Brocade Communications Systems, Inc.

Aseem Rastogi

Christopher A Del Signore

Lintu Thomas

Kwun-Nan Kevin Lin

Nitin Jain

Ravi Swamy

Mike Lin Wang

Dheeraj Reddy

A framework for reliably communicating port information in a system of devices is provided. In one embodiment, each device in the system of devices can create a first record that includes port information pertaining to a plurality of ports of the device, where the plurality of ports are usable for communicatively coupling the device to other devices in the system of devices. The device can further receive, from the other devices in the system of devices, one or more second records including port information pertaining to the ports of the other devices, and can store the first record and the one or more second records in a data store maintained locally on the device. The device can then forward copies of the first record and the one or more second records out of each of the plurality of ports, thereby causing the copies of the first record and the one or more second records to be communicated to the other devices in the system of devices.

Framework for reliably communicating port information in a system of devices

One embodiment of the present invention provides a switch. The switch includes a processor and a computer-readable storage medium. The computer-readable storage medium stores instructions which when executed by the processor cause the processor to perform a method. The method comprises determining whether the switch is a leaf switch of a multicast distribution tree of a multicast group based on a multicast topology query message from a root switch of the multicast distribution tree. If the switch is a leaf switch, the method further comprises constructing a multicast topology report message comprising layer-2 topology information of the multicast group associated with the switch.

Efficient layer-2 multicast topology construction

In embodiments according to the present invention an encryption switch is used to authorize access to LUNs from client VMs present in the cloud provider network. The encryption switch includes responder side software for an authentication protocol and an agent in the client VM includes the requestor side of the authentication protocol. The certificate of the client is securely provided to the encryption switch, which associates the client VM with the LUN. The client private key is securely provided to the client VM, which retains it only non-persistently. The client VM requests LUN access and performs an authentication handshake with the encryption switch. If successful the client VM than has access to the LUN. As the original certificate is linked to the client, if the client is itself a VM, should the client be moved to a different host, the certificate moves with it and LUN accessibility is maintained.

Storage access authentication mechanism

An encryption switch which is used in a cloud environment to secure data on the LUNs used by the clients. A client provides a certificate to the cloud service. The encryption switch develops a cloud crypto domain (CCD) as a secure area, with the data at rest on the LUNs encrypted. The encryption switch develops a master key for client use in the CCD, which is provided to the client encrypted by the client's public key. Data encryption keys (DEKs) are created for each LUN and provided to the client. The DEKs are stored in a key vault by the client for use if needed. The cloud service provisions a client VM to be used with the encrypted LUN and develops a nexus between the LUN and the client VM for the encryption switch to use in data operations. The client communicates through the client VM to access the LUN.

Growing community of inventors

Fremont, CA, United States of America

Aseem Rastogi