Storage Device Domain Access Control for SAN Login Load
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In information handling systems, the existing methods for managing storage area networks face challenges in efficiently managing access to storage devices, leading to a significant load on storage devices due to multiple host processing systems attempting to log in, and require manual configuration and reconfiguration, which is cumbersome and time-consuming.
Innovation Solution
The implementation of device domains managed by a storage management server, which limits access to specific subsets of storage devices through host bus adapters, reducing the number of log-in attempts and automating the configuration process by using Internet Storage Name Service (iSNS) to create and manage access relationships between host processing systems and storage devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual configuration and reconfiguration methods are used for storage device access management, then access control can be established, but the process becomes cumbersome and time-consuming
Solution Approach 1:
The storage device autonomously performs discovery of host processing systems and automatic establishment of access relationships through device domains, eliminating the need for manual configuration. The storage device independently manages its own access control by receiving discovery packets, identifying authorized hosts, and configuring device domain associations without external intervention.
2Adaptability or versatility
If multiple host processing systems attempt to log in to storage devices without access limitation, then comprehensive access coverage is achieved, but significant load is placed on storage devices
Solution Approach 1:
The system segments the storage device access into multiple device domains, where each domain is associated with specific host processing systems. This segmentation limits the number of hosts that can simultaneously access a given storage device, thereby reducing the login load on storage devices while maintaining comprehensive access coverage across the network through multiple organized domains.
Solution Approach 2:
Device domains act as intermediaries between host processing systems and storage devices. The domain association mechanism mediates access requests by pre-establishing relationships between hosts and storage devices, allowing the storage device to quickly identify authorized hosts without processing exhaustive login attempts from all networked systems.
3Reliability
If device domains are implemented to limit access to storage devices, then security is enhanced through logical isolation, but device complexity increases
Solution Approach 1:
The device domain mechanism serves multiple functions simultaneously: it provides security through logical isolation, reduces access management complexity by automating host discovery, and enables scalable access control. The same device domain structure that limits access also automatically manages the associations between hosts and storage devices, eliminating the need for separate manual configuration processes.
Data Source
AI summary
A storage device coupled to a fabric includes a memory and a processor operable to receive, default domain information for a storage area network (SAN) from a management server coupled to the fabric. The default domain information including a list of host systems and a list of initiators on the SAN. The processor also sends the default domain information to a management station to configure a discovery domain including a host system selected from the list of host systems and an initiator selected from the list of initiators, receives the discovery domain from the management station, directs the management server to add the first discovery domain to a list of device domains implemented by the management server on the SAN, and directs the management server to enable the first discovery domain.