Distributed storage defense in a cluster

摘要

Embodiments provide a method and system for enabling access to a storage device. Specifically, a node may request admittance to a cluster that has read and write access to a storage device. The node seeking access to the storage device must be first be approved by other nodes in the cluster. As part of the request, the node seeking access to the storage device sends a registration key to a storage device. Upon expiration of a registration timer, the node seeking access to the storage device receives a registration table from the storage device and determines whether its registration key is stored in the registration table. If the registration key is stored in the registration table the node has been accepted in the cluster and as a result, has been granted read and write access to the storage device.

主权项

1. A method for enabling access to a storage device, the method comprising:
sending by a particular node a write request to the storage device; receiving by the particular node a registration table from the storage device, wherein the registration table identifies one or more other nodes in a cluster of nodes; determining by the particular node that a first registration key of the particular node is not present in the registration table; sending by the particular node a second registration key to the storage device for re-admittance to the cluster and write access to the storage device; based on sending the second registration key, setting by the particular node a first registration timer, wherein the first registration timer provides a time period for one or more nodes in the cluster of nodes to modify the registration table maintained by the storage device; upon expiration of the first registration timer, receiving by the particular node the registration table from the storage device, wherein the registration table includes modifications from the one or more other nodes in the cluster of nodes during the time period; determining by the particular node whether the second registration key is stored in the registration table; and when the second registration key is stored in the registration table, establishing a remote connection to the storage device through the one or more other nodes in the cluster and writing to the storage device.