Abstract: Two main methods exist today to enforce access control in a network fabric: soft zoning and hard zoning. However, each of these approaches has some significant drawbacks. Accordingly, presented herein are new and improved systems and methods to perform access control enforcement, which is stronger than soft zoning, and does not need to interact with the fabric switches, as required by hard zoning. In one or more embodiments, an authentication verification entity (AVE) is provided with access control or authorization information. In one or more embodiments, the AVE uses this information to cause an authentication verification failure for connections between hosts and subsystems that are not allowed according to configurations (e.g., zoning configurations) of the fabric.

Abstract: Centralized quality-of-service (QoS) policies administration in a storage area network (SAN) is a problem without meaningful solutions. Current implementations require explicit administration of end points, which is error-prone and not scalable. Zoning for NVMe-oF is defined as a method to specify connectivity access control information on the Discovery Controller (DC) of an NVMe-oF fabric, not as a way to specify QoS policies. Embodiments comprise centrally specifying one or more QoS parameters as part of NVMe-oF zoning definitions maintained at an NVMe-oF DC to centrally controlled QoS parameters. Accordingly, embodiments provide mechanisms to specify QoS parameters in a centralized manner to eliminate requiring a system administrator having to perform per-connection QoS provisioning.

Abstract: A method (700) of biasing a tunable laser (310) during burst-on and burst-off states includes receiving a burst mode signal (514) indicative of the burst-on state or the burst-off state and when the burst mode signal is indicative of the burst-on state: delivering a first bias current (IGAIN) to an anode of a gain-section diode (590a) disposed on a shared substrate of the tunable laser; and delivering a second bias current (IPH) to an anode of phase-section diode (590b) disposed on the shared substrate. The second bias current is less than the first bias current. When the burst mode signal transitions to be indicative of the burst-off state, the method also includes delivering the first bias current to the anode of the gain-section diode; and delivering the second bias current to the anode of the phase-section diode wherein the first bias current is less than the second bias current.

Abstract: Embodiments presented herein enable non-volatile memory express (NVMe®) subsystem-driven command execution requests. By configuring subsystems as pull model devices, subsystems can request a centralized discovery controller to perform one or more operations. Embodiments may leverage a command execution request architecture to achieve the subsystem-driven pull model functionality.

Abstract: Embodiments presented herein enable non-volatile memory express (NVMe®) subsystem-driven commands. By configuring subsystems as pull model devices, subsystems can request a centralized discovery controller to perform Send Log Page commands, include Host Discovery. Embodiments may leverage a command execution request architecture to achieve the subsystem-driven Send Log Page commands.

Abstract: Embodiments presented herein enable non-volatile memory express (NVMe®) subsystem-driven zoning. By configuring subsystems as pull devices, subsystems can request a centralized discovery controller to perform fabric zoning operations. Embodiments may leverage a command execution request architecture to achieve the subsystem-driven pull registration functionality. In one or more embodiments, a zone group identifier is used to identify the specific zone group of interest, and a transaction identifier may be used for correlating various communications to the fabric zoning operation. In one or more embodiments, locking may be performed on zone groups to maintain control of changes to zone groups.

Abstract: A scalable EBOF storage system identifies its storage devices and external physical interfaces, and respective public IP addresses assigned to each external physical interface. The scalable EBOF storage system assigns a respective private IP address to each storage device, private port identifier(s) to the storage devices, and respective public port identifier(s) to each storage device.

Abstract: Systems and methods provide modern storage networks, such as those utilizing a non-volatile memory express over Fabric (NVMe-oF) system, with connectivity options that meet low-latency and high-throughput demands. In certain embodiments, this is accomplished by enabling network entities to acquire and utilize network information, including discovery information, to dynamically manage routing tables and build routes, e.g., to allow a host to send out frames through desired interfaces to reach target destinations. An automated IP routing update service allows for dynamically creating, reading, updating, and deleting functions of otherwise static IP routing table entries to streamline functions in the storage fabric.

Abstract: Systems and methods provide zero-configuration provisioning for modern storage networks such as those utilizing a non-volatile memory express over Fabric (NVMe-oF) system. In various embodiments, this is accomplished by leveraging discovery information, such as multicast Domain Name System (mDNS) information, to locate subsystems in a network and to explicitly and dynamically specify target destinations without a Centralized Discovery Controller (CDC) client having to modify its routing table.

Abstract: Currently, there is no scalable methodologies defined to locate a namespace on an NVMe-oF fabric. Therefore, it is necessary to configure a host with the NVMe™ Qualified Name (NQN) and transport information of the storage subsystem where the boot namespace is located or discover and enumerate all namespaces available to the host on an NVMe-oF fabric. With the current protocols, a host may need to perform many operations to locate the proper namespace and boot from the NVMe-oF fabric, making booting in a SAN environment an extremely slow operation and computationally expensive process. Embodiments herein support discovery, via a discovery controller, to provide a namespace resolution service able to facilitate a host to efficiently resolve a given namespace identifier to the corresponding subsystem port(s) through which that namespace is accessible.

Abstract: Centralized quality-of-service (QoS) policies administration in a storage area network (SAN) is a problem without meaningful solutions. Current implementations require explicit administration of end points, which is error-prone and not scalable. Zoning for NVMe-oF is defined as a method to specify connectivity access control information on the Discovery Controller (DC) of an NVMe-oF fabric, not as a way to specify QoS policies. Embodiments comprise centrally specifying one or more QoS parameters as part of NVMe-oF zoning definitions maintained at an NVMe-oF DC to centrally controlled QoS parameters property in an NVMe-oF Zone. Accordingly, embodiments provide mechanisms to specify QoS parameters in a centralized manner to eliminate requiring a system administrator having to perform per-connection QoS provisioning.

Abstract: Embodiments presented herein solve issues related to non-volatile memory express (NVMe®) protocol differences from other protocols, such as Fibre Channel Common Transport, which is the protocol used for Zoning management in Fibre Channel. Fibre Channel Common Transport supports bidirectional transfers of data. However, NVMe® commands support transfer of data either with the command (e.g., host-to-controller data transfer (e.g., a “write” operation)) or with the response (e.g., controller-to-host data transfer (e.g., a “read” operation)), but not both creates a problem related to zoning in NVMe® networks. Furthermore, data size limits for submission queue entries and completion queue entries for NVMe® commands add other obstacles. Embodiments herein address these limitations.

Abstract: A method (900) includes a gain current (IGAIN) to an anode of a gain-section diode (D0) disposed on a shared substrate of a tunable laser (310), delivering a modulation signal to an anode of an Electro-absorption section diode (D2) disposed on the shared substrate of the tunable laser, and receiving a burst mode signal (330) indicative of a burst-on state or a burst-off state. When the burst mode signal is indicative of the burst-off state, the method includes sinking a sink current (ISINK) away from the gain current at the anode of the gain-section diode. When the burst mode signal transitions to be indicative of the burst-on state from the burst-off state, the method includes ceasing the sinking of the sink current away from the gain current and delivering an overshoot current (IOVER) to the anode of the gain-section diode.

Abstract: A method (900) includes delivering a first bias current (IGAIN) to an anode of gain-section diode (590a) and delivering a second bias current (IPH) to an anode of a phase-section diode (590b). The method also includes receiving a burst mode signal (514) indicative of a burst-on state or a burst-on state, and sinking a first sink current (ISINK) away from the first bias current when the burst mode signal is indicative of the burst-off state. When the burst mode signal transitions to be indicative of the burst-on state from the burst-off state, the method also includes sinking a second sink current away from the second bias current at the anode of the phase-section diode and ceasing the sinking of the first sink current away from the first bias current at the anode of the gain section diode.

Abstract: A traditional storage platform performs many basic functions, such as storage partitions allocation (i.e., namespace masking) and many advanced functions, such as deduplication or dynamic storage allocation. These functions need to be managed and this results in a multiple management system paradigm, in which a fabric management application manages the fabric connectivity policies (i.e., Zoning), while a storage management application manages the storage namespace mappings and advanced functions. Embodiments herein provide for centralized management for both connectivity and storage namespace mapping, among other advanced features. Namespace zoning information may comprise Namespace ZoneGroups, Namespace Zones, Namespace Zone Members, Namespace ZoneAlias, and Namespace ZoneAlias Members, which expand the NVMe-oF zoning framework from just connectivity control to full Namespaces allocation.

Abstract: A Centralized Discovery Controller (CDC) uses built-in intelligence to determine or estimate whether a connection with a non-volatile memory express (NVMe) entity has been discontinued intentionally or whether a connection loss is rather transient, e.g., due to a temporary network issue. In the former case, the CDC sends out asynchronous event notifications (AENs) and communicates the absence of the NVMe entity in a get log page to indicate an administrative access control action, e.g., a user intervention due to a zoning change or the removal of an entity due to a hardware failure. In the latter case, the CDC creates an “unreachable” entry in the name server database that indicates a CDC connectivity failure but maintains the entity in the name server database despite the connection loss, refraining from sending out notifications to relevant (or impacted) entities to increase bandwidth, traffic stability, and network availability.

Abstract: Systems and methods extend Non-Volatile Memory express over Fabric (NVMe-oF) zoning to enable security policy administration and authentication of NVMe-oF entities in a centralized manner without requiring per-connection provisioning administered by a Centralized Discovery Controller (CDC). In various embodiments a zone configuration is defined that represents access control rules, which determine which entities can connect with each other, and that may be augmented by specifying in a zone attribute whether members of a zone should authenticate or authenticate and establish a secure channel between themselves. Each entity may be configured with a per-entity global security policy that comprises a security credential and that enables an authentication and/or a secure channel communication between entities.

Abstract: Embodiments herein comprise a centralized NVMe-oF namespace masking and configuration repository, which may be referenced for convenience herein as a distributed configuration service (DCS). By centralizing the functionality, there is no longer a requirement that each host, network element, and subsystem have its own user interface (UI). DCS embodiments provide a single UI for a number of features, including but not limited to: (1) viewing the list of Host interfaces that are attached to the network and are registered; (2) viewing the list of Subsystem interfaces that are attached to the IP Network and are registered with the DCS; (3) viewing the storage capacity available behind each subsystem interface; and (4) allowing a user to define the Host to Subsystem interface relationships as well as define how much storage should be allocated to each Host.

Abstract: An NVMe-oF authentication system includes an authentication verification entity coupled to an NVMe subsystem that is coupled to an NVMe host device. The NVMe subsystem transmits a first challenge to the NVMe host device and, in response, receives a first challenge reply from the NVME host device. The NVMe subsystem then generates a first authentication verification request communication that includes a first response that was provided in the first challenge reply by the NVMe host device using a first instance of a first secret that is stored in the NVMe host device, and transmits the first authentication verification request communication to the authentication verification entity.

Abstract: A current technique to enforce a Zoning configuration is referred to as “Hard Zoning”. Hard Zoning is a technique in which network switches in a fabric inspect packets to ascertain if a packet should be forwarded or discarded, according to the communication between nodes allowed by the Zoning configuration. For the network switches to be able to perform this packet-by-packet filtering, Zoning information needs to be supplied to the network switches. However, current approaches involve sending duplicate data to switches. These approaches are very inefficient and cumbersome. Accordingly, embodiments comprise a Centralized Discovery Controller (CDC) that collects network information, generates, for a switch, its appropriate zoning information, and sends the switch-specific zoning information to that switch.