Abstract: Currently, there is no scalable methodologies defined to locate a namespace on an NVMe-oF fabric. Therefore, it is necessary to configure a host with the NVMe™ Qualified Name (NQN) and transport information of the storage subsystem where the boot namespace is located or discover and enumerate all namespaces available to the host on an NVMe-oF fabric. With the current protocols, a host may need to perform many operations to locate the proper namespace and boot from the NVMe-oF fabric, making booting in a SAN environment an extremely slow operation and computationally expensive process. Embodiments herein support discovery, via a discovery controller, to provide a namespace resolution service able to facilitate a host to efficiently resolve a given namespace identifier to the corresponding subsystem port(s) through which that namespace is accessible.

Abstract: Centralized quality-of-service (QoS) policies administration in a storage area network (SAN) is a problem without meaningful solutions. Current implementations require explicit administration of end points, which is error-prone and not scalable. Zoning for NVMe-oF is defined as a method to specify connectivity access control information on the Discovery Controller (DC) of an NVMe-oF fabric, not as a way to specify QoS policies. Embodiments comprise centrally specifying one or more QoS parameters as part of NVMe-oF zoning definitions maintained at an NVMe-oF DC to centrally controlled QoS parameters property in an NVMe-oF Zone. Accordingly, embodiments provide mechanisms to specify QoS parameters in a centralized manner to eliminate requiring a system administrator having to perform per-connection QoS provisioning.

Abstract: Embodiments presented herein solve issues related to non-volatile memory express (NVMe®) protocol differences from other protocols, such as Fibre Channel Common Transport, which is the protocol used for Zoning management in Fibre Channel. Fibre Channel Common Transport supports bidirectional transfers of data. However, NVMe® commands support transfer of data either with the command (e.g., host-to-controller data transfer (e.g., a “write” operation)) or with the response (e.g., controller-to-host data transfer (e.g., a “read” operation)), but not both creates a problem related to zoning in NVMe® networks. Furthermore, data size limits for submission queue entries and completion queue entries for NVMe® commands add other obstacles. Embodiments herein address these limitations.

Abstract: A method (900) includes a gain current (IGAIN) to an anode of a gain-section diode (D0) disposed on a shared substrate of a tunable laser (310), delivering a modulation signal to an anode of an Electro-absorption section diode (D2) disposed on the shared substrate of the tunable laser, and receiving a burst mode signal (330) indicative of a burst-on state or a burst-off state. When the burst mode signal is indicative of the burst-off state, the method includes sinking a sink current (ISINK) away from the gain current at the anode of the gain-section diode. When the burst mode signal transitions to be indicative of the burst-on state from the burst-off state, the method includes ceasing the sinking of the sink current away from the gain current and delivering an overshoot current (IOVER) to the anode of the gain-section diode.

Abstract: A method (900) includes delivering a first bias current (IGAIN) to an anode of gain-section diode (590a) and delivering a second bias current (IPH) to an anode of a phase-section diode (590b). The method also includes receiving a burst mode signal (514) indicative of a burst-on state or a burst-on state, and sinking a first sink current (ISINK) away from the first bias current when the burst mode signal is indicative of the burst-off state. When the burst mode signal transitions to be indicative of the burst-on state from the burst-off state, the method also includes sinking a second sink current away from the second bias current at the anode of the phase-section diode and ceasing the sinking of the first sink current away from the first bias current at the anode of the gain section diode.

Abstract: A traditional storage platform performs many basic functions, such as storage partitions allocation (i.e., namespace masking) and many advanced functions, such as deduplication or dynamic storage allocation. These functions need to be managed and this results in a multiple management system paradigm, in which a fabric management application manages the fabric connectivity policies (i.e., Zoning), while a storage management application manages the storage namespace mappings and advanced functions. Embodiments herein provide for centralized management for both connectivity and storage namespace mapping, among other advanced features. Namespace zoning information may comprise Namespace ZoneGroups, Namespace Zones, Namespace Zone Members, Namespace ZoneAlias, and Namespace ZoneAlias Members, which expand the NVMe-oF zoning framework from just connectivity control to full Namespaces allocation.

Abstract: A Centralized Discovery Controller (CDC) uses built-in intelligence to determine or estimate whether a connection with a non-volatile memory express (NVMe) entity has been discontinued intentionally or whether a connection loss is rather transient, e.g., due to a temporary network issue. In the former case, the CDC sends out asynchronous event notifications (AENs) and communicates the absence of the NVMe entity in a get log page to indicate an administrative access control action, e.g., a user intervention due to a zoning change or the removal of an entity due to a hardware failure. In the latter case, the CDC creates an “unreachable” entry in the name server database that indicates a CDC connectivity failure but maintains the entity in the name server database despite the connection loss, refraining from sending out notifications to relevant (or impacted) entities to increase bandwidth, traffic stability, and network availability.

Abstract: Systems and methods extend Non-Volatile Memory express over Fabric (NVMe-oF) zoning to enable security policy administration and authentication of NVMe-oF entities in a centralized manner without requiring per-connection provisioning administered by a Centralized Discovery Controller (CDC). In various embodiments a zone configuration is defined that represents access control rules, which determine which entities can connect with each other, and that may be augmented by specifying in a zone attribute whether members of a zone should authenticate or authenticate and establish a secure channel between themselves. Each entity may be configured with a per-entity global security policy that comprises a security credential and that enables an authentication and/or a secure channel communication between entities.

Abstract: Embodiments herein comprise a centralized NVMe-oF namespace masking and configuration repository, which may be referenced for convenience herein as a distributed configuration service (DCS). By centralizing the functionality, there is no longer a requirement that each host, network element, and subsystem have its own user interface (UI). DCS embodiments provide a single UI for a number of features, including but not limited to: (1) viewing the list of Host interfaces that are attached to the network and are registered; (2) viewing the list of Subsystem interfaces that are attached to the IP Network and are registered with the DCS; (3) viewing the storage capacity available behind each subsystem interface; and (4) allowing a user to define the Host to Subsystem interface relationships as well as define how much storage should be allocated to each Host.

Abstract: A current technique to enforce a Zoning configuration is referred to as “Hard Zoning”. Hard Zoning is a technique in which network switches in a fabric inspect packets to ascertain if a packet should be forwarded or discarded, according to the communication between nodes allowed by the Zoning configuration. For the network switches to be able to perform this packet-by-packet filtering, Zoning information needs to be supplied to the network switches. However, current approaches involve sending duplicate data to switches. These approaches are very inefficient and cumbersome. Accordingly, embodiments comprise a Centralized Discovery Controller (CDC) that collects network information, generates, for a switch, its appropriate zoning information, and sends the switch-specific zoning information to that switch.

Abstract: An NVMe-oF authentication system includes an authentication verification entity coupled to an NVMe subsystem that is coupled to an NVMe host device. The NVMe subsystem transmits a first challenge to the NVMe host device and, in response, receives a first challenge reply from the NVME host device. The NVMe subsystem then generates a first authentication verification request communication that includes a first response that was provided in the first challenge reply by the NVMe host device using a first instance of a first secret that is stored in the NVMe host device, and transmits the first authentication verification request communication to the authentication verification entity.

Abstract: To address concerns with administration of zones in storage area network (SAN) environments, presented are embodiments of a “zone group,” including systems and methods for configuring, implementing, and managing such. While zone group embodiments may comprise one or more zones, unlike traditional zone sets, a zone group includes additional features. For example, a zone group includes an “Owner” and also allows for multiple zone groups to be active on a fabric at one time. By adding the concept of an owner to a zone group, changes made by a user or entity impact the zone group to which the owner has rights to access or modify. Also, by allowing multiple zone groups to be active at the same time, embodiments enable multiple administrators or entities to make unrelated modifications to connectivity and dramatically reduce the impact of unintentional changes. Additional features and benefits are described herein.

Abstract: Embodiments herein comprise a centralized NVMe-oF namespace masking and configuration repository, which may be referenced for convenience herein as a distributed configuration service (DCS). By centralizing the functionality, there is no longer a requirement that each host, network element, and subsystem have its own user interface (UI). DCS embodiments provide a single UI for a number of features, including but not limited to: (1) viewing the list of Host interfaces that are attached to the network and are registered; (2) viewing the list of Subsystem interfaces that are attached to the IP Network and are registered with the DCS; (3) viewing the storage capacity available behind each subsystem interface; and (4) allowing a user to define the Host to Subsystem interface relationships as well as define how much storage should be allocated to each Host.

Abstract: A current technique to enforce a Zoning configuration is referred to as “Hard Zoning”. Hard Zoning is a technique in which network switches in a fabric inspect packets to ascertain if a packet should be forwarded or discarded, according to the communication between nodes allowed by the Zoning configuration. For the network switches to be able to perform this packet-by-packet filtering, Zoning information needs to be supplied to the network switches. However, current approaches involve sending duplicate data to switches. These approaches are very inefficient and cumbersome. Accordingly, embodiments comprise a Centralized Discovery Controller (CDC) that collects network information, generates, for a switch, its appropriate zoning information, and sends the switch-specific zoning information to that switch.

Abstract: To address concerns with administration of zones in storage area network (SAN) environments, presented are embodiments of a “zone group,” including systems and methods for configuring, implementing, and managing such. While zone group embodiments may comprise one or more zones, unlike traditional zone sets, a zone group includes additional features. For example, a zone group includes an “Owner” and also allows for multiple zone groups to be active on a fabric at one time. By adding the concept of an owner to a zone group, changes made by a user or entity impact the zone group to which the owner has rights to access or modify. Also, by allowing multiple zone groups to be active at the same time, embodiments enable multiple administrators or entities to make unrelated modifications to connectivity and dramatically reduce the impact of unintentional changes. Additional features and benefits are described herein.

Abstract: Systems and methods provide zero-configuration provisioning for modern storage networks such as those utilizing a non-volatile memory express over Fabric (NVMe-oF) system. In various embodiments, this is accomplished by leveraging discovery information, such as multicast Domain Name System (mDNS) information, to locate subsystems in a network and to explicitly and dynamically specify target destinations without a Centralized Discovery Controller (CDC) client having to modify its routing table.

Abstract: Systems and methods provide modern storage networks, such as those utilizing a non-volatile memory express over Fabric (NVMe-oF) system, with connectivity options that meet low-latency and high-throughput demands. In certain embodiments, this is accomplished by enabling network entities to acquire and utilize network information, including discovery information, to dynamically manage routing tables and build routes, e.g., to allow a host to send out frames through desired interfaces to reach target destinations. An automated IP routing update service allows for dynamically creating, reading, updating, and deleting functions of otherwise static IP routing table entries to streamline functions in the storage fabric.

Abstract: An NVMe-oF authentication system includes an authentication verification entity coupled to an NVMe subsystem that is coupled to an NVMe host device. The NVMe subsystem transmits a first challenge to the NVMe host device and, in response, receives a first challenge reply from the NVME host device. The NVMe subsystem then generates a first authentication verification request communication that includes a first response that was provided in the first challenge reply by the NVMe host device using a first instance of a first secret that is stored in the NVMe host device, and transmits the first authentication verification request communication to the authentication verification entity.

Abstract: A method (900) includes delivering a first bias current (IGAIN) to an anode of a gain-section diode (590a) and delivering a second bias current (IPH) to an anode of a phase-section diode (590b). The method also includes receiving a burst mode signal (514) indicative of a burst-on state or a burst-on state, and sinking a first sink current (ISINK) away from the first bias current when the burst mode signal is indicative of the burst-off state. When the burst mode signal transitions to be indicative of the burst-on state from the burst-off state, the method also includes sinking a second sink current away from the second bias current at the anode of the phase-section diode and ceasing the sinking of the first sink current away from the first bias current at the anode of the gain section diode.

Abstract: A method (900) includes a gain current (IGAIN) to an anode of a gain-section diode (D0) disposed on a shared substrate of a tunable laser (310), delivering a modulation signal to an anode of an Electro-absorption section diode (D2) disposed on the shared substrate of the tunable laser, and receiving a burst mode signal (330) indicative of a burst-on state or a burst-off state. When the burst mode signal is indicative of the burst-off state, the method includes sinking a sink current (ISINK) away from the gain current at the anode of the gain-section diode. When the burst mode signal transitions to be indicative of the burst-on state from the burst-off state, the method includes ceasing the sinking of the sink current away from the gain current and delivering an overshoot current (IOVER) to the anode of the gain-section diode.