Vmware, Inc.

Sujay Shrikant Godbole

Ilia Sokolinski

Tejasvi Aswathanarayana

Satyam B Vaghani

Patrick William Penzias Dirks

Derek Uluski

Komal Desai

Gabriel Tarasuk-Levin

Chiao-Chuan Shih

Sanjay Vasudev Acharya

Jesse Pool

Haripriya Rajagopal

Rajesh Bhat

Amit Anandram Luniya

The disclosure provides an approach for secure offloaded data transfer. Embodiments include receiving, by a security component on a client device, from a storage system connected to the client device, a token associated with a data read request corresponding to a source file on the storage system. Embodiments include determining, by the security component, that the source file is trusted. Embodiments include generating, by the security component, an entry in a trusted token cache based on determining that the source file is trusted, wherein the entry comprises the token. Embodiments include receiving, by the security component, a write request corresponding to a destination file on the storage system, wherein the write request comprises the token or a different token. Embodiments include determining, by the security component, based on the trusted token cache, whether to perform one or more operations related to the write request.

Secure offloaded data transfer

Examples perform live migration of virtual machines (VM) from a source host to a destination host. The live migration performs time-consuming operations before the source host is stunned, reducing the downtime apparent to users. Some examples contemplate pre-copying memory from the source VM to the destination VM, and the opening of disks on the destination VM before stunning the source VM.

Live migration with pre-opened shared disks

A framework for converting between copy-on-write (COW) and redo-based technologies is disclosed. To take a virtual disk snapshot, disk descriptor files, which include metadata information about data stored in virtual volumes (vvols), are 'swizzled' such that the descriptor file for a latest redo log, to which IOs are currently performed, points to the base vvol of a COW-based vvol hierarchy. A disk descriptor file previously associated with the base vvol may also be updated to point to the vvol newly created by the snapshot operation. To revert to an earlier disk state, a snapshot may be taken before copying contents of a snapshot vvol of the COW-based vvol hierarchy to a base vvol of the hierarchy, thereby ensuring that the reversion can be rolled back if it is unsuccessful. Reference counting is performed to ensure that vvols in the vvol hierarchy are not orphaned in delete and revert use cases. Differences between vvols in the COW-based vvol hierarchy are used to clone the hierarchy and to migrate the hierarchy to a redo-based disk hierarchy.

Conversion of virtual disk snapshots between redo and copy-on-write technologies

The storage system exports logical storage volumes that are provisioned as storage objects. These storage objects are accessed on demand by connected computer systems using standard protocols, such as SCSI and NFS, through logical endpoints for the protocol traffic that are configured in the storage system. Prior to issuing input-output commands to a logical storage volume, the computer system sends a request to bind the logical storage volume to a protocol endpoint. In response a first identifier for the protocol endpoint and a second identifier for the logical storage volume is returned. Different second identifiers may be generated for different logical storage volumes even though the same protocol endpoint is being used. Therefore, a single protocol endpoint may serve as a gateway for multiple logical storage volumes.

Computer system accessing object storage system

The storage system exports logical storage volumes that are provisioned as storage objects. These storage objects are accessed on demand by connected computer systems using standard protocols, such as SCSI and NFS, through logical endpoints for the protocol traffic that are configured in the storage system. When a virtual machine is provisioned, logical storage volumes include a logical metadata storage volume and logical data storage volumes. The logical metadata storage volume stores metadata for the virtual machine such as configuration and log files, swap file, and disk descriptor files. Each disk descriptor file is provided for one logical data storage volume and stores metadata about the logical data storage volume such as size and unique identifying data.

Virtual machine provisioning in object storage system

Growing community of inventors

Santa Clara, CA, United States of America

Sujay Shrikant Godbole