-
公开(公告)号:WO2009158217A2
公开(公告)日:2009-12-30
申请号:PCT/US2009/047267
申请日:2009-06-12
Applicant: MICROSOFT CORPORATION
Inventor: D'AMATO, Andrea , NAGAR, Rajeev Y. , NISHANOV, Gor , DAS, Rajsekhar , MAESO, Gregorio
IPC: G06F15/167 , G06F15/17 , G06F15/16
CPC classification number: G06F3/0637 , G06F3/062 , G06F3/0635 , G06F3/067 , G06F11/1482 , G06F11/2035 , G06F11/2046 , G06F17/30091 , H04L67/1097 , H04L69/40
Abstract: Described is a technology by which a storage volume is shared by cluster nodes of a server cluster. In one implementation, each node includes a redirector that provides shared access to the volume from that node. The redirector routes file system metadata requests from applications and the like through a first (e.g., SMB) communications path to the owning node, and routes file system read and write data to the storage device through a second, high-speed communications path such as direct direct block level I/O. An owning node maintains ownership of the storage device through a persistent reservation mechanism that writes a key to a registration table associated with the storage device. Non-owning nodes write a shared key. The owning node validates the shared keys against cluster membership data, and preempts (e.g., removes) any key deemed not valid. Security mechanisms for controlling access are also described.
Abstract translation: 描述了存储卷由服务器集群的集群节点共享的技术。 在一个实现中,每个节点包括重定向器,其向该节点提供对卷的共享访问。 重定向器通过第一(例如SMB)通信路径将应用程序等的文件系统元数据请求路由到所有者节点,并通过第二高速通信路径将文件系统读写数据路由到存储设备,例如 直接直接块级I / O。 拥有节点通过将密钥写入与存储设备相关联的注册表的持久预留机制来维护存储设备的所有权。 非拥有节点写共享密钥。 拥有节点根据集群成员数据验证共享密钥,并抢占(例如删除)任何被认为无效的密钥。 还描述了用于控制访问的安全机制。
-
公开(公告)号:EP2316077A2
公开(公告)日:2011-05-04
申请号:EP09770751.7
申请日:2009-06-12
Applicant: Microsoft Corporation
Inventor: D'AMATO, Andrea , NAGAR, Rajeev Y. , NISHANOV, Gor , DAS, Rajsekhar , MAESO, Gregorio
IPC: G06F15/167 , G06F15/17 , G06F15/16
CPC classification number: G06F3/0637 , G06F3/062 , G06F3/0635 , G06F3/067 , G06F11/1482 , G06F11/2035 , G06F11/2046 , G06F17/30091 , H04L67/1097 , H04L69/40
Abstract: Described is a technology by which a storage volume is shared by cluster nodes of a server cluster. In one implementation, each node includes a redirector that provides shared access to the volume from that node. The redirector routes file system metadata requests from applications and the like through a first (e.g., SMB) communications path to the owning node, and routes file system read and write data to the storage device through a second, high-speed communications path such as direct direct block level I/O. An owning node maintains ownership of the storage device through a persistent reservation mechanism that writes a key to a registration table associated with the storage device. Non-owning nodes write a shared key. The owning node validates the shared keys against cluster membership data, and preempts (e.g., removes) any key deemed not valid. Security mechanisms for controlling access are also described.
-