Abstract: To address concerns with administration of zones in storage area network (SAN) environments, presented are embodiments of a “zone group,” including systems and methods for configuring, implementing, and managing such. While zone group embodiments may comprise one or more zones, unlike traditional zone sets, a zone group includes additional features. For example, a zone group includes an “Owner” and also allows for multiple zone groups to be active on a fabric at one time. By adding the concept of an owner to a zone group, changes made by a user or entity impact the zone group to which the owner has rights to access or modify. Also, by allowing multiple zone groups to be active at the same time, embodiments enable multiple administrators or entities to make unrelated modifications to connectivity and dramatically reduce the impact of unintentional changes. Additional features and benefits are described herein.

Abstract: Embodiments herein comprise a centralized NVMe-oF namespace masking and configuration repository, which may be referenced for convenience herein as a distributed configuration service (DCS). By centralizing the functionality, there is no longer a requirement that each host, network element, and subsystem have its own user interface (UI). DCS embodiments provide a single UI for a number of features, including but not limited to: (1) viewing the list of Host interfaces that are attached to the network and are registered; (2) viewing the list of Subsystem interfaces that are attached to the IP Network and are registered with the DCS; (3) viewing the storage capacity available behind each subsystem interface; and (4) allowing a user to define the Host to Subsystem interface relationships as well as define how much storage should be allocated to each Host.

Abstract: A current technique to enforce a Zoning configuration is referred to as “Hard Zoning”. Hard Zoning is a technique in which network switches in a fabric inspect packets to ascertain if a packet should be forwarded or discarded, according to the communication between nodes allowed by the Zoning configuration. For the network switches to be able to perform this packet-by-packet filtering, Zoning information needs to be supplied to the network switches. However, current approaches involve sending duplicate data to switches. These approaches are very inefficient and cumbersome. Accordingly, embodiments comprise a Centralized Discovery Controller (CDC) that collects network information, generates, for a switch, its appropriate zoning information, and sends the switch-specific zoning information to that switch.

Abstract: Systems and methods provide zero-configuration provisioning for modern storage networks such as those utilizing a non-volatile memory express over Fabric (NVMe-oF) system. In various embodiments, this is accomplished by leveraging discovery information, such as multicast Domain Name System (mDNS) information, to locate subsystems in a network and to explicitly and dynamically specify target destinations without a Centralized Discovery Controller (CDC) client having to modify its routing table.

Abstract: Systems and methods provide modern storage networks, such as those utilizing a non-volatile memory express over Fabric (NVMe-oF) system, with connectivity options that meet low-latency and high-throughput demands. In certain embodiments, this is accomplished by enabling network entities to acquire and utilize network information, including discovery information, to dynamically manage routing tables and build routes, e.g., to allow a host to send out frames through desired interfaces to reach target destinations. An automated IP routing update service allows for dynamically creating, reading, updating, and deleting functions of otherwise static IP routing table entries to streamline functions in the storage fabric.

Abstract: To address concerns with administration of zones in storage area network (SAN) environments, presented are embodiments of a “zone group,” including systems and methods for configuring, implementing, and managing such. While zone group embodiments may comprise one or more zones, unlike traditional zone sets, a zone group includes additional features. For example, a zone group includes an “Owner” and also allows for multiple zone groups to be active on a fabric at one time. By adding the concept of an owner to a zone group, changes made by a user or entity impact the zone group to which the owner has rights to access or modify. Also, by allowing multiple zone groups to be active at the same time, embodiments enable multiple administrators or entities to make unrelated modifications to connectivity and dramatically reduce the impact of unintentional changes. Additional features and benefits are described herein.

Abstract: An NVMe-oF authentication system includes an authentication verification entity coupled to an NVMe subsystem that is coupled to an NVMe host device. The NVMe subsystem transmits a first challenge to the NVMe host device and, in response, receives a first challenge reply from the NVME host device. The NVMe subsystem then generates a first authentication verification request communication that includes a first response that was provided in the first challenge reply by the NVMe host device using a first instance of a first secret that is stored in the NVMe host device, and transmits the first authentication verification request communication to the authentication verification entity.

Abstract: A method (900) includes delivering a first bias current (IGAIN) to an anode of a gain-section diode (590a) and delivering a second bias current (IPH) to an anode of a phase-section diode (590b). The method also includes receiving a burst mode signal (514) indicative of a burst-on state or a burst-on state, and sinking a first sink current (ISINK) away from the first bias current when the burst mode signal is indicative of the burst-off state. When the burst mode signal transitions to be indicative of the burst-on state from the burst-off state, the method also includes sinking a second sink current away from the second bias current at the anode of the phase-section diode and ceasing the sinking of the first sink current away from the first bias current at the anode of the gain section diode.

Abstract: A method (900) includes a gain current (IGAIN) to an anode of a gain-section diode (D0) disposed on a shared substrate of a tunable laser (310), delivering a modulation signal to an anode of an Electro-absorption section diode (D2) disposed on the shared substrate of the tunable laser, and receiving a burst mode signal (330) indicative of a burst-on state or a burst-off state. When the burst mode signal is indicative of the burst-off state, the method includes sinking a sink current (ISINK) away from the gain current at the anode of the gain-section diode. When the burst mode signal transitions to be indicative of the burst-on state from the burst-off state, the method includes ceasing the sinking of the sink current away from the gain current and delivering an overshoot current (IOVER) to the anode of the gain-section diode.

Abstract: A method (600) for tuning a tunable laser (310) includes delivering a bias current (IDBR) to an anode of a distributed Bragg reflector (DBR) section diode (D2) disposed on a shared substrate of the tunable laser and receiving a burst mode signal (440) indicative of a burst-on state or a burst-off state. When the burst mode signal is indicative of the burst-off state, the method includes offsetting the bias current at the anode of the DBR section diode by one of sourcing a push current with the bias current to the anode of the DBR section diode or sinking a pull current away from the bias current at the anode of the DBR section diode. When the burst mode signal is indicative of the burst-on state, the method also includes ceasing any offsetting of the bias current at the anode of the DBR section diode.

Abstract: A method (700) of biasing a tunable laser (310) during burst-on and burst-off states includes receiving a burst mode signal (514) indicative of the burst-on state or the burst-off state and when the burst mode signal is indicative of the burst-on state: delivering a first bias current (IGAIN) to an anode of a gain-section diode (590a) disposed on a shared substrate of the tunable laser; and delivering a second bias current (IPH) to an anode of phase-section diode (590b) disposed on the shared substrate. The second bias current is less than the first bias current. When the burst mode signal transitions to be indicative of the burst-off state, the method also includes delivering the first bias current to the anode of the gain-section diode; and delivering the second bias current to the anode of the phase-section diode wherein the first bias current is less than the second bias current.

Abstract: A method of combining optical signals from a plurality of optical fibers into a single optical signal includes receiving, at corresponding optical-signal receivers optically coupled to corresponding trunk fibers, respective optical signals. The method further includes determining, by the corresponding optical-signal receivers, when each respective optical signal is received. When the respective optical signal is received, the method includes performing the following steps: converting, by the corresponding optical-signal receiver, the respective optical signal to a corresponding electrical signal; transmitting, by the corresponding optical-signal receiver, the corresponding electrical signal to a corresponding input channel of an electrical-multiplexing device; and configuring the electrical-multiplexing device to select the corresponding input channel.

Abstract: A method of combining optical signals from a plurality of optical fibers into a single optical signal includes receiving, at corresponding optical-signal receivers optically coupled to corresponding trunk fibers, respective optical signals. The method further includes determining, by the corresponding optical-signal receivers, when each respective optical signal is received. When the respective optical signal is received, the method includes performing the following steps: converting, by the corresponding optical-signal receiver, the respective optical signal to a corresponding electrical signal; transmitting, by the corresponding optical-signal receiver, the corresponding electrical signal to a corresponding input channel of an electrical-multiplexing device; and configuring the electrical-multiplexing device to select the corresponding input channel.

Abstract: A Hypervisor hosted on a computer device includes a Fibre Channel (FC) port to communicate with an FC switch in an FC switched fabric. The FC port has a port identifier assigned by the switch device. The Hypervisor solicits from the switch FC priority values available to be allocated as respective local identifiers of virtual machines (VMs). The Hypervisor instantiates a VM with a global VM identifier, and allocates one of the solicited priority values to the instantiated VM such that the allocated priority value and the port identifier together represent a fabric VM identifier. After the allocating, the Hypervisor sends to the FC switch an update frame to indicate the instantiated VM, the global VM identifier, and the fabric VM identifier. During an FC session, the Hypervisor exchanges FC frames with an FC destination port connected to the switched fabric. Each session frame indicates the fabric VM identifier.

Abstract: Methods and apparatus are provided for improving both node-based and message-based security in a fiber channel network. Entity to entity authentication and key exchange services can be included in existing initialization messages used for introducing fiber channel network entities into a fiber channel fabric, or with specific messages exchanged over an already initialized communication channel. Both per-message authentication and encryption mechanisms can be activated using the authentication and key exchange services. Messages passed between fiber channel network entities can be encrypted and authenticated using information provided during the authentication sequence. Security services such as per-message authentication, confidentiality, integrity protection, and anti-replay protection can be implemented.

Abstract: A Hypervisor hosted on a computer device includes a Fibre Channel (FC) port to communicate with an FC switch in an FC switched fabric. The FC port has a port identifier assigned by the switch device. The Hypervisor solicits from the switch FC priority values available to be allocated as respective local identifiers of virtual machines (VMs). The Hypervisor instantiates a VM with a global VM identifier, and allocates one of the solicited priority values to the instantiated VM such that the allocated priority value and the port identifier together represent a fabric VM identifier. After the allocating, the Hypervisor sends to the FC switch an update frame to indicate the instantiated VM, the global VM identifier, and the fabric VM identifier. During an FC session, the Hypervisor exchanges FC frames with an FC destination port connected to the switched fabric. Each session frame indicates the fabric VM identifier.

Abstract: A Hypervisor hosted on a computer device includes a Fiber Channel (FC) port to communicate with an FC switch in an FC switched fabric. The FC port has a port identifier assigned by the switch device. The Hypervisor solicits from the switch FC priority values available to be allocated as respective local identifiers of virtual machines (VMs). The Hypervisor instantiates a VM with a global VM identifier, and allocates one of the solicited priority values to the instantiated VM such that the allocated priority value and the port identifier together represent a fabric VM identifier. After the allocating, the Hypervisor sends to the FC switch an update frame to indicate the instantiated VM, the global VM identifier, and the fabric VM identifier. During an FC session, the Hypervisor exchanges FC frames with an FC destination port connected to the switched fabric. Each session frame indicates the fabric VM identifier.

Abstract: Techniques are provided for the creation of a peer zone definition for use in a Fibre Channel (FC) Fabric. The peer zone definition defines a peer zone in which two or more initiator host devices are each permitted to communicate with a target device, but the two or more initiator host devices are prevented from communicating with each other. In accordance with one example, a target device and of two or more initiator host devices connected to the FC Fabric are received. A peer zone definition is created, and the peer zone definition is transmitted to the switches composing the FC Fabric for enforcement.

Abstract: In one embodiment, a method includes establishing at a Fiber Channel over Ethernet (FCoE) Data-Plane Forwarder (FDF), a connection with a controller in communication with a plurality of FDFs, processing at the FDF, control information received from the controller, and forwarding FCoE frames based on the control information. The FDF communicates with the other FDFs in an FCoE fabric and communicates with the controller through a control connection. An apparatus is also disclosed herein.

Abstract: Double-bypass virtualization techniques are provided to enable use of high performance computing (HPC) application in a virtualized environment. In one example, a HPC user space application running on a virtual machine obtains direct access to virtual network interface card (vNIC) on a host-computing device associated to that virtual machine. The HPC user space application is configured to transmit and/or receive one or more data frames via the vNIC while bypassing the operating system of the virtual machine and the virtual machine hypervisor of the host-computing device.