# Patent

## Title
Systems and methods for implementing content sensitive routing over a wide area network (WAN)

## Abstract

Systems and methods for optimizing storage network functionality. The methods and systems of the present invention are particularly useful for optimizing storage network performance for cases in which some components of the network may be separated by significant distances and/or which include communication links with relatively limited bandwidth. In certain aspects, the present invention provides methods and systems for implementing access to and management of geographically distributed storage resources through multiple peer-to-peer storage network array management functions (AMFs) that may also be geographically distributed. The methods and systems of the present invention, in certain aspects, provide geographically aware cache sharing, cache replication, cache coherence, traffic routing, redundancy group structure, source and destination selection, pre-fetching of data, message gathering and other useful features.

## Background
BACKGROUND
The present invention relates generally to storage networks, and more particularly to systems and methods for optimizing performance in networks including geographically remote components and/or limited bandwidth connection links.
An increasingly globalized economy results in pressure for organizations to share resources. And, in an era when information is one of the most valuable resources an organization possesses, sharing electronic data storage is becoming an imperative. The sharing may need to occur between multiple sites of a single organization, or between different organizations that share common objectives, or between organizations that share nothing in common except the desire to purchase reliable and inexpensive data storage from a third party.
Opportunities for organizations that can efficiently share storage resources include:
1. Reduced transactional latency: In many applications, a single data transaction can initiate a cascade of tens or even hundreds of other automated data transactions. Since transcontinental and intercontinental transport for a single transaction results in latencies of a tenth of a second or more, cumulative transport latency can easily become unacceptable. Consequently, storing data close to the businesses and customers that need it when they need it makes good sense.
2. Improved storage management: Increasingly, an important bottleneck to scaling storage networks is the lack of skilled storage management professionals. If the storage resources of the multi-site network can be accessed and managed by controller subsystems at any given site, significant savings would result.
3. Improved availability and business continuity: If a storage subsystem from any given site can compensate for failures that occur in sister subsystems at other sites, the extended network can achieve greater fault tolerance at less expense. Also, in the event of a disaster affecting any single site, it is important that the other sites be able to compensate seamlessly without any disruption to their normal operation except that they must handle a greater workload.
4. Reduced congestion and improved performance: Centralized storage can create an unnecessary bottleneck in data distribution. This is particularly true of data centers devoted to applications involving large block sequential content (e.g., video-on-demand applications).
5. Improved use of corporate resources: Centralized storage often fails to exploit the existing network and storage resources of multi-site organizations. Also, it is often valuable for the geographic distribution of storage to mirror the geographic distribution of business units within a company.
Unfortunately, most organizations are not able to realize these opportunities because of limitations inherent to conventional storage network architectures.
FIG. 1 shows an example of a logical layout for a conventional storage area network (SAN). In this example, application servers 10 are connected through a Fibre Channel (FC) fabric to an array of storage devices 20. In this case, FC switches 30 provide any-to-any connectivity between the servers 10 and logical storage devices 20, each of which might, for example, represent an array of disks. A Redundant Array of Independent Disk (RAID) controller 40 manages each logical storage device 20 in FIG. 1. The RAID controller function shown in the FIG. 1 is meant to represent a logical controller function that may be implemented in software, hardware, or some combination of both. The RAID controller function is a special case of an Array Management Function (AMF). The array of storage devices managed by-a given AMF is known as “Redundancy Group” (RG). In general, the AMF is responsible for access and management of one or more RGs.
“Array Management Function” (AMF) generally refers to the body that provides common control and management for one or more disk or tape arrays. An AMF presents the arrays of tapes or disks it controls to the operating environment as one or more virtual disks or tapes. An AMF typically executes in a disk controller, an intelligent host bus adapter or in a host computer. When it executes in a disk controller, an AMF is often referred to as firmware. One or more AMFs can execute in each controller, adapter or host as desired for the particular application.
“Redundancy Group” (RG) generally refers to a collection of logical or physical storage entities organized by an AMF for the purpose of providing data protection. Within a given RG, a single type of data protection is used. All the user data storage capacity in a RG is protected by check data stored within the group, and no user data capacity external to a RG is protected by check data within it. RGs typically include logical entities composed of many resources such as stripes, data blocks, cached data, map tables, configuration tables, state tables, etc.
“Redundancy Group Management” generally refers to the responsibilities, processes and actions of an AMF associated with a given redundancy group.
While there are many variants on the typical SAN architecture shown in FIG. 1, one element of note here is that each RG is managed by only one AMF. This AMF is said to be the “logical owner” of the given RG.
An important consequence is that when an AMF fails, users lose access and control of the RGs for which it had ownership. Some conventional storage network architectures address this problem by having responsibility for RGs transfer to new AMFs in the event of a failure of their logical owner. Other Storage networking systems employ a “Master/Slave” architecture in which two or more AMFs may have access to a given storage array, however, changes to the storage array (e.g., writing of data, re-build of a failed disk, expansion of the array, etc.) are managed exclusively through the “Master” AMF.
When a storage network is implemented in a multi-site configuration, additional constraints imposed by the “Master/Slave” architecture for RG management become apparent. Suppose, for instance, that a given RG is composed of storage resources from two sites. Unless the Master AMF is “geographically aware”, read requests may be routed to remote storage resources even when the requisite data is available locally. The result is unnecessary penalties in terms of response time, performance, and wide area bandwidth usage. Also, suppose that users at the remote site wish to perform write operations or control and management functions on the RG that are reserved for the Master AMF. Traffic associated with these functions must be routed through the remote site, again resulting in unnecessary penalties for local users.
Typically, in multi-site storage networks using the Master/Slave architecture for RG management, the remote mirrors of a logical volume within a redundancy group are necessarily ‘read-only’ unless the primary logical volumes fail. Geographically distributed RGs are, in fact, only providing passive remote mirrors to primary data stored locally. Such systems typically do not allow the user to mount RGs that might include primary storage at multiple sites, striping across multiple sites, or even primary storage that is entirely remote from the site at which the Master AMF resides.
U.S. Pat. No. 6,148,414, which is hereby incorporated by reference in its entirety, describes a novel storage networking architecture in which multiple AMFs maintain peer-to-peer access of shared RGs.
FIG. 2 shows a sample network configuration incorporating multiple AMFs in which the teachings of U.S. Pat. No. 6,148,414 may be implemented. A plurality of network clients (not shown) is communicably coupled with a plurality of servers 110, each of which is, in turn, coupled to a plurality of AMFs (resident in the AMF Blades or “NetStorager” cards 115 as shown in FIG. 2). These AMFs (resident on blades 115) are, in turn, connected though a switch fabric 130 to a plurality of storage resources 120.
In the architecture of FIG. 2, the AMFs provide concurrent access to the redundancy groups for associated host systems. When a host (e.g., network client device or server 110) requests an AMF to perform an operation on a resource, the AMF synchronizes with the other AMFs sharing control of the redundancy group that includes the resource to be operated on, so as to obtain a lock on the resource. While performing the operation, the AMF sends replication data and state information associated with the resource to the other AMFs sharing control of the redundancy group such that if the AMF fails, any of the other AMFs are able to complete the operation and maintain data reliability and coherency.
Another key element of the storage network architecture described by U.S. Pat. No. 6,148,414 is that multiple AMFs not only share access to a given RG, they also share management of it as peers. So, for-example, the architecture incorporates an algorithm by which multiple AMFs arbitrate for responsibility to reconstruct the redundancy group when one of its disks fails. Also, the architecture includes an algorithm by which a redundancy group can be expanded to include an additional disk, for example.
Such systems, however, tend to be insensitive to the geographic location of the various components of the storage network. It is therefore desirable to provide systems and methods to optimize storage network functionality for cases in which some components of the network may be separated by significant distances and/or which include communication links with relatively limited bandwidth.
SUMMARY
The present invention provides systems and methods for optimizing storage network functionality. In particular, the methods and systems of the present invention are particularly useful for optimizing storage network performance for cases in which some components of the network may be separated by significant distances and/or which include communication links with relatively limited bandwidth. In certain aspects, the present invention provides methods and systems for implementing access to and management of geographically distributed storage resources through multiple peer-to-peer storage network array management functions (AMFs) that may also be geographically distributed. The methods and systems of the present invention, in certain aspects, provide geographically aware cache sharing, cache replication, cache coherence, traffic routing, redundancy group structure, source and destination selection, pre-fetching of data, message gathering and other useful features.
In certain aspects, the present invention provides methods and systems for implementing a storage network in which multiple AMFs that may be physically separated by significant distances (e.g., up to tens of thousands of kilometers or more) can more efficiently manage multiple RGs, each of which may include storage resources that may be physically separate from one another by significant distances (e.g., up to tens of thousands of kilometers or more).
Unlike the methods and systems presented in U.S. Pat. No. 6,148,414, which are generally insensitive to the geographic location of the various components of the storage network, in certain aspects the methods and systems of the current invention are designed specifically to optimize storage network functionality for cases in which some components of the network may be separated by significant distances. The methods and systems of the present invention can also be applied to storage networks in which certain components of the network are connected to certain other components in the network by communication links with relatively limited bandwidth.
Further, it should be noted, that even in the event that neither physical separation nor limitations in bandwidth constrain relations between components of the storage network, many aspects of the present invention differ significantly from those presented in U.S. Pat. No. 6,148,414.
The present invention provides methods and systems that provide geographically and bandwidth aware cache coherence and management, input/output (JO) traffic routing, storage resource selection and configuration, fail-over management, reconstruction management, data transfer management (i.e., from one storage resource to another), RG expansion and contraction management, and message gathering and pre-fetching.
According to the present invention, methods and systems are provided for implementing hierarchical distributed cache sharing in which a proxy node manages communications between LAAGs so as to minimize or eliminate inter-LAAG meta-data traffic on read and write operations.
According to an aspect of the present invention, a system for implementing hierarchical distributed cache coherence in a storage network is provided. The system typically includes a redundancy group (RG) including a first plurality of storage resources and a second plurality of storage resources located remotely from the first plurality of storage resources. The system also typically includes an AMF access group (AAG), including a plurality of AMFs that share read and write access to the RG, wherein the AAG includes two or more local AMF access groups (LAAGs), each LAAG being either remote from other LAAGs or communicably coupled to other LAAGs by a low bandwidth network link. The system also typically includes a proxy node configured to manage communications between the two or more LAAGs so as to minimize or eliminate inter-LAAG meta-data traffic for read and write operations. The proxy node is implemented in one of the plurality of AMFs or as a separate AMF.
According to another aspect of the present invention, a method is provided for implementing hierarchical distributed cache coherence in a storage network that typically includes a redundancy group (RG) including a first plurality of storage resources and a second plurality of storage resources located remotely from the first plurality of storage resources, and an AMF access group (AAG), including a plurality of AMFs that share read and write access to the RG, wherein the AAG includes two or more local AMF access groups (LAAGs), each LAAG being either remote from other LAAGs or communicably coupled to other LAAGs by a low bandwidth network link. The method typically includes receiving a data access request from a host by a first AMF in a first LAAG, sending meta-data related associated with the access request to a second AMF in the LAAG, wherein the second AMF is configured to act as a proxy agent for the LAAG, and sending, from the second AMF, the meta-data to the proxy agent for each of the other LAAGs. The data access request is one of a read request and a write request. The meta-data typically includes, for write requests, write invalidate commands.
Additional aspects of the present invention include a method for implementing preferred target selection for read operations by a given AMF so that the read operations are directed toward data mirrors residing within the nearest LRG, a method for implementing preferred AMF selection, and source mirror selection for rebuild and data transfer operations so that read/write traffic is confined as much as possible to the LRG associated with the target storage resource, a method for implementing preferred target selection for read operations by a given AMF in fail-over scenarios so that these read operations are directed toward the nearest surviving data mirror, a method for implementing preferred target selection for read operations by a given AMF so that these read operations are directed toward data mirrors residing within the nearest LRG, and a method for implementing adaptive geographically aware RAID.
Reference to the remaining portions of the specification, including the drawings and claims, will realize other features and advantages of the present invention. Further features and advantages of the present invention, as well as the structure and operation of various embodiments of the present invention, are described in detail below with respect to the accompanying drawings. In the drawings, like reference numbers indicate identical or functionally similar elements.



BRIEF DESCRIPTION OF THE DRAWINGS
FIG. 1 shows an example of a logical layout for a conventional storage area network (SAN).
FIG. 2 illustrates a sample network configuration incorporating multiple AMFs.
FIG. 3 illustrates a network configuration according to one embodiment.
FIG. 4 illustrates a network configuration according to one embodiment.



DETAILED DESCRIPTION
Geographic/Bandwidth Sensitive Distributed AMF Cache Coherence An “AMF Access Group” (AAG) for a particular RG is defined as the set of AMFs that share read/write access to the RG. Similarly, an “AMF Management Group” (AMG) for a particular RG is defined as the set of AMFs that share management of the RG.
In the event that AMFs within the AAG have cache memory, it is necessary to ensure that these caches are kept coherent with one another. Otherwise, read accesses through different AMFs within the AAG might yield inconsistent data sets.
Thus, according to one embodiment, when AMFs within the AAG can be sub-divided into groups by virtue of their physical location or other constraints (e.g., topological or bandwidth constraints) limiting communication, the cache coherence algorithm is modified to establish a hierarchical structure within the AAG. A “Local AMF Access Group” (LAAG) of a given AAG is defined as a sub-group of AMFs that can be distinguished from other AMFs within the AAG by virtue of physical locality at a specific site or by virtue of some other constraint limiting communication with other AMFs within the AAG.
In certain aspects, to more effectively provide cache coherence throughout the AAG, it will frequently be desirable to adopt a different strategy for intra-LAAG cache coherence than for inter-LAAG cache coherence. To this end, a gateway proxy agent P is determined for each LAAG whose responsibility is to manage cache coherence meta-traffic between that LAAG and all others within the AAG. Each gateway proxy agent P is preferably one of the AMFs in the LAAG.
One preferred implementation of a hierarchical cache coherence algorithm of the present invention is as follows:
1. AMF(X) within LAAG(Y) receives from a host server a write update to M consecutive blocks beginning with block N.
2. AMF(X) sends a write invalidate command for blocks N to N+M to all AMFs within LAAG(Y)
3. AMF(X) sends a write invalidate command for blocks N to N+M to the proxy agent P(Y) for LAAG(Y)
4. P(Y) forwards the write invalidate command to the proxy agents for all the other LAAGs within the AAG.
5. Proxy agents for each of the other LAAGs broadcast the write invalidate command to all AMFs within their respective LAAGs.
6. Upon receipt of acknowledgment of successful write invalidates from all AMFs within the LAAG, each proxy agent sends an acknowledgment of successful invalidation to the originating proxy agent P(Y).
7. When P(Y) receives acknowledgments of successful invalidation from all other proxy agents, it forwards an acknowledgment of successful invalidation to AMF(X)
8. Upon receipt of acknowledgments from all other AMFs within LAAG(Y) and receipt of acknowledgement from P(Y), AMF(X) writes the new data to local cache.
9. AMF(X) sends acknowledgment of successful write to the host server.
Another preferred implementation for a distributed “cache coherence” algorithm is simply for each AMF to by-pass its cache (or invalidate its cache) for block ranges within RGs having AAGs with more than one LAAG.
The value of this strategy is that the cache resources of the AMF are reserved for block ranges that are accessed only by ‘local’ AMFs. This results in greater locality of reference and improved cache-hit performance.
It is understood that several other distributed cache coherence algorithms are possible that will have advantages for certain traffic profiles in minimizing inter-LAAG communication (e.g., write updates within the LAAG and write invalidates between LAAGs, directory based schemes which employ local directories, etc.). One feature that differentiates the family of distributed cache coherence architectures described herein is that they typically employ a proxy agent responsible for inter-LAAG communication of cache coherence meta-data.
Geographically Aware Distributed Cache Sharing
If the AAG for a given block range includes more than one LAAG, there is the risk of wasting bandwidth for remote cache read requests. More precisely, the risk is that when a local AMF discovers that a given page is not in his own cache it will request the page from the cache of a AMF in a different LAAG. This may be a poor gamble for a host or reasons including:
By virtue of locality of reference, the page is much less likely to be in the geographically remote AMF's cache.
The additional transport latency of accessing remote cache reduces the potential “win” of a remote cache hit.
Whether or not it is successful, the request for the page from remote cache is wasteful of the wide area bandwidth.
According to one embodiment, to overcome the problem, the cache sharing group for each AMF is configured so that it is limited to the LAAG.
Several different strategies for distinguishing the new group structure are possible. One preferred implementation is to maintain cache-sharing within the LAAG on read operations but prohibit cache sharing between LAAGs. The sequence on read operations in one embodiment is as follows:
1. AMF(X) receives a read request for a given block range
2. AMF(X) consults his local cache and, if the data is there, serves it to host,
3. In the event that the required blocks are not in the local cache of AMF(X), it initiates a request for the blocks to a local directory which mediates a data transfer from cache another AMF within the LAAG if possible.
4. In the event that the required blocks are not in cache of an AMF within the LAAG, AMF(X) retrieves the data from the RG.
It is understood that several other distributed cache sharing algorithms are possible that will have advantages for certain traffic profiles in minimizing inter-LAAG communication. One feature that differentiates the family of distributed cache sharing architectures discussed herein is that they either employ a proxy agent responsible for inter-LAAG communication of cache sharing meta-data or prohibit inter-LAAG cache sharing entirely.
Geographically Aware AMF Target Fail-Over
In configurations for which an AAG is composed of multiple LAAGs and in which the RG includes multiple Local Redundancy Groups (LRGs) each of which includes a mirror of the primary data for the RG, it is desirable to implement a strategy by which read operations are directed preferentially to the LRG for each AMF.
One preferred implementation is to introduce a parameter in the function of the AMF that selects targets for read operations such that one AMF target for mirrored read operations is preferred over the others. In configurations having multiple LAAGs, the preferred target for read operations should be configured so that each AMF preferentially reads from storage resources that are within its LRG.
On write operations, to ensure data coherence between the LRGs it is necessary to write data to all mirrors within the RG. In a preferred implementation, write operations are conducted synchronously and acknowledgment of a successful write is sent to the host once all mirrors within the RG have acknowledged successful writes back to the initiating AMF.
Furthermore, in a preferred implementation, each AMF has a hierarchy of preferred targets so that if the primary target fails, read operations are preferentially targeted to surviving mirrors within the LRG.
Similarly, for RG ‘reconstruction’ and block-level data transfer scenarios (e.g. disk-level rebuild, partition-level rebuild, disk-level copy, partition-level copy, etc.), it is desirable to ensure maximal localization of data transfer. Consider the example of a geographically distributed RAID 1 in which there are mirrors at both Site A and Site B. Also, suppose that the redundancy group is exported through AMFs at both sites. Now, suppose one of the mirrors at Site A requires a rebuild. Since the algorithm that selects an AMF to take charge of the reconstruction operation is unaware of physical location, the perverse situation can arise in which an AMF at Site B mediates a rebuild between two disks at Site A. By changing the reconstruction algorithm so that a preferred AMF can be nominated to mediate a given reconstruction operation it is ensured that minimal disk reconstruction traffic proceeds over the WAN in the event of disk failure. Using this new feature in conjunction with the ability of the AMFs to select a preferred target for read operations, excellent localization of data transfer for reconstruction operations can be ensured.
Geographically Aware Traffic Routing
Enabling “content sensitive routing” and geographically aware routing could significantly improve performance both in single site implementations and multi-site implementations.
Below, a method for achieving content sensitive routing is discussed.
Consider the configuration of FIG. 3. Note that two AMFs are involved, the “Traffic Router” 210 and the “Traffic Shaper” 220. To understand the roles of these AMFs, certain aspects of the processing of write operations and read operations will be considered in turn.
For Write Operations:
1. The first AMF in the data path from the host—the Traffic Router 210—performs normal RAID 1 write operations. From its perspective, the targets for its mirrored writes are Disk 1 and another AMF (the Traffic Shaper 220).
2. The Traffic Shaper 220 also performs normal AMF write operations, however, its configuration is optimized for large block sequential traffic. For example, in one embodiment, the Traffic Shaper 220 is configured with an AMF page size that is much larger than that of the Traffic Router 210. Also, it can be configured in write-back mode and flush its dirty data to disk much less frequently than the Traffic Router 210 does.
3. The configuration of logical Disk 2 is also optimized for large block sequential traffic. For example, in one embodiment, Disk 2 corresponds to a RAID 0 redundancy group with striping over a large number of disks and with a relatively large stripe depth. Also, the configuration of the disk cache for logical Disk 2 is preferably optimized for large sequential traffic.
4. By contrast, the configuration of logical Disk 1 is optimized for short, random traffic. Of course, despite the ‘optimizations’ described above, all writes—whether they are long or short—are preferably mirrored to logical disks 1 and 2. Consequently, the advantages of the proposed configuration for write operations may not be all that great. Even so, if the
Traffic Router 210 is configured to acknowledge a successful write to host after it has received acknowledgment from just one of its targets, and the Traffic Shaper 220 is configured in write-back mode, the user should experience a good combination of fault tolerance and write performance (e.g., a successful write is acknowledged to host upon a successful write to the caches of both the Traffic Router 210 and the Traffic Shaper 220). As another example, suppose the Traffic Router 210 is configured to acknowledge a successful write to host after it has itself received acknowledgement of a successful write from one of its targets and further suppose the Traffic Shaper 220 is configured in a write-through mode. The user will still experience a reduction in latencies on write operations since, regardless of whether the write is long or short, one or the other of the targets will acknowledge a successful write sooner than would otherwise be the case.
For Read Operations:
1. The Traffic Router 210 receives a read request from a host through one of its FC ports.
2. The VDP forwards the request to local cache and, if the required pages are in cache, they are served to the host.
3. If the required pages are not in local cache, the request is forwarded to the AMF.
4. At this stage, a modification in the software tower is implemented. In the typical implementation of the software tower, the VDP decomposes the read request into AMF pages of fixed size and the VDP does not pass to the AMF information about the size of the original read request. According to one embodiment, the AMF applies a test condition to the size of the original read request. In this embodiment, AMF pages spawned by read requests larger than a threshold are preferentially scheduled to the Traffic Shaper target 220, and smaller read requests are preferentially forwarded to logical Disk 1.
5. The Traffic Shaper 220 is an ordinary AMF, however, its configuration is optimized for large block sequential traffic. In particular, Traffic Shaper 220 preferably includes a much larger AMF page size than the Traffic Router 210. Also, the “Prefetch” feature is preferably turned on.
6. The configuration of logical Disk 2 should be optimized for large block sequential traffic. For instance, logical Disk 2 might correspond to a RAID 0 RG with a large number of disks and a large stripe depth. Also, the “Prefetch” feature of each of the disk caches should be turned on. In principle, even the physical disks themselves might be selected based on their ability to provide high performance for large block sequential reads.
7. Logical Disk 2 should be configured to perform best for short read operations.
In the event of failure of either logical Disk 1 or Disk 2, the AMF of the Traffic Router 210 schedules all reads (regardless of their length) to the surviving disk.
Several other possible implementations of this strategy follow directly. For instance, the caching policy of Traffic Router 210 in one embodiment is altered so that it does not retain cache pages forwarded to it from the Traffic Shaper 220. This helps provide better locality of reference in each cache and, hence, better cache performance.
Adaptive Geographic RAID 5
According to one embodiment, a distributed RAID1 configuration is implemented. At some later time (e.g., triggered by a Hierarchical Storage Management (HSM) policy) the remote mirror migrates to a geographically distributed RAID 3, RAID 5, or RAID 6. For instance, upon triggering by the HSM policy, stripes of a given remote RAID 1 mirror are sent to other sites. Each site that receives a stripe of this data uses it to modify parity data representing primary data from other remote sites. In principle, the original remote mirror could then be destroyed while retaining disaster tolerance.
Suppose, for instance, that five sites adaptively send parity from their primary data in this fashion. Should any of the five sites lose data, they could reconstruct that data through XOR operations between the parity data and the surviving primary data from the other four sites.
Geographic Caching/Geographic Sensitive Routing
Geographic sensitive routing can also be achieved through a version of the above strategy. Consider the network configuration shown in FIG. 4. The WAN gateway 330 is configured so that it has its best performance for large block sequential traffic. It may therefore be valuable to use the content sensitive routing strategy mentioned above to “shape” traffic going over the wide area link. On write operations, one might choose a write update policy in the WAN Traffic Shaper 320 that accumulates a large amount of dirty data before flushing to remote disk (e.g., semi-synchronous or asynchronous writing to remote disk). Also to better utilize the available bandwidth, only larger block sequential reads should be scheduled for the wide area link and the AMF page size in the WAN Traffic Shaper 320 should be configured to be unusually large. Further, by turning the pre-fetch feature on in the WAN Traffic Shaper 320, wide area transport latency can be masked from the user (i.e., geographic pre-fetch).
In the event that the SWAN configuration is such that remote data is not stored on local disk (as will frequently be the case for multi-site SWANs), the WAN Traffic Shaper 320 also can play the role of a “geographic cache”. By ensuring that its disk-side ports are only connected to the WAN gateway 330, it is ensured that all data in its cache is associated with remote storage (i.e., geographic caching). The geographic cache can be used to mask transport latency from the user.
Geographically Sensitive Cache Sharing
If the cache sharing group for a given block range includes AMFs that are separated over geography, there is the risk of wasting bandwidth for remote cache read requests. More precisely, the risk is that when a local AMF discovers that a given page is not in his own cache it will request the page from the cache of a geographically remote AMF. This may be a poor gamble for a host or reasons including:
By virtue of locality of reference, the page is much less likely to be in the geographically remote AMF's cache.
The additional transport latency of accessing remote cache reduces the potential “win” of a remote cache hit.
Whether or not it is successful, the request for the page from remote cache is wasteful of the wide area bandwidth.
According to one embodiment, to overcome the problem, the cache sharing group for each AMF is configured so that it does not include geographically remote AMFs.
While the invention has been described by way of example and in terms of the specific embodiments, it is to be understood that the invention is not limited to the disclosed embodiments. To the contrary, it is intended to cover various modifications and similar arrangements as would be apparent to those skilled in the art. Therefore, the scope of the appended claims should be accorded the broadest interpretation so as to encompass all such modifications and similar arrangements.

## Claims

1. An array management function (AMF) apparatus involved in implementing hierarchical distributed cache coherence in a storage network having a first local AMF access group (LAAG) and a second LAAG, the first LAAG including first AMF devices and a first proxy agent, and the second LAAG including second AMF devices and a second proxy agent, the AMF apparatus comprising:
instruction execution circuitry; and
instruction storage circuitry operative to store computer instructions and provide them to the instruction execution circuitry for execution to realize functional circuitry including:
write update receiving circuitry for receiving a write update from a host server, the write update identifying a set of storage blocks;
first sending circuitry for sending, in a first send operation, a first write invalidate command to all of the first AMF devices of the first LAAG, each first write invalidate command directing a respective first AMF device of the first LAAG to locally invalidate the set of storage blocks identified by the write update;
second sending circuitry for sending, in a second send operation, a proxy agent write invalidate command to the first proxy agent of the first LAAG, the proxy agent write invalidate command directing the first proxy agent of the first LAAG to forward the proxy agent write invalidate command to the second proxy agent of the second LAAG for distribution of a second write invalidate command to all of the second AMF devices of the second LAAG, each second write invalidate command directing a respective second AMF device of the second LAAG to locally invalidate the set of storage blocks identified by the write update;
first receiving circuitry for receiving, in a first receive operation, a first write invalidate acknowledgement from all of the first AMF devices of the first LAAG, each first write invalidate acknowledgement indicating that a respective first AMF device of the first LAAG has successfully locally invalidated the set of storage blocks identified by the write update;
second receiving circuitry for receiving, in a second receive operation, a proxy agent write invalidate acknowledgement from the first proxy agent of the first LAAG, the proxy agent write invalidate acknowledgement indicating that all of the second AMF devices of the second LAAG have acknowledged successful local invalidation of the set of storage blocks identified by the write update; and
write update sending circuitry for sending, upon completion of the first and second receive operations, a write update acknowledgement to the host server.

2. An AMF apparatus as in claim 1 wherein the first AMF devices and the first proxy agent are constructed and arranged to communicate with each other through a high bandwidth communications medium;
wherein the first and second proxy agents are constructed and arranged to communicate with each other through a low bandwidth communications medium, the high bandwidth communications medium having a bandwidth which is higher than that of the low bandwidth communications medium; and
wherein the first sending circuitry, when sending the first write invalidate command to all of the first AMF devices of the first LAAG, is constructed and arranged to transmit the first write invalidate command to all of the first AMF devices of the first LAAG at the bandwidth which is higher than that of the low bandwidth communications medium.

3. An AMF apparatus as in claim 2 wherein the first sending circuitry, when transmitting the first write invalidate command to all of the first AMF devices of the first LAAG at the bandwidth which is higher than that of the low bandwidth communications medium, is constructed and arranged to broadcast the first write invalidate command to all of the first AMF devices of the first LAAG.

4. An AMF apparatus as in claim 2 wherein the first LAAG resides at a first location;
wherein the second LAAG resides at a second location;
wherein the first and second locations are different and remotely separated from each other; and
wherein the second sending circuitry, when sending the proxy agent write invalidate command to the first proxy agent of the first LAAG, is constructed and arranged to direct the first proxy agent of the first LAAG to forward the proxy agent write invalidate command to the second proxy agent of the second LAAG via a point-to-point communications protocol.

5. An AMF apparatus as in claim 4 wherein the second AMF devices and the second proxy agent are constructed and arranged to communicate with each other through another high bandwidth communications medium having a bandwidth which is higher than that of the low bandwidth communications medium; and
wherein the second sending circuitry, when directing the first proxy agent of the first LAAG to forward the proxy agent write invalidate command to the second proxy agent of the second LAAG, is constructed and arranged to direct the second proxy agent of the second LAAG to broadcast the second write invalidate command to all of the second AMF devices of the second LAAG.

6. An AMF apparatus as in claim 2 wherein the proxy agent write invalidate command further directs the first proxy agent of the first LAAG to forward the proxy agent write invalidate command to a third proxy agent of a third LAAG for distribution of a third write invalidate command to all of the third AMF devices of the third LAAG, each third write invalidate command directing a respective third AMF device of the third LAAG to locally invalidate the set of storage blocks identified by the write update.

7. An AMF apparatus as in claim 2 wherein the write update identifies, as the set of storage blocks, a block range of consecutive storage blocks; and
wherein local invalidation of the set of storage blocks identified by the write update includes invalidating a local cache for the block range of the consecutive storage blocks.

8. An AMF apparatus as in claim 2 wherein the functional circuitry further includes AMF management circuitry constructed and arranged to perform array management functions as part of the first LAAG.

9. An AMF apparatus as in claim 8 wherein each AMF device couples to a set of storage devices to form a redundancy group; and
wherein each AMF device, including the AMF apparatus, operates as a front-end interface between a set of host servers and the redundancy group.

10. An AMF apparatus as in claim 8 wherein the AMF management circuitry and the first proxy agent are disposed within an AMF device of the first LAAG.

11. A method of operating an array management function (AMF) apparatus to facilitate hierarchical distributed cache coherence in a storage network having a first local AMF access group (LAAG) and a second LAAG, the first LAAG including first AMF devices and a first proxy agent, and the second LAAG including second AMF devices and a second proxy agent, the method comprising:
receiving a write update from a host server, the write update identifying a set of storage blocks;
sending, in a first send operation, a first write invalidate command to all of the first AMF devices of the first LAAG, each first write invalidate command directing a respective first AMF device of the first LAAG to locally invalidate the set of storage blocks identified by the write update;
sending, in a second send operation, a proxy agent write invalidate command to the first proxy agent of the first LAAG, the proxy agent write invalidate command directing the first proxy agent of the first LAAG to forward the proxy agent write invalidate command to the second proxy agent of the second LAAG for distribution of a second write invalidate command to all of the second AMF devices of the second LAAG, each second write invalidate command directing a respective second AMF device of the second LAAG to locally invalidate the set of storage blocks identified by the write update;
receiving, in a first receive operation, a first write invalidate acknowledgement from all of the first AMF devices of the first LAAG, each first write invalidate acknowledgement indicating that a respective first AMF device of the first LAAG has successfully locally invalidated the set of storage blocks identified by the write update;
receiving, in a second receive operation, a proxy agent write invalidate acknowledgement from the first proxy agent of the first LAAG, the proxy agent write invalidate acknowledgement indicating that all of the second AMF devices of the second LAAG have acknowledged successful local invalidation of the set of storage blocks identified by the write update; and
sending, upon completion of the first and second receive operations, a write update acknowledgement to the host server.

12. A method as in claim 11 wherein the first AMF devices and the first proxy agent are constructed and arranged to communicate with each other through a high bandwidth communications medium;
wherein the first and second proxy agents are constructed and arranged to communicate with each other through a low bandwidth communications medium, the high bandwidth communications medium having a bandwidth which is higher than that of the low bandwidth communications medium; and
wherein sending the first write invalidate command to all of the first AMF devices of the first LAAG includes transmitting the first write invalidate command to all of the first AMF devices of the first LAAG at the bandwidth which is higher than that of the low bandwidth communications medium.

13. A method as in claim 12 wherein transmitting the first write invalidate command to all of the first AMF devices of the first LAAG at the bandwidth which is higher than that of the low bandwidth communications medium includes broadcasting the first write invalidate command to all of the first AMF devices of the first LAAG.

14. A method as in claim 12 wherein the first LAAG resides at a first location;
wherein the second LAAG resides at a second location;
wherein the first and second locations are different and remotely separated from each other; and
wherein sending the proxy agent write invalidate command to the first proxy agent of the first LAAG includes directing the first proxy agent of the first LAAG to forward the proxy agent write invalidate command to the second proxy agent of the second LAAG via a point-to-point communications protocol.

15. A method as in claim 14 wherein the second AMF devices and the second proxy agent are constructed and arranged to communicate with each other through another high bandwidth communications medium having a bandwidth which is higher than that of the low bandwidth communications medium; and
wherein directing the first proxy agent of the first LAAG to forward the proxy agent write invalidate command to the second proxy agent of the second LAAG includes directing the second proxy agent of the second LAAG to broadcast the second write invalidate command to all of the second AMF devices of the second LAAG.

16. A method as in claim 12 wherein the proxy agent write invalidate command further directs the first proxy agent of the first LAAG to forward the proxy agent write invalidate command to a third proxy agent of a third LAAG for distribution of a third write invalidate command to all of the third AMF devices of the third LAAG, each third write invalidate command directing a respective third AMF device of the third LAAG to locally invalidate the set of storage blocks identified by the write update.

17. A method as in claim 12 wherein the write update identifies, as the set of storage blocks, a block range of consecutive storage blocks; and
wherein local invalidation of the set of storage blocks identified by the write update includes invalidating a local cache for the block range of the consecutive storage blocks.

18. A method as in claim 12, further comprising:
performing a set of array management functions as part of the first LAAG.

19. A method as in claim 18 wherein each AMF device couples to a set of storage devices to form a redundancy group; and
wherein performing a set of array management functions as part of the first LAAG includes operating as a front-end interface between a set of host servers and the redundancy group.

20. A method as in claim 18, wherein the AMF apparatus and the first proxy agent are co-located within an AMF device of the first LAAG.