Storage system with dual submission queue doorbell registers and method for use in a multi-tenant system
A storage system has two submission queue doorbell registers associated with a submission queue in a host. The storage system fetches and executes a command from the submission queue only in response to both submission queue doorbell registers being written. The second submission queue doorbell register may be visible (and directly written to) by the host or invisible (and indirectly written to) by the host. The use of two submission queue doorbell registers for a single submission queue can be used as a protection mechanism to protect an administration command submission queue of a child controller in a multiple physical function Non-Volatile Memory Express (NVMe) device (MFND).
1. A multiple physical function Non-Volatile Memory Express (NVMe) device (MFND) comprising:
a memory; and
a controller comprising first and second submission queue doorbell registers associated with a submission queue in a host;
wherein the controller is configured to:
receive a request from a child host entity to write to the first submission queue doorbell register;
write to the first submission queue doorbell register in response to the request from the child host entity;
receive a request from a parent host entity to write to the second submission queue doorbell register;
attempt to verify that the parent host entity is a parent to the child host entity;
only after verifying that the parent host entity is the parent to the child host entity, write to the second submission queue doorbell register; and
fetch and execute a command from the submission queue in the host only in response to both the first and second submission queue doorbell registers being written.
2. The MFND of claim 1 , wherein the submission queue comprises an administration command submission queue.
3. The MFND of claim 1 , wherein both the first and second submission queue doorbell registers are visible to the host.
4. The MFND of claim 3 , wherein the child host entity comprises a virtual machine.
5. The MFND of claim 3 , wherein the parent host entity comprises a root partition.
6. The MFND of claim 5 , wherein the controller comprises a parent physical function associated with the root partition.
7. The MFND of claim 4 , wherein the controller comprises a child physical function associated with the virtual machine.
8. The MFND of claim 1 , wherein the first submission queue doorbell register is visible to the host but the second submission queue doorbell register is not visible to the host.
9. The MFND of claim 8 , wherein the child host entity comprises a virtual machine.
10. The MFND of claim 8 , wherein the parent host entity comprises a root partition.
11. The of claim 9 , wherein the controller comprises a child physical function associated with the virtual machine.
12. The MFND of claim 10 , wherein the controller comprises a parent physical function associated with.
13. The MFND of claim 1 , wherein the first and second submission queue doorbell registers are in a host interface module in the controller.
14. The MFND of claim 1 , wherein the memory comprises a three-dimensional memory.
15. In a multiple physical function Non-Volatile Memory Express (NVMe) device (MFND) comprising first and second submission queue doorbell registers associated with a submission queue in a host, a method comprising:
receiving a request from a child host entity to write to the first submission queue doorbell register;
writing to the first submission queue doorbell register in response to the request from the child host entity;
receiving a request from a parent host entity to write to the second submission queue doorbell register;
attempting to verify that the parent host entity is a parent to the child host entity;
writing to the second submission queue doorbell register only after verifying that the parent host entity is the parent to the child host entity; and
fetching and executing a command from the submission queue in the host only in response to both the first and second submission queue doorbell registers being written.
16. The method of claim 15 , wherein both the first and second submission queue doorbell registers are visible to the host.
17. The method of claim 16 , wherein the child host entity comprises a virtual machine and the parent host entity comprises a root partition.
18. The method of claim 15 , wherein the first submission queue doorbell register is visible to the host but the second submission queue doorbell register is not visible to the host.
19. The method of claim 18 , wherein the child host entity comprises a virtual machine and the parent host entity comprises a root partition.
20. A multiple physical function Non-Volatile Memory Express (NVMe) device (MFND) comprising:
first and second submission queue doorbell registers associated with a submission queue in a host;
means for receiving a request from a child host entity to write to the first submission queue doorbell register;
means for writing to the first submission queue doorbell register in response to the request from the child host entity;
means for receiving a request from a parent host entity to write to the second submission queue doorbell register;
means for attempting; to verify that the parent host entity is a parent to the child host entity;
means for writing to the second submission queue doorbell register only after verifying that the parent host entity is the parent to the child host entity; and
means for fetching and executing a command from the submission queue in the host only in response to both the first and second submission queue doorbell registers being written.