Secured and out-of-band (OOB) server san solution on a commodity storage box

1. A method of operating a computer system, the computer system including a baseboard management controller (BMC) and a host of the BMC, comprising:

receiving, at the BMC, a first message from a first remote device on a management network that has been established for out-of-band (OOB) communication with the BMC;

determining, at the BMC, whether the first message is directed to a storage service or fabric service running on the host, the host being a storage device, the storage service providing access to user data stored on one or more storage devices connected to the host via a storage network that is isolated from the management network;

when the first message is directed to the storage service or fabric service:

extracting a service command from the first message;

sending, through a BMC communication channel to the host, a second message containing the service command to the host, the BMC communication channel established for communicating baseboard management commands between the BMC and the host;

receiving, at the host, the second message;

determining that the service command contained in the second message is for managing one of the storage service and the fabric service without accessing the storage network;

extracting the service command from the second message; and

executing the service command at the one service.

2. The method of claim 1 , wherein the management network is out-of-band to the host.

3. The method of claim 1 , further comprising

receiving, at a Remote Direct Memory Access (RDMA) controller of the host managed by the storage service, a data operation command from a second remote device through a storage network, wherein the second remote device being connected to a data network, wherein the management network is isolated from the data network.

4. The method of claim 1 , further comprising:

receiving, at the host, the second message;

determining that the service command contained in the second message is directed for accessing a Remote Direct Memory Access (RDMA) controller of the host managed by the storage service; and

discarding the second message.

5. The method of claim 1 , further comprising:

sending the first message to a base board management function running on the BMC, when the first message is not directed to the storage service or fabric service running on the host.

6. The method of claim 5 , further comprising:

generating a baseboard management command in accordance with the first message; and

sending the baseboard management command to the host through the BMC communication channel.

7. A computer system, comprising:

a baseboard management controller (BMC), including:

a first memory, and

first at least one processor coupled to the first memory; and

a host of the BMC, including:

a second memory,

a primary processing unit; and

a Remote Direct Memory Access (RDMA) controller;

wherein the first at least one processor is further configured to:

receive, at the BMC, a first message from a first remote device on a management network that has been established for out-of-band (OOB) communication with the BMC;

determine, at the BMC, whether the first message is directed to a storage service or fabric service running on the host, the host being a storage device, the storage service providing access to user data stored on one or more storage devices connected to the host via a storage network that is isolated from the management network;

when the first message is directed to the storage service or fabric service:

extract a service command from the first message; and

send, through a BMC communication channel to the host, a second message containing the service command to the host, the BMC communication channel established for communicating baseboard management commands between the BMC and the host wherein the primary processing unit is further configured to:

receive, at the host, the second message;

determine that the service command contained in the second message is for managing one of the storage service and the fabric service without accessing the storage network;

extract the service command from the second message; and

execute the service command at the one service.

8. The computer system of claim 7 , wherein the management network is out-of-band to the host.

9. The computer system of claim 7 , wherein the RDMA controller is managed by the storage service and is further configured to:

receive a data operation command from a second remote device through a storage network, wherein the second remote device being connected to a data network, wherein the management network is isolated from the data network.

10. The computer system of claim 7 , wherein the primary processing unit is further configured to:

receive, at the host, the second message;

determine that the service command contained in the second message is directed for accessing a Remote Direct Memory Access (RDMA) controller of the host managed by the storage service; and

discard the second message.

11. The computer system of claim 7 , wherein the first at least one processor is further configured to:

send the first message to a base board management function running on the BMC, when the first message is not directed to the storage service or fabric service running on the host.

12. The computer system of claim 11 , wherein the first at least one processor is further configured to:

generate a baseboard management command in accordance with the first message; and

send the baseboard management command to the host through the BMC communication channel.

13. A non-transitory computer-readable medium storing computer executable code for operating a computer system, the computer system including a baseboard management controller (BMC) and a host of the BMC, comprising code to:

receive, at the BMC, a first message from a first remote device on a management network that has been established for out-of-band (OOB) communication with the BMC;

determine, at the BMC, whether the first message is directed to a storage service or fabric service running on the host, the host being a storage device, the storage service providing access to user data stored on one or more storage devices connected to the host via a storage network that is isolated from the management network;

when the first message is directed to the storage service or fabric service:

extract a service command from the first message; and

send, through a BMC communication channel to the host, a second message containing the service command to the host, the BMC communication channel established for communicating baseboard management commands between the BMC and the host;

wherein the code is further configured to:

receive, at the host, the second message;

determine that the service command contained in the second message is for managing one of the storage service and the fabric service without accessing the storage network;

extract the service command from the second message; and

execute the service command at the one service.

14. The non-transitory computer-readable medium of claim 13 , wherein the management network is out-of-band to the host.

15. The non-transitory computer-readable medium of claim 13 , wherein the code is further configured to

receive, at a Remote Direct Memory Access (RDMA) controller of the host managed by the storage service, a data operation command from a second remote device through a storage network, wherein the second remote device being connected to a data network, wherein the management network is isolated from the data network.

16. The non-transitory computer-readable medium of claim 13 , wherein the code is further configured to:

receive, at the host, the second message;

determine that the service command contained in the second message is directed for accessing a Remote Direct Memory Access (RDMA) controller of the host managed by the storage service; and

discard the second message.

17. The non-transitory computer-readable medium of claim 13 , wherein the code is further configured to:

send the first message to a base board management function running on the BMC, when the first message is not directed to the storage service or fabric service running on the host.