System and method for supporting subnet manager (SM) master negotiation in a network environment

• US 9,529,878 B2
• Filed: 05/10/2013
• Issued: 12/27/2016
• Est. Priority Date: 05/10/2012
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Oracle International Corporation (Oracle Corporation)
• Inventors: Johnsen, Bjrn Dag, Holen, Line, Moxnes, Dag Georg
• Primary Examiner(s): Taylor, Nicholas
• Assistant Examiner(s): PENA-SANTANA, TANIA M
• Application Number:
  US13/892,162
• Publication Number:
  US 20130304890A1
• Time in Patent Office: 1,327 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 16/27 Replication, distribution or synchronisation of data between databases or within a distributed database system; Distributed database system architectures therefor
• CPC Class Codes: G06F 16/278 Data partitioning, e.g. horizontal or vertical partitioning
• CPC Class Codes: H04L 41/00 Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
• CPC Class Codes: H04L 41/046 comprising network management agents or mobile agents therefor
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/0873 Checking configuration conflicts between network elements
• CPC Class Codes: H04L 41/24 using dedicated network management hardware
• CPC Class Codes: H04L 43/00 Arrangements for monitoring or testing data switching networks
• CPC Class Codes: H04L 49/358 Infiniband Switches
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/1051 Group master selection mechanisms

Abstract

A system and method can support master negotiation in a network environment. A subnet manager (SM) can perform subnet discovery on a subnet in the network environment via a subnet manager (SM) in the subnet, wherein the subnet includes a plurality of SMs. Furthermore, the SM can communicate with the other SMs in the subnet to check for a number of known secret keys, and select a SM from the plurality of SMs as a master SM, wherein the master SM has the highest number of known keys.

Claims

1. A method for supporting master negotiation in a network environment, comprising:

providing a plurality of subnet managers (SMs), each of the plurality of subnet managers operating on a corresponding network switch;

storing in each of the plurality of SMs, a corresponding set of one or more secret keys wherein the corresponding set includes all secret keys known to each respective SM;

performing, by a negotiating SM of the plurality of SMs, subnet discovery on a subnet in the network environment via each other SM in the plurality of SMs in the subnet;

discovering, by the negotiating SM, the set of known secret keys of each other SM in the plurality of SMs;

checking, by the negotiating SM, the set of secret keys known to the negotiating SM to determine if the set of secret keys known to the negotiating SM includes each set of secret keys known to each other SM in the plurality of SMs;

checking, by the negotiating SM, the set of secret keys known to the negotiating SM to determine if each set of secret keys known to each other SM in the plurality of SMs is a subset of the set of secret keys known to the negotiating SM; and

selecting as a master SM one of the plurality of SMs, wherein the selected SM has the largest set of secret keys, and wherein the set of secret keys known to each other SM in the plurality of SMs is one of a same set, or a subset, of the set of secret keys known to the selected SM.

2. The method according to claim 1, further comprising:

including one or more reachable ports as part of a discovered topology if said one or more reachable ports are associated with one or more known M_Keys.

3. The method according to claim 2, further comprising:

treating, via the negotiating SM, a port with an unknown secret M_Key to be not part of the subnet and not attempting any discovery beyond the port.

4. The method according to claim 1, further comprising:

using priority/GUID as a criterion for selecting the master SM, when at least one of;

there is a mix of firmware versions,

there is a tie as to the largest set of secret keys among the plurality of SMs, and

an enable/disable transaction was initiated in a situation where one or more nodes hosting a plurality of SM are in a consistent state.

5. The method according to claim 1, further comprising:

allowing one SM, from the plurality of SMs, with enabled secret management key to update one or more subnet management agents (SMAs) and discover the subnet of the one or more updated SMAs.

6. The method according to claim 1, further comprising:

synchronizing, via the negotiating SM, with a partition daemon to get both current secret key information and current valid state for the partition configuration prior to initiating the initial discovery upon startup.

7. The method according to claim 6, further comprising:

using, via the partition daemon, an asynchronous interface to signal any change in the partition configuration valid state to the SM during run-time independently of a state of the SM.

8. The method according to claim 7, further comprising:

selecting a SM from the plurality of SMs as a master SM based on a partition configuration valid state associated with each SM.

9. The method according to claim 1, further comprising:

providing, via a current master SM, a transient commit in progress state along with the partition configuration valid state to the negotiating SM.

10. The method according to claim 9, further comprising:

ignoring the partition configuration valid state associated with the current master SM during an execution of an update transaction.

11. A system for supporting master negotiation in a network environment, comprising:

one or more microprocessors;

a plurality of network switches running on the one or more microprocessors;

a plurality of subnet managers (SMs), each of the plurality of subnet managers operating on a corresponding one of the plurality of network switches;

for each of the plurality of SMs, a corresponding set of one or more secret keys wherein the corresponding set is the set of all secret keys known to each respective SM;

wherein one of the plurality of subnet managers is a negotiating subnet manager, and wherein the negotiating subnet manager operates to;

perform subnet discovery on a subnet in the network environment via each other SM of the plurality of SMs in the subnet;

discover the set of known secret keys of each other SM;

check the set of secret keys known to each SM in the plurality of SMs to determine if the set of secret keys known to the negotiating SM includes each set of secret keys known to each other SM in the plurality of SMs;

check the set of secret keys known to the negotiating SM to determine if each set of secret keys known to each other SM in the plurality of SMs is a subset of the set of secret keys known to the negotiating SM; and

select as a master SM one of the plurality of SMs, wherein the selected SM has the largest set of secret keys, and wherein the set of secret keys known to each other SM in the plurality of SMs is one of a same set, or a subset, of the set of secret keys known to the selected SM.

12. The system according to claim 11, wherein:

the negotiating SM operates to include one or more reachable ports as part of a discovered topology, if said one or more reachable ports are associated with one or more known M_Keys and the negotiating SM operates to treat a port with an unknown secret M_Key as not part of the subnet and does not attempt any discovery beyond the port.

13. The system according to claim 11, wherein:

the negotiating SM operates to use priority/GUID as a criterion for selecting the master SM, when at least one of;

there is a mix of firmware versions,

there is a tie as to the largest set of secret keys among the plurality of SMs, and

an enable/disable transaction was initiated in a situation where one or more nodes hosting a plurality of SM are in a consistent state.

14. The system according to claim 11, wherein:

the negotiating SM operates to allow one SM with enabled secret management key to update one or more subnet management agents (SMAs) and discover the subnet of the one or more updated SMAs.

15. The system according to claim 11, wherein:

the negotiating SM operates to synchronize with a partition daemon to get both current secret key information and current valid state for a partition configuration prior to initiating the initial discovery upon startup.

16. The system according to claim 15, wherein:

the partition daemon operates to use an asynchronous interface to signal any change in the partition configuration valid state to the negotiating SM during run-time, independently of a state of the at least one corresponding SM.

17. The system according to claim 16, wherein:

the negotiating SM operates to select a SM from a plurality of SMs as a master SM based on a partition configuration valid state associated with each SM.

18. The system according to claim 11, wherein:

a current master SM operates to;

provide a transient commit-in-progress state along with a partition configuration valid state to the negotiating SM, and

ignore the partition configuration valid state associated with the current master SM during an execution of an update transaction.

19. A non-transitory machine readable storage medium having instructions stored thereon that when executed cause a system to perform the steps comprising:

performing, by a negotiating subnet manager (SM) within a plurality of SMs, subnet discovery on a subnet in a network environment via the other SMs of the plurality of SMs in the subnet, wherein one SM of the plurality of SMs and one corresponding set of one or more secret keys is provided at each of a plurality of network switches in the network environment, and wherein the one corresponding set is the set of all secret keys known to the one SM;

discovering, by the negotiating SM, the set of known secret keys of each other SM in the plurality of SMs;

checking, by the negotiating SM, the set of secret keys known to the negotiating SM to determine if the set of secret keys known to the negotiating SM includes the set of secret keys known to each other SM in the plurality of SMs;

checking, by the negotiating SM, the set of secret keys known to the negotiating SM to determine if the set of secret keys known to each other SM in the plurality of SMs is a subset of the set of secret keys known to the negotiating SM; and

selecting as a master SM one of the SMs in the plurality of SMs, wherein the selected SM has the largest set of secret keys, and wherein the set of secret keys known to each other SM in the plurality of SMs is one of a same set, or a subset, of the set of secret keys known to the selected SM.