Providing end-to-end checksum within a distributed virtual storage area network module

    公开(公告)号:US10102057B2

    公开(公告)日:2018-10-16

    申请号:US14716756

    申请日:2015-05-19

    Applicant: VMware, Inc.

    Abstract: Exemplary methods, apparatuses, and systems include a first layer of a virtual storage area network (VSAN) module receiving a write request from a data compute node. The write request includes data to be written and the VSAN module is distributed across a plurality of computers to provide an aggregate object store using storage attached to each of the plurality of computers. The first layer of the VSAN module calculates a checksum for the data to be written and passes the data to be written and the checksum to a second layer of the VSAN module. The second layer of the VSAN module calculates a first verification checksum for the data to be written. The data and the checksum are written to persistent storage in response to determining the first verification checksum matches the checksum passed by the first layer of the VSAN module.

    MULTI-LEVEL ACCESS CONTROL FOR DISTRIBUTED STORAGE SYSTEMS
    35.
    发明申请
    MULTI-LEVEL ACCESS CONTROL FOR DISTRIBUTED STORAGE SYSTEMS 审中-公开
    分布式存储系统的多级访问控制

    公开(公告)号:US20170061146A1

    公开(公告)日:2017-03-02

    申请号:US14839815

    申请日:2015-08-28

    Applicant: VMware, Inc.

    CPC classification number: G06F21/6218 G06F21/604 G06F21/6272

    Abstract: System and method for accessing a distributed storage system uses a storage-level access control process at a distributed file system that interfaces with the distributed storage system to determine whether a particular client has access to a particular first file system object using an identifier of the particular client and storage-level access control rules in response to a file system request from the particular client to access a second file system object in the particular first file system. The storage-level access control rules are defined for a plurality of clients and a plurality of first file system objects of the distributed storage system to allow the particular client access to the second file system object in the particular first file system only if the particular client has been determined to have access to the particular first file system object according to the storage-level access control rules.

    Abstract translation: 用于访问分布式存储系统的系统和方法使用与分布式存储系统接口的分布式文件系统的存储级别访问控制过程,以确定特定客户端是否可以使用特定的标识符的标识符访问特定的第一文件系统对象 响应于来自特定客户端的文件系统请求访问特定第一文件系统中的第二文件系统对象的客户端和存储级访问控制规则。 存储级访问控制规则是针对分布式存储系统的多个客户端和多个第一文件系统对象定义的,以允许特定客户端访问特定第一文件系统中的第二文件系统对象,只有当特定客户端 已经被确定为根据存储级访问控制规则访问特定的第一文件系统对象。

    VIRTUAL FILE SYSTEM WITH VNODE RECONSTRUCTION CAPABILITY
    36.
    发明申请
    VIRTUAL FILE SYSTEM WITH VNODE RECONSTRUCTION CAPABILITY 审中-公开
    具有VNODE重建能力的虚拟文件系统

    公开(公告)号:US20160328299A1

    公开(公告)日:2016-11-10

    申请号:US14706879

    申请日:2015-05-07

    Applicant: VMware, Inc.

    Abstract: A virtual file system and method for performing virtual file system operations uses a vnode descriptor to access a vnode for a vnode operation. If the vnode is not found in a vnode cache using the vnode descriptor, the vnode is reconstructed using information regarding the vnode found outside of the vnode cache using the vnode descriptor.

    Abstract translation: 用于执行虚拟文件系统操作的虚拟文件系统和方法使用vnode描述符来访问vnode操作的vnode。 如果使用vnode描述符在vnode缓存中未找到vnode,则使用vnode描述符使用关于vnode缓存外部的vnode的信息来重构vnode。

    Enhanced locking mechanism for B+ tree data structures

    公开(公告)号:US12130791B2

    公开(公告)日:2024-10-29

    申请号:US18144797

    申请日:2023-05-08

    Applicant: VMware, Inc.

    CPC classification number: G06F16/2246 G06F16/2343 G06F16/24552 G06F16/288

    Abstract: A method for modifying key-value pairs of a B+ tree is provided. The method receives a request to modify a particular key-value pair. Each node of the tree has a modification number. The method traverses a path on the tree from the root node toward the particular node. The traversing includes upon reaching a parent node of the path, acquiring a shared lock on both the parent node and a child node one level below the parent node. Upon determining that the child node is the particular node, the method stores the modification number of the particular node, releases the shared lock on the particular node, compares a current modification number of the node with its stored number, and acquires an exclusive lock on the node if the numbers are the same. The method increments the current modification number of the node and modifies it while in the exclusive lock.

    BOOTSTRAPPING AN ENCRYPTED SINGLE NODE VSAN CLUSTER

    公开(公告)号:US20230421462A1

    公开(公告)日:2023-12-28

    申请号:US17954431

    申请日:2022-09-28

    Applicant: VMware, Inc.

    CPC classification number: H04L41/40 H04L41/342 H04L9/0822

    Abstract: The present disclosure relates to bootstrapping an encrypted single node VSAN cluster. One method includes receiving a request to create an encrypted VSAN cluster from a single host in a software-defined datacenter, deploying a virtual server on a VSAN datastore of the software-defined datacenter, registering a native key provider (NKP) in the virtual server, creating an empty VSAN cluster encrypted by the NKP, adding the single host to the encrypted empty cluster to create a one-host encrypted cluster, registering a KMIP KMS in the virtual server, switching encryption of the one-host encrypted cluster from the NKP to the KMIP KMS, and adding another host to the one-host encrypted cluster to create the encrypted cluster.

Patent Agency Ranking