Method for out of user space block mode I/O directly between an application instance and an I/O adapter

• US 7,502,872 B2
• Filed: 05/23/2005
• Issued: 03/10/2009
• Est. Priority Date: 05/23/2005
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Recio, Renato John, Vega, Madeline, Boyd, William Todd, Mena, Agustin III, Hufferd, John Lewis
• Primary Examiner(s): Kindred; Alford W
• Assistant Examiner(s): Snyder; Steven G
• Application Number:
  US11/135,541
• Publication Number:
  US 20060265561A1
• Time in Patent Office: 1,387 Days
• Field of Search: 710/39, 710/1, 710/36, 711/202, 711205-207
• US Class Current: 710/1
• CPC Class Codes: G06F 12/1458 by checking the subject access rights
• CPC Class Codes: G06F 3/0619 in relation to data integrity, e.g. data losses, bit errors
• CPC Class Codes: G06F 3/0623 in relation to content
• CPC Class Codes: G06F 3/0637 Permissions
• CPC Class Codes: G06F 3/0659 Command handling arrangements, e.g. command buffers, queues, command scheduling
• CPC Class Codes: G06F 3/067 Distributed or networked storage systems, e.g. storage area networks [SAN], network attached storage [NAS]

Abstract

The present invention provides a method that enables application instances to pass block mode storage requests directly to a physical I/O adapter without run-time involvement from the local operating system or hypervisor. Specifically, a mechanism for providing and using a linear block address (LBA) translation protection table (TPT) to control out of user space I/O operations is provided. In one aspect of the present invention, the LBATPT includes an adapter protection table that has entries for each portion of a storage device. Entries include access control values which identify whether the entry is valid and what access type operations may be performed on a corresponding portion of a storage device. I/O requests may be checked against these access control values to determine if an application instance that submitted the I/O requests may access the LBAs identified in the I/O requests in the manner requested.

Claims

1. A method, in an input/output (I/O) adapter coupled to a host system running an application instance, comprising:

retrieving, in the I/O adapter, a work queue entry from a work queue associated with the application instance and the I/O adapter;

identifying, in the I/O adapter, a permitted type of access of a portion of a storage device targeted by the work queue entry;

performing, in the I/O adapter, validation checks on the work queue entry based on the permitted type of access of the portion of the storage device targeted by the work queue entry; and

processing, in the I/O adapter, the work queue entry only if the validation checks on the work queue entry are completed successfully, wherein;

identifying a permitted type of access of a portion of the storage device comprises retrieving an adapter protection table entry, from an adapter protection table data structure, corresponding to the work queue entry,

processing the work queue entry comprises retrieving a linear block address table entry, from a linear block address table data structure, corresponding to the adapter protection table entry and accessing a portion of a storage device associated with the adapter protection table entry, based on a linear block address range specified in the linear block address table entry,

the adapter protection table data structure and linear block address table data structure are stored in the I/O adapter, and

if the adapter protection table entry is part of a segment not present in the adapter protection table data structure in the I/O adapter, the segment is retrieved from a protection table data structure of a system image of the host system and loaded into the adapter protection table data structure of the I/O adapter.

2. The method of claim 1, wherein the work queue entry corresponds to an I/O request submitted by the application instance and includes a key value, and wherein the adapter protection table entry, corresponding to the work queue entry, is retrieved from the adapter protection table data structure based on the key value.

3. The method of claim 2, wherein the adapter protection table entry stores one or more access control values that identify a type of access permitted on the portion of the storage device associated with the adapter protection table entry.

4. The method of claim 3, wherein the one or more access control values include a valid identification access control value and a permitted operation access control value.

5. The method of claim 4, wherein if the valid identification access control value has a first value, the adapter protection table entry is valid, and wherein if the permitted operation access control value has the first value, read and write operations are permitted on an associated portion of the storage device.

6. The method of claim 4, wherein if the valid identification access control value of the adapter protection table entry indicates that the adapter protection table entry is valid, and an access type being requested by the work queue entry is a read operation, then the validation checks on the work queue entry are completed successfully.

7. The method of claim 4, wherein if the valid identification access control value of the adapter protection table entry indicates that the adapter protection table entry is valid, the permitted operation access control value indicates that write operations are permitted, and the access type being requested by the work queue entry is a write operation, then the validation checks on the work queue entry are completed successfully.

8. The method of claim 1, wherein the adapter protection table entry comprises a logical unit number (LUN) field that associates the adapter protection table entry with a specific LUN in a specific storage device coupled to the I/O adapter.