ISCSI target offload administrator
View Patent ↗A method, system and apparatus for negotiating parameters for an IPSec connection between a requesting client and an iSCSI system using a computer system other than an iSCSI system are provided. By design, the iSCSI system monitors TCP (Transmission Control protocol) port 500 for secure requests. When a request enters port 500 , the iSCSI system transmits all information received on port 500 to a computer system better suited to handle IPSec parameter negotiations. After the computer system has negotiated the parameters, the parameters are passed to the iSCSI system for a secure data transaction to ensue.
1. A method of transacting data over a secure network connection between an iSCSI system and a client system, the iSCSI system including a host system and an SCSI machine, the method comprising the steps of:
receiving from said client system, by said iCSCI machine, a request for a secure connection to transact the data;
forwarding, by said iSCSI machine, said request to said host system, said host system being used for negotiating parameters of the secure connection with the client system; and
passing, by said host system, the negotiated parameters of the secure connection to the iSCSI machine such that the iSCSI machine and the client system can transact data over the secure connection without further help from the host system.
2. The method of claim 1 wherein one of the parameters is an encryption/decryption key.
3. The method of claim 2 wherein the iSCSI includes a network adapter, the network adapter using the encryption/decryption key for encrypting/decrypting the data.
4. The method of claim 3 wherein the request for the secure connection is received at TCP (Transmission Control Protocol) port 500 .
5. The method of claim 4 wherein the request for the secure connection is a login request.
6. A computer program product on a computer readable medium for transacting data over a secure network connection between an iSCSI system and a client system, the iSCSI system including a host system and an iSCSI machine, the computer program product comprising:
code means for receiving from said client system, by said iCSCI machine, a request for a secure connection to transact the data;
code means for forwarding, by said iSCSI machine, said request to said host system, said host system being used for negotiating parameters of the secure connection with the client system; and
code means for passing, by said host system, the negotiated parameters of the secure connection to the iSCSI machine such that the iSCSI machine and the client system can transact data over the secure connection without further help from the host system.
7. The computer program product of claim 6 wherein one of the parameters is an encryption/decryption key.
8. The computer program product of claim 7 wherein the iSCSI includes a network adapter, the network adapter using the encryption/decryption key for encrypting/decrypting the data.
9. The computer program product of claim 8 wherein the request for the secure connection is received at TCP (Transmission Control Protocol) port 500 .
10. The computer program product of claim 9 wherein the request for the secure connection is a login request.
11. An apparatus for transacting data over a secure network connection with a client system, the apparatus including a host system and an iSCSI machine, the apparatus comprising:
means for receiving from said client system, by said iCSCI machine, a request for a secure connection to transact the data;
means for forwarding, by said iSCSI machine, said request to said host system, said host system being used for negotiating parameters of the secure connection with the client system; and
means for passing, by said host system, the negotiated parameters of the secure connection to the iSCSI machine such that the iSCSI machine and the client system can transact data over the secure connection without further help from the host system.
12. The apparatus of claim 11 wherein one of the parameters is an encryption/decryption key.
13. The apparatus of claim 12 wherein the iSCSI includes a network adapter, the network adapter using the encryption/decryption key for encrypting/decrypting the data.
14. The apparatus of claim 13 wherein the request for the secure connection is received at TCP (Transmission Control Protocol) port 500 .
15. The apparatus of claim 14 wherein the request for the secure connection is a login request.
16. An iSCSI system for transacting data over a secure network connection with a client system, the iSCSI system including a host system and an iSCSI machine, the iSCSI system comprising:
at least one storage system for storing code data; and
at least one processor for processing the code data to receive from said client system, by said iCSCI machine, a request for a secure connection to transact the data, to forward, by said iSCSI machine, said request to said host system, said host system being used for negotiating parameters of the secure connection with the client system, and to pass, by said host system, the negotiated parameters of the secure connection to the iSCSI machine such that the iSCSI machine and the client system can transact data over the secure connection without further help from the host system.
17. The computer system of claim 16 wherein one of the parameters is an encryption/decryption key.
18. The computer system of claim 17 wherein the iSCSI includes a network adapter, the network adapter using the encryption/decryption key for encrypting/decrypting the data.
19. The computer system of claim 18 wherein the request for the secure connection is received at TCP (Transmission Control Protocol) port 500 .
20. The computer system of claim 19 wherein the request for the secure connection is a login request.