Managing multiple tenants in NAS (network attached storage) clusters

• US 10,289,325 B1
• Filed: 07/31/2017
• Issued: 05/14/2019
• Est. Priority Date: 07/31/2017
• Status: Active Grant

• Current Assignee: Emc IP Holding Company LLC (Dell Technologies Inc.)
• Original Assignee: Emc IP Holding Company LLC (Dell Technologies Inc.)
• Inventors: Bono, Jean-Pierre
• Primary Examiner(s): Cygiel, Gary W.
• Application Number:
  US15/664,281
• Time in Patent Office: 652 Days
• CPC Class Codes: G06F 3/0605 by facilitating the interaction with a user or administrator
• CPC Class Codes: G06F 3/0622 in relation to access
• CPC Class Codes: G06F 3/0635 by changing the path, e.g. traffic rerouting, path reconfiguration
• CPC Class Codes: G06F 3/0647 Migration mechanisms
• CPC Class Codes: G06F 3/0659 Command handling arrangements, e.g. command buffers, queues, command scheduling
• CPC Class Codes: G06F 3/067 Distributed or networked storage systems, e.g. storage area networks [SAN], network attached storage [NAS]
• CPC Class Codes: G06Q 10/00 Administration; Management
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34

Abstract

A technique for supporting multi-tenancy in a NAS cluster provides a management database which tracks, for each tenant of the NAS cluster, a tenant-specific list of identifiers of NAS data nodes that are authorized to run NAS servers owned by respective tenants. In response to a request to run a NAS server owned by a particular tenant of the NAS cluster, the technique limits the scope of NAS data nodes on which the NAS server may be run to the ones identified in the tenant-specific list for that tenant in the management database. The management database thus determines where each tenant'"'"'s NAS servers may be run, and participates in driving NAS cluster activities, such as NAS server provisioning, load balancing, and failover.

Claims

1. A method of managing multiple tenants in a NAS cluster, the method comprising:

operating multiple NAS data nodes in the NAS cluster, the NAS data nodes running on respective physical computing machines, each NAS data node having an identifier and configured to run multiple NAS servers, each NAS server owned by a respective tenant of the NAS cluster and including a set of file systems accessible to host computing devices over a network, the NAS cluster having multiple tenants;

maintaining, by the NAS cluster, a management database, the management database tracking, for each tenant of the NAS cluster, a tenant-specific list of identifiers of NAS data nodes that are authorized to run NAS servers owned by the respective tenant; and

in response to a request to run a NAS server in the NAS cluster, (i) identifying a particular tenant that owns the NAS server, (ii) selecting a NAS data node for running the NAS server from the tenant-specific list for the particular tenant, and (iii) operating the NAS server on the selected NAS data node.

2. The method of claim 1, wherein the management database identifies a first set of NAS data nodes in the NAS cluster that are authorized to run NAS servers owned by the particular tenant and a second set of NAS data nodes in the NAS cluster that are not authorized to run NAS servers owned by the particular tenant.

3. The method of claim 2, wherein maintaining the management database includes tracking, for each of the first set of NAS data nodes, an indication that specifies one of at least two conditions, the two conditions being (i) that the NAS data node is exclusively owned by the particular tenant and (ii) that the NAS data node is nonexclusively shared by the particular tenant.

4. The method of claim 3, wherein a first NAS data node on the tenant-specific list for the particular tenant is exclusively owned by the particular tenant, and wherein the method further comprises prohibiting the first NAS data node from running any NAS server owned by any other tenant of the NAS cluster.

5. The method of claim 4, wherein a second NAS data node on the tenant-specific list for the particular tenant is nonexclusively shared by the particular tenant, and wherein the method further comprises prohibiting the second NAS data node from running any NAS server owned by any tenant that does not also non-exclusively share the NAS data node.

6. The method of claim 3, wherein the request to run the NAS server in the NAS cluster is issued in response to a NAS server provisioning operation,

wherein the NAS cluster identifies, as candidates for running the NAS server, only those NAS data nodes that the management database identifies on the tenant-specific list for the particular tenant, and

wherein a particular NAS data node identified on the tenant-specific list for the particular tenant operates the NAS server upon completion of the provisioning operation.

7. The method of claim 6, wherein the request to run the NAS server in the NAS cluster is issued in response to a load balancing operation,

wherein the NAS cluster identifies, as candidates for taking over operation of the NAS server, only those NAS data nodes that the management database identifies on the tenant-specific list for the particular tenant, and

wherein another NAS data node identified on the tenant-specific list for the particular tenant operates the NAS server upon completion of the load balancing operation.

8. The method of claim 6, wherein the request to rim the NAS server in the NAS cluster is issued in response to a failover operation,

wherein the NAS cluster identifies as candidates for failover of the NAS server only those NAS data nodes that the management database identifies on the tenant-specific list for the particular tenant, and

wherein another NAS data node identified on the tenant-specific list for the particular tenant operates the NAS server upon completion of the failover operation.

9. The method of claim 6, further comprising tracking, by the management database, information about each NAS server in the NAS cluster, the information identifying, for each NAS server, a tenant that owns the respective NAS server.

10. A NAS (network attached storage) cluster, comprising:

multiple NAS data nodes operating on respective physical computing machines interconnected via a computer network, the physical computing machines including control circuitry constructed and arranged to;

operate multiple NAS data nodes in the NAS cluster, each NAS data node having an identifier and configured to run multiple NAS servers, each NAS server owned by a respective tenant of the NAS cluster and including a set of file systems accessible to host computing devices over a network, the NAS cluster having multiple tenants;

maintain, by the NAS cluster, a management database, the management database tracking, for each tenant of the NAS cluster, a tenant-specific list of identifiers of NAS data nodes that are authorized to run NAS servers owned by the respective tenant; and

in response to a request to run a NAS server in the NAS cluster, (i) identify a particular tenant that owns the NAS server, (ii) select a NAS data node for running the NAS server from the tenant-specific list for the particular tenant, and (iii) operate the NAS server on the selected NAS data node.

11. The NAS cluster of claim 10, wherein the request to run the NAS server in the NAS cluster is issued in response to a NAS server provisioning operation,

wherein the control circuitry is constructed and arranged to identify as candidates for running the NAS server only those NAS data nodes that the management database identifies on the tenant-specific list for the particular tenant, and

wherein the control circuitry is constructed and arranged to operate the NAS server upon completion of the provisioning operation on a particular NAS data node identified on the tenant-specific list for the particular tenant.

12. A computer program product including a set of non-transitory, computer-readable media having instructions which, when executed by control circuitry of a NAS cluster, cause the control circuitry to perform a method for managing multiple tenants in the NAS cluster, the method comprising:

operating multiple NAS data nodes in the NAS cluster, the NAS data nodes running on respective physical computing machines, each NAS data node having an identifier and configured to run multiple NAS servers, each NAS server owned by a respective tenant of the NAS cluster and including a set of file systems accessible to host computing devices over a network, the NAS cluster having multiple tenants;

maintaining, by the NAS cluster, a management database, the management database tracking, for each tenant of the NAS cluster, a tenant-specific list of identifiers of NAS data nodes that are authorized to run NAS servers owned by the respective tenant; and

in response to a request to run a NAS server in the NAS cluster, (i) identifying the particular tenant that owns the NAS server, (ii) selecting a NAS data node for running the particular NAS server from the tenant-specific list for the particular tenant, and (iii) operating the NAS server on the selected NAS data node.

13. The computer program product of claim 12, wherein the management database identifies a first set of NAS data nodes in the NAS cluster that are authorized to run NAS servers owned by the particular tenant and a second set of NAS data nodes in the NAS cluster that are not authorized to run NAS servers owned by the particular tenant.

14. The computer program product of claim 13, wherein maintaining the management database includes tracking, for each of the first set of NAS data nodes, an indication that specifies one of at least two conditions, the two conditions being (i) that the NAS data node is exclusively owned by the particular tenant and (ii) that the NAS data node is nonexclusively shared by the particular tenant.

15. The computer program product of claim 14, wherein a first NAS data node on the tenant-specific list for the particular tenant is exclusively owned by the particular tenant, and wherein the method further comprises prohibiting the first NAS data node from running any NAS server owned by any other tenant of the NAS cluster.

16. The computer program product of claim 15, wherein a second NAS data node on the tenant-specific list for the particular tenant is nonexclusively shared by the particular tenant, and wherein the method further comprises prohibiting the second NAS data node from running any NAS server owned by any tenant that does not also non-exclusively share the NAS data node.

17. The computer program product of claim 14, wherein the request to run the NAS server in the NAS cluster is issued in response to a NAS server provisioning operation,

wherein the NAS cluster identifies, as candidates for running the NAS server, only those NAS data nodes that the management database identifies on the tenant-specific list for the particular tenant, and

wherein a particular NAS data node identified on the tenant-specific list for the particular tenant operates the NAS server upon completion of the provisioning operation.

18. The computer program product of claim 17, wherein the request to run the NAS server in the NAS cluster is issued in response to a load balancing operation,

wherein the NAS cluster identifies, as candidates for taking over operation of the NAS server, only those NAS data nodes that the management database identifies on the tenant-specific list for the particular tenant, and

wherein another NAS data node identified on the tenant-specific list for the particular tenant operates the NAS server upon completion of the load balancing operation.

19. The computer program product of claim 17, wherein the request to run the NAS server in the NAS cluster is issued in response to a failover operation,

wherein the NAS cluster identifies, as candidates for failover of the NAS server, only those NAS data nodes that the management database identifies on the tenant-specific list for the particular tenant, and

wherein another NAS data node identified on the tenant-specific list for the particular tenant operates the NAS server upon completion of the failover operation.

20. The computer program product of claim 17, further comprising tracking, by the management database, information about each NAS server in the NAS cluster, the information identifying, for each NAS server, a tenant that owns the respective NAS server.