公开(公告)号：US20230224155A1

公开(公告)日：2023-07-13

申请号：US17684432

申请日：2022-03-02

Applicant: VMware, Inc.

Inventor： Wenguang WANG ,  Abhay Kuamr JAIN ,  Ruiling DOU ,  Tao XIE ,  Xin LI ,  Chandrakanth GADHIRAJU ,  Kevin Rayfeng LI ,  Satish PUDI

IPC: H04L9/08 ,  G06F21/60

CPC classification number: H04L9/0891 ,  G06F21/602

Abstract: An example method for a first host, being an owner of an object stored in a virtual storage area network (vSAN) cluster, to perform encryption and decryption operations during a rekey in the vSAN cluster is disclosed. The method includes obtaining a first encryption key and a first key identifier (ID) of the first encryption key; transmitting the first key ID and an active key index to a second host; using the first encryption key to perform encryption and decryption operations; and in response to a determination of receiving a key change notification from a master node of the vSAN cluster, terminating a connection with the second host.

公开(公告)号：US20240086391A1

公开(公告)日：2024-03-14

申请号：US17940853

申请日：2022-09-08

Applicant: VMware, Inc.

Inventor： Kevin Rayfeng LI ,  Wenguang WANG ,  Quanxing LIU ,  Pascal RENAULD ,  Kiran PATIL

IPC: G06F16/23 ,  G06F9/455

CPC classification number: G06F16/2365 ,  G06F9/45558 ,  G06F2009/45583

Abstract: Systems and methods for inspection and repair of VSAN object metadata. A user-space indirection layer is maintained to map logical addresses of VSAN objects to physical memory addresses of their metadata. Commands may then be sent from the user space to distributed object manager (DOM) clients, with the physical addresses of metadata of objects to be inspected. DOM owners thus may bypass their own indirection layers to retrieve object metadata directly from received user commands. Retrieved information is then used to reconstruct and repair object metadata. Repaired metadata may be written back to the VSAN by transmitting a write request containing the physical address at which the repaired metadata is to be written. DOM owners may be placed in a specified mode in which received I/O instructions are ignored unless they are designated as being for metadata repair purposes, such as by including a physical address.