Authenticated stateless mount string for a distributed file system
View Patent ↗A cluster of one or more computing devices is operably coupled to a plurality of storage devices. Each computing device in the cluster comprises a frontend and a backend. The backend comprises a plurality of buckets. Each bucket is operable to build a failure-protected stipe that spans two or more of the plurality of the storage devices. A file system comprises one or more failure-protected stipes. A client other than the one or more computing devices in the cluster is operable to access at least a portion of the file system via a stateless mount string comprising a cryptographically-signed key.
1. A file system comprising:
a cluster of one or more computing devices; and
a plurality of storage devices, wherein:
each computing device of the cluster is operable to build one or more failure-protected stripes,
each failure-protected stripe comprises a plurality of storage blocks,
each storage block of a failure-protected stripe is located in a different storage device of the plurality of storage devices, and
a first client other than the one or more computing devices of the cluster is operable to request access to a first portion of the file system via a first stateless mount string.
2. The system of claim 1 , wherein access to the first portion of the file system is granted independently of any previous requests by the first client.
3. The system of claim 1 , wherein a second client other than the one or more computing devices of the cluster is operable to request access to a second portion of the file system via a second stateless mount string, wherein the first client and the second client are operable to access the file system concurrently.
4. The system of claim 3 , wherein the first client and the second client are mapped to a common user identification number.
5. The system of claim 3 , wherein the second client is prevented from accessing the first portion of the file system.
6. The system of claim 1 , wherein the first stateless mount string is encrypted by a cryptographically-signed key.
7. The system of claim 6 , wherein the first stateless mount string comprises data encrypted by the cryptographically-signed key.
8. The system of claim 1 , wherein the stateless mount string encapsulates one or more authentication parameters.
9. The system of claim 8 , wherein the one or more authentication parameters comprise object storage stateless credentials.
10. The system of claim 8 , wherein the one or more authentication parameters comprise a quality of service parameter.
11. A method comprising:
receiving a first stateless mount string from a first client; and
granting the first client access to a first portion of a file system according to the first stateless mount string, wherein:
the file system comprises a plurality of storage devices and a cluster of one or more computing devices other than the first client,
each computing device of the cluster is operable to build a failure-protected stripe that comprises a plurality of storage blocks, and
each storage block of a failure-protected stripe is located in a different storage device of the plurality of storage devices.
12. The method of claim 11 , wherein the access to the first portion of the file system is independent of any request prior to the first stateless mount string.
13. The method of claim 11 , wherein the method comprises:
receiving a second stateless mount string from a second client; and
granting the second client access to a second portion of a file system according to the second stateless mount string, wherein the first client and the second client are operable to access the file system concurrently.
14. The method of claim 13 , wherein the method comprises mapping the first client and the second client to a common user identification number.
15. The method of claim 13 , wherein the method comprises preventing the second client from accessing the first portion of the file system.
16. The method of claim 11 , wherein the method comprises decrypting the first stateless mount string using a cryptographically-signed key.
17. The method of claim 16 , wherein the first stateless mount string comprises data encrypted by the cryptographically-signed key.
18. The method of claim 11 , wherein the stateless mount string encapsulates one or more authentication parameters.
19. The system of claim 18 , wherein the one or more authentication parameters comprise object storage stateless credentials.
20. The system of claim 18 , wherein the one or more authentication parameters comprise a quality of service parameter.