VSAN Cluster Authentication Using SPDM and I/O Blocking
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing Virtual Storage Area Network (VSAN) technologies lack mechanisms to ensure authentication and integrity across an entire cluster, allowing malicious devices to be introduced during maintenance tasks and enabling input/output operations to unauthenticated or insecure devices.
Innovation Solution
Implementing a Security Policy and Data Model (SPDM) architecture within the VSAN to monitor and manage the authentication state of all objects, creating authenticated inventory tables, and restricting I/O operations to unauthenticated devices, ensuring the overall authentication status of the VSAN cluster.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional VSAN technologies are used without authentication mechanisms, then device compatibility and ease of operation are maintained, but security and reliability are compromised allowing malicious devices to be introduced
Solution Approach 1:
The system performs preliminary authentication of devices before allowing them to join the VSAN cluster. The CMMDS maintains an authenticated device table that records authentication status of all devices, and the BMC SM checks this table before permitting I/O operations, preventing malicious devices from being introduced in the first place
Solution Approach 2:
The patent introduces intermediary components (CMMDS and BMC SM) that mediate between devices and the VSAN cluster. The CMMDS acts as a directory service that tracks authentication status, while the BMC SM acts as a security module that enforces authentication policies, creating a layered security architecture without requiring fundamental changes to existing VSAN protocols
2Reliability
If authentication monitoring is implemented across the entire VSAN cluster, then security is improved, but system complexity and processing overhead increase
Solution Approach 1:
The authentication monitoring function is segmented into two distinct components: the CMMDS (Cluster Membership, Monitoring, and Directory Service) that maintains authentication records in an authenticated device table, and the BMC SM (Baseboard Management Controller Service Module) that enforces authentication policies. This segmentation distributes the complexity across specialized components rather than requiring a monolithic authentication system
Solution Approach 2:
The system implements self-service authentication monitoring where the CMMDS automatically updates the authenticated device table when devices join or leave the cluster, and the BMC SM automatically checks this table before permitting I/O operations. This automated approach eliminates the need for manual authentication management and reduces operational complexity
3Reliability
If I/O operations are allowed to all devices without restriction, then system productivity is maintained, but security is compromised allowing operations on unauthenticated devices
Solution Approach 1:
The system implements feedback control where the BMC SM continuously monitors the authentication status of devices by querying the CMMDS's authenticated device table before permitting I/O operations. This feedback mechanism ensures that only authenticated devices can perform I/O operations, automatically preventing unauthorized access without requiring manual security checks that would reduce productivity
Solution Approach 2:
Authentication verification is performed as a preliminary action before I/O operations are initiated. The BMC SM checks the authenticated device table in advance to determine whether a device is authorized to perform I/O operations, ensuring security is established before productivity-critical operations begin
Data Source
AI summary
A node for a VSAN includes a BMC, a processor, and a plurality of VSAN objects. The processor instantiates a Cluster Membership, Monitoring, and Directory Service (CMMDS) and a BMC Service Module (SM). The CMMDS implements a Security Policy and Data Model (SPDM) architecture. The CMMDS determines an inventory list of the VSAN objects and a SPDM authentication state for each of the objects, and provides the inventory list and the SPDM authentication states to the BMC SM. The BMC SM provides the inventory list and the SPDM authentication state to the BMC. The BMC determines that a first VSAN object is not authenticated based upon the SPDM authentication state of the first VSAN object, and directs the CMMDS to halt input/output (I/O) operations on the VSAN to the first VSAN object.