Design And Implementation Of FCoE Port Security Control System

With the development of computer and network technology, the storage of network server also increases. However, the storage capacity of a single network server is limited. When the storage capacity of a single network server does not meet the demand, we need to separate servers and storage devices and “externalize” the internal storage. This allows servers and storage devices to reach their maximum effectiveness. The storage network is produced in this background. In the storage network, FCoE(Fiber Channel over Ethernet) is considered to be the subversion of the traditional network storage architecture and a complete solution of the storage network. With the wider and wider application of FCo E, the FCo E network security issues need to be paid more attention. However, there is no FCoE protocol in-depth study in domestic but foreign manufacturers have mature product. Therefore, the research and development of FCoE network security plays an important role in FCoE network. Port security control becomes more critical and important in a variety of network security measures.To solve the FCoE port security control problems, this paper designs and implements a high-performance, high-reliability Ethernet Fibre Channel port security control system, which is based on distributed switch. The system can check the permission of login nodes and switches, and the check is carried out on the security policy. If the login device is permitted, the switch will updates the login database and statistics database. Otherwise, the login device offline and the switch updates statistics database; System supports VSAN(Virtual Storage Area Network) technology, System can individually turn on or off port security control in a VSAN; System supports distributed switch, interface board hot-swap operation does not affect the normal operation of the system, which greatly improves the reliability of the system.First, this paper analyzes the development of storage network, then depth study FCoE and FC(Fiber C hannel) technology. Second, this paper designs and implements the FCoE port security control system in the distributed switch development environment. And in order to improve the efficiency of the system, this paper uses multi-threaded processing approach and divides the system into the event processing module, the command line module, permission checking module a nd external interface module. Then depth analysis and implementation of each module are made.Finally, the system functional test and stress test prove the system can do a lot of policy configuration, create and delete the VSAN as well as the interface board deal with the hot-swap while checking permission of login device. The system can conduct in the complex network environment and effectively ensure port security control of FCoE. Thus it has much practical value.