Systems and methods for message tunneling

    公开(公告)号:US12147358B2

    公开(公告)日:2024-11-19

    申请号:US18233870

    申请日:2023-08-14

    Abstract: According to one general aspect, a device may include a host interface circuit configured to communicate with a host device via a data protocol that employs data messages. The device may include a storage element configured to store data in response to a data message. The host interface circuit may be configured to detect when a tunneling command is embedded within the data message; extract a tunneled message address information from the data message; retrieve, via the tunneled message address information, a tunneled message stored in a memory of the host device; and route the tunneled message to an on-board processor and/or data processing logic. The on-board processor and/or data processing logic may be configured to execute one or more instructions in response to the tunneled message.

    System and method of detecting and countering denial-of-service (DoS) attacks on an NVMe-of-based computer storage array

    公开(公告)号:US10686833B2

    公开(公告)日:2020-06-16

    申请号:US15489401

    申请日:2017-04-17

    Abstract: A computer storage array detects and counters denial of service (DoS) attacks and provides one or more remote initiators with access to one or more storage devices connected to the computer storage array. computer storage array includes: a computer processor configured to run an operating system for managing networking protocols; a networking device configured to monitor and route network traffic, at a packet level to, and from the storage devices; a baseboard management controller (BMC) configured to detect a DoS attack based on monitoring of statistics of the network traffic by the networking device; a PCIe switch connecting the BMC with each of the storage devices via a PCIe bus; and a computer motherboard to which the computer processor, networking device, BMC and PCIe switch are installed.

    System and method for detecting malicious software in NVME over fabrics devices

    公开(公告)号:US10586043B2

    公开(公告)日:2020-03-10

    申请号:US15690265

    申请日:2017-08-29

    Abstract: A system and a method to detect malicious software written to an Ethernet solid-state drive (eSSD). The system includes an Ethernet switch, at least one SSD, and a baseboard management controller (BMC). The Ethernet switch receives write data from a communication network in response to a write command. The at least one SSD receives the write data from the Ethernet switch and stores the received write data. The BMC receives from the at least one SSD the received write data. The BMC determines whether the received write data contains malicious software. The received write data may be contained in a plurality of Ethernet packets in which case the BMC stores the received write data in a scan buffer in an order that is based on an assembled order of the received write data.

    METHOD AND APPARATUS FOR REDUCING IP ADDRESSES USAGE OF NVME OVER FABRICS DEVICES

    公开(公告)号:US20180167352A1

    公开(公告)日:2018-06-14

    申请号:US15408168

    申请日:2017-01-17

    CPC classification number: H04L61/2521 H04L61/2514 H04L61/2517 H04L69/22

    Abstract: A method includes: receiving a Transmission Control Protocol (TCP)/Internet Protocol (IP) packet from an initiator, wherein the TCP/IP packet includes an IP address of a switch and a port number; looking up an address translation table based on the IP address of the switch and the port number; translating the IP address of the switch to a private IP address based on the port number according to address mapping information stored in the address translation table; and routing the TCP/IP packet to a non-volatile memory express over fabrics (NVMeoF) device having the private IP address. A network address translation (NAT) router implemented in the switch is configured to perform the address translation from the IP address of the switch to the private IP address of the NVMeoF device.

    Method for controlling BW SLA in NVME-of ethernet SSD storage systems

    公开(公告)号:US11543967B2

    公开(公告)日:2023-01-03

    申请号:US15487431

    申请日:2017-04-13

    Abstract: An Ethernet solid-state drive (eSSD) system includes a plurality of eSSDs, an Ethernet switch and a baseboard management controller. The Ethernet switch is coupled to each of the eSSDs, and the baseboard management controller is coupled to the each of the eSSDs and to the Ethernet switch. The baseboard management controller controls the Ethernet switch to provide to each eSSD a corresponding predetermined bandwidth that is based on bandwidth information for the eSSD that is stored in a policy table of the baseboard management controller. The at least one predetermined bandwidth may include a predetermined ingress bandwidth and a predetermined egress bandwidth for the corresponding eSSD. The at least one predetermined bandwidth may be based on a service level associated with the corresponding eSSD, and may be adaptively based on operating parameters of the corresponding eSSD.

Patent Agency Ranking