NAT Auto-Discovery for Storage Processor Access

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional data storage systems, such as CLARiiON™ systems, require users to manually enter and manage Network Address Translation (NAT) IP addresses for connection, which is cumbersome and limits access to storage processors, especially when connecting in off-array mode.

Innovation Solution

A client device with NAT auto-discovery capabilities retrieves private IP addresses of storage processors and automatically detects NAT connections, allowing users to access storage processors directly through public IP addresses without needing to know the NAT configuration, using a graphical user interface for seamless access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If manual NAT address input is required for connection, then data security is maintained through NAT masking, but user operation complexity increases and access convenience deteriorates

Engineering Contradiction:
Improvedata securityVSAvoiduser operation complexity
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The client device automatically performs NAT address discovery by establishing a connection to the storage system, retrieving private IP addresses of storage processors, and comparing them with the target address. This self-service mechanism eliminates the need for manual NAT address input while maintaining the NAT security architecture, as the client device autonomously detects and adapts to the NAT configuration.

Inventive Principle:
Principle #25Self-service

2Reliability

If NAT addresses must be explicitly provided at startup, then connection security is ensured, but connection establishment time increases and user convenience decreases

Engineering Contradiction:
Improveconnection securityVSAvoidconnection establishment time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The NAT address discovery process is performed automatically during the connection establishment phase. The client device retrieves private IP addresses and performs comparison operations as preliminary steps before final connection is established. This preliminary automatic detection eliminates the time-consuming manual address entry process while maintaining security through the same NAT architecture.

Inventive Principle:
Principle #10Preliminary action

3Adaptability or versatility

If off-array mode is used for NAT connections, then storage processor access is enabled, but access flexibility is limited compared to on-array mode

Engineering Contradiction:
Improvestorage processor accessVSAvoidaccess flexibility
Core Design Contradiction:
Adaptability or versatilityVSEase of operation

Solution Approach 1:

The automatic NAT discovery mechanism acts as an intermediary that enables the client device to seamlessly access storage processors behind NAT. By automatically detecting private IP addresses and establishing appropriate connections, the system provides off-array mode access capability while maintaining user convenience similar to on-array mode, eliminating the need for users to manually configure NAT addresses.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS8326919B1Network address translation auto-discovery in data storage networks
Publication Date: 2012.12.04 EMC IP HLDG CO LLC
  • US8326919B1 patent drawing
  • US8326919B1 patent drawing
  • US8326919B1 patent drawing

AI summary

Embodiments of the invention relate to a method for discovering a network address translation (NAT) network connection with a data storage system. The method includes establishing, by a client device, a network connection with the data storage system via a target network address associated with the data storage system, retrieving over the network connection, by the client device, a set of private network addresses associated with a set of storage processors of the data storage system, comparing, by the client device, each private network address of the set of private network addresses associated with the set of storage processors with the target network address, and when the target network address is absent from the set of private network addresses associated with the set of storage processors as a result of the comparison, detecting, the network connection as being configured as a NAT mode network connection with the data storage system.