Proxy access to a dispersed storage network

• US 9,027,080 B2
• Filed: 09/20/2010
• Issued: 05/05/2015
• Est. Priority Date: 03/31/2008
• Status: Active Grant

• Current Assignee: Pure Storage, Inc.
• Original Assignee: Cleversafe Incorporated (International Business Machines Corporation)
• Inventors: Cilfone, Bart, Resch, Jason K.
• Primary Examiner(s): Zele, Krista
• Assistant Examiner(s): FORMAN, JAMES Q
• Application Number:
  US12/886,389
• Publication Number:
  US 20110125999A1
• Time in Patent Office: 1,688 Days
• Field of Search: 726/2
• US Class Current: 726/2
• CPC Class Codes: G06F 11/0709 in a distributed system consisting of a plurality of standalone computer nodes, e.g. clusters, client-server systems
• CPC Class Codes: G06F 11/0751 Error or fault detection not based on redundancy power supply failures G06F1/30; network fault management H04L41/06
• CPC Class Codes: G06F 11/1076 Parity data used in redundant arrays of independent storages, e.g. in RAID systems
• CPC Class Codes: G06F 11/1464 for networked environments
• CPC Class Codes: G06F 11/2038 with a single idle spare processing component
• CPC Class Codes: G06F 11/2048 where the redundant components share neither address space nor persistent storage
• CPC Class Codes: G06F 11/2094 Redundant storage or storage space G06F11/2056 takes precedence
• CPC Class Codes: G06F 16/172 Caching, prefetching or hoarding of files
• CPC Class Codes: G06F 16/9535 Search customisation based on user profiles and personalisation
• CPC Class Codes: G06F 2201/80 Database-specific techniques
• CPC Class Codes: G06F 2211/1028 Distributed, i.e. distributed RAID systems with parity
• CPC Class Codes: G06F 3/0617 in relation to availability
• CPC Class Codes: G06F 3/0619 in relation to data integrity, e.g. data losses, bit errors
• CPC Class Codes: G06F 3/0635 by changing the path, e.g. traffic rerouting, path reconfiguration
• CPC Class Codes: G06F 3/065 Replication mechanisms
• CPC Class Codes: G06F 3/067 Distributed or networked storage systems, e.g. storage area networks [SAN], network attached storage [NAS]
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]

Abstract

A method begins with a processing module selecting one of a plurality of dispersed storage (DS) processing modules for facilitating access to a dispersed storage network (DSN) memory. The method continues with the processing module sending a DSN memory access request to the one of the plurality of DS processing modules. The method continues with the processing module selecting another one of the plurality of DS processing modules when no response is received within a given time frame or when the response to the access request does not include an access indication. The method continues with the processing module sending the DSN memory access request to the another one of the plurality of DS processing modules.

Claims

1. A method comprises:

selecting one of a plurality of dispersed storage (DS) processing modules for facilitating access to a dispersed storage network (DSN) memory;

sending a DSN memory access request to the one of the plurality of DS processing modules wherein the one of the plurality of DS processing modules determines a DS unit storage set based on a security attack history of each DS unit, wherein the one of the plurality of DS processing modules has at least two different security approaches of connecting to each DS unit, and the at least two different security approaches are selected based on the security attack history of each DS unit;

when no response is received within a given time frame or when the response to the access request does not include an access indication, selecting another one of the plurality of DS processing modules; and

sending the DSN memory access request to the another one of the plurality of DS processing modules.

2. The method of claim 1, wherein the access request comprises one of more of:

a request to store an encoded data slice;

a request to delete the encoded data slice;

a request to list the encoded data slice; and

a request to retrieve the encoded data slice.

3. The method of claim 1, wherein the selecting the one of the plurality of DS processing modules is based on one or more of:

a query;

a slice name associated with the encoded data slice;

a vault identifier;

a DSN memory identifier;

a list of DS processing module identifiers;

a DS processing module assignment list;

a DS processing module performance indicator;

a DS processing module capability indicator; and

a last utilized DS processing module identifier.

4. The method of claim 1, wherein the response further comprises one of:

an active master access indicator;

a master DS processing module identifier;

a proxy access indicator; and

a rejection message.

5. The method of claim 1 further comprises:

when the response to the access request does not include an access indication;

receiving an identity of the another one of the plurality of DS processing modules in the response; and

selecting the another one of the plurality of DS processing modules.

6. A computer comprises:

an interface; and

a hardware processing module to;

select one of a plurality of dispersed storage (DS) processing modules for facilitating access to a dispersed storage network (DSN) memory wherein the one of the plurality of DS processing modules has at least two different security approaches of connecting to each DS unit, and the at least two different security approaches are selected based on a security attack history of each DS unit;

send, via the interface, a DSN memory access request to the one of the plurality of DS processing modules wherein the one of the plurality of DS processing modules determines a DS unit storage set based on the security attack history of each DS unit;

select another one of the plurality of DS processing modules when no response is received within a given time frame or when the response to the access request does not include an access indication; and

send, via the interface, the DSN memory access request to the another one of the plurality of DS processing modules.

7. The computer of claim 6, wherein the access request comprises one of more of:

a request to store an encoded data slice;

a request to delete the encoded data slice;

a request to list the encoded data slice; and

a request to retrieve the encoded data slice.

8. The computer of claim 6, wherein the hardware processing module further functions to select the one of the plurality of DS processing modules based on one or more of:

a query;

a slice name associated with the encoded data slice;

a vault identifier;

a DSN memory identifier;

a list of DS processing module identifiers;

a DS processing module assignment list;

a DS processing module performance indicator;

a DS processing module capability indicator; and

a last utilized DS processing module identifier.

9. The computer of claim 6, wherein the response further comprises one of:

an active master access indicator;

a master DS processing module identifier;

a proxy access indicator; and

a rejection message.

10. The computer of claim 6, wherein the hardware processing module further functions to:

when the response to the access request does not include an access indication;

receive, via the interface, an identity of the another one of the plurality of DS processing modules in the response; and

select the another one of the plurality of DS processing modules.