Method and system for providing a virtual network-aware storage array

• US 9,515,947 B1
• Filed: 03/15/2013
• Issued: 12/06/2016
• Est. Priority Date: 03/15/2013
• Status: Active Grant

• Current Assignee: Emc IP Holding Company LLC (Dell Technologies Inc.)
• Original Assignee: Emc IP Holding Company LLC (Dell Technologies Inc.)
• Inventors: Lowe, Scott
• Primary Examiner(s): Jacobs, Lashonda
• Application Number:
  US13/839,872
• Time in Patent Office: 1,362 Days
• US Class Current: 1/1
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 47/825 Involving tunnels, e.g. MPLS

Abstract

A multi-tenant virtual network-aware storage array device is disclosed and includes a storage array manager component for storing and managing data associated with a plurality of tenants. The storage array manager component is configured to provide a plurality of storage entities, where each of the plurality of storage entities is associated with a tenant of the plurality of tenants. The storage array manager component generates a virtual network instance (“VNI”) for a first tenant, where the VNI is associated with a first storage entity and with a virtual network identifier (“VNID”) identifying the VNI. In addition, a virtual network tunnel endpoint (“VTEP”) for the VNI is generated. The storage array manager component encapsulates content relating to the first storage entity with the VNID for presentation to a first tenant system of the first tenant over a transport network via the VTEP.

Claims

1. A multi-tenant storage array device comprising:

a processor-based storage array manager component executed on a computer for storing and managing data associated with a plurality of tenants, wherein the storage array manager component is configured to;

provide a plurality of storage entities on the storage array device, wherein each of the plurality of storage entities is associated with a tenant of the plurality of tenants;

generate, within a network virtualization edge (NVE) node of the storage array device, a virtual network instance (“

VNI”

) for each storage entity of the plurality of storage entities, wherein the VNI includes a virtual network identifier (“

VNID”

);

generate, within the NVE node of the storage array device, a virtual network tunnel endpoint (“

VTEP”

) for each storage entity of the plurality of storage entities, wherein the generated VTEP connects the corresponding generated VNI with one or more tenant side VNIs of one or more tenants associated with the storage entity, and wherein the generated VTEP connects the corresponding generated VNI with the one or more tenant side VNIs via one or more corresponding tenant side VTEPs; and

encapsulate content relating to the storage entity with the VNID for presentation to a tenant system of the tenant associated with the storage entity over a transport network via the generated VTEP.

2. The device of claim 1 wherein the storage array device is communicatively connected via the transport network to a computer device associated with the tenant system of the first tenant, wherein the computer device includes a tenant side VTEP associated with the generated VNI, and wherein when the encapsulated content is presented by the storage array device to the computer device through a first tunnel between the VTEP generated for the storage array device and the computer device'"'"'s tenant side VTEP over the transport network, the content is forwarded to the tenant system.

3. The device of claim 1 wherein the storage entity is one of a file system, an NFS export, and a LUN.

4. The device of claim 2 wherein the generated VNI is a first VNI, the tenant is a first tenant, the storage entity is a first storage entity, the VNID is a first VNID, the generated VTEP is a first generated VTEP, and the tenant system is a first tenant system, the storage array manager component being further configured to:

generate, within the NVE node of the storage array device, a second VNI for a second tenant of the plurality of tenants, wherein the second VNI is associated with a second storage entity and includes a second VNID identifying the second VNI;

generate, within the NVE node of the storage array device, a second VTEP for the second VNI; and

encapsulate content relating to the second storage entity with the second VNID for presentation to a second tenant system of the second tenant associated with the second storage entity over the transport network via the second generated VTEP,

wherein the computer device is further associated with the second tenant system of the second tenant and further includes a second tenant side VTEP associated with the second generated VNI, and wherein when the encapsulated content relating to the second storage entity is received by the computer device through a second tunnel between the second VTEP generated for the storage array device and the computer device'"'"'s second tenant side VTEP over the transport network, the content is forwarded to the second tenant system.

5. The device of claim 1 wherein the storage array manager component is further configured to:

receive content encapsulated with the first VNID;

decapsulate the content to determine the first VNID;

identify the VNI based on the VNID; and

forward the content to the storage entity associated with the VNI.

6. The device of claim 1 wherein the tenant system is associated with a computer device that includes a tenant side VTEP associated with the generated VNI, and wherein the storage array manager component is configured to encapsulate the content relating to the storage entity by:

including the content in an inner header that includes at least one of an inner source MAC address and an inner destination MAC address;

providing a first outer header including the VNID;

providing a second outer header including a source port of the storage array device'"'"'s generated VTEP and a destination port of the computer device'"'"'s tenant side VTEP;

providing a third outer header including a source network address of the storage array device'"'"'s generated VTEP and a destination network address of the computer device'"'"'s tenant side VTEP; and

providing a fourth outer header including a destination MAC address of the computer device'"'"'s tenant side VTEP and a source MAC address of the storage array device'"'"'s generated VTEP.

7. The device of claim 6 wherein when the tenant system is a first virtual machine, the inner destination MAC address is associated with the first virtual machine.

8. The device of claim 6 wherein the inner source MAC address is associated with the storage entity.

9. The device of claim 4 wherein the storage array manager component is configured to:

encapsulate the content relating to the first storage entity by including the content in an inner header that includes a destination MAC address associated with the first tenant system, providing an outer header including the first VNID, and providing at least one other outer header including at least one of a destination network address and a destination MAC address of the computer device'"'"'s first tenant side VTEP; and

encapsulate the content relating to the second storage entity by including the content in an inner header that includes a destination MAC address associated with the second tenant system, providing an outer header including the second VNID, and providing at least one other outer header including at least one of a destination network address and a destination MAC address of the computer device'"'"'s second tenant side VTEP,

wherein the destination MAC address of the second tenant system and the destination MAC address of the tenant system overlap.

10. A non-transitory machine-readable medium carrying one or more sequences of instructions for providing a virtual network aware multi-tenant storage array device for storing and managing data associated with a plurality of tenants, which instructions, when executed by one or more processors in the storage array, cause the one or more processors to carry out a method comprising:

configuring, in a storage array device, a plurality of storage entities, wherein each of the plurality of storage entities is associated with a tenant of a plurality of tenants;

generating, within a network virtualization edge (NVE) node of the storage array device, a virtual network instance (“

VNI”

) for each storage entity of the plurality of storage entities, wherein the VNI includes a virtual network identifier (“

VNID”

);

generating, within the NVE node of the storage array device, a virtual network tunnel endpoint (“

VTEP”

) for each storage entity of the plurality of storage entities, wherein the generated VTEP connects the corresponding generated VNI with one or more tenant side VNIs of one or more tenants associated with the storage entity, and wherein the generated VTEP connects the corresponding generated VNI with the one or more tenant side VNIs via one or more corresponding tenant side VTEPs; and

encapsulating, by the storage array device, content relating to the storage entity with the VNID for presentation to a tenant system of the first tenant associated with the storage entity over a transport network via the generated VTEP.

11. A method for providing a virtual network aware multi-tenant storage array device, the method comprising:

configuring, by a storage array manager component in a storage array device for storing and managing data associated with a plurality of tenants, a plurality of storage entities, wherein each of the plurality of storage entities is associated with a tenant of a plurality of tenants;

generating, by the storage array manager component within a network virtualization edge (NVE) node of the storage array device, a first virtual network instance (“

VNI”

) for each storage entity of the plurality of storage entities, wherein the VNI includes a virtual network identifier (“

VNID”

);

generating, by the storage array manager component within the NVE node of the storage array device, a virtual network tunnel endpoint (“

VTEP”

) for each storage entity of the plurality of storage entities, wherein the generated VTEP connects the corresponding generated VNI with one or more tenant side VNIs of one or more tenants associated with the storage entity, and wherein the generated VTEP connects the corresponding generated VNI with the one or more tenant side VNIs via one or more corresponding tenant side VTEPs; and

encapsulating, by the storage array manager component, content relating to the storage entity with the VNID for presentation to a tenant system of the tenant associated with the storage entity over a transport network via the generated VTEP.

12. The method of claim 11 wherein the storage array device is communicatively connected via the transport network to a computer device associated with the tenant system of the tenant, wherein the computer device includes a tenant side VTEP associated with the generated VNI, and wherein when the encapsulated content is presented by the storage array device to the computer device through a first tunnel between the VTEP generated for the storage array device and the computer device'"'"'s tenant side VTEP over the transport network, the content is forwarded to the tenant system.

13. The method of claim 11 wherein the storage entity is one of a file system, an NFS export, and a LUN.

14. The method of claim 12 wherein the generated VNI is a first VNI, the tenant is a first tenant, the storage entity is a first storage entity, the VNID is a first VNID, the generated VTEP is a first generated VTEP, and the tenant system is a first tenant system, the method further comprising:

generating, by the storage array manager component within the NVE node of the storage array device, a second VNI for a second tenant of the plurality of tenants, wherein the second VNI is associated with a second storage entity and includes a second VNID identifying the second VNI;

generating, by the storage array manager component within the NVE node of the storage array device, a second VTEP for the second VNI; and

encapsulating, by the storage array manager component, content relating to the second storage entity with the second VNID for presentation to a second tenant system of the second tenant associated with the second storage entity over the transport network via the second tenant generated VTEP,

wherein the computer device is further associated with the second tenant system of the second tenant and further includes a second tenant side VTEP associated with the second generated VNI, and wherein when the encapsulated content relating to the second storage entity is presented to the computer device through a second tunnel between the second tenant VTEP generated for the storage array device and the computer device'"'"'s second tenant side VTEP over the transport network, the content is forwarded to the second tenant system.

15. The method of claim 11 further comprising:

receiving content encapsulated with the VNID;

decapsulating the content to determine the first VNID;

identifying the VNI based on the VNID; and

forwarding the content to the storage entity associated with the VNI.

16. The method of claim 11 wherein the tenant system is associated with a computer device that includes a tenant side VTEP associated with the generated VNI, and wherein the encapsulating the content relating to the storage entity comprises:

including the content in an inner header that includes at least one of an inner source MAC address and an inner destination MAC address;

providing a first outer header including the VNID;

providing a second outer header including a source port of the storage array device'"'"'s generated VTEP and a destination port of the computer device'"'"'s tenant side VTEP;

providing a third outer header including a source network address of the storage array device'"'"'s tenant generated VTEP and a destination network address of the computer device'"'"'s tenant side VTEP; and

providing a fourth outer header including a destination MAC address of the computer device'"'"'s tenant side VTEP and a source MAC address of the storage array device'"'"'s generated VTEP.

17. The method of claim 16 wherein when the tenant system is a first virtual machine, the inner destination MAC address is associated with the virtual machine.

18. The method of claim 16 wherein the inner source MAC address is associated with the storage entity.

19. The method of claim 14 further comprising:

encapsulating the content relating to the storage entity by including the content in an inner header that includes a destination MAC address associated with the tenant system, providing an outer header including the VNID, and providing at least one other outer header including at least one of a destination network address and a destination MAC address of the computer device'"'"'s tenant side VTEP; and

encapsulating the content relating to the second storage entity by including the content in an inner header that includes a destination MAC address associated with the second tenant system, providing an outer header including the second VNID, and providing at least one other outer header including at least one of a destination network address and a destination MAC address of the computer device'"'"'s second tenant side VTEP,

wherein the destination MAC address of the second tenant system and the destination MAC address of the tenant system overlap.

20. The method of claim 12 wherein when the storage array device is communicatively connected via the transport network to a second computer device that includes another tenant side VTEP and is associated with another tenant system, the method further comprises presenting the encapsulated content relating to the storage entity to the tenant system associated with the second computer device via a second tunnel between the VTEP generated for the storage array device and the second computer device'"'"'s tenant side VTEP.