Abstract: A system and method can support subnet manager (SM) level robust handling of an incoming unknown management key in an InfiniBand (IB) network. A local SM in a fabric is adaptive to receive an incoming subnet management packet (SMP) from a remote SM, wherein the SMP contains a first management key. Furthermore, the local SM operates to check whether the first management key is consistent with a configuration associated with the local SM, and can silently drop the incoming SMP if the first management key is not consistent with the local SM configuration.

Abstract: A system and method can use a secure subnet management agent (SMA) to perform fencing operations in an InfiniBand (IB) fabric. A host channel adapter (HCA) in the fabric can be associated with a plurality of ports, wherein the HCA operates to implement a SMA in its embedded firmware. Furthermore, the SMA operates to be used as a proxy, by a port on the HCA, for updating one or more states associated with another port on the HCA. The one or more states are associated with at least one of updating a management key and resetting a link at another port on the HCA.

Abstract: A system and method can support controlled re-routing in an InfiniBand (IB) fabric. The fabric is associated with a subnet manager that can detect a connectivity change in the fabric, and re-rout the fabric accordingly. The subnet manager can ensure that only accredited components and connectivity are utilized in the re-routing, and represent the connectivity that is not accredited within a local subnet or sub-subnet. The subnet manager can further maintain a node record or fabric configuration for evaluating the detected connectivity change in the fabric.

Abstract: A system and method can provide subnet manager (SM) restrictions in an InfiniBand (IB) network. A first SM in a subnet in the IB network operates to determine whether a second SM associated with a remote port is trustworthy. Furthermore, the first SM is allowed to send at least one of a request and a response that contains a management key to the second SM, if the first SM determines that the second SM is trustworthy. Additionally, the first SM is prevented from attempting to initiate communication with the second SM, if otherwise.

Abstract: A system and method can support a middleware machine environment that includes a set of subnet manager instances, which reside on one or more nodes in the middleware machine environment and cooperate to provide a highly available subnet manager service within a subnet, wherein each said subnet manager instance is associated with a different private secure key. The subnet manager instances can negotiate with each other and elect a master subnet manager responsible for configuring and managing the middleware machine environment using the private secure key associated with the master subnet manager. The subnet can be reconfigured to be associated with a different private secure key, when a new subnet manager instance is elected as the master subnet manager. An old master subnet manager can be automatically prevented from resuming normal operations as the master subnet manager, in order to avoid undesired consequence such as a “split brain” scenario.

Abstract: A system and method can support a middleware machine environment. The middleware machine environment can include a subnet manager and a plurality of fabric components, wherein each said fabric component is associated with a subnet management agent (SMA). The subnet manager maintains a topology graph that indicates how ports are connected in the subnet. The subnet manager operates to periodically reevaluate one or more states associated with each fabric component in the subnet by determining whether each SMA is responding correctly to a request.