Abstract: Techniques are provided herein for a device in a network to receive information configured to indicate a control plane traffic load level for one or more server devices that are configured to manage traffic for messaging and presence clients communicating via a messaging and presence protocol. The control plane traffic is associated with the messaging and presence protocol. A determination is made as to when the control plane traffic load level has become unbalanced among the two or more server devices and in response to determining that the control plane traffic load level has become unbalanced, sending a transfer message to one or more clients comprising information configured to initiate migration of one or more clients from a server device that is relatively overloaded to a server device that is relatively underloaded in order to balance the control plane traffic load level among the two or more server devices.

Abstract: A cloud computing system is provided comprising a plurality of data centers, each data center comprising a plurality of pods each of which comprises network, compute, storage and service node devices. At a designated device of a data center, data center level capabilities summary data is generated that summarizes the capabilities of the data center. Messages advertising the data center level capabilities summary data is sent from a designated device of each data center to a designated device at a provider edge network level of the computing system. At the designated device at the provider edge network level, provider edge network level capabilities summary data is generated that summarizes capabilities of compute, storage and network devices for each data center as a whole and without exposing individual compute, storage and service node devices in each data center.

Abstract: In one embodiment a method includes at first a network device, identifying an attribute of the first network device, selecting a function that defines how the attribute is to be summarized together with a same attribute of a second network device, generating a message that comprises a set of information comprising an identification of the attribute and the function, and sending the message to, e.g., a next higher node in a network hierarchy of which the network device is a part. Multiple such messages may be received at an aggregation node that then summarizes the attributes according to respective functions, and sends or publishes a summarized version of the attributes to a still next higher node in the network hierarchy.

Abstract: Techniques are provided for a switch to assign proxy FCIDs to endpoint device so that the endpoint devices may achieve FCID mobility by retaining their originally assigned FCIDs. At a switch in a network, e.g., a Virtual Storage Area Network (VSAN), a fabric login request is received from a first endpoint device that is associated with a first FC identifier (FCID) that was previously assigned to the first endpoint device by another switch in the VSAN. The fabric login request is responded to with the first FCID. The first endpoint device is assigned a second FCID associated with a domain of the switch where the endpoint device is directly attached to, and the second FCID is used as a proxy FCID within the VSAN for the first endpoint device. A frame is received from the first endpoint device with a source FCID comprising the first FCID and a destination FCID comprising an FCID for a second endpoint device. The source FCID in the frame is overwritten with the second FCID.

Abstract: Techniques are provided to move the services performed on one device to another device in a cloud computing system for a variety of reasons including failure, maintenance or upgrade of the device. A notification is received that services performed by an impacted device in a domain of a plurality of hierarchical domains need to be moved. A determination is made as to whether there are replacement resources available in the domain to perform the services, and if so, the replacement resources are automatically rendered to perform the services. The process continues to higher level domains that have a view into the capabilities of subordinate domains in order to determine where to move the services within the cloud computing system.

Abstract: Techniques are provided herein for distributed and hierarchical rendering and provisioning of cloud services. At a device in a cloud computing system comprising a plurality of hierarchical levels, a cloud service request is received for rendering and provisioning of a virtual data center. A determination is made as to which aspects of the cloud service request are to be satisfied by devices in a first hierarchical level and which aspects of the cloud service request are to be satisfied by devices in a second hierarchical level and in subsequent hierarchical levels. Rendering and provisioning commands are provided to one or more devices in the first hierarchical level that are selected to satisfy aspects of the cloud service request in the first hierarchical level. A subset cloud service request for aspects of the cloud service request that are to be satisfied by devices in the second hierarchical level is sent to a device in the second hierarchical level.

Abstract: Methods and apparatus are provided for improving the configuration, management, and distribution of quality of service information in a fibre channel fabric using zoning mechanisms. Configuration of Quality of Service (QoS) information is made easy by using zones as a classifier for flows. QoS information is included in zone objects, thereby using the existing zone distribution mechanism to distribute QoS information. Devices not part of any zones are placed automatically in the default zone with a default QoS priority level. QoS information for a particular packet is available as soon as the zoning information is obtained.

Abstract: Techniques are provided for receiving at a proxy device in a network, a login request from a source device, e.g., a Fiber Channel server in a server virtualization cluster, to access a destination device, a Fiber Channel storage array. The source device does not or need not have direct access to the destination device. A response to the login request is sent that is configured to appear to the source device that the response is from the destination device. The proxy device logs into the destination device on behalf of the source device to obtain access to the destination device. The proxy device receives first network traffic frames associated with a service flow between the source device and the destination device from the source device that are destined for the destination device. Information is overwritten within the first network traffic frames such that the first network traffic frames appear to originate from the proxy device when transmitted to the destination device.

Abstract: Techniques are provided for mitigating the effects of slow or no drain devices on a fabric. One or more of the described embodiments can be used alone or in combination to address problems associated with inter-switch link blocking and to address the situation where flows which are not associated with slow/no drain devices suffer the negative impacts of slow or no drain devices on a fabric.

Abstract: A switch includes a processor, an ingress port having ingress port logic, and an egress port. It may also include a virtual network identifier rewrite component for rewriting a virtual network identifier in a data frame received the ingress port with a new virtual network identifier. Also included is a virtual network identifier rewrite rule set, where a rule may have one or more of the following: a received virtual network identifier, a source Fibre Channel identifier (FCID) address, an ingress port identifier, and a new virtual network identifier. The ingress port logic may insert a received virtual network identifier into the data frame received at the ingress port, where the virtual network identifier may correspond to the ingress port. The virtual network identifier rewrite component may assign the new virtual network identifier to the data frame according to a specific virtual network identifier rewrite rule.

Abstract: A switch includes a processor, an ingress port having ingress port logic, and an egress port. It may also include a virtual network identifier rewrite component for rewriting a virtual network identifier in a data frame received the ingress port with a new virtual network identifier. Also included is a virtual network identifier rewrite rule set, where a rule may have one or more of the following: a received virtual network identifier, a source Fibre Channel identifier (FCID) address, an ingress port identifier, and a new virtual network identifier. The ingress port logic may insert a received virtual network identifier into the data frame received at the ingress port, where the virtual network identifier may correspond to the ingress port. The virtual network identifier rewrite component may assign the new virtual network identifier to the data frame according to a specific virtual network identifier rewrite rule.

Abstract: A Fibre Channel Switch which enables end devices in different Fabrics to communicate with one another while retaining their unique Fibre Channel Domain_IDs. The Switch is coupled to a first fabric having a first set of end devices and a second fabric having a second set of end devices. The Switch is configured to enable communication by the first set of end devices associated with the first fabric with the second set of end devices associated with the second set of end devices using the unique Domain_IDs of each of the first set and the second set of end devices. In one embodiment of the invention, the first and second fabrics are first and second Virtual Storage Array Networks (VSANs) respectively. In an alternative embodiment, the first fabric and the second fabric are separate physical fabrics.

Abstract: Disclosed are apparatus and methods for discovering topology in a storage area network having a plurality of VSANs in a network fabric is disclosed. The VSANs include a first VSAN having a plurality of network devices. The method includes the following operations: (a) defining a first one of the network devices of the first VSAN as a Topology Update (TU) Owner, wherein the other network devices of the first VSAN are not defined as TU Owners, (b) at the first network device, receiving data that indicates a topology change in the first VSAN, (c) at the first network device, generating or updating one or more TU database(s) for the plurality of VSANs of the network fabric based on the received topology change, and (d) the first network device causing the topology change to be propagated in the form of a Topology Update across the network fabric to network devices in the plurality of VSANs of such network fabric.

Abstract: Techniques are disclosed for zoning information to be shared with an NPIV proxy device or an NPV device such as a blade switch in a blade chassis. Doing so allows the NPV device to enforce zoning locally for the attached server blades and virtualized systems. The NPV device may learn zoning rules using Fibre Channel name server queries and registered state change notifications. Additionally, the NPV device may snoop name server queries to retrieve zoning information (or state change messages) without using the zoning change protocols and without consuming a Fibre Channel domain from the Fibre Channel fabric.

Abstract: In an example embodiment, a new qualifier is added to members in a Fibre Channel zone to specify whether each member is a target or initiator and in another embodiment a time-range attribute is added to a zone in the zoneset. When the zoneset is applied the number of ACL entries that must be programmed is reduced from k×(k?1) entries to 2(k?1) entries for a zone with k members where k?1 members are of one type (e.g. initiators) and one of the members is of a different type (e.g., a tape device). The time-range attribute is enforced by zone server software and enhances security by, for example, limiting access to sensitive data to specified times. In another embodiment, an incremental zoneset activation protocol is implemented where a hash of a zoneset is created by a switch updating the zoneset and the hash and ID of the switch updating the zoneset are sent to all other switches in the fabric when the zoneset is propagated. The hash and switch ID are stored in persistent storage at all switches in the fabric.

Abstract: A Fibre Channel Switch which enables end devices in different Fabrics to communicate with one another while retaining their unique Fibre Channel Domain_IDs. The Switch is coupled to a first fabric having a first set of end devices and a second fabric having a second set of end devices. The Switch is configured to enable communication by the first set of end devices associated with the first fabric with the second set of end devices associated with the second set of end devices using the unique Domain_IDs of each of the first set and the second set of end devices. In one embodiment of the invention, the first and second fabrics are first and second Virtual Storage Array Networks (VSANs) respectively. In an alternative embodiment, the first fabric and the second fabric are separate physical fabrics.

Abstract: The Switch includes a port configured to receive a command frame when installed in a switching Fabric. The frame identifies a source device and a destination device in the Switching Fabric, a command, and a read/write flag which indicates if the identified source intends to exercise read-only or write access to the destination device. The Switch also includes a processor coupled to the port. The processor is configured to trap the frame and prevent it from reaching the defined destination device in the switching Fabric if both the source and destination devices are in a read-only zone and the flag indicates that the source intends to write to the destination device. In this manner, read-only zones can be implemented in the Switching Fabric.

Abstract: Disclosed are methods and apparatus for redirecting fiber channel data that is transmitted between a first and a second node, such as a host and target, in a storage area network (SAN) to an intelligent node that facilitates implementation of a service on such redirected data. Such redirection is provided transparently with respect to the first and second nodes without significantly reconfiguring the existing infrastructure of the first and second nodes. In a specific Fiber Channel implementation, the redirection is accomplished without rewiring any of the nodes in the network fabric or reconfiguring zones or virtual storage area networks (VSANs). In general, such redirection is accomplished by rewriting the data as it traverses on a path between the first and second node towards an original destination (e.g., the first or second node) so that the data is redirected to an intelligent node.

Abstract: According to the present invention, methods and apparatus are provided to allow for distribution of fiber channel messages. Messages associated with a variety of applications can be distributed within a single logical fabric to physical connected but logically disconnected fabrics. Interconnecting switches forward messages to neighboring fabrics and aggregate responses before replying to a first fabric.

Abstract: Methods and apparatus are provided for improving the configuration, management, and distribution of quality of service information in a fibre channel fabric using zoning mechanisms. Configuration of Quality of Service (QoS) information is made easy by using zones as a classifier for flows. QoS information is included in zone objects, thereby using the existing zone distribution mechanism to distribute QoS information. Devices not part of any zones are placed automatically in the default zone with a default QoS priority level. QoS information for a particular packet is available as soon as the zoning information is obtained.