Port expander for fibre channel fabrics in storage area networks
View Patent ↗An port expander Fibre Channel switch presents F_ports to form a first Fibre Channel fabric and N_ports to a second Fibre Channel fabric to appear as node devices. The port expander may be used to connect a plurality of blade servers to a Fibre Channel fabric. Fabric events engendered by the insertion or removal of hot-pluggable devices are handled by the port expander and “event storms” on the Fibre Channel fabric are avoided. The port expander presents the blade servers to the FC fabric as a virtualized N_port.
1. A data switching device comprising:
a plurality of host-connecting ports for connecting to a series of hosts;
at least one node port for connecting to a fabric; and
a switch coupled to said plurality of host-connecting ports and said at least one node port for interconnecting said ports;
wherein said at least one node port operates as a virtual node port, with a different virtual node address representative of each of said plurality of host-connecting ports connected to hosts;
wherein a destination identifier within a frame received by the at least one node port from the fabric includes a virtual address of the different virtual node addresses, the frame forwarded from the at least one node port to the host-connecting port connected to the host corresponding to the virtual address without modification of said virtual address within said received and forwarded frame; and
wherein a source identifier within a frame transmitted by the at least one node port to the fabric includes said virtual address, the frame forwarded to the at least one node port from the host-connecting port connected to the host corresponding to said virtual address without modification of said virtual address within said forwarded and transmitted frame.
2. The device of claim 1 , wherein said switch further acts as a firewall.
3. The device of claim 1 , wherein said switch further forms intrusion detection.
4. The device of claim 1 , wherein addresses include at least two different portions and wherein routing is performed using a first of said different portions from said at least one node port to said plurality of host-connecting ports and using a second of said different portions from said plurality of host-connecting ports to said at least one node port.
5. A Fibre Channel switch comprising:
a plurality of host-connecting ports for connecting to a series of hosts;
at least one N_port for connecting to a fabric; and
a switch circuit coupled to said plurality of host-connecting ports and said at least one N_port for interconnecting said ports;
wherein said at least one N_port operates as a virtual node port, with a different virtual node address representative of each of said plurality of host-connecting ports connected to hosts;
wherein a destination identifier within a frame received by the at least one N_port from the fabric includes a virtual address of the different virtual node addresses, the frame forwarded from the at least one N_port to the host-connecting port connected to the host corresponding to the virtual address without modification of said virtual address within said received and forwarded frame; and
wherein a source identifier within a frame transmitted by the at least one N_port to the fabric includes the virtual address, the frame forwarded to the at least one N_port from the host-connecting port connected to the host corresponding to the virtual address without modification of said virtual address within said forwarded and transmitted frame.
6. The switch of claim 5 , wherein said switch circuit further acts as a firewall.
7. The switch of claim 5 , wherein said switch circuit further performs intrusion detection.
8. The switch of claim 5 , wherein addresses include domain, area and AL_PA portions and wherein routing is performed using the AL_PA portion from said at least one N_port to said plurality of host-connecting ports and using the area portion from said plurality of host-connecting ports to said at least one N_port.
9. A network comprising:
a series of nodes;
a first fabric; and
a data switching device connected to said series of nodes and to said first fabric, said device including:
a plurality of node-connecting ports for connecting to said series of nodes;
at least one node port for connecting to said first fabric; and
a switch coupled to said plurality of node-connecting ports and said at least one node port for interconnecting said ports;
wherein said at least one node port operates as a virtual node port, with a different virtual node address representative of each of said plurality of node-connecting ports connected to nodes; and
wherein said virtual node address representative of a node-connecting port and the address of a host connected to the representative of said plurality of node-connecting ports are the same.
10. The network of claim 9 , wherein said switch further acts as a firewall.
11. The network of claim 9 , wherein said switch further forms intrusion detection.
12. The network of claim 9 , wherein addresses include at least two different portions and wherein routing is performed using a first of said different portions from said at least one node port to said plurality of node-connecting ports and using a second of said different portions from said plurality of node-connecting ports to said at least one node port.
13. The network of claim 9 , wherein said nodes are host computers.
14. The network of claim 13 , wherein said host computers are blade computers and are located in a blade server chassis.
15. The network of claim 14 , wherein said data switching device is a blade located in said blade server chassis.
16. A network comprising:
a series of nodes;
a first fabric; and
a Fibre Channel switch connected to said series of nodes and to said first fabric, said switch including:
a plurality of node-connecting ports for connecting to said series of nodes;
at least one N_port for connecting to said first fabric; and
a switch circuit coupled to said plurality of node-connecting ports and said at least one N_port for interconnecting said ports;
wherein said at least one N_port operates as a virtual node port, with a different virtual node address representative of each of said plurality of node-connecting ports connected to nodes; and
wherein said virtual node address representative of a node-connecting port and the address of a host connected to the representative of said plurality of node-connecting ports are the same.
17. The network of claim 16 , wherein said switch circuit further acts as a firewall.
18. The network of claim 16 , wherein said switch circuit further performs intrusion detection.
19. The network of claim 16 , wherein addresses include domain, area and AL_PA portions and wherein routing is performed using the AL_PA portion from said at least one N_port to said plurality of node-connecting ports and using the area portion from said plurality of node-connecting ports to said at least one N_port.
20. The network of claim 16 , wherein said nodes are host computers.
21. The network of claim 20 , wherein said host computers are blade computers and are located in a blade server chassis.
22. The network of claim 21 , wherein said data switching device is a blade located in said blade server chassis.
23. A network comprising:
a series of nodes, each having two ports;
a first fabric; and
two data switching devices, each connected to one port of each of said series of nodes and to said first fabric, each said device including:
a plurality of node-connecting ports for connecting to said one port of said series of nodes;
at least one node port for connecting to said first fabric; and
a switch coupled to said plurality of node-connecting ports and said at least one node port for interconnecting said ports;
wherein said at least one node port operates as a virtual node port, with a different virtual node address representative of each of said plurality of node-connecting ports connected to nodes; and
wherein said virtual node address representative of a node-connecting port and the address of a host connected to the representative of said plurality of node-connecting ports are the same.
24. The network of claim 23 , wherein said switch further acts as a firewall.
25. The network of claim 23 , wherein said switch further performs intrusion detection.
26. The network of claim 23 , wherein addresses include at least two different portions and wherein routing is performed using a first of said different portions from said at least one node port to said plurality of node-connecting ports and using a second of said different portions from said plurality of node-connecting ports to said at least one node port.
27. The network of claim 23 , wherein said nodes are host computers.
28. The network of claim 27 , wherein said host computers are blade computers and are located in a blade server chassis.
29. The network of claim 28 , wherein each said data switching device is a blade located in said blade server chassis.
30. A network comprising:
a series of nodes, each having two ports;
a first fabric; and
two Fibre Channel switches connected to one port of each of said series of nodes and to said first fabric, each said switch including:
a plurality of node-connecting ports for connecting to said one port of said series of nodes;
at least one N_port for connecting to said first fabric; and
a switch circuit coupled to said plurality of node-connecting ports and said at least one N_port for interconnecting said ports;
wherein said at least one N_port operates as a virtual node port, with a different virtual node address representative of each of said plurality of node-connecting ports connected to nodes; and
wherein said virtual node address representative of a node-connecting port and the address of a host connected to the representative of said plurality of node-connecting ports are the same.
31. The network of claim 30 , wherein said switch circuit further acts as a firewall.
32. The network of claim 30 , wherein said switch circuit further performs intrusion detection.
33. The network of claim 30 , wherein addresses include domain, area and AL_PA portions and wherein routing is performed using the AL_PA portion from said at least one N_port to said plurality of node-connecting ports and using the area portion from said plurality of node-connecting ports to said at least one N_port.
34. The network of claim 30 , wherein said nodes are host computers.
35. The network of claim 34 , wherein said host computers are blade computers and are located in a blade server chassis.
36. The network of claim 35 , wherein said data switching device is a blade located in said blade server chassis.
37. A network comprising:
a series of nodes, each having two ports;
first and second fabrics; and
two data switching devices, each connected to one port of each of said series of nodes and to said first and second fabrics, each said device including:
a plurality of node-connecting ports for connecting to said one port of said series of nodes;
two node ports, one for connecting to each of said first and second fabrics; and
a switch coupled to said plurality of node-connecting ports and said two node ports for interconnecting said ports;
wherein said node ports operate as virtual node ports, with a different virtual node address representative of each of said plurality of node-connecting ports connected to nodes; and
wherein said virtual node address representative of a node-connecting port and the address of a host connected to the representative of said plurality of node-connecting ports are the same.
38. The network of claim 37 , wherein said switch further acts as a firewall.
39. The network of claim 37 , wherein said switch further performs intrusion detection.
40. The network of claim 37 , wherein addresses include at least two different portions and wherein routing is performed using a first of said different portions from said node ports to said plurality of node-connecting ports and using a second of said different portions from said plurality of node-connecting ports to said node ports.
41. The network of claim 37 , wherein said nodes are host computers.
42. The network of claim 41 , wherein said host computers are blade computers and are located in a blade server chassis.
43. The network of claim 42 , wherein each said data switching device is a blade located in said blade server chassis.
44. A network comprising:
a series of nodes, each having two ports;
first and second fabrics; and
two Fibre Channel switches connected to one port of each of said series of nodes and to said first and second fabrics, each said switch including:
a plurality of node-connecting ports for connecting to said one port of said series of nodes;
two N_ports, one for connecting to each of said first and second fabrics; and
a switch circuit coupled to said plurality of node-connecting ports and said two N_ports for interconnecting said ports;
wherein said two N_ports operate as virtual node ports, with a different virtual node address representative of each of said plurality of node-connecting ports connected to nodes, and
wherein said virtual node address representative of a node-connecting port and the address of a host connected to the representative of said plurality of node-connecting ports are the same.
45. The network of claim 44 , wherein said switch circuit further acts as a firewall.
46. The network of claim 44 , wherein said switch circuit further performs intrusion detection.
47. The network of claim 44 , wherein addresses include domain, area and AL_PA portions and wherein routing is performed using the AL_PA portion from said N_ports to said plurality of node-connecting ports and using the area portion from said plurality of node-connecting ports to said N_ports.
48. The network of claim 44 , wherein said nodes are host computers.
49. The network of claim 48 , wherein said host computers are blade computers and are located in a blade server chassis.
50. The network of claim 49 , wherein said data switching device is a blade located in said blade server chassis.
51. A network comprising:
a series of nodes, each having two ports;
first and second fabrics; and
two data switching devices, each connected to one port of each of said series of nodes and to one of said first and second fabrics, each said device including:
a plurality of node-connecting ports for connecting to said one port of said series of nodes;
two node ports for connecting to one of said first and second fabrics; and
a switch coupled to said plurality of node-connecting ports and said two node ports for interconnecting said ports;
wherein said node ports operate as virtual node ports, with a different virtual node address representative of each of said plurality of node-connecting ports connected to nodes; and
wherein said virtual node address representative of a node-connecting port and the address of a host connected to the representative of said plurality of node-connecting ports are the same.
52. The network of claim 51 , wherein said switch further acts as a firewall.
53. The network of claim 51 , wherein said switch further performs intrusion detection.
54. The network of claim 51 , wherein addresses include at least two different portions and wherein routing is performed using a first of said different portions from said node ports to said plurality of node-connecting ports and using a second of said different portions from said plurality of node-connecting ports to said node ports.
55. The network of claim 51 , wherein said nodes are host computers.
56. The network of claim 55 , wherein said host computers are blade computers and are located in a blade server chassis.
57. The network of claim 56 , wherein each said data switching device is a blade located in said blade server chassis.
58. A network comprising:
a series of nodes, each having two ports;
first and second fabrics; and
two Fibre Channel switches connected to one port of each of said series of nodes and to one of said first and second fabrics, each said switch including:
a plurality of node-connecting ports for connecting to said one port of said series of nodes;
two N_ports for connecting to one of said first and second fabrics; and
a switch circuit coupled to said plurality of node-connecting ports and said two N_ports for interconnecting said ports;
wherein said two N_ports operate as virtual node ports, with a different virtual node address representative of each of said plurality of node-connecting ports connected to nodes, and
wherein said virtual node address representative of a node-connecting port and the address of a host connected to the representative of said plurality of node-connecting ports are the same.
59. The network of claim 58 , wherein said switch circuit further acts as a firewall.
60. The network of claim 58 , wherein said switch circuit further performs intrusion detection.
61. The network of claim 58 , wherein addresses include domain, area and AL_PA portions and wherein routing is performed using the AL_PA portion from said N_ports to said plurality of node-connecting ports and using the area portion from said plurality of node-connecting ports to said N_ports.
62. The network of claim 58 , wherein said nodes are host computers.
63. The network of claim 62 , wherein said host computers are blade computers and are located in a blade server chassis.
64. The network of claim 63 , wherein said data switching device is a blade located in said blade server chassis.
65. A method for routing between a series of nodes and a first fabric using a data switching device, the method comprising:
providing a plurality of node-connecting ports on the device for connecting to the series of nodes;
providing at least one node port on the device for connecting to the first fabric;
interconnecting said plurality of node-connecting ports and said at least one node port with the device; and
operating said at least one node port as a virtual node port, with one virtual node address for each of said plurality of node-connecting ports connected to nodes, with a different virtual node address representative of each of said plurality of node-connecting ports connected to nodes and the virtual node address representative of a node-connecting port and the address of a host connected to the representative of the plurality of node-connecting ports being the same.
66. The method of claim 65 , wherein addresses include at least two different portions, the method further comprising:
routing performed using a first of said different portions from said at least one node port to said plurality of node-connecting ports and using a second of said different portions from said plurality of node-connecting ports to said at least one node port.
67. A data switching device comprising:
a plurality of host-connecting ports for connecting to a series of hosts;
at least one node port for connecting to a fabric; and
a switch coupled to said plurality of host-connecting ports and said at least one node port for interconnecting said ports;
wherein said at least one node port operates as a virtual node port, with a different virtual node address representative of each of said plurality of host-connecting ports connected to hosts, and
wherein said virtual node address representative of a host-connecting port and the address of a host connected to the representative of said plurality of host-connecting ports are the same.
68. The device of claim 67 , wherein said switch further acts as a firewall.
69. The device of claim 67 , wherein said switch further performs intrusion detection.
70. The device of claim 67 , wherein addresses include at least two different portions and wherein routing is performed using a first of said different portions from said at least one node port to said plurality of host-connecting ports and using a second of said different portions from said plurality of host-connecting ports to said at least one node port.
71. A Fibre Channel switch comprising:
a plurality of host-connecting ports for connecting to a series of hosts;
at least one N_port for connecting to a fabric; and
a switch circuit coupled to said plurality of host-connecting ports and said at least one N_port for interconnecting said ports;
wherein said at least one N_port operates as a virtual node port, with a different virtual node address representative of each of said plurality of host-connecting ports connected to hosts, and wherein said virtual node address representative of a host-connecting port and the address of a host connected to the representative of said plurality of host-connecting ports are the same.
72. The switch of claim 71 , wherein said switch circuit further acts as a firewall.
73. The switch of claim 71 , wherein said switch circuit further performs intrusion detection.
74. The switch of claim 71 , wherein addresses include domain, area and AL_PA portions and wherein routing is performed using the AL_PA portion from said at least one N_port to said plurality of host-connecting ports and using the area portion from said plurality of host-connecting ports to said at least one N_port.