VLAN-Aware File System Routing for Data Mover Consolidation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current Virtual Local Area Network (VLAN) solutions do not allow file system processing elements to be aware of VLAN addressing schemes, limiting their ability to route file system messages effectively across different application layers, and require separate data movers for each VLAN, leading to increased costs and administrative overhead.
Innovation Solution
A file system extension that encapsulates VLAN ID information from the physical layer through the data link, network, and transport layers to the application layer, enabling the file system to participate in VLAN routing and access requests based on VLAN identifiers, allowing a single data mover to service multiple VLAN groups.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If VLAN ID information is discarded after packet routing decisions at the physical or data link layer, then network security and traffic segmentation are maintained, but file system processing elements cannot route file system messages effectively across different application layers
Solution Approach 1:
The patent introduces a file system interface layer that acts as an intermediary between the network layer and application layer. This interface receives VLAN-tagged packets, extracts VLAN ID information, and uses it to route file system messages to the appropriate file system entities. The intermediary preserves VLAN segmentation benefits while enabling application-layer awareness of VLAN addressing schemes.
2Reliability
If separate data movers are deployed for each VLAN group, then secure and isolated file system access is achieved, but system cost and administrative overhead increase
Solution Approach 1:
The patent enables a single data mover to serve multiple VLAN groups by implementing VLAN awareness at the file system interface level. The same physical data mover can handle file system requests from different VLANs by routing requests to appropriate file system entities based on VLAN ID, eliminating the need for separate data movers for each VLAN while maintaining security isolation.
Solution Approach 2:
The patent merges the functionality of multiple VLAN-specific data movers into a single multi-functional data mover. By combining VLAN routing capabilities with file system processing in one system, the patent reduces hardware requirements while maintaining the security and isolation benefits of separate VLAN handling.
3Adaptability or versatility
If VLAN ID information is passed through all protocol layers to the application layer, then file system VLAN awareness is achieved, but protocol layer complexity increases
Solution Approach 1:
The patent extracts VLAN ID information from the network layer packets and passes it separately to the file system interface without requiring full VLAN protocol processing at the application layer. This extraction approach provides file system awareness of VLAN addressing while avoiding the complexity of implementing complete VLAN protocol stacks at higher layers.
Data Source
AI summary
A file system that utilizes Virtual Local Area Network (VLAN) addressing and routing schemes to permit implementing multiple networked file system applications in a single data processing system. In particular, a networked file server or data mover has associated with it a mass storage device such as one or more disk drives, as well as one or more Network Interface Cards (NICs). A network interface to the data mover is associated with VLAN identifiers (IDs) such that a VLAN ID can be assigned to each file system. At the physical layer of the data mover, VLAN information is encapsulated and passed up to various higher protocol layers, such as a network layer and/or a transport layer, eventually to a selected file system as dictated by the VLAN ID. The file system application in effect becomes an addressable element of the VLAN. A single data mover can thus be deployed to service multiple groups of end users, as long as the members of each group have different VLAN identifiers for the multiple file systems. The result provides security, access restrictions, and all the other benefits of VLAN protocols that would be obtained by deploying separate data movers for each VLAN, without incurring the acquisition expense and administrative overhead associated with having to purchase and maintain multiple data mover systems.