47 results about "Storage area network" patented technology

A method for managing data availability includes making a first determination by a first security module (FSM) that a first storage area network (SAN) infrastructure in a first data center has experienced a failure. The method also includes generating a secure string based on a first configuration parameter. Further, the method includes appending the secure string to a SAN failure notification to generate a secure string-appended request. In addition, the method includes sending the secure string-appended request to a second data center, wherein the second data center is selected based on a second configuration parameter. Moreover, the method includes making a second determination that the encrypted secure string-appended request is valid. Further, the method includes offloading processing of requests sent to the first data center using the second data center.

The invention relates to a server certificate SAN domain name adding method and device, computer equipment, a computer readable storage medium and a computer program product. The method comprises the following steps of: creating a Kubernetes cluster with at least one master node; the method comprises the following steps of: deploying a Controller on any one master node in a Kubernetes cluster in a form of a work load pod; the method comprises the following steps of: creating a stateful working load in a namespace of a Kubernetes cluster under the condition of monitoring that an SAN (Storage Area Network) custom resource object has been created in the Kubernetes cluster by utilizing a Controller; and SAN domain names are added to server certificates of all the master nodes in the Kubernetes cluster through the pod corresponding to the stateful workload. By adopting the method, the SAN domain name can be automatically and safely added to the server certificate of the Kubernetes cluster without manual intervention, so that the availability and the safety of the cluster are improved.

A storage product manufactured as a computer component and configured to have: a secure memory region to store cryptographic keys; a network interface; a local storage device having a storage capacity accessible via the network interface; and a host interface to be connected to a local host system. The local host system can control access, made via the network interface, to the storage capacity without receiving a portion of storage access messages received in the network interface. The storage product includes an access controller configured to determine whether a message, received in the network interface from the computer network or in the host interface from the local host system, has a valid verification code according to the cryptographic keys; and if not, the message can be rejected, deleted, discarded, or ignored without further processing.

Provided are a method, system, and computer program product in which operations are performed to establish communication with a plurality of hosts that are coupled to a plurality of storage devices over a storage area network (SAN). Further operations are performed to discover and report those hosts of the plurality of hosts that are currently or have previously been SAN booted to one or more logical unit numbers (LUNs) within one or more storage devices of the plurality of storage devices.

A network device for capability-based autonomous SAN traffic engineering is provided. The network device includes one or more ingress points configured to receive one or more packets from a first network node, a first set of buffers configured to store packets associated with a first group of network nodes, and a packet processing logic configured to determine a communication speed of the first network node over a first channel, wherein the packet processing logic is configured to assign the first network node to a first group nodes of the plurality of groups of network nodes, and store the one or more packets from the first network node in the first set of buffers.

One or more aspects of the present disclosure relate to detecting and mitigating congestion in a storage area network. In embodiments, peer congestion Fabric Performance Impact Notification (FPIN) messages can be used to infer congestion on a target port that has not received a direct congestion FPIN. Upon receiving a peer congestion FPIN for a target port, the embodiments determine if the target port received a direct congestion FPIN. If not, the embodiments infer congestion on the target port based on the peer notification. The embodiments then control messaging to the congested port to mitigate the congestion, such as by adjusting bandwidth limits. This approach enables congestion detection and mitigation even when severe congestion prevents the delivery of direct notifications to the affected port. Accordingly, the embodiments leverage existing FPIN infrastructure and connectivity information to provide a simple, standards-based solution for identifying and addressing congestion issues in storage networks.

This invention provides a storage area network (SAND) detection and analysis method, detection and analysis equipment, and medium, applied in the field of SAND detection technology. The method includes: acquiring port data corresponding to each electronic device in the SAND; classifying the port data to obtain basic port data, port connection data, general port statistics, and specific port statistics; determining the physical network topology of the SAND based on the basic port data, port connection data, and specific port statistics; analyzing the general port statistics and specific port statistics to obtain analytical conclusions characterizing the link status and congestion status of the SAND; and determining the operating status of the SAND based on the analytical conclusions and the physical network topology. It is evident that the physical network topology generated by this invention is highly flexible, and this method can detect faults in large SAND networks, improving the accuracy and efficiency of fault location.

The invention relates to the technical field of computers, in particular to a configuration data processing method and device, electronic equipment and a storage medium. The method comprises the following steps: in response to triggering of a preset query instruction, querying first area configuration data of a storage area network corresponding to each switch; wherein the first area configuration data comprises at least one of submitted configuration data and locked and suspended configuration data; determining target configuration data according to the queried first area configuration data; wherein the target configuration data represents configuration data needing to be cleaned in the switch.

The present application relates to the field of communication technology, and specifically discloses a port traffic processing method, apparatus, device, and storage medium. The port traffic processing method includes: collecting traffic data of a storage area network switch port in a preset unit time, and calculating the unit bandwidth utilization of the switch port based on the maximum traffic bandwidth of the switch port and the traffic data; when the unit bandwidth utilization exceeds the preset unit bandwidth utilization threshold and the switch port is a switch storage port, obtaining a preset emergency strategy; based on the emergency strategy, downgrading or fusing the traffic of the preset port, wherein the preset port is the switch storage port or the host port of the host accessing the switch storage port. This method improves the stability of port traffic and ensures that data analysis, data processing, and other services that require shared data can be carried out stably.

The invention discloses an access method for a fiber channel storage area network, electronic equipment and a storage medium, and relates to the technical field of network security, and the method comprises the steps: obtaining triple information of a storage access request when the storage access request of an application program for the fiber channel storage area network is recognized; if a rule allowing access is matched from a strategy rule base based on the triple information of the storage access request, generating an access permission and an encryption parameter; and constructing an encrypted frame based on the access permission, the encryption parameter and the original fiber channel frame, sending the encrypted frame to a storage array of the fiber channel storage area network, decrypting and verifying the encrypted frame by using the storage array, and executing the storage access request by the storage array under the condition that decryption is successful and verification is passed. Therefore, the problem that the risk that data are maliciously tampered and stolen is increased due to the defects of strategy management lagging, encryption mechanism deficiency, authority generalization and weak identity authentication existing in a traditional optical fiber channel storage area network is solved.

The application discloses a file transmission processing method and device of a batch data bus. When a file stored in a storage area network is received, a control file is triggered to be generated. The control file is used for marking whether the file is processed or not. All upstream original file directories are scanned. If there is a file in all the upstream original file directories, files meeting preset batch forwarding specifications are selected from all the upstream original file directories. When each forwarding task is acquired, the files meeting the preset batch forwarding specifications are batch-sent to a downstream system through preset batch forwarding rules and a batch data bus file transmission channel. When the files meeting the preset batch forwarding specifications are all sent to the downstream system, the files batch-forwarded to the downstream system are marked through the control file.

Solutions are disclosed that provide for internet protocol (IP) multimedia subsystem (IMS) session continuity with stored authentication. When a user equipment (UE) registers with a first proxy call session control function (P-CSCF), the first P-CSCF stores authentication information for the UE, and binding information for an IMS session in an authentication database, for example in a storage area network (SAN). Upon an outage of the first P-CSCF, a second P-CSCF (in the same pool) retrieves the authentication information and binding information in lieu of requiring the UE to register. The second P-CSCF is then able to act as a proxy for the IMS session. This is available for mobile originating (MO) and mobile terminating (MT) calls. For MO calls, the call setup is sped up. For MT calls, the UE is able to receive the call, rather than the call being missed.

The embodiments of the present application relate to the field of storage technology, and more specifically, to a data storage system, method, apparatus, device, and storage medium, which are intended to integrate a storage area network system with a network attached storage system. The system includes: a memory management unit, deployed in a master node in a storage cluster, for managing and allocating memory resources of each storage node; a block storage cluster, deployed in each node of the storage cluster, for storing data to be stored using a block storage mode; a unified storage cluster, deployed in each node of the storage cluster via a podman container, for storing the data to be stored using the same storage mode; a mode switching unit, for switching the storage mode of the data storage system; and a monitoring unit, for monitoring each node in the storage cluster.

The present invention discloses a mirror storage method, device, storage medium and electronic device. The method includes: receiving a mirror upload request from a client, where the mirror upload request is used to request uploading a target mirror; sending a creation request to a cloud disk management module, where the creation request is used to request the cloud disk management module to create a first storage space for storing the target mirror in a storage area network; after the cloud disk management module creates the first storage space, connecting the first storage space to the client locally; writing the mirror data of the target mirror on the client locally into the first storage space; after the writing of the mirror data is completed, disconnecting the connection between the first storage space and the client locally, and writing the mirror metadata of the target mirror into a database. The present invention solves the technical problem of low storage mirror efficiency.

A storage controller is configured to communicate with a host over a first storage area network. Data controlled via the storage controller is mirrored to another storage controller over a second storage area network. The storage controller receives a request from the host to provide read diagnostic parameters of the second storage area network. In response to receiving the request, the storage controller secures the read diagnostic parameters of the second storage area network. The storage controller transmits the read diagnostic parameters of the second storage area network to the host.

The present disclosure relates to a method and system for backing up and restoring data. The method comprises: obtaining usage and health conditions of a backup device; reporting the obtained usage and health conditions to a backup agent in a server storage area network (SAN) node connected to the backup device; and in response to detecting a virtual disk control command from the server SAN node, controlling a virtual disk interface of the backup device such that data within a logical unit number (LUN) required by the server SAN node is backed up to or restored from the backup device, the virtual disk interface providing an interface to a virtual disk of the backup device based on a predetermined binding relationship between the LUN and the virtual disk.

The present application discloses a data space recovery method, apparatus, computer equipment, and storage medium, relating to the field of computer technology. The data space recovery method includes, in response to a situation in which the total length of data blocks to be recovered in a first recovery queue is greater than a first threshold and the first recovery queue includes data blocks to be recovered with a data length greater than a second threshold, splitting the data blocks to be recovered with a data length greater than the second threshold and storing them in a second recovery queue; selecting split data blocks from the second recovery queue and adding them to a third recovery queue; and in response to the number of split data blocks in the third recovery queue being greater than a third threshold, aggregating the split data blocks in the third recovery queue and sending them to a storage area network array for data space recovery. This method solves the technical problem in related technologies that directly processing block device unload requests can lead to fragmented storage space release, affecting subsequent allocation efficiency, thereby achieving the technical effect of improving the reliability of data space recovery.

A method for managing a data replication operation includes: obtaining, by a first security module (FSM), UTC-based system time of a first storage area network (SAN) infrastructure; generating, by the FSM, a secure string based on the UTC-based system time and a configuration parameter set by a user of the first SAN infrastructure; encrypting, by the FSM, the secure string to generate an encrypted secure string; appending, by the FSM, the encrypted secure string to a data replication request to generate an encrypted secure string-appended request, sending, by the FSM, the encrypted secure string-appended request to a second SAN infrastructure; making, after intercepting the encrypted secure string-appended request and by a second security module (SSM), a determination that the encrypted secure string-appended request is valid; and initiating, by the SSM, the operation from the first SAN infrastructure to the second SAN infrastructure by sending a notification to the FSM.

Embodiments include performing a host-initiated link reset in a storage area network (SAN). Aspects include identifying, by a host in communication with the SAN, each link in the SAN, wherein each lin

The invention discloses a data space recovery method and device, computer equipment and a storage medium, and relates to the technical field of computers. The data space recovery method comprises the steps that when the total length of to-be-recovered data blocks in a first recovery queue is larger than a first threshold value and the first recovery queue comprises the to-be-recovered data blocks with the data length larger than a second threshold value, the to-be-recovered data blocks with the data length larger than the second threshold value are split and stored in a second recovery queue; and selecting the split data blocks from the second recovery queue, adding the split data blocks into a third recovery queue, and aggregating the split data blocks in the third recovery queue and issuing the aggregated split data blocks to the storage area network array for data space recovery in response to the situation that the number of the split data blocks in the third recovery queue is greater than a third threshold value. The technical problem that the subsequent distribution efficiency is affected due to fragmentation of storage space release caused by direct processing of a block device unloading request in the prior art is solved, and the technical effect of improving the data space recovery reliability is achieved.

The invention relates to an enterprise data management method, platform and device and a medium, and belongs to the technical field of data management. The method comprises the following steps: acquiring enterprise data; performing format classification on the enterprise data; the structured data is stored in a storage area network form, the semi-structured data is stored in a key value storage form, and the non-structured data is stored in a distributed storage form or a network additional storage form; performing cold and hot data type division to obtain hot data and cold data; the hot data and the cold data are compressed by adopting a Snappy algorithm and Gzip respectively; and carrying out security level division. By means of the scheme, the enterprise data access efficiency of the user and the system performance are effectively improved, and the enterprise data are safer.

The invention provides a message transmission method and electronic equipment, and relates to the technical field of communication, the message transmission method is applied to a first node, the first node comprises a first storage area network and network additional storage, and the message transmission method comprises the following steps: in a service initialization stage, acquiring a cluster identifier and a node identifier corresponding to the first node; according to an address structure and address configuration information corresponding to the IPV4 address information, adding the cluster identifier, the node identifier and service information corresponding to the service to the address structure, obtaining the IPV4 address information corresponding to the service, and storing the IPV4 address information to a first storage area network and a network additional storage; and in a service execution stage, according to the IPV4 address information and the message demand information corresponding to the service, controlling the transmission operation corresponding to the message of the first storage area network and the network additional storage execution service. Unified storage system development of the SAN and the NAS can be realized, and the integration level can be improved while the development difficulty and the development cost can be reduced.

The application discloses a load balancing service method and system based on SAN storage, relates to the technical field of load balancing, and comprises the following steps: determining required SAN storage capacity and performance requirements; selecting a fiber channel storage area network as a SAN storage environment; setting an access mode and data read-write frequency of a business system; selecting a polling algorithm, a minimum connection number algorithm or a weight-based distribution algorithm as a load balancing algorithm of the SAN storage; creating a virtual IP on a load balancing device; configuring a node pool and adding storage nodes in a SAN network to the node pool of the load balancing device; and monitoring a load condition and a node health condition of the load balancing device in real time. The SAN storage network is constructed through a storage environment construction module, a load balancing algorithm module and an algorithm stability detection module, the sharing and centralized management of storage resources are realized, and the utilization rate and flexibility of the storage resources are improved.

The application provides a FC-SAN-based device communication method and device, electronic equipment and storage medium, and relates to the technical field of communication. The method comprises the following steps: creating a logical storage space and an FC Target by a storage device at a storage device end, mounting the logical storage space under the FC Target, associating at least one client with the FC Target, and then creating at least one communication space corresponding to at least one client in the logical storage space; a port number of a target client is recorded in a first setting area of a target communication space corresponding to any target client in the at least one client, so as to limit the access of the target client to the target client and the storage device; in the case that the storage device completes the above process, the target client side also corresponds to determine that the communication condition is met, and the target client and the storage device communicate based on the target communication space. The application can enable efficient communication between devices without constructing an IP network, and reduce the deployment cost and management complexity of the FC-SAN.

The invention provides a storage system, a storage service system, a storage processing method and storage servers, and relates to the field of storage, and at least two storage servers can be arranged in the storage system. Wherein the storage servers synchronously store the same user data; moreover, each storage server is provided with an HBA virtual port with the same storage area network identifier, and the binding relationship between the storage area network identifier of the HBA virtual port and the storage area network identifier of the client is established, so that the seamless switching between the master and the standby is realized. In actual work, the main server can utilize the HBA virtual port of the main server to carry out storage service interaction with the client; according to the technical scheme, the standby server needs to forbid the HBA virtual port of the standby server, the standby server can be automatically upgraded to the main server when detecting that the main server breaks down, storage service interaction is carried out with the client side based on the HBA virtual port of the standby server, and therefore dual-machine hot standby can be achieved through the storage server, and cost can be reduced.

One or more techniques and / or computing devices are provided for implementing synchronous replication. For example, a synchronous replication relationship may be established between a first storage controller hosting local storage and a second storage controller hosting remote storage (e.g., replication may be specified at a file, logical unit number (LUN), or any other level of granularity). Data operations and offloaded operations may be implemented in parallel upon the local storage and the remote storage. Error handling operations may be implemented upon the local storage and implement in parallel as a best effort on the remote storage, and a reconciliation may be performed to identify any data divergence from the best effort parallel implementation. Storage area network (SAN) operations may be implemented upon the local storage, and upon local completion may be remotely implemented upon the remote storage.

The invention discloses a file transmission processing method and device for a batch data bus, and the method comprises the steps: triggering the generation of a control file when a file stored in a storage area network is received, enabling the control file to be used for marking whether the file is processed or not, scanning all upstream original file directories, and if there is a file in all upstream original file directories, carrying out the scanning of all upstream original file directories; and selecting files conforming to a preset batch forwarding specification from all upstream original file directories, and when each forwarding task is obtained, sending the files conforming to the preset batch forwarding specification to a downstream system in batches through a preset batch forwarding rule and a batch data bus file transmission channel, and when all the files conforming to the preset batch forwarding specification are sent to the downstream system, marking the files forwarded to the downstream system in batches through the control file.

Data blocks that are being transmitted via a Storage Area Network are provided inflight security, in the form of cryptography that is dynamically generated and applied while the data is being transferred to the SAN. The complexity / type of cryptography that is generated and applied is based, at least, on the level of confidentiality / sensitivity of individual data elements in a data block. Gen AI models are implemented that have been trained to identify confidential data elements and, in response, categorize the confidential data elements into confidentiality sectors that are based on the level of transmission security required. Once the confidential data elements have been categorized / sectored, the Gen AI generates (i) cryptographic logic for each confidentiality sector, which is subsequently applied and (ii) a smart contract that includes the generated cryptographic logic and is exchanged between the source and destination, which is enabled through authenticity of user information embedded in the smart contract.

Computer-implemented methods for storing data with replicated metadata in a scale-out data storage system are provided. Aspects include receiving, by a first data storage node of the scale-out data storage system, a data item to be stored and storing, by the first data storage node, the data item on a storage area network in communication with the scale-out data storage system. Aspects also include generating, by the first data storage node, a metadata item corresponding to the data item and replicating the metadata item on a second data storage node of the scale-out data storage system.

The invention relates to a computing node working state detection method and device, computer equipment and a storage medium. The method comprises the following steps: in response to a received node connection mapping list sent by a storage system, controlling each node to establish connection with a logic storage unit of a storage area network in the corresponding storage system according to the node connection mapping list; in response to configuration operation on each node, generating configuration information of the node, and configuring the corresponding node according to the node configuration information; in response to the fact that the working mode of the management node is an input and output interface working mode, starting operation is conducted on all the nodes, all the computing nodes are controlled to update the corresponding logic storage units regularly, and the management node is controlled to read the current storage content of all the logic storage units; and judging the working state of the corresponding computing node according to the current storage content of each logic storage unit. By adopting the method, the misjudgment of the detection result caused by the network connection fault between the management node and the computing node can be avoided.