Method for tenant isolation in a distributed computing system

A computing device comprises:

• an interface for interfacing with a network;
• memory;
• and
• a processing module operably coupled to the interface and to the memory, wherein the processing module is operable to:
• allocate a plurality of DSN address ranges to one or more DSN memories of the DSN;
• assign a first DSN address range of the plurality of DSN address ranges to a first tenant of the DSN;
• assign a second DSN address range of the plurality of DSN address ranges to a second tenant of the DSN;
• receive a first write request for a first data object, wherein the first data object is segmented into a first plurality of data segments, wherein the first write request includes a first configuration data;
• determine, based on the first configuration data, whether the first tenant originated the first write request;
• in response to a determination that the first tenant originated the write request, dispersed error encode the first plurality of data segments in accordance with first dispersed error encoding parameters to produce first sets of encoded data slices (EDSs), wherein each set of EDSs of the sets of EDSs corresponds to a respective one data segment of the plurality of data segments;
• receive a second write request for a second data object, wherein the second data object is segmented into a second plurality of data segments, wherein the second write request includes a second configuration data;
• determine, based on the second configuration data, whether the second tenant originated the first write request;
• in response to a determination that the second tenant originated the write request, dispersed error encode the second plurality of data segments in accordance with second dispersed error encoding parameters to produce second sets of encoded data slices (EDSs), wherein each set of EDSs of the sets of EDSs corresponds to a respective one data segment of the plurality of data segments, and wherein at least one of the second dispersed error encoding parameters are different from the first dispersed error encoding parameters;
• and
• transmit the first sets of EDSs and the second sets of EDSs to the one or more DSN memories.

A dispersed storage (DS) module comprises:

• a first module, when operable within a computing device, causes the computing device to:
• receive a write request for a set of dispersed error encoded data slices (EDSs) from a first user;
• a second module, when operable within the computing device, causes the computing device to:
• based on configuration information associated with the write request, determine which tenant of a plurality of tenants are associated with the set of dispersed error EDSs;
• a third module, when operable within the computing device, causes the computing device to:
• execute a mapping of the write request for the set of dispersed error EDSs to a first set of memory devices, wherein the one or more memory devices are isolated from the memory devices associated with others of the plurality of tenants;
• and
• a fourth module, when operable within the computing device, causes the computing device to:
• send mapping information associated with the mapping to the first user, wherein the mapping information is sufficient to allow the first user to interact directly with the first set of memory devices.