Abstract: Techniques and a network edge device are provided herein to extend local area networks (LANs) and storage area networks (SANs) beyond a data center while converging the associated local area network and storage area network host layers. A packet is received at a device in a network. It is determined if the packet is routed to a local or remote storage area network or local area network. In response to determining that the packet routed to a remote storage area network, storage area network extension services are performed with respect to the packet in order to extend the storage area network on behalf of a remote location. In response to determining that the packet is routed to a local local area network traffic, local area network extension services are performed with respect to the packet in order to extend the local area network on behalf of the remote location.

Abstract: Load balancing includes receiving, from a client, a connection request to establish a connection with a server; determining load balancing state information based at least in part on the connection request; synchronizing the determined load balancing state information across a plurality of service engines, including to invoke an atomic read-miss-create (RMC) function on a distributed data store service; and distributing the connection to a selected server among a plurality of servers according to a result of the RMC function.

Abstract: Providing a distributed network service includes: receiving network traffic at a first physical device; and executing a service engine to participate in the distributed network service. The distributed network service is provided to at least the first target application instance executing in a first VM on the first physical device, and a second target application instance executing in a second VM on a second physical device; and a shared state of the distributed network service is maintained with respect to the first physical device and the second physical device.

Abstract: A distributed network service platform comprises: a logical data plane configured to process packets that are received by a plurality of physical devices, transmitted by the plurality of physical devices, or both, the logical data plane being physically distributed on the plurality of physical devices; and a logical control plane configured to manage and control the logical data plane, the logical control plane comprising one or more physical control planes operating on one or more physical devices.

Abstract: In one embodiment, the processing by a packet switching device of a received network-to-link-layer address resolution request message (e.g., Address Resolution Protocol [ARP] Request message, Neighbor Discovery Protocol [NDP] Neighbor Solicitation message) is dependent upon whether or not its target IP address corresponds to a network gateway packet switching device. When the target IP address of a received ARP Request/NDP Neighbor Solicitation message corresponds to a network gateway, then the packet switching device responds effectively on behalf of the network gateway, rather than forwarding the message to the network gateway. When the target IP address of a received ARP Request/NDP Neighbor Solicitation message does not correspond to a network gateway and the Media Access Control (MAC) address corresponding to the target IP address is known, then the packet switching device transforms then sends the broadcast or multicast frame into a unicast frame.

Abstract: Techniques and a network edge device are provided herein to extend local area networks (LANs) and storage area networks (SANs) beyond a data center while converging the associated local area network and storage area network host layers. A packet is received at a device in a network. It is determined if the packet is routed to a local or remote storage area network or local area network. In response to determining that the packet routed to a remote storage area network, storage area network extension services are performed with respect to the packet in order to extend the storage area network on behalf of a remote location. In response to determining that the packet is routed to a local local area network traffic, local area network extension services are performed with respect to the packet in order to extend the local area network on behalf of the remote location.

Abstract: Systems and methods for providing service virtualization endpoint (SVE) redundancy in a two-node, active-standby form. An active-standby pair of SVEs register with a cloud-centric-network control point (CCN-CP) as a single service node (SN) using a virtual IP address for both a control-plane and a data-plane. At any given time, only the active SVE is a host for the control-plane and the data-plane. When a failover happens, the hosting operation is taken over by the standby SVE, therefore the failover will be transparent to CCN-CP and the SN.

Abstract: In one embodiment, a method comprises assigning, by a distributed gateway protocol circuit in a first network switching device, a shared Media Access Control (MAC) address to a shared Internet Protocol (IP) address, the shared MAC address and the shared IP address enabling connected network devices to reach a distributed IP gateway in a network; and sending, by a layer 2 forwarding circuit in the first network switching device, an instruction via a peer data link to a peer layer 2 forwarding circuit in a second network switching device in response to the distributed gateway protocol circuit claiming active control of the distributed IP gateway, the instruction enabling the second network switching device to operate as part of the distributed IP gateway based on concurrent use of the shared MAC address and the shared IP address by the first network switching device and the second network switching device.

Abstract: According to the present invention, methods and apparatus are provided improving reading of a remote tape device by a host through multiple fibre channel switches. A fibre channel switch preemptively sends read requests to a tape device before read requests are received from a host. Flow control, buffer management, and error handling mechanisms are implemented to allow accelerated tape back up restoration while working to prevent buffer overflow and underflow.

Abstract: Techniques are disclosed for abstracting write acceleration techniques and tape acceleration techniques away from transport providers (e.g., away from an FC or FCIP interlink between two storage area networks) and allowing acceleration to be provided as a service by nodes within the storage area network (SAN). Doing so allows the acceleration service to be provided anywhere in the SAN. Further, doing so allows users to scale the acceleration service as needed, without having to create awkward topologies of multiple VSANS. Further still, as the acceleration service is offered independently from the transport, compression, encryption, and other services may be offered as part of the transport between the FC/FCIP connection along with the acceleration service.

Abstract: An interface is operable to receive an element for deletion from a bloom filter. The bloom filter includes multiple hash functions and an array. A processor is operable to generate hash function output values for the element using the hash functions. The hash function output values correspond to indices identifying bits in the array. A memory is operable to maintain supplemental data structure entries. The supplemental data structure has entries associated with the indices. The processor is operable to modify the supplemental data structure entries to delete the element from the bloom filter.

Abstract: The present invention defines a new protocol for communicating with an offload engine that provides Transmission Control Protocol (“TCP”) termination over a Fibre Channel (“FC”) fabric. The offload engine terminates all protocols up to and including TCP and performs the processing associated with those layers. The offload protocol guarantees delivery and is encapsulated within FCP-formatted frames. Thus, the TCP streams are reliably passed to the host. Additionally, using this scheme, the offload engine can provide parsing of the TCP stream to further assist the host. The present invention also provides network devices (and components thereof) that are configured to perform the foregoing methods. The invention further defines how network attached storage (“NAS”) protocol data units (“PDUs”) are parsed and delivered.

Abstract: A method and apparatus to improve the performance of a SCSI write over a high latency network. The apparatus includes a first Switch close to the initiator in a first SAN and a second Switch close to the target in a second SAN. In various embodiments, the two Switches are border switches connecting their respective SANs to a relatively high latency network between the two SANs. In addition, the initiator can be either directly connected or indirectly connected to the first Switch in the first SAN. The target can also be either directly or indirectly connected to the second Switch in the second SAN. During operation, the method includes the first Switch sending Transfer Ready (Xfr_rdy) frame(s) based on buffer availability to the initiating Host in response to a SCSI Write command from the Host directed to the target. The first and second Switches then coordinate with one another by sending Transfer Ready commands to each other independent of the target's knowledge.

Abstract: Techniques are disclosed for abstracting write acceleration techniques and tape acceleration techniques away from transport providers (e.g., away from an FC or FCIP interlink between two storage area networks) and allowing acceleration to be provided as a service by nodes within the storage area network (SAN). Doing so allows the acceleration service to be provided anywhere in the SAN. Further, doing so allows users to scale the acceleration service as needed, without having to create awkward topologies of multiple VSANS. Further still, as the acceleration service is offered independently from the transport, compression, encryption, and other services may be offered as part of the transport between the FC/FCIP connection along with the acceleration service.

Abstract: Disclosed are apparatus and methods for facilitating caching in a storage area network (SAN). In general, data transfer traffic between one or more hosts and one or more memory portions in one or more storage device(s) is redirected to one or more cache modules. One or more network devices (e.g., switches) of the SAN can be configured to redirect data transfer for a particular memory portion of one or more storage device(s) to a particular cache module. As needed, data transfer traffic for any number of memory portions and storage devices can be identified for or removed from being redirected to a particular cache module. Also, any number of cache modules can be utilized for receiving redirected traffic so that such redirected traffic is divided among such cache modules in any suitable proportion for enhanced flexibility.

Abstract: Disclosed are methods and apparatus for redirecting fiber channel data that is transmitted between a first and a second node, such as a host and target, in a storage area network (SAN) to an intelligent node that facilitates implementation of a service on such redirected data. Such redirection is provided transparently with respect to the first and second nodes without significantly reconfiguring the existing infrastructure of the first and second nodes. In a specific Fiber Channel implementation, the redirection is accomplished without rewiring any of the nodes in the network fabric or reconfiguring zones or virtual storage area networks (VSANs). In general, such redirection is accomplished by rewriting the data as it traverses on a path between the first and second node towards an original destination (e.g., the first or second node) so that the data is redirected to an intelligent node.

Abstract: In one embodiment, a method comprises assigning, by a distributed gateway protocol circuit in a first network switching device, a shared Media Access Control (MAC) address to a shared Internet Protocol (IP) address, the shared MAC address and the shared IP address enabling connected network devices to reach a distributed IP gateway in a network; and sending, by a layer 2 forwarding circuit in the first network switching device, an instruction via a peer data link to a peer layer 2 forwarding circuit in a second network switching device in response to the distributed gateway protocol circuit claiming active control of the distributed IP gateway, the instruction enabling the second network switching device to operate as part of the distributed IP gateway based on concurrent use of the shared MAC address and the shared IP address by the first network switching device and the second network switching device.

Abstract: Disclosed are methods and apparatus for network wide discovery of service ports of a gateway device in a storage area network (SAN) that are available for use by hosts on a first particular network segment, for example, for accessing storage devices in the SAN. The hosts of the first Internet Protocol (IP) network segment implement an IP and not a fiber channel protocol, while devices in the SAN (and possibly other hosts on other network segments) implement a fiber channel protocol. The particular network segment may also be isolated from other network segments that are each in communication with a different gateway device or set of service ports than the first network segment. In general, available ports are discovered with respect to a particular network segment, such as the first network segment. That is, only the service ports that are capable of communication with the first network segment are discovered to be available for the hosts of such first network segment.

Abstract: Disclosed are apparatus and methods for facilitating caching in a storage area network (SAN). In general, data transfer traffic between one or more hosts and one or more memory portions in one or more storage device(s) is redirected to one or more cache modules. One or more network devices (e.g., switches) of the SAN can be configured to redirect data transfer for a particular memory portion of one or more storage device(s) to a particular cache module. As needed, data transfer traffic for any number of memory portions and storage devices can be identified for or removed from being redirected to a particular cache module. Also, any number of cache modules can be utilized for receiving redirected traffic so that such redirected traffic is divided among such cache modules in any suitable proportion for enhanced flexibility.

Abstract: An interface is operable to receive an element for deletion from a bloom filter. The bloom filter includes multiple hash functions and an array. A processor is operable to generate hash function output values for the element using the hash functions. The hash function output values correspond to indices identifying bits in the array. A memory is operable to maintain supplemental data structure entries. The supplemental data structure has entries associated with the indices. The processor is operable to modify the supplemental data structure entries to delete the element from the bloom filter.