US 8,898,227 B1 · NFS storage via multiple one-way data links

Abstract

A system for bilaterally transferring information between a client and an NFS server. The client is coupled with an NFS server proxy running on a second receive server via a first network and communicates thereon. The processed first information is passed to a first send server via a dedicated network connection. The first send server causes the first information to be transmitted to the NFS server, via a first one-way data link, a first receive server, a second dedicated network connection and an NFS client proxy running on a second send server. The NFS server is coupled to the NFS client proxy via a second network. The NFS client proxy forwards information received from the NFS server to the client via a second one-way link, the NFS server proxy running on the second receive server and the first network.

A secure system for bilaterally transferring information between a client coupled to a first network and a server coupled to a second network, comprising:

a first platform comprising a first send server having a data communications interface, a first one-way data link having an input and an output, and a first receive server having a data communications interface, the first send server coupled to the input of the first one-way data link and the first receive server coupled to the output of the first one-way data link, the first send server configured to forward information received at the data communications interface to the input of the first one-way data link, the first receive server configured to forward information received from the output of the first one-way data link to the data communications interface;
a second platform comprising a second send server having a network connection and a data communications interface, a second one-way data link having an input and an output, and a second receive server having a network connection and a data communications interface, the second send server coupled to the input of the second one-way data link and the second receive server coupled to the output of the second one-way data link, the second receive server coupled to the first network via the network connection, the data communications interface of the second receive server coupled only to the data communications interface of the first send server, the second send server coupled to the second network via the network connection and the data communications interface of the second send server coupled only to the data communications interface of the first receive server;
wherein the second receive server is configured to receive first information from the client via the first network and the network connection, to process the received first information and to forward the processed first information to the first send server via the data communications interface;
wherein the second send server is configured to receive the processed first information via the data communications interface and to forward the processed first information to the server via the network connection and second network;
wherein the second send server is also configured to receive second information from the server via the second network and the network connection and to forward the second information to the second receive server via the second one-way data link;
wherein the second receive server is also configured to receive the second information from the second one-way data link and to forward the second information to the client via the network connection and first network;
and
wherein the first information comprises an NFS function call of a set of possible NFS function calls and wherein the processing performed by the second receive server comprises identifying a type of the NFS function call and blocking further transmission of the NFS function call if the identified type does not correspond to any one of a predetermined subset of possible NFS function calls.

5 more elements

Facts

Application

13/892,099Filed 10 May 2013

Published

US 2014/0337407 A113 Nov 2014

Granted

25 Nov 2014

Term ends

Not estimatedThe source records don’t support an estimate.

Classification11 codes

H04L 67/1097
In which an application is distributed across nodes in the network: for distributed storage of data in networks, e.g. transport arrangements for…
G06F 16/335
Querying: filtering based on additional data, e.g. user or group profiles
H04L 43/028
Capturing of monitoring data: by filtering
H04L 63/0209
For separating internal from external traffic, e.g. firewalls: architectural arrangements, e.g. perimeter networks or demilitarized zones

NFS storage via multiple one-way data links

Life of this patent

NFS storage via multiple one-way data links

Life of this patent

Abstract

Claims35