Brocade Communications Systems, Inc.

Riverbed Technology, Inc.

Naveen Maveli

Subhojit Roy

Carlos Alonso

Richard L Hammons

Richard A Walter

Cirillo Lino Costantino

Dennis Hideo Makishima

Daniel Y Chung

Daniel Ji Yong Park Chung

Shahe Hagop Krakirian

Case Larsen

Shashidhar Merugu

L Vincent M Isip

Michael Yiu-Wing Pong

Subbaro Arumilli

Stephen D Elstad

A method is provided for establishing a split-terminated secure communication connection between a client and a server. A first network intermediary intercepts a secure communication connection request directed from the client to the server. A second intermediary having a digital certificate in the name of the server (and a corresponding private key) acts in place of the server to establish a first secure communication session with the client, during which it receives a secret from the client for generating the session key. The second intermediary supplies the secret and/or the session key to the first intermediary, which allows the first intermediary to establish follow-on secure communication sessions in which the secret is reused. The second intermediary may also supply the first intermediary with a copy of its certificate so that it can respond to new secure communication requests and, yet further, may also supply a copy of the private key.

Reducing latency of split-terminated secure communication protocol sessions

Systems particularly a virtualization switch or a storage device, which include virtual ports connected to virtual devices with virtual worldwide names and virtual LUNs. Because Fibre Channel environment hosts can track worldwide names from one port to another and allow continuity in that regard, the virtual worldwide names are provided with relevant virtual LUNs and connected these to virtual ports so that the virtual devices can be moved as desired to overcome failures or to allow load balancing.

Method and apparatus for providing virtual ports with attached virtual devices in a storage area network

Placing virtualization agents in the switches which comprise the SAN fabric. Higher level virtualization management functions are provided in an external management server. Conventional HBAs can be utilized in the hosts and storage units. In a first embodiment, a series of HBAs are provided in the switch unit. The HBAs connect to bridge chips and memory controllers to place the frame information in dedicated memory. Routine translation of known destinations is done by the HBA, based on a virtualization table provided by a virtualization CPU. If a frame is not in the table, it is provided to the dedicated RAM. Analysis and manipulation of the frame headers is then done by the CPU, with a new entry being made in the HBA table and the modified frames then redirected by the HBA into the fabric. This can be done in either a standalone switch environment or in combination with other switching components located in a director level switch. In an alternative embodiment, specialized hardware scans incoming frames and detects the virtualized frames which need to be redirected. The redirection is then handled by translation of the frame header information by hardware table-based logic and the translated frames are then returned to the fabric. Handling of frames not in the table and setup of hardware tables is done by an onboard CPU.

Host bus adaptor-based virtualization switch

Hardware-based translating virtualization switch

Growing community of inventors

Sunnyvale, CA, United States of America

Naveen Maveli