Traffic Splitter for Isolating SAN and LAN Traffic
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In converged SAN networks, the unification of LAN and SAN traffic leads to undesirable effects such as traffic leakage and security concerns due to the inability to effectively segregate Local Area Network (LAN) and Storage Area Network (SAN) traffic, especially when using common physical media like Ethernet, which can result in malicious traffic and suboptimal network resource utilization.
Innovation Solution
A traffic splitter is implemented to segregate LAN and SAN traffic by using Ethernet switches and Fibre Channel over Ethernet (FCoE) technology, preventing SAN traffic from reaching the LAN and vice versa through the use of Access Control Lists (ACLs) and static MAC entries, allowing for the creation of redundant networks and restricting device visibility across segregated links.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of energy
If I/O consolidation is implemented to aggregate multiple types of network traffic on a single physical link, then lower power requirements and cost are achieved, but traffic leakage and security concerns occur due to inability to effectively segregate LAN and SAN traffic
Solution Approach 1:
The patent applies segmentation by dividing the network traffic into separate virtual channels (LAN traffic and SAN traffic) that share the same physical link. This is achieved through I/O consolidation technology that allows multiple types of traffic to be aggregated on a single physical link while maintaining logical separation, thus preventing traffic leakage and security issues while reducing power requirements and cost.
2Ease of operation
If I/O consolidation unifies LAN and SAN traffic on a single physical link, then easier management and simpler physical wiring are achieved, but network resource utilization becomes suboptimal due to traffic mixing
Solution Approach 1:
The patent implements segmentation by creating separate virtual channels for LAN and SAN traffic within the consolidated physical link. This allows simplified physical wiring and easier management while maintaining optimal network resource utilization through logical traffic separation. The system segments traffic at the protocol level, ensuring that each traffic type receives appropriate bandwidth and priority treatment.
Solution Approach 2:
The patent applies dynamics by implementing adaptive traffic management that dynamically allocates bandwidth and prioritizes traffic based on real-time network conditions. The I/O consolidation system dynamically adjusts resource allocation between LAN and SAN traffic, ensuring optimal network resource utilization while maintaining the simplicity of consolidated physical wiring and easier management.
3Loss of energy
If common physical media like Ethernet is used to transport both LAN and SAN traffic, then lower operating costs and power utilization are achieved, but malicious traffic and security risks increase
Solution Approach 1:
The patent introduces an intermediary mechanism in the form of I/O consolidation technology that mediates between LAN and SAN traffic on the common Ethernet physical media. This intermediary layer provides protocol conversion, traffic prioritization, and security policies that prevent malicious traffic while maintaining the cost and power benefits of using common physical media for both traffic types.
Data Source
AI summary
Methods and apparatus for segregating traffic are disclosed. In accordance with one embodiment, a traffic splitter identifies a set of links coupled to the traffic splitter, where the set of links includes two or more uplinks, wherein each of the two or more uplinks are implemented in a common physical media. The two or more uplinks include a LAN uplink coupled to a LAN and a SAN uplink coupled to a SAN. The traffic splitter prevents SAN traffic from reaching the LAN via the LAN uplink. In addition, the traffic splitter prevents LAN traffic from reaching the SAN via the SAN uplink.