Techniques for using a stealth storage device for secure information storage

    公开(公告)号:US11093413B2

    公开(公告)日:2021-08-17

    申请号:US16595826

    申请日:2019-10-08

    Abstract: Techniques for protecting information may include: exposing a logical device of a data storage system to a host, wherein the logical device has an attribute identifying the logical device as a stealth device having accessibility controlled by the data storage system based on commands issued over a control path, wherein the logical device has a mode indicating whether the logical device is accessible to the host; sending, from the host to the data storage system, a write command that writes first data on the logical device when the mode indicates the logical device is accessible to the host; and subsequent to said sending, issuing a command over the control path to the data storage system, wherein the command sets the mode of the logical device to inaccessible indicating the logical device is not accessible to the host.

    HOST DEVICE WITH ACTIVE-ACTIVE STORAGE AWARE PATH SELECTION

    公开(公告)号:US20210216228A1

    公开(公告)日:2021-07-15

    申请号:US16743097

    申请日:2020-01-15

    Abstract: An apparatus comprises at least one processing device that includes a processor coupled to a memory. The processing device is configured to control delivery of input-output (TO) operations from a host device to at least first and second storage systems over selected ones of a plurality of paths through a network, the first and second storage systems being arranged in an active-active configuration relative to one another. The processing device is further configured to identify one or more logical storage devices that are each accessible via at least first and second different ones of the paths to respective ones of the first and second storage systems, and to modify path selection for IO operations directed to the one or more identified logical storage devices relative to path selection for IO operations directed to one or more other logical storage devices. The processing device illustratively comprises at least a portion of the host device.

    DATA COMPRESSION FOR DIRECTLY CONNECTED HOST

    公开(公告)号:US20210216215A1

    公开(公告)日:2021-07-15

    申请号:US16742955

    申请日:2020-01-15

    Abstract: Data compression is performed on a storage system for which one or more host systems have direct access to data on the storage system. The storage system may compress the data for one or more logical storage units (LSUs) having data stored thereon, and may update compression metadata associated with the LSUs and/or the data portions thereof to reflect that the data is compressed. In response to a read request for a data portion received from a host application executing on the host system, compression metadata for the data portion may be accessed. If it is determined from the compression metadata that the data portion is compressed, the data compression metadata for the data portion may be further analyzed to determine how to decompress the data portion. The data portion may be retrieved and decompressed, and the decompressed data may be returned to the requesting application.

    HOST DEVICE WITH PATH SELECTION MODIFICATION RESPONSIVE TO MISMATCH IN INITIATOR-TARGET NEGOTIATED RATES

    公开(公告)号:US20210203595A1

    公开(公告)日:2021-07-01

    申请号:US16727079

    申请日:2019-12-26

    Abstract: An apparatus comprises at least one processing device that includes a processor coupled to a memory. The processing device is configured to control delivery of input-output (IO) operations from a host device to at least one storage system over selected ones of a plurality of paths through a network, wherein the paths are associated with respective initiator-target pairs, the initiators being implemented on the host device and the targets being implemented on the storage system. The processing device is further configured to identify one or more of the plurality of paths that each exhibits at least a threshold amount of mismatch between a negotiated rate of its initiator and a negotiated rate of its target, and to modify path selection in the host device to at least temporarily avoid selecting the one or more identified paths. The processing device illustratively comprises at least a portion of the host device.

    EFFICIENT CACHE MANAGEMENT
    25.
    发明申请

    公开(公告)号:US20210157740A1

    公开(公告)日:2021-05-27

    申请号:US16692386

    申请日:2019-11-22

    Abstract: A distributed cache is managed. In some embodiments, only a subset of a plurality of processing nodes may be designated as cache managers that manage the cache access history of a logical area, including having an exclusive right to control the eviction of data from cache objects of the logical area. In such embodiments, all of the processing nodes may collect cache access information, and communicate the cache access information to the cache managers. Some of the processing nodes that are not cache managers may collect cache access information from a plurality of the other non-cache managers. Each such processing node may combine this communicated cache access information with the cache access information of the processing node itself, sort the combined information per cache manager, and send the resulting sorted cache access information to the respective cache managers. The processing nodes may be arranged in a cache management hierarchy.

    Host device with automated write throttling responsive to storage system write pressure condition

    公开(公告)号:US11012512B1

    公开(公告)日:2021-05-18

    申请号:US16878678

    申请日:2020-05-20

    Abstract: A host device comprises a processor coupled to a memory. The host device is configured, for each of a plurality of initiators of the host device from which write operations are sent to a storage system for processing, to repeatedly send to the storage system a command to obtain from the storage system write pressure information maintained by the storage system for that initiator, and responsive to the write pressure information obtained from the storage system for a corresponding one of the initiators indicating that the corresponding initiator is associated with a write pressure condition, to at least temporarily reduce a rate at which the write operations are sent from the corresponding initiator to the storage system. The operations of repeatedly sending the command, and at least temporarily reducing the rate, are illustratively performed by at least one multi-path input-output driver of a multi-path layer of the host device.

    Automated network configuration changes for I/O load redistribution

    公开(公告)号:US10992532B1

    公开(公告)日:2021-04-27

    申请号:US16743125

    申请日:2020-01-15

    Abstract: Techniques for determining connectivity may include: defining predetermined configurations, each including a predetermined zoning configuration of a network and selection criteria indicating when to transition into and activate the predetermined configuration; loading the predetermined configurations; activating a first of the predetermined configurations that includes a first predetermined zoning configuration and first selection criteria; receiving current I/O workload and/or performance information for the network; determining whether the current I/O workload and/or performance information for the network matches second selection criteria associated with a second of the predetermined configurations that is different from the first predetermined configuration currently activated; and responsive to determining the current I/O workload and/or performance information matches the second selection criteria, activating the second predetermined configuration that is different from the first predetermined configuration currently activated. The predetermined configurations may configure paths between initiator ports and target ports of the network.

    ESTABLISHING TRUST ON A DATA STORAGE NETWORK

    公开(公告)号:US20210036869A1

    公开(公告)日:2021-02-04

    申请号:US16530172

    申请日:2019-08-02

    Abstract: A trust relationship may be established between a host system and a storage system. An asymmetric key pair including a private key unique to a host system and a public key may be generated. During provisioning of the host system to the storage system, the host system may send the public key to the storage system. The storage system may be configured to record the public key for the host system, for example, in a masking table that defines I/O connectivity for logical storage units between a host system and the storage system. The public key may be used later to validate the host system to the storage system. The private key may be stored on the host system and be unreadable, or may be encrypted with an unreadable encryption key stored on the host system.

    MANAGING WRITE ACCESS TO DATA STORAGE DEVICES FOR SPONTANEOUS DE-STAGING OF CACHE

    公开(公告)号:US20210034533A1

    公开(公告)日:2021-02-04

    申请号:US16530065

    申请日:2019-08-02

    Abstract: Writes to one or more physical storage devices may be blocked after a certain storage consumption threshold (WBT) for each physical storage device. A WBT for certain designated physical storage devices may be applied in addition to, or as an alternative to, determining and applying a user-defined background task mode threshold (UBTT) for certain designated physical storage devices. In some embodiments, the WBT and UBTT for a physical storage device designated for spontaneous de-staging may be a same threshold value. Write blocking management may include, for each designated physical storage device, blocking any writes to the designated physical storage device after a WBT for the designated physical storage device has been reached, and restoring (e.g., unblocking) writes to the designated physical storage device after storage consumption on the physical storage device has been reduced to a storage consumption threshold (WRT) lower than the WBT.

Patent Agency Ranking