System and method for an access layer application programming interface for managing heterogeneous components of a storage area network

• US 7,401,338 B1
• Filed: 09/27/2002
• Issued: 07/15/2008
• Est. Priority Date: 09/27/2002
• Status: Active Grant

• Current Assignee: Veritas Technologies, LLC (Whitehouse Group Ltd.)
• Original Assignee: Symantec Operating Corporation (Gen Digital Inc.)
• Inventors: Dwivedi, Tarun, Bennett, James E., Weimer, Thomas W., Bowen, Jerre F., Mathur, Rajat, Mathkar, Anup R., Braganza, Carl W., Syed, Samina M. A.
• Primary Examiner(s): An; Meng-Ai
• Assistant Examiner(s): Wu; Qing-Yuan
• Application Number:
  US10/256,419
• Time in Patent Office: 2,118 Days
• Field of Search: 707/10, 719/315, 719/328, 719/313, 719/320, 719/330, 709/217, 709223-225, 709/229, 709/220, 711111-112, 711/114, 710/36, 726 2- 7, 715/741
• US Class Current: 719/328
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 41/0681 Configuration of triggering conditions
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]
• CPC Class Codes: H04L 43/091 Measuring contribution of individual network components to actual service level
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]

Abstract

Embodiments of an application programming interface (API) for a Storage Area Network (SAN) access layer. A SAN may include a SAN access layer as an interface between SAN components and client applications. A SAN access layer API may be provided which enables a client application to access SAN access layer functionality such as storage management and configuration services. Through the SAN access layer API, a client application may invoke some or all of the functionalities of the SAN access layer. The SAN access layer may provide SAN information gathered from the SAN to the client application through the SAN access layer API. Embodiments of the SAN access layer API may provide security and licensing restrictions to client applications. Embodiments of the SAN access layer API may encapsulate message conversion and network transport functions so that client application developers are not required to implement these functions.

Claims

1. A storage area network (SAN), comprising one or more hardware devices configured to implement:

a SAN access layer configured to discover a plurality of SAN objects and to gather information items from the plurality of SAN objects, wherein the plurality of SAN objects are coupled to a SAN fabric, wherein the SAN access layer includes an interface configured to provide access to a plurality of functions of the SAN access layer, and wherein the plurality of functions comprise one or more SAN management functions for performing one or more of discovery of the SAN objects, SAN security, or access configuration of the SAN;

a client application; and

a SAN access layer Application Programming Interface (API) that provides access to only a portion of the plurality of functions of the SAN access layer, wherein the SAN access layer API is configured to;

receive authentication information from the client application;

determine a level of access to the plurality of functions of the SAN access layer based on the authentication information, wherein each level of access is associated with a respective subset of the portion of the plurality of functions of the SAN access layer;

receive one or more request messages formatted according to the SAN access layer API from the client application;

determine if the one or more request messages correspond to the determined level of access;

if the one or more request messages correspond to the determined level of access;

generate one or more request messages formatted according to the interface of the SAN access layer from the one or more request messages formatted according to the SAN access layer API; and

transmit the one or more request messages formatted according to the interface of the SAN access layer to the SAN access layer;

wherein the SAN access layer is configured to perform one or more of the plurality of functions to manage the SAN in response to the one or more request messages formatted according to the interface of the SAN access layer.

2. The SAN as recited in claim 1,

wherein the SAN access layer is further configured to:

generate one or more response messages formatted according to the interface of the SAN access layer in response to the received one or more request messages formatted according to the interface of the SAN access layer; and

transmit the one or more response messages formatted according to the interface of the SAN access layer to the SAN access layer API;

wherein the SAN access layer API is further configured to;

generate one or more response messages formatted according to the SAN access layer API from the one or more response messages formatted according to the interface of the SAN access layer; and

provide the one or more response messages formatted according to the SAN access layer API to the client application.

3. The SAN as recited in claim 2,

wherein the one or more request messages formatted according to the SAN access layer API received from the client application include requests for a portion of the information items gathered by the SAN access layer;

and

wherein the one or more response messages formatted according to the SAN access layer API include the requested portion of the information items gathered by the SAN access layer.

4. The SAN as recited in claim 2,

wherein the one or more request messages formatted according to the interface of the SAN access layer include instructions for the SAN access layer to perform one or more of the functions of the SAN access layer;

and

wherein the one or more response messages formatted according to the SAN access layer API include results of the one or more functions of the SAN access layer.

5. The SAN as recited in claim 1, wherein, to transmit the one or more messages formatted according to the interface of the SAN access layer to the SAN access layer, the SAN access layer API is further configured to establish a communications connection to the SAN access layer.

6. The SAN as recited in claim 1, wherein the one or more messages formatted according to the interface of the SAN access layer are formatted according to a markup language.

7. The SAN as recited in claim 1, wherein the one or more messages formatted according to the interface of the SAN access layer are eXtensible Markup Language (XML) messages.

8. The SAN as recited in claim 1, wherein the client application is configured to send the one or more request messages to the SAN access layer API to perform SAN management tasks on behalf of a user of a SAN management system, wherein the SAN management tasks comprise one or more of viewing a SAN topology, gathering real-time information about one or more SAN objects, performing a zoning operation and performing a LUN security operation.

9. The SAN as recited in claim 1, wherein the SAN access layer is configured to:

provide a common data representation for a plurality of heterogeneous SAN components to the client application via the SAN access layer API;

communicate, on behalf of the client application, with a particular SAN component of the plurality of heterogeneous SAN components using a particular protocol specific to the particular SAN component; and

communicate, on behalf of the client application, with another SAN component of the plurality of heterogeneous SAN components using another protocol specific to the other SAN component.

10. The SAN as recited in claim 1, wherein the SAN access layer comprises a plurality of explorer modules configured to perform an inventory of the SAN, wherein in performing the inventory, each explorer module of the plurality of explorer modules is configured to communicate with a different type of SAN component using a protocol specific to that type of SAN component.

11. The SAN as recited in claim 1, wherein the SAN access layer API comprises one or more security modules, one or more device discovery services modules, one or more event monitoring modules, and one or more internationalization modules.

12. The SAN as recited in claim 1, wherein the information gathered by the SAN access layer from a particular SAN object of the plurality of SAN objects comprises two or more of:

a vendor name, a model number, a firmware version, a port count, a World Wide Name (WWN), an out-of-band address for the SAN object, zone membership information, and information indicative of connectivity between the particular SAN object and at least one other SAN object of the plurality of SAN objects.

13. A system, comprising one or more hardware devices configured to implement:

a client application; and

a SAN access layer Application Programming Interface (API) configured to support interactions between the client application and a SAN access layer, the SAN access layer configured to discover a plurality of SAN objects and to gather information items from the plurality of SAN objects, wherein the plurality of SAN objects are coupled to a SAN fabric, wherein the SAN access layer includes an interface configured to provide access to a plurality of functions of the SAN access layer, wherein the plurality of functions comprise one or more SAN management functions for performing one or more of discovery of the SAN objects, SAN security, or access configuration of the SAN, wherein the SAN access layer API is configured to provide access to only a portion of the plurality of functions of the SAN access layer, and wherein the SAN access layer API is configured to;

receive authentication information from the client application;

determine a level of access to the plurality of functions of the SAN access layer based on the authentication information, wherein each level of access is associated with a respective subset of the portion of the plurality of functions of the SAN access layer;

receive one or more request messages formatted according to the SAN access layer API from the client application;

determine if the one or more request messages correspond to the determined level of access;

if the one or more request messages correspond to the determined level of access;

generate one or more request messages formatted according to the interface of the SAN access layer from the one or more request messages formatted according to the SAN access layer API; and

transmit the one or more request messages formatted according to the interface of the SAN access layer to the SAN access layer;

wherein the SAN access layer is configured to perform one or more of the plurality of functions to manage the SAN in response to the one or more request messages formatted according to the interface of the SAN access layer.

14. The system as recited in claim 13, wherein the SAN access layer API is further configured to:

receive one or more response messages formatted according to the interface of the SAN access layer in response to the transmitted one or more request messages formatted according to the interface of the SAN access layer;

generate one or more response messages formatted according to the SAN access layer API from the one or more response messages formatted according to the interface of the SAN access layer; and

provide the one or more response messages formatted according to the SAN access layer API to the client application.

15. The system as recited in claim 14,

wherein the one or more request messages formatted according to the SAN access layer API received from the client application include requests for a portion of the information items gathered by the SAN access layer;

and

wherein the one or more response messages formatted according to the SAN access layer API include the requested portion of the information items gathered by the SAN access layer.

16. The system as recited in claim 14,

wherein the one or more request messages formatted according to the interface of the SAN access layer include instructions for the SAN access layer to perform one or more of the functions of the SAN access layer;

and

wherein the one or more response messages formatted according to the SAN access layer API include results of the one or more functions of the SAN access layer.

17. The system as recited in claim 13, wherein, to transmit the one or more messages formatted according to the interface of the SAN access layer to the SAN access layer, the SAN access layer API is further configured to establish a communications connection to the SAN access layer.

18. The system as recited in claim 13, wherein the one or more messages formatted according to the interface of the SAN access layer are formatted according to a markup language.

19. The system as recited in claim 13, wherein the one or more messages formatted according to the interface of the SAN access layer are eXtensible Markup Language (XML) messages.

20. A computer-implemented method, comprising:

receiving one or more request messages at a SAN access layer Application Programming Interface (API), wherein the one or more messages are received from a client application and are formatted according to the SAN access layer API, wherein the SAN access layer API is configured to support interactions between the client application and a SAN access layer, wherein the SAN access layer is configured to discover a plurality of SAN objects and to gather information items from the plurality of SAN objects, wherein the plurality of SAN objects are coupled to a SAN fabric, wherein an interface of the SAN access layer is configured to provide access to a plurality of functions of the SAN access layer, wherein the SAN access layer API is configured to provide access to only a portion of the plurality of functions of the SAN access layer, and wherein the plurality of functions relate to SAN management functions for performing discovery or access configuration of the SAN;

receiving authentication information from the client application;

determining a level of access to the plurality of functions of the SAN access layer based on the authentication information, wherein each level of access is associated with a respective subset of the portion of the plurality of functions of the SAN access layer;

determining if the one or more request messages correspond to the determined level of access;

if the one or more request messages correspond to the determined level of access;

the SAN access layer API generating one or more request messages formatted according to the interface of a SAN access layer from the one or more request messages formatted according to the SAN access layer API; and

the SAN access layer API transmitting the one or more request messages formatted according to the interface of the SAN access layer to the SAN access layer, wherein the SAN access layer is configured to perform one or more of the plurality of functions to manage the SAN in response to the one or more request messages formatted according to the interface of the SAN access layer.

21. The method as recited in claim 20, further comprising:

the SAN access layer generating one or more response messages formatted according to the interface of the SAN access layer in response to the received one or more request messages formatted according to the interface of the SAN access layer;

the SAN access layer transmitting the one or more response messages formatted according to the interface of the SAN access layer to the SAN access layer API;

the SAN access layer API generating one or more response messages formatted according to the SAN access layer API from the one or more response messages formatted according to the interface of the SAN access layer; and

the SAN access layer API providing the one or more response messages formatted according to the SAN access layer API to the client application.

22. The method as recited in claim 21,

wherein the one or more request messages formatted according to the SAN access layer API received from the client application include requests for a portion of the information items gathered by the SAN access layer;

and

wherein the one or more response messages formatted according to the SAN access layer API include the requested portion of the information items gathered by the SAN access layer.

23. The method as recited in claim 21,

wherein the one or more request messages formatted according to the interface of the SAN access layer include instructions for the SAN access layer to perform one or more of the functions of the SAN access layer;

and

wherein the one or more response messages formatted according to the SAN access layer API include results of the one or more functions of the SAN access layer.

24. The method as recited in claim 20, wherein said SAN access layer API transmitting the one or more messages formatted according to the interface of the SAN access layer to the SAN access layer comprises the SAN access layer API establishing a communications connection to the SAN access layer.

25. The method as recited in claim 20, wherein the one or more messages formatted according to the interface of the SAN access layer are formatted according to a markup language.

26. A tangible, computer-accessible storage medium, comprising program instructions, wherein the program instructions are computer-executable to implement:

receiving one or more request messages at a SAN access layer Application Programming Interface (API), wherein the one or more messages are received from a client application and are formatted according to the SAN access layer API, wherein the SAN access layer API is configured to support interactions between the client application and a SAN access layer, wherein the SAN access layer is configured to discover a plurality of SAN objects and to gather information items from the plurality of SAN objects, wherein the plurality of SAN objects are coupled to a SAN fabric, wherein an interface of the SAN access layer is configured to provide access to a plurality of functions of the SAN access layer, wherein the SAN access layer API is configured to provide access to only a portion of the plurality of functions of the SAN access layer, and wherein the plurality of functions relate to SAN management functions for performing discovery and/or access configuration of the SAN;

receiving authentication information from the client application;

determining a level of access to the plurality of functions of the SAN access layer based on the authentication information, wherein each level of access is associated with a respective subset of the portion of the plurality of functions of the SAN access layer;

determining if the one or more request messages correspond to the determined level of access;

if the one or more request messages correspond to the determined level of access;

the SAN access layer API generating one or more request messages formatted according to the interface of a SAN access layer from the one or more request messages formatted according to the SAN access layer API; and

the SAN access layer API transmitting the one or more request messages formatted according to the interface of the SAN access layer to the SAN access layer, wherein the SAN access layer is configured to perform one or more of the plurality of functions to manage the SAN in response to the one or more request messages formatted according to the interface of the SAN access layer.

27. The tangible, computer-accessible storage medium as recited in claim 26, wherein the program instructions are further configured to implement:

the SAN access layer generating one or more response messages formatted according to the interface of the SAN access layer in response to the received one or more request messages formatted according to the interface of the SAN access layer;

the SAN access layer transmitting the one or more response messages formatted according to the interface of the SAN access layer to the SAN access layer API;

the SAN access layer API generating one or more response messages formatted according to the SAN access layer API from the one or more response messages formatted according to the interface of the SAN access layer; and

the SAN access layer API providing the one or more response messages formatted according to the SAN access layer API to the client application.

28. The tangible, computer-accessible storage medium as recited in claim 27,

wherein the one or more request messages formatted according to the SAN access layer API received from the client application include requests for a portion of the information items gathered by the SAN access layer;

and

wherein the one or more response messages formatted according to the SAN access layer API include the requested portion of the information items gathered by the SAN access layer.

29. The tangible, computer-accessible storage medium as recited in claim 27,

wherein the one or more request messages formatted according to the interface of the SAN access layer include instructions for the SAN access layer to perform one or more of the functions of the SAN access layer;

and

wherein the one or more response messages formatted according to the SAN access layer API include results of the one or more functions of the SAN access layer.

30. The tangible, computer-accessible storage medium as recited in claim 26, wherein, in said SAN access layer API transmitting the one or more messages formatted according to the interface of the SAN access layer to the SAN access layer, the program instructions are further configured to implement the SAN access layer API establishing a communications connection to the SAN access layer.

31. The tangible, computer-accessible storage medium as recited in claim 26, wherein the one or more messages formatted according to the interface of the SAN access layer are formatted according to a markup language.