of the memory region table includes a second protection domain value, and wherein the first node is further configured to:

compare the second protection domain value with a third protection domain value of a send work queue which initiated the request;

allow access if the second protection domain value matches the third protection domain value; and

deny access if the second protection domain value does not match the third protection domain value;

wherein in response to allowing access, the first node is further configured to utilize a physical address included within the second entry of the memory region table to access the memory.

8. The system as recited in claim 7, wherein the memory region table and the memory window table reside on one or more modules external to and in communication with an operating system.

9. The system as recited in claim 7, wherein an entry of the memory window table comprises:

a memory region record; and

a memory window record.

10. A method for controlling access to a memory in a computing node, said method comprising:

receiving a request for access to the memory, the request including a first virtual address and a remote access key;

determining whether the request corresponds to a memory region or a memory window by examining a bit included within the request;

in response to determining the request corresponds to a memory region, combining the virtual address and the remote access key to form an index into a first entry of a memory region table, in response to determining the request corresponds to a memory region; and

in response to determining the request corresponds to a memory window, (i) utilizing a first portion of the remote access key to index into a first entry of a memory window table, (ii) comparing a second portion of said remote access key to a window table access key stored within the first entry of the memory window table, and (iii) allowing processing to continue if the second portion of the remote access key matches the window table access key.

11. The method as recited in claim 10, wherein said determining comprises examining a most significant bit of the remote access key.

12. The method as recited in claim 11, wherein the first entry of the memory window table further includes a new remote access key, and wherein the method further comprises combining the new remote access key with the first virtual address to form an index into a second entry into the memory region table, in response to determining the second portion of the remote access key matches the window table access key.

13. The method as recited in claim 12, wherein the request includes a first length, and wherein the first entry of the memory window comprises a second virtual address and second length, wherein the method further comprises combining the new remote access key with the first virtual address in further response to determining the first virtual address and first length are contained within the address space defined by the second virtual address and the second length.

14. The method are recited in claim 11, wherein the first entry of the memory region table includes a first protection domain value, and wherein the method further comprises:

comparing the first protection domain value with a second protection domain value of a send work queue which initiated the request;

allowing access if the first protection domain value matches the second protection domain value; and

denying access if the first protection domain value does not match the second protection domain value.

15. The method as recited in claim 14, wherein in response to allowing access, the method further comprises utilizing a physical address included within the first entry of the memory region table to access the memory.

16. The method as recited in claim 14, wherein the second entry of the memory region table includes a second protection domain value, and wherein the method further comprises:

comparing the second protection domain value with a third protection domain value of a send work queue which initiated the request;

allowing access if the second protection domain value matches the third protection domain value; and

denying access if the second protection domain value does not match the third protection domain value;

wherein in response to allowing access, the method further comprises utilizing a physical address included within the second entry of the memory region table to access the memory.

17. A node for use in a system area network, the node comprising:

an adapter configured to receive a memory access request via a network interconnect, said request including a virtual memory address and a remote access key;

a memory configured to store data; and

circuitry configured to control accesses to said memory, wherein in response to receiving a memory access request, said circuitry is configured to;

determine whether the request corresponds to a memory region or a memory window, responsive to examining a bit included within the request;

if the request corresponds to a memory region;

combine the first virtual address and the remote access key to form an index into a first entry of a memory region table; and

if the request corresponds to a memory window;

(i) use a first portion of the remote access key to index into a first entry of a memory window table;

(ii) compare a second portion of the remote access key to a window table access key stored within the first entry of the memory window table; and

(iii) allow processing to continue if the second portion of the remote access key matches the window table access key.

18. The node as recited in claim 17, wherein the circuitry is configured to determine whether the request corresponds to a memory region or a memory window by examining a most significant bit of the remote access key.

19. The node as recited in claim 18, wherein the first entry of the memory window table further includes a new remote access key, and wherein the circuitry is further configured to combine the new remote access key with the first virtual address to form an index into a second entry into the memory region table, in response to determining the second portion of the remote access key matches the window table access key.

20. The node as recited in claim 19, wherein the request includes a first length, and wherein the first entry of the memory window comprises a second virtual address and second length, wherein the circuitry is configured to combine the new remote access key with the first virtual address in further response to determining the first virtual address and first length are contained within the address space defined by the second virtual address and the second length.

21. The node are recited in claim 19, wherein the first entry of the memory region table includes a first protection domain value, and wherein the circuitry is further configured to:

compare the first protection domain value with a second protection domain value of a send work queue which initiated the request;

allow access if the first protection domain value matches the second protection domain value; and

deny access if the first protection domain value does not match the second protection domain value.

22. The node as recited in claim 21, wherein in response to allowing access, the circuitry is further configured to utilize a physical address included within the first entry of the memory region table to access the memory.