Techniques for achieving storage and network isolation in a cloud storage environment
AssigneeCloudByte, Inc.
InventorsUmasankar Mukkara, Felix Xavier
Life of this patent
Estimating the term…
Abstract
Techniques for achieving storage and network isolation in a cloud environment are presented. A single Internet Protocol (IP) address is presented to multiple storage tenants that use storage in a cloud environment. When each tenant accesses the IP address, a specific identity of the tenant is resolved and the storage stack for that tenant is sent to the tenant's storage machine having the tenant's storage. The tenant is directly connected to its tenant storage machine thereafter.
Claims17
A method implemented in a non-transitory machine-readable storage medium and processed by one or more processors of a machine configured to perform the method, comprising:
- receiving, at the machine, a request for access to a portion of shared storage situated in a cloud environment, the request originates from a tenant and the storage services multiple other tenants from the cloud environment;
- identifying, on the machine, a tenant identifier for the tenant and a tenant storage machine (TSM) uniquely assigned to the tenant;
- and
- transitioning, from the machine, the tenant to the tenant storage machine for a storage connection session and switching the tenant to the storage connection session without changing an initial Internet Protocol (IP) address used by the tenant to access the method.
A method implemented in a non-transitory machine-readable storage medium and processed by one or more processors of a machine configured to perform the method, comprising.
- presenting, on the machine, a shared storage environment that services multiple different tenants, the shared storage environment accessed via a single Internet Protocol (IP) address from each of the tenants;
- dynamically resolving, on the machine, each tenant as a particular request is made for that tenant's storage;
- and
- automatically connecting, via the machine, each resolved tenant to its storage via appropriate storage controllers without that resolved tenant realizing where those storage controllers are physically located, and permitting each tenant to access its storage controllers via the IP address even when the storage controllers are really assigned and managed via entirely different IP addresses.
A system, comprising:
- a cloud storage appliance having one or more hardware processors, memory, and storage, the cloud storage appliance situated in a cloud environment and accessed over a network via a single Internet Protocol (IP) address;
- and
- the memory configured with a tenant-based storage isolator implemented as executable instructions that process on the one or more hardware processors of the storage appliance;
- wherein the tenant-based storage isolator is configured to dynamically authenticate particular tenants accessing the cloud storage via the IP address and dynamically transition each tenant to its independent and isolated storage managed by its storage controllers, and wherein the tenant-based storage isolator is configured to dynamically add new storage controllers for a given tenant without altering how that given tenant accesses its storage via the cloud storage environment using the single IP address.
Dependencies are inferred from the claim text.