Netapp, Inc.

International Business Machines Corporation

Craig Fulmer Everhart

Venkateswararao Jujjuri

Boaz Shmueli

Owen Theodore Anderson

Steven Ewing

Vishwajith Shivappa

Kaladhar Voruganti

David Slik

Robert Michael Rees

Thomas K Clark

Siddhartha Nandi

Sai Rama Krishna Susarla

Rajagopal Ananthanarayanan

Daniel Joseph Ellard

Russell H Weight

Thirumale Niranjan

Mark Edward Molander

Soumitra Sarkar

Vincent Charles Conzola

Ankit K Jain

Robert Wyckoff Hyer, Jr

Subhash Sankuratripati

Vijay Singh

Ninad S Palsule

James John Seeger, Jr

Malahal R Naineni

Rohit Krishna Prasad

Jim Voll

Balajee Nagasubramaniam

Elizabeth Hatfield

Senthil Rajaram

Flora Wong

Venkateswarara Jujjuri

One or more techniques and/or devices are provided for dynamic resource allocation based upon network flow control. For example, a first counter, corresponding to a count of communication availability signals provided by a network interface to a storage process, may be maintained. A second counter, corresponding to a count of communication unavailability signals provided by the network interface to the storage process, may be maintained. Responsive to the first counter exceeding a resource allocation threshold, additional resources may be dynamically allocated to the storage process during operation of the storage process. Responsive to the second counter exceeding a resource deallocation threshold, resources may be dynamically deallocated from the storage process during operation of the storage process. In this way, resources allocation for the storage process may be dynamically adjusted based upon real-time network flow control information indicative of whether the storage process is efficiently utilizing network communication channel availability.

Dynamic resource allocation based upon network flow control

A method, non-transitory computer readable medium and local storage node computing device that establishes a first connection between a first endpoint in a kernel of an operating system and a second endpoint. A proxy application in a user space is invoked and a second connection is established from the operating system kernel to the proxy application. The proxy application is linked to a secure protocol implementation. Handshake messages are proxied between the second endpoint and the proxy application using the first and second connections. Security parameters for the first connection and determined from the handshake messages are sent from the proxy application to the operating system kernel via the second connection. Data is exchanged between the first endpoint in the operating system kernel and the second endpoint using the first connection and the security parameters.

Methods for facilitating secure connections for an operating system kernel and devices thereof

Methods, non-transitory machine readable media, and computing devices that facilitate demultiplexing services over ports are disclosed. With this technology, a request is received via a connection over one or more communication networks. The request includes payload data and a port number. At least a portion of the payload data is analyzed to determine one of a set of protocols associated with the port number. A service is then bound to the connection based on the determined one of the set of protocols. The service is configured to interpret the request. This technology advantageously allows the use of multiple protocols for a port number in a manner that is compatible with existing protocols and does not require any client-side code or coordination.

Methods for demultiplexing services over ports and devices thereof

Exemplary embodiments provide various techniques for managing groups of authenticated entities. In one exemplary computer-implemented method, an entity accesses a group roster that includes a first group identifier identifying a first group, a first group digital certificate associated with the first group, and a first entity identifier identifying the entity being a member of the first group. The entity also receives a request to update the group roster. Here, the request includes a second group identifier identifying a second group and a second group digital certificate associated with the second group. In response to the request, the entity replaces the first group identifier in the group roster with the second group identifier. Additionally, in response to the request, the entity replaces the first group digital certificate with the second group digital certificate. The replacements change a membership of the entity from the first group to the second group.

Group management of authenticated entities

The present application provides techniques to interrelate a group of multiple entities. A master entity makes configuration decisions regarding the group of entities and communicates those decisions to the entities. When the master relinquishes the master role, the retiring master selects a new master to accede to the master role. The retiring master releases the master role and ensures that the new master becomes aware of its assignment to the master role. During the time between when the retiring master abdicates and when the new master accedes, the group of entities is temporarily permitted to have no master. The master changes the configuration of the group of entities in a similar way. Using the techniques described herein, a new master may eventually replace the retiring master, and a new configuration may eventually replace the old configuration, without the risk of duplicating or dropping the master role or a configuration change.

Eventual consistency among many clusters including entities in a master member regime

A method and system for authenticating of the pairing of computing devices is described. In an example, a passphrase is established on computing devices. The pairing between two devices is initiated by a first device by communicating independently generated data, wherein the generated data is used along with the passphrase on each of the devices to derive a common pairing key. The pairing is authenticated by using at least a first portion of the common pairing key through a key exchange protocol. Further, a shared secret code is derived using a second portion of the common pairing key and stored to be used indirectly to secure future communication between the paired devices.

Authentication for cluster peering

In some embodiments, a first location server, in response to a request from a client to access an object, determines whether a first location information stored at the first location server indicates locations of instance(s) of the object. The first location server, in response to a determination that the first location information indicates the locations of the instances of the object, determines a first location of a first instance of the object at a first payload server and a second location of a second instance of the object at a second payload server from the first location information. The first location server determines priority values of the first and second locations. The first location server generates a reply to the request, the reply indicating the first and second locations of the first and second instances of the object, and the priority values of the first and second locations.

Transparent redirection of clients to a surrogate payload server through the use of a proxy location server

Example embodiments provide various techniques for securing communications within a group of entities. In one example method, a request from an entity to join the group is received and a signed, digital certificate associated with the entity is accessed. Here, the signed, digital certificate is signed with a group private key that is associated with a certification authority for the group. The signed, digital certificate is added to a group roster, and this addition is to admit the entity into the group. The group roster with the signed, digital certificate is itself signed with the group private key and distributed to the group, which includes the entity that transmitted the request. Communication to the entity is then encrypted using the signed, digital certificate included in the group roster.

Scalable groups of authenticated entities

A system and method for designating and administering authority in a trusted environment is provided. In some embodiments, a determination is made that a transfer of the authority to a second computing entity is warranted. The second computing entity is opportunistically contacted, and during the opportunistic contact, the authority is passed from the first computing entity to the second computing entity. The passing of the authority from the first computing entity to the second computing entity tasks the second computing entity with updating members of the group of the passing of the authority. The passing of authority may include providing an outstanding group update to the second computing entity and may also include tasking the second computing entity with completing the outstanding group update.

Status transfer within a group of computing entities

Example embodiments provide various techniques for modeling network storage environments. To model a particular storage environment, component models that are associated with the components of the storage environment are loaded. Each component model is programmed to mathematically simulate one or more components of the storage environment. A system model is then composed from the component models and this system model is configured to simulate the storage environment.

Modeling storage environments

A client is redirected to use a surrogate payload server to access a substantially identical copy of an object that is located on a primary payload server. A proxy location server intercepts object location queries from clients and replies with the location of the surrogate payload server as the preferred source for the object rather than the location of the primary payload server.

Growing community of inventors

Pittsburgh, PA, United States of America

Craig Fulmer Everhart