公开(公告)号：WO2005101181A2

公开(公告)日：2005-10-27

申请号：PCT/US2005/012175

申请日：2005-04-11

Applicant: NETWORK APPLIANCE, INC.

Inventor： ROA, Guillermo

IPC: G06F3/06

CPC classification number: G06F3/0661 ,  G06F3/0605 ,  G06F3/067

Abstract: An architecture provides the ability to create and maintain multiple instances of virtual servers, such as virtual filers (vfilers), within a server, such as a storage appli­ance. A vfiler is a logical partitioning of network and storage resources of the storage appliance platform to establish an instance of a multi-protocol server. Each vfiler is allocated a subset of dedicated units of storage resources, such as volumes or logical sub-volumes (qtrees), and one or more network address resources. Each vfiler is also allowed shared access to a file system resource of a storage operating system. To en­sure controlled access to the allocated and shared resources, each vfiler is further as­signed its own security domain for each access protocol. A vfiler boundary check is performed by the file system to verify that a current vfiler is allowed to access certain storage resources for a requested file stored on the filer platform.

Abstract translation: 架构提供了在服务器（如存储设备）中创建和维护虚拟服务器（如虚拟文件管理器（vfilers））的多个实例的功能。 vfiler是存储设备平台的网络和存储资源的逻辑分区，以建立多协议服务器的实例。 每个vfiler分配了一组存储资源的专用单元，例如卷或逻辑子卷（qtree）以及一个或多个网络地址资源。 每个vfiler还允许共享访问存储操作系统的文件系统资源。 为了确保对已分配和共享资源的受控访问，每个vfiler还为每个访问协议分配了自己的安全域。 文件系统执行vfiler边界检查，以验证当前的vfiler是否允许访问存储在文件管理平台上的请求文件的某些存储资源。

公开(公告)号：EP1763734A2

公开(公告)日：2007-03-21

申请号：EP05736396.2

申请日：2005-04-11

Applicant: Network Appliance, Inc.

Inventor： ROA, Guillermo

IPC: G06F3/06 ,  H04L29/06 ,  G06F11/14

CPC classification number: G06F3/0661 ,  G06F3/0605 ,  G06F3/067

Abstract: An architecture provides the ability to create and maintain multiple instances of virtual servers, such as virtual filers (vfilers), within a server, such as a storage appli­ance. A vfiler is a logical partitioning of network and storage resources of the storage appliance platform to establish an instance of a multi-protocol server. Each vfiler is allocated a subset of dedicated units of storage resources, such as volumes or logical sub-volumes (qtrees), and one or more network address resources. Each vfiler is also allowed shared access to a file system resource of a storage operating system. To en­sure controlled access to the allocated and shared resources, each vfiler is further as­signed its own security domain for each access protocol. A vfiler boundary check is performed by the file system to verify that a current vfiler is allowed to access certain storage resources for a requested file stored on the filer platform.