基于iSCSI的IP SAN的研究与实现
摘要
随着网络数字信息的爆炸式增长，存储区域网SAN(Storage Area Network)作为网络存储的重要解决方案之一，已经进入了实用阶段。传统SAN主要基于FC(Fibre Channel)协议，具有距离短、价格昂贵和构建复杂等缺点。而目前IP协议已经发展到了非常成熟的阶段，因此如何利用已有的IP协议技术来改进或完全取代FC协议，成为了当前网络存储技术研究的热点。基于iSCSI协议来构建IP SAN已经成为网络存储的重要解决手段。
本文首先介绍了网络存储的概念，着重阐述了SAN技术在网络存储中的优势。进而对SAN中的iSCSI协议进行介绍，从体系结构模型、会话管理、命名与寻址、协议数据单元格式、错误恢复机制、安全机制等方面进行了详细的分析，并对iSCSI协议的两种实现方式：软件实现方式和硬件实现方式进行了介绍与比较。在上述分析基础之上，本文着重研究了采用软件方式实现基于iSCSI协议的IP SAN的过程。详细阐述了iSCSI启动端和目标端在Linux下的工作原理和实现过程，成功构建了IP SAN，并介绍了IPSec技术在IP SAN中的应用。论文的最后使用测试工具IOMeter对IP SAN的功能、性能和安全功能三项指标进行了测试，并对结果进行了分析，提出了系统改进的一些设想。
With the explosive increase of data in network, SAN (Storage Area Network) has come into the phase of application as one of the important solutions to network storage. The traditional SAN mainly bases on FC (Fibre Channel) protocol, and has some disadvantages such as short distance, high cost and complex design. But now IP protocol has developed fully and reached maturity. Therefore how to utilize IP technology to improve or replace FC is becoming a hot issue in the field of network storage. Constructing IP SAN with iSCSI has been the important solution to network storage.
Firstly, the concept of network storage is introduced and the advantages of SAN in the area of network are analyzed in the thesis.Then the iSCSI protocol which works in SAN is studied and analyzed in several aspects, such as the architecture of protocol session management, naming and discovery, PDU, error recovery and security mechanism. Furthermore, two main implementations of the iSCSI protocol by means of software and hardware are introduced and compared. The implementation of the IP SAN by way of software based on the iSCSI is studied according to the above analysis. In addition, the principle and the implement of iSCSI initiator and target in Linux are interpreted in the thesis. The IP SAN is constructed successfully and uses the IPSec technology to assure the security of the system. At last, the function, performance, and the security of IP SAN are tested by IOMeter, the results are analyzed and some ideas are proposed to improve the system.
本文首先介绍了网络存储的概念，着重阐述了SAN技术在网络存储中的优势。进而对SAN中的iSCSI协议进行介绍，从体系结构模型、会话管理、命名与寻址、协议数据单元格式、错误恢复机制、安全机制等方面进行了详细的分析，并对iSCSI协议的两种实现方式：软件实现方式和硬件实现方式进行了介绍与比较。在上述分析基础之上，本文着重研究了采用软件方式实现基于iSCSI协议的IP SAN的过程。详细阐述了iSCSI启动端和目标端在Linux下的工作原理和实现过程，成功构建了IP SAN，并介绍了IPSec技术在IP SAN中的应用。论文的最后使用测试工具IOMeter对IP SAN的功能、性能和安全功能三项指标进行了测试，并对结果进行了分析，提出了系统改进的一些设想。
With the explosive increase of data in network, SAN (Storage Area Network) has come into the phase of application as one of the important solutions to network storage. The traditional SAN mainly bases on FC (Fibre Channel) protocol, and has some disadvantages such as short distance, high cost and complex design. But now IP protocol has developed fully and reached maturity. Therefore how to utilize IP technology to improve or replace FC is becoming a hot issue in the field of network storage. Constructing IP SAN with iSCSI has been the important solution to network storage.
Firstly, the concept of network storage is introduced and the advantages of SAN in the area of network are analyzed in the thesis.Then the iSCSI protocol which works in SAN is studied and analyzed in several aspects, such as the architecture of protocol session management, naming and discovery, PDU, error recovery and security mechanism. Furthermore, two main implementations of the iSCSI protocol by means of software and hardware are introduced and compared. The implementation of the IP SAN by way of software based on the iSCSI is studied according to the above analysis. In addition, the principle and the implement of iSCSI initiator and target in Linux are interpreted in the thesis. The IP SAN is constructed successfully and uses the IPSec technology to assure the security of the system. At last, the function, performance, and the security of IP SAN are tested by IOMeter, the results are analyzed and some ideas are proposed to improve the system.
引文
[1] 熊剑平，徐学雷，何宁．数据存储的网络化：现状和趋势．世界电信．2002：33-37页
[2] Paul Spread. Silverback Sees Bright Future for IP Storage. http://www.enterprisestorageforum.com/technology/news/article.php/3089391.2003-10-9
[3] 谭志虎，裴先登，谢长生等．附网存储——一种新的网络存储方案．电子计算机和外部设备．1999，23(1)：3-6页
[4] Tom Clark, Thomas Clark. Designing Storage Area Networks:A Practical Reference for Implementing Fibre ChannelSANs. Harlow: Addison-Wesley, 1999:10-15P
[5] Marc Farley．SAN存储区域网络．孙功星等译．北京：机械工业出版，2001：20-23页
[6] Stephen Aiken, Dirk Grunwald, Andrew R. Pleszkun. A Performance Analysis of the iSCSI Protocol. IEEE MSS' 03. Computer Science.
[7] C.M. Gauger, M. Kohn, S. Gunreben, D. Sass, S. GiI Perez. Modeling and Performance Evaluation of iSCSI Storage Area Networks over TCP/IP——based MAN and WAN networks. IEEE, 2005
[8] Annie Foong, Gary McAlpine, Dave Minturn, Greg Regnier, Vikram Saletore. An Architecture for Software-based iSCSI on Multiprocessor Servers. IEEE, IPDPS'OS. Computer Science.
[9] 舒继武，薛巍，付长冬．网络存储系统与技术的现状与发展趋势．2004中国计算机科学技术发展报告．http://www.ccf.org
[10] Julian Satran, Daniel Smith, etc. iSCSI, draft-ietf-ips-iscsi-20.http://www.ietf.org.January 2003
[11] A Storage Networking Industry Association and SNIA IP Storage Forum White Paper, iSCSI Technical White Paper
[12] Meth, K.Z.,Satran, J.. Features of the iSCSI protocol. Communiations Magazine, IEEE, Vol 41, 2003: 72-75P
[13] Meth, K. Z., Satran, J.. Design of the iSCSI protocol. Mass Storage Systems and Technologies, 2003 (MSST 2003). Proceedings. 20th IEEE/11 th NASA Goddard Conference on, April 2003: 116-122P
[14] Satran, J.,Meth, K.,Sapuntzakis, C. etal..Internet Small Computer Systems Interface (iSCSI).http://www.ietf.org/rfc/rfc3720.txt, 2004
[15] Mark Bakke, Jim Hafner, etc.. iSCSI Naming and Discovery, draft-ietf-ips-iscsiname-disc-10, http://www.ietf.org
[16] Shuang-Yi,T.,Ying-Ping, L Du, D.H.C.:Performance study of software-based iSCSI security. Security in Storage Workshop. Proceedings. First International IEEE, 2002:70-79P
[17] Kevin Gibbons, Josh Tseng, Franco Travostino et al.. Internet Storage Name Service (iSNS).http://www. ietf. org/internet-drafts/draft-ietf-ips-isns-22. txt, February 2004
[18] Mark Bakke, John Huffered, Kaladhar Voruganti et al.. Finding Internet Small Computer Systems Interface (iSCSI) Targets and Name Servers using Service Location Protocol version2 (SLPv2). http://www.ietf.org/Internet-drafts/draft-ietf-ips-iscsi-slp-09. txt, August 2004.
[19] T. Wu. The SRP Authentication and Key Exchange System. ftp://ftp.rfc-editor.org/in-notes/src2945.txt, September 2000
[20] W. Simpson. PPP Challenge Handshake Authentication Protocol (CHAP). ftp://ftp.rfc-editor.org/in-notes/src1994.txt, August 1996
[21] B. Aboba, W. Dixon, et al. Securing Block Storage Protocols over IP. http://www.ietf.org/internet-drafts/draft-ietf-ips-security-14.txt, July 2002
[22] Shuang-Yi, T., Ying-Ping, L, Du, D.H.C.: Performance study of software-based iSCSI security. Security in Storage Workshop. Proceedings. First International IEEE, 2002: 70-79P
[23] Intel-iSCSI Projects. http://intel-iscsi, sourceforge, net
[24] Anshul Chadda, Ashish Palekar, Narendran Ganapathy, and R. D. Russell. Design, Implementataion, and Performance Analysis of the iSCSI Protocol for SCSI Over TCP/IP, InterNetworking 2003
[25] K. Z. Meth, iSCSI Initiator Design and Implementation Experience, in Tenth NASA Goddard Conference on Mass Storage Systems and Technologies Nineteenth IEEE Symposium on Mass Storage Systems. Maryland, USA: IEEE, Apr 2002
[26] Alacritech Corp. Accelerating iSCSI Storage. http://www. alacritech, com. 2004
[27] Michael J. S. Smith. rransport Offload Engines Help Relieve TCP Processing Burden for Gigabit Ethernet. http://www.wwpi.com/2002
[28] Eric Yeh, Herma Chao, et al. Introduction to TCP/IP Offload Engine. http://www.10gea.org.Apt 2002
[29] 周巍松等编著．Linux系统分析与高级编程技术．北京：机械工业出版社，1999：73-75页
[30] Alessandro Rubini. Linux设备驱动程序．LISOLEG译．北京：中国电力出版社，2000：13-16页
[31] Alon Cox. An Introduction To SCSI Drivers. Cambridge: o'Reilly &Associates, Inc. 1999: 3-7P
[32] Intel iSCSI protect, https://sourceforge.net/projects/intel-iscsi
[33] Carlton R. Davis. IPSec：VPN的安全实施．周永彬译．清华大学出版社，2002(1)
[34] IBM. IOMetcr User's. http://cvs.sourceforge.net/egi-bin/viewevs.egi/iometer/iometer/Docs/Iometer.pdf,2003-02
[2] Paul Spread. Silverback Sees Bright Future for IP Storage. http://www.enterprisestorageforum.com/technology/news/article.php/3089391.2003-10-9
[3] 谭志虎，裴先登，谢长生等．附网存储——一种新的网络存储方案．电子计算机和外部设备．1999，23(1)：3-6页
[4] Tom Clark, Thomas Clark. Designing Storage Area Networks:A Practical Reference for Implementing Fibre ChannelSANs. Harlow: Addison-Wesley, 1999:10-15P
[5] Marc Farley．SAN存储区域网络．孙功星等译．北京：机械工业出版，2001：20-23页
[6] Stephen Aiken, Dirk Grunwald, Andrew R. Pleszkun. A Performance Analysis of the iSCSI Protocol. IEEE MSS' 03. Computer Science.
[7] C.M. Gauger, M. Kohn, S. Gunreben, D. Sass, S. GiI Perez. Modeling and Performance Evaluation of iSCSI Storage Area Networks over TCP/IP——based MAN and WAN networks. IEEE, 2005
[8] Annie Foong, Gary McAlpine, Dave Minturn, Greg Regnier, Vikram Saletore. An Architecture for Software-based iSCSI on Multiprocessor Servers. IEEE, IPDPS'OS. Computer Science.
[9] 舒继武，薛巍，付长冬．网络存储系统与技术的现状与发展趋势．2004中国计算机科学技术发展报告．http://www.ccf.org
[10] Julian Satran, Daniel Smith, etc. iSCSI, draft-ietf-ips-iscsi-20.http://www.ietf.org.January 2003
[11] A Storage Networking Industry Association and SNIA IP Storage Forum White Paper, iSCSI Technical White Paper
[12] Meth, K.Z.,Satran, J.. Features of the iSCSI protocol. Communiations Magazine, IEEE, Vol 41, 2003: 72-75P
[13] Meth, K. Z., Satran, J.. Design of the iSCSI protocol. Mass Storage Systems and Technologies, 2003 (MSST 2003). Proceedings. 20th IEEE/11 th NASA Goddard Conference on, April 2003: 116-122P
[14] Satran, J.,Meth, K.,Sapuntzakis, C. etal..Internet Small Computer Systems Interface (iSCSI).http://www.ietf.org/rfc/rfc3720.txt, 2004
[15] Mark Bakke, Jim Hafner, etc.. iSCSI Naming and Discovery, draft-ietf-ips-iscsiname-disc-10, http://www.ietf.org
[16] Shuang-Yi,T.,Ying-Ping, L Du, D.H.C.:Performance study of software-based iSCSI security. Security in Storage Workshop. Proceedings. First International IEEE, 2002:70-79P
[17] Kevin Gibbons, Josh Tseng, Franco Travostino et al.. Internet Storage Name Service (iSNS).http://www. ietf. org/internet-drafts/draft-ietf-ips-isns-22. txt, February 2004
[18] Mark Bakke, John Huffered, Kaladhar Voruganti et al.. Finding Internet Small Computer Systems Interface (iSCSI) Targets and Name Servers using Service Location Protocol version2 (SLPv2). http://www.ietf.org/Internet-drafts/draft-ietf-ips-iscsi-slp-09. txt, August 2004.
[19] T. Wu. The SRP Authentication and Key Exchange System. ftp://ftp.rfc-editor.org/in-notes/src2945.txt, September 2000
[20] W. Simpson. PPP Challenge Handshake Authentication Protocol (CHAP). ftp://ftp.rfc-editor.org/in-notes/src1994.txt, August 1996
[21] B. Aboba, W. Dixon, et al. Securing Block Storage Protocols over IP. http://www.ietf.org/internet-drafts/draft-ietf-ips-security-14.txt, July 2002
[22] Shuang-Yi, T., Ying-Ping, L, Du, D.H.C.: Performance study of software-based iSCSI security. Security in Storage Workshop. Proceedings. First International IEEE, 2002: 70-79P
[23] Intel-iSCSI Projects. http://intel-iscsi, sourceforge, net
[24] Anshul Chadda, Ashish Palekar, Narendran Ganapathy, and R. D. Russell. Design, Implementataion, and Performance Analysis of the iSCSI Protocol for SCSI Over TCP/IP, InterNetworking 2003
[25] K. Z. Meth, iSCSI Initiator Design and Implementation Experience, in Tenth NASA Goddard Conference on Mass Storage Systems and Technologies Nineteenth IEEE Symposium on Mass Storage Systems. Maryland, USA: IEEE, Apr 2002
[26] Alacritech Corp. Accelerating iSCSI Storage. http://www. alacritech, com. 2004
[27] Michael J. S. Smith. rransport Offload Engines Help Relieve TCP Processing Burden for Gigabit Ethernet. http://www.wwpi.com/2002
[28] Eric Yeh, Herma Chao, et al. Introduction to TCP/IP Offload Engine. http://www.10gea.org.Apt 2002
[29] 周巍松等编著．Linux系统分析与高级编程技术．北京：机械工业出版社，1999：73-75页
[30] Alessandro Rubini. Linux设备驱动程序．LISOLEG译．北京：中国电力出版社，2000：13-16页
[31] Alon Cox. An Introduction To SCSI Drivers. Cambridge: o'Reilly &Associates, Inc. 1999: 3-7P
[32] Intel iSCSI protect, https://sourceforge.net/projects/intel-iscsi
[33] Carlton R. Davis. IPSec：VPN的安全实施．周永彬译．清华大学出版社，2002(1)
[34] IBM. IOMetcr User's. http://cvs.sourceforge.net/egi-bin/viewevs.egi/iometer/iometer/Docs/Iometer.pdf,2003-02