EP2307991A2

EP2307991A2 - Distributed data storage and access systems

Info

Publication number: EP2307991A2
Application number: EP09790205A
Authority: EP
Inventors: David C. Carver; Branko J. Gerovac
Original assignee: Juniper Networks Inc
Current assignee: Juniper Networks Inc
Priority date: 2008-07-10
Filing date: 2009-07-09
Publication date: 2011-04-13
Also published as: CN102204267B; CN102204267A; WO2010006134A3; WO2010006134A2

Abstract

A distributed system for content storage and access includes a storage platform having at least a first storage component, and an access platform having one or multiple access components. Each access component is associated with at least one access service. The access service may be an administrative service for receiving a service request initiated by a first user, the service request being associated with a first item of content, and for identifying a characteristic of the service request, a content management service for determining, based at least in part on the characteristic of the service request, a specification of a data transfer operation to be executed in association with the first storage component, and a directory service for maintaining information associated with the first item of content.

Description

DISTRIBUTED DATA STORAGE AND ACCES S SYSTEMS

Background

[001] This specification relates to a distributed system for data storage and access.

[002] Distributed network-based data storage, for example accessible over the Internet, has various applications. One application is video storage and access.

[003] During the past decade, online video streaming has gained increasing popularity among Internet users as high speed Internet service is now readily available for households. For example, while traditional video delivery systems (e.g., cable television systems) may no longer satisfy customers' growing demand for convenient access and instant delivery, movie consumers may soon turn to online video stores that may provide such service. However, in practice, it is nontrivial to build an Internet-based storage system, equipped with libraries comparable in size to traditional video rental stores, for providing reliable movie download service to consumers at a reasonable cost. The following example illustrates some of the difficulty behind the idea.

[004] Consider a sample system for a movie download service with 2OK movie titles each 2hrs in length encoded at 2.5Mbps that is configured to serve 15K simultaneous sessions. In the past, this would have been considered an extensive library for a well- equipped video rental store. (In comparison, NetFlix currently lists a growing number of about 70K+ titles.) Since each movie title occupies about 2.25GB storage (i.e., 2hr*2.5Mb/s*60sec*60min/8), the amount of raw storage needed for 2OK titles is 45TB. In addition, if mirroring is used for resilience, the minimum storage required for this entire library is 90TB, which can be achieved by using approximately 96 ITB disks organized as e.g., 4 servers each having 24 disk drives.

[005] In the above sample system, the amount of access bandwidth needed for allowing 15K simultaneous sessions is 37.5Gbps, which would then require ~ 400Mbps from each of the 96 disks assuming an equal load over these disks. However, this access rate would exceed common practice for general purpose storage systems. Under typical workloads, a conventional storage system may be able to provide an average bandwidth of 50Mbps per disk. Even tuned media storage servers that have been configured to supply extraordinary bandwidth of up to about 150-200 Mbps may no longer be sufficient for the sample system. Moreover, the level of difficulty in achieving satisfactory access bandwidth rises progressively with the size of the sample system. [006] Some approaches to determining a system configuration for such an application may approach the problem at issue essentially as dynamic distributed real-time resource allocation, which is particularly hard to solve for large systems since the problem usually grows with combinatorial complexity as the system expands in size. Briefly, a dynamic distributed real-time resource allocation and scheduling problem in nature can be characterized as an NP complete problem, which means that there are no deterministic solutions computable within a tractable/practical period of time, in other words, the solutions have combinatorial complexity in space and/or time. Traditional approaches to solving NP complete problems often try to restrict the problem in some manner so that the restricted problem is amenable to a deterministic solution. However, such restricted solutions may fail for a number of reasons. For instance, the solution to the restricted problem may not actually reflect the solution to the original problem. Furthermore, when the deterministic solution hits boundary conditions in the problem space, the problem turns combinatorial again, sometimes causing the deterministic solution to produce catastrophic results.

Summary

[007] In general, in one aspect, the invention features a distributed system for content storage and access that includes a storage platform having at least a first storage component, and an access platform having one or multiple access components, each access component associated with at least one of a plurality of access services including an administrative service for receiving a service request initiated by a first user, the service request being associated with a first item of content, and for identifying a characteristic of the service request, a content management service for determining, based at least in part on the characteristic of the service request, a specification of a data transfer operation to be executed in association with the first storage component, and a directory service for maintaining information associated with the first item of content.

[008] Aspects of the invention may include one of more of the following features.

[009] The specification of the data transfer operation may include an identifier of a data transfer operation type and a persistent fully-resolvable identifier for an element of the first storage component.

[010] The service request may include an upload request.

[011] The content management service may include an upload service for allocating resources of the first storage component to determine a partial resource allocation arrangement in response to the upload request, and further to commit a complete resource allocation arrangement according to the partial resource allocation arrangement. The specification of the data transfer operation may include a description of the complete resource allocation arrangement.

[012] The upload request may include a first set of attributes that characterizes one or more operational objectives of a first item of content, and the upload service determines the complete resource allocation arrangement based at least in part on one or more of the first set of attributes.

[013] The upload request may further include the first item of content, and the data transfer operation may include storing elements of the first item of content in respective elements of the allocated resources of the first storage component according to the complete resource allocation arrangement.

[014] The directory service may maintain a description of a result of storing elements of the first item of content in respective elements of the allocation resources of the first storage component.

[015] The description of the result of storing elements of the first item of content may enable locating the first item of content in the allocated resources of the first storage component with specificity for further access operations.

[016] The service request may include a download request.

[017] The content management service may include a download service for identifying, by interacting with the directory service, an existing resource allocation arrangement associated with the first item of content in response to the download request. The data transfer operation may include a download operation.

[018] The directory service may maintain a description of the existing resource allocation arrangement, including associations of elements of the first item of content with respective elements of the first storage component allocated to the first item.

[019] The download service may perform a set of inquires to determine whether a condition for initiating the download operation is satisfied.

[020] The set of inquires may include an assessment of one or more of the following: an overall workload condition of the first storage component, a deviation in load across the respective elements of the first storage component associated with the element of the first item, availability of resources to be involved with the data transfer operation, and a present level of resource utilization by various operations in the distributes system associated with first item of content. [021] Upon satisfaction of the condition for initiating the data transfer operation, the download service may determine the specification of the download operation, including a selected set of elements among the elements of the first storage component associated with the first item to be accessed for the download operation.

[022] The first storage component may include one or multiple storage devices selected from at least one of the following types: disk drives, solid-state memories, and nonvolatile memories.

[023] The service requests may include a plurality of attributes comprising one or more of the following: name, data length, data type, and a set of attributes characterizing one or more operational objectives of a plurality of items of the content.

[024] The one or more operational objectives may include one or more of the following: popularity, integrity, resilience, accessibility, power consumption, geographical affinity and exclusion, and topological affinity and exclusion.

[025] The plurality of access services may further comprises a system management service for coordinating operations performed by one or multiple of the plurality of access services in the distributed system.

[026] The distributed system may further include a plurality of access service platforms, each having one or multiple access components. At least one of the plurality of access services provided by the access components may be distributed in multiple instances across one or multiple access service platforms.

[027] The directory service may provide an interface to a persistent database that is used to store information associated with content being handled by the distributed system.

[028] The administrative service may provide a secure means to receive a particular type of service request based on a verification of an identity of the first user.

[029] The data transfer operation may include one or more of the following types: upload, download, delete, and move.

[030] Other general aspects include other combinations of the aspects and features described above and other aspects and features expressed as methods, apparatus, systems, computer program products, and in other ways. [031] In general, in one aspect, the invention features a computer-implemented method that includes receiving a content transfer request that includes a first set of provisioning attributes that characterizes one or more operational objectives of a first item of content; and processing the content transfer request to allocate resources of a storage environment to store the first item of content.

[032] Aspects of the invention may include one of more of the following features.

[033] The method of processing the content transfer request may include comparing the first set of provisioning attributes against sets of schema attributes to identify a set of schema attributes that satisfies the one or more operational objectives of the first item of content, allocating resources of the storage environment to the first item of content to commit a complete resource allocation arrangement determined based on a partial resource allocation arrangement associated with the identified set of schema attributes, and taking an action to cause the first item of content to be stored in the allocated resources of the storage environment.

[034] The complete resource allocation arrangement may include a description of a destination on the resources of the storage environment associated with each one of multiple elements of the first item of content.

[035] The method may further include configuring the sets of schema attributes and the partial resource allocation arrangements associated with the respective sets of schema attributes using domain-specific knowledge prior to receiving the content transfer request.

[036] The method may further include storing the sets of schema attributes and the associated partial resource allocation arrangements in a first database.

[037] The one or more operational objectives of the first item of content may include one or more of the following: popularity, integrity, resilience, accessibility, power consumption, geographical affinity and exclusion, and topological affinity and exclusion.

[038] Each of the sets of schema attributes may have a corresponding partial resource allocation arrangement.

[039] Each of the sets of schema attributes may represent a storage schema that specifies a partial resource allocation arrangement for a particular attribute-based category of content items.

[040] The content transfer request may further include the first item of content, and the method of taking the action to cause the first item of content to be stored in the allocated resources of the storage environment may include storing elements of the first item of content in respective elements of the allocated resources of the storage environment.

[041] The method may further include determining the complete resource allocation arrangement based on the partial resource allocation arrangement associated with the identified set of schema attributes.

[042] The method of determining the complete resource allocation arrangement may include iteratively generating a candidate of the complete allocation arrangement based on the partial resource allocation arrangement, evaluating a quality of the candidate according to a resource allocation criterion, and selecting the complete resource allocation arrangement based on a result of the evaluating of the quality of the candidate.

[043] The resource allocation criterion may be associated with a distribution of workload among resources of the storage environment.

[044] The resource allocation criterion may be associated with a degree of potential resource allocation conflict.

[045] The resource allocation criterion may be associated with an assessment of a hierarchical relevance of each one of a set of operational objectives characterizing a plurality of items of the content.

[046] The assessment of the hierarchical relevance of each of the one or more operational objectives may be specific to each of at least some of the plurality of items of the content.

[047] The method of selecting the complete resource allocation arrangement may include defining an objective function according to the resource allocation criterion, where the selected complete resource allocation arrangement optimizes the objective function.

[048] The method of allocating the resources of the storage environment may include mapping elements of the first item of content to respective allocated resources of the storage environment.

[049] The method may further include documenting a result of mapping the elements of the first item of content to respective allocated resources of the storage environment in a second database.

[050] The method of documenting the result of mapping in the second database may enable locating the first item of content in the allocated resources of the storage environment with specificity for further access operations. [051] The resources of the storage environment may include one or multiple storage devices selected from at least one of the following types: disk drives, solid-state memories, and non-volatile memories.

[052] The content transfer request may further include a second set of provisioning attributes comprising one or more of the following: name, data length and data type.

[053] Other general aspects include other combinations of the aspects and features described above and other aspects and features expressed as methods, apparatus, systems, computer program products, and in other ways.

[054] In general, in one aspect, the invention features a computer-implemented method that includes receiving a request for access to a first item of content stored on resources of a storage environment, the request for access being initiated by a first user, identifying an existing resource allocation arrangement associating elements of the first item of content with respective elements of the resources of the storage environment, performing an inquiry to determine whether an admission condition is satisfied, and upon satisfaction of the admission condition, generating a specification of an access operation, the access operation configured to enable a selected set of elements among the respective elements of the resources of the storage environment to be accessed.

[055] Aspects of the invention may include one or more of the following.

[056] The method of performing the inquiry may include evaluating a workload condition of the resources of the storage components.

[057] The method of performing the inquiry may include evaluating a deviation in load across the respective elements of the resources of the storage environment associated with the first item of content.

[058] The method performing the inquiry may include determining an availability of a capacity of a first storage component, the first storage component being an aggregation of some of the respective elements of the resources of the storage components associated with the first item of content.

[059] The capacity of a first storage component may include an access capacity characterized at least in part by a maximum data readout rate of the first storage component.

[060] The first storage component may include one or multiple storage devices selected from at least one of the following types; disk drives, solid-state memories, and nonvolatile memories. [061] A description of the existing resource allocation arrangement may be maintained in a first database, the description including a representation of a plurality of mappings, each mapping being associated with each one of multiple instances of the first item of content stored on the resources of the storage environment.

[062] The method of generating the specification of the access operation may include evaluating a quality of each of the plurality of mappings associated with the first item of content, and based on a result of the evaluating the quality, selecting a preferred mapping among the plurality of mappings according to a preset criterion.

[063] The preset criterion may be associated with a degree of potential resource allocation conflict.

[064] The access request may include an attribute characterizing the first item of content.

[065] The method of generating the specification of the access operation may depend at least in part on the attribute characterizing the first item of content.

[066] The attribute may include a set of attributes comprising one or more of the following: file name, data length, data type, and a universal resource identifier (URI).

[067] The method may further include receiving a particular set of access request through a secured channel based on a verification of an identity of the first user.

[068] Other general aspects include other combinations of the aspects and features described above and other aspects and features expressed as methods, apparatus, systems, computer program products, and in other ways.

[069] Other features and advantages of the invention are apparent from the following description, and from the claims.

Brief Description of Drawings

[070] FIG. 1 is a block diagram of an exemplary distributed system for data storage and access.

[071] FIG. 2 is a representation of the flow of events during an "UPLOAD" operation when an operations client uploads content to storage servers.

[072] FIG. 3 is a representation of the flow of events during a "DOWNLOAD" operation when an access client downloads content from storage servers.

[073] FIG. 4 A is a diagram of the system handling an exemplary upload request. [074] FIG. 4B is a flow chart of a content provisioning process. [075] FIG. 5 shows exemplary schemas associated with multiple attributes.

Detailed Descriptions

1 System Overview

[076] Referring to FIG. 1, a distributed system 100 consists of three basic types of computing platforms for content storage and delivery: storage server platforms 130, access server platforms 120, and client platforms 110. The term "platform" is used to refer to a collection of components, which may, for example, be hosted on a single computer, or distributed over multiple computers.

[077] The storage server platforms 130 may host multiple storage servers 132, each of which in turn coordinate access to a set of storage resources, providing the capability to read and write data. For example, each server may be hosted on one computer, or its function may itself be distributed on multiple hardware elements. Each storage server may include one or multiple storage devices of various types. Examples of storage devices include disk drives, solid-state memories (such as RAM), and non-volatile memories (such as flash).

[078] The access server platforms 120 provide access services that collectively provide one or more methods of accessing data/content with respect to storage servers of the system. Some access services handle the data according to a prescribed access protocol/regime/interface (e.g., HTTP, RTSP, NFS, etc). Other access services manage the resources of the system and regulate access to content accordingly. Services that manage resources of the system include, for example, a content provisioning service 124, which allocates resources of the system to store and deliver content, and an admission service 126, which admits sessions when called upon by various session requests in the system.

[079] In general, the access server platforms 120 are physically bounded on one side by the distribution network 160, which provides an interconnection between the storage server platforms 130 and the access server platforms 120, and on the other side by access networks 170, which provide interconnections between the client platforms 110 and the access server platforms 120. Note that different access services provided by one or multiple access server platforms may also communicate over the distribution network 160 or by some other network in the system. The access networks 170 include an operations network 140 over which one or more operations clients 112 (e.g., administrators of online video stores) communicate with the access server platforms 120, and a delivery network 150 over which one or more access clients 114 (e.g., customers of online video stores) communicate with the access server platforms 120.

[080] The access server platforms 120 host one or more externally accessible administrative servers 121, which provides an interface linking the operations network 140 to services of the access server platforms 120 and the storage server platform 130, for example, to provide a secure means to ingest, retrieve and verify content stored within the system. Through an administrative server 121, operations clients 112 are given administrative access to the system, for example: 1) to upload content to the system; 2) to download content from the system; 3) to delete existing content from the system; and etc. In some examples in which the administrative server 121 provides a software interface to operations clients using the HTTP protocol, these administrative accesses may correspond to the HTTP methods of "PUT," "GET," and "DELETE," respectively or to some other combination of HTTP methods, "POST" and "DELETE" for example. Preferably, access to the administrative server 121 is privileged to operations clients 112.

[081] The access server platforms 120 also host one or more externally accessible download servers 122. Through a download server 122, access clients 114 may request to stream or download content from the system for example, according to a defined set of rules (a regime or protocol) for streaming and downloading content.

[082] As illustrated in FIG. 1 , no direct link between the storage and the client is required because storage and access functions are decoupled in the system. When a client performs an operation, e.g., uploading or downloading content, the administrative server 121 or download server 122 communicates on behalf of its client to the storage servers, mainly to put or get data to or from storage resources, and to other elements in the system, e.g., to locate resources and control admissions. This separation of storage and access brings flexibility to the configuration and evolution of the system, and significantly reduce the system's reliance on synchronization, which tends to overwhelm a distributed system as it scales.

[083] Upon receiving upload request from the operation clients 112, the administrative server 121 receives inputs that contain an external name (e.g., a URI, namely, a Uniform Resource Identifier) of the content to be uploaded, and the content itself (e.g., binary data encoding a video stream). Upon receiving download request from the access clients 114 or operations clients 112, the download server 122 or the administrative server 121, respectively, receives the external name (e.g., also a URI) of the content to be downloaded, and if possible provides the requested content. [084] In some examples, the administrative server 121 may acquire from the operations clients (e.g., receive with the request) a set of attributes along with an upload or download request that are used by the administrate server 121 in servicing the request. Attributes can include e.g., provisioning attributes, access attributes, and admission attributes. An illustrative example of an attribute provided with an upload is the maximum concurrent streaming sessions allowed for a particular piece (i.e., a title or object) of content. For example, if the content is restricted to a maximum of 5 concurrent sessions, the content provisioning service may determine a good arrangement of the data for that piece on the storage servers, and later the admission service may refuse a download request if it would exceed the limit of 5 sessions.

[085] An object directory service 128 provides an interface to a persistent database (e.g., an object directory 129) that is used to store information associated with objects being handled by the system. One example of information that may be stored is the assignment of external names to internal object identifiers (OIDs). A second example is information describing where content is located on the storage servers/storage resources of the system. Elaborating on this second example, the object directory 129 may contain a map table associated with a particular movie title describing how the data for the title is stored on the storage servers, including the number of copies of the title being kept and the disk drives and the specific blocks where each copy is located. A third example is information representing provisioning attributes (e.g., peak cumulative access bandwidth for the content and resilience factors), admissions attributes (e.g., attributes that govern whether sessions involving the content are allowed to be created or not), and access attributes (e.g., attributes that govern at what rate data is delivered for sessions involving the content).

[086] It should be understood that the data stored in the object directory is not limited to these examples, but could be any type and/or amount of data including the data for the externally referenced object in its entirety.

[087] In the following sections, the use of content provisioning and admission services is described in greater detail in the context of two principal operations in the distributed system 100 - "UPLOAD" and "DOWNLOAD" operations.

2 Example of "UPLOAD" Operation

[088] Referring to FIG. 2, in an example of an "UPLOAD" operation 200, an operations client 112 initiates a request 210 through the administrative server 121 for uploading a movie (e.g., "Shrek I") to the system. Data received by the administrative server along with request 210 includes the external name for the content of "Shrek I" and the movie content itself. Note arrows in the figure represent logically uni-directional communications from one interface to another (although the underlying protocol may in fact include e.g., bidirectional handshakes etc), and double arrows indicate there is actual data content being delivered along that communication. In addition to the external name and the movie content, the client may provide attributes, including traditional attributes (such as content size and content type) and a collection of non-traditional attributes (such as maximum concurrent access sessions, popularity, resilience, integrity, life cycle, and topological and geographical attributes) that affects the handling of each content.

[089] Upon receiving the external name, the administrative server sends the name in a command 212 requesting the object directory service 128 to create an object for "Shrek I" and to generate an OID mapping for the external name. Once the object is successfully created, the object directory service 128 delivers a message 214 to inform the administrative server 121. Subsequently, the administrative server calls the content provisioning service 124 via a request 216 to provision the content. Also along with request 216, the administrative server passes provisioning attributes of the content, which are used during content provisioning to decide what resources of the system, if available, to allocate to the content.

[090] During system configuration, a set of potential resource arrangements can be predetermined for content with certain types of provisioning attributes, where each arrangement represents, for example, a way of striping copies of content across one or several storage resources of the system. This enables the content provisioning service to make an efficient provisioning decision. For example, the content provisioning service uses the attributes to find and evaluate a best mapping, for example by approximating server occupancy at the given time and finding possible sets of servers that can be used to meet the content requirements (e.g., performance requirements) of the content.

[091] Here, a mapping generally refers to information describing a potential arrangement of the data for an object on storage resources of the system, including e.g., the set of disk drives to be used and the associated disk region on each drive. If the best mapping is permissible, meaning the content provisioning service can, in this example, allocate sufficient blocks in the selected disks to the content without threatening overall system performance, the content provisioning service sends a message 218 to the administrative server carrying the mapping result. Based on the mapping result, the administrative server then writes the content to the allocated blocks on the storage servers 132 via a set of messages 220. In some situations when multiple copies of the content are desired on the system, the content provisioning service may determine a best mapping for each copy individually. [092] In some cases, the best mapping may fail due to conflicts in resource allocation. For example, among other pieces of content being provisioned, one may have occupied certain blocks on a disk drive which also happens to be included in the mapping result of "Shrek I". In those situations, a new mapping for "Shrek I" is selected to repeat the evaluation process until a permissible mapping has been found. Subsequently, the administrative server writes the content to the blocks on the disk drives allocated by the mapping or set of mappings.

[093] After content transfer is complete, the storage servers send a "done" signal 222 to the administrative server, which then instructs the object directory service to document the committed mapping(via message 224), so that the object directory can identify the location of the content for subsequent access by clients. Upon receiving a "done" message 226 from the object directory service reporting completion of updates, the administrative server notifies the operations client (via an "upload success" message 228) that the "UPLOAD" operations has been successfully completed.

3 Example of "DOWNLOAD" Operation

[094] Referring to FIG. 3, in an example of a "DOWNLOAD" operation 300, an access client initiates a request 310 through the download server 122 for downloading a desired movie (e.g., "Shrek II"). After receiving the external name of the content of "Shrek II", in general, the download server 122 makes use of the services in the access server platforms to determine whether the request for the content can or should be admitted and if so, how the content should be obtained from the storage servers. In particular, using the external name, the download server 122 calls the object directory service 128 via a request 312 to discover whether the object exists and if so, to locate the corresponding object value in the object directory. Given the object exists, the object directory service returns the object value to the download server via a message 314. The object value contains the object's OID, some or all associated mappings (or partial mappings) that describe a set of storage resources holding the content, and other attributes associated with the content. Subsequently, the download server 122 calls on the admission service 126 to determine whether or not to admit the download request of the content, and if yes, how this download request should be handled.

[095] The admission service 126, in general, is configured to admit combinations of sessions that are consistent with a workload that can be supported by the resources of the system, and to deny sessions that threaten the integrity of existing sessions when the system is near saturation. Therefore, prior to granting/denying an upload or download request, the admission service first checks the usage and availability of various system resources. In one embodiment and this example of "DOWNLOAD" operation, resource checks/reservations are conducted by the admission service, including, for example: 1) checking the bandwidth allocated to existing sessions involving the same content "Shrek II" to make sure that the prospective new session will not cause the content to become oversubscribed; 2) checking the available server resources to determine which one of possible multiple copies of the content provides the greatest serviceability (e.g., the service bandwidth that would remain available on the most heavily used server of a copy) and reserving the storage servers associated with this copy; and 3) checking and reserving available unit resources (e.g., disk time or bandwidth) on the reserved storage servers to be accessed for downloading. In addition, there are many other types of resources that need to be allocated or checked, depending on the implementation. For example, access server/platform capacity may be checked and the admission service might respond with a message indicating that the access server should redirect the client to a different access server.

[096] In determining which of the multiple copies of the content on the storage servers 132 is to be accessed to satisfy this download request, generally, the admission service selects the copy with the lowest average server load, though deviation in load across the set of servers may also be taken into account. For instance, a copy with a low average and a high deviation may be less desirable than a copy with a moderately higher average, but low deviation. Moreover, it is desirable to include a certain amount of statistical spread in the choice to ensure that lightly loaded resources will not get overwhelmed (a condition that can happen during session failure recoveries). On occasion, if none of the copies has sufficient resources available at the moment, the session is denied.

[097] When the admission service 126 decides to admit the download request and selects the copy of content to service the client, it sends a message 318 with the mapping of the selected copy to the download server 122, which then requests the storage servers via message 320 to set up download sessions with the identified blocks on the storage servers. Subsequently, the content of "Shrek II" is delivered from storage to the download server and passed on to the access client via data lines 322 and 324, respectively. By the time the client receives the entire data content of the movie "Shrek II", the "DOWNLOAD" operation completes. When the "DOWNLOAD" operation terminates or completes, the resources reserved for it are released or marked for later garbage collection.

4 Example of Attributes-based Content Provisioning Service

[098] In the exemplary "UPLOAD" operation described above, the content provisioning service 140 makes use of provisioning attributes to find a best mapping of arranging the content on the storage servers that can satisfy the requirements (e.g., performance requirements) of the content. One example of a performance requirement is the access bandwidth, which relates to the maximum number of concurrent sessions permissible to access the content at any given time. The following example illustrates how the content provisioning service may determine a best mapping that supports the access bandwidth requirement, by using a particular provisioning attribute — maximum concurrent streaming sessions.

[099] Referring to Fig. 4A, for example, a system 400 is designed to host a movie library of about 2OK titles, with each copy of the title occupying ~ 500 MB storage space and a client access rate of 2.5 Mbps. Assume the system 400 has 96 ITB disk drives uniformly distributed across four storage servers 432, providing a storage capacity of 96 TB. For each disk drive, for example, a 100 Mbps access bandwidth amounts to an access capacity (i.e., maximum access bandwidth) of 9.6 Gbps for the system. (Note that other examples may have different movie characteristics and system storage and access capacities. For example, for a title encoded at 2.5Mbps with an approximate length of 100 minutes, each copy occupies ~2GB storage space. With mirroring, 2OK titles would then take up about 80TB of storage space (e.g., 80 ITB disk drives). Given that each disk has 400Mbps of access bandwidth, the total access bandwidth of the system may be up to -32 Gbps.)

[0100] To make a good arrangement of resource allocation to each title in the library, a general approach of the system is to distribute content of higher demands across a greater number of disks, so that the aggregate access bandwidth for the content is sufficient to support all the concurrent streaming sessions at peak usage.

[0101] For example, when the administrative server 421 receives a request 402 from an operations client for uploading the movie of "Shrek I" to storage, it is also informed that, for "Shrek I", up to 140 concurrent streaming sessions may occur at any given time, suggesting a peak streaming rate of 350 Mbps (here, assume the movie is encoded at 2.5 Mbps). With each disk drive supporting an access rate of 100 Mbps at maximum, 350 Mbps bandwidth can not be achieved unless the movie data is stripped across an absolute minimum of 4 disk drives. Thus, one option for the content provisioning service to distribute the content is to map the data to 4 disk drives, although this may not be a very good option because when this title is in peak usage the other data on the 4 drives can be rendered inaccessible (an example of inter-title contention). Better options take into account inter-title contention and thus disperse such data more broadly, say over 6, 12, or even 24 disk drives. In general, there exist a collection of such mappings that each can meet the 350 Mbps bandwidth requirement of servicing the content. [0102] Here, such a collection of mappings with a common objective (e.g., bandwidth capacity) is called a schema. As for the sample movie library, each title has a corresponding schema that satisfies the content requirements (such as access bandwidth) of that title.

[0103] Computing the schema to meet the requirements of each title is non-trivial and the level of difficulty often grows progressively with system size. Therefore, in some examples, in order to reduce the burden on content provisioning service, a set of schemas are pre-computed, for example, based on an expected or modeled distribution of attributes, and stored in a database made available for use to the content provisioning service 424. This pre-computed set of schemas is used to reduce computational cost and improve overall system efficiency.

[0104] Referring to Fig. 4B, by using a pre-computed schema database, the sample system 400 provisions content in the following way. First, upon receiving an upload request 480, the content provisioning service 424 finds from the schema database an acceptable schema that complies with the requirements of the content, during step 482. Next, among the mappings associated with the selected schema, the content provisioning service determines a best mapping, for example, the mapping with the lowest server occupancy, during step 484. If, in a following step 486, sufficient resource can be found on disk drives specified in the best mapping, the content provisioning service 424 then allocates a group of blocks on each disk drive to the content (step 488) before the content delivery process starts (step 490). If however, the content provisioning service 424 fails to locate sufficient resource in the best mapping during step 486, it select an alternative mapping in the schema to repeat step 486 until an acceptable one is found to proceed the block allocation.

[0105] This general concept of attributes-based content provisioning using schemas is further illustrated in the example of uploading "Shrek I", shown in Fig. 4A. As previously discussed, a 350 Mbps access bandwidth is desired in this case. Therefore, in this schema database 470, schema S3 (shown as table 472) with a bandwidth capacity of 400 Mbps is considered an acceptable schema by the content provisioning service 424. This schema S3 further states that, for each content that falls in this category, two copies of the content will be stored on the system, with each copy distributed over 24 disks and written in region R3 of each disk.

[0106] Following the selection of S3, a mapping table 474 is populated to describe a set of possible mappings of the schema to disk drives. For example, in this mapping table 474, M21, M22, M23, and M24 correspond to four orthogonal mappings of S3 to the storage, each mapping using a specific set of disks (such as disks 1 through 24 in M21) and a designated disk region (R3). Among all possible mappings associated with schema S3, the content provisioning service seeks a best mapping for each copy of the content, for example by approximating server occupancy at the given time. In this example, the content provisioning service selects mappings M21 and M23 for storing two copies of "Shrek I", respectively. If these two mappings are found to be permissible, a block allocator 476 commits allocation of blocks on disk drives according to these mappings. Once the allocated blocks are available and reserved for occupancy, the administrative service 421 writes the content data via the distribution network 460 to the storage servers 432.

5 Examples of Content Provisioning Using Multiple Attributes

[0107] In some applications, the content provisioning service makes use of multiple attributes to find the best mapping of arranging the content on the storage servers. Examples of such attributes include attributes that characterize popularity, resilience, and integrity.

[0108] Popularity is an expression of anticipated demand for a piece of content. For example, if content is popular, demand for it will likely be high, and thus the provisioning system will attempt to provision the content with the resources necessary to meet the expected demand.

[0109] Resilience relates to a predicted level of service maintained to an information object in the presence of component failure. For example, in accessing a resilient object, a customer encountering a failed read on disk A can continue to be serviced through reading an alternative copy of data on disk B. Generally, the more resilient an object needs to be, the more resources (and possibly the more types of resources) the content provisioning system needs to allocate to that object.

[0110] Integrity relates to the ability to recover content after a component failure, even a catastrophic failure of the system. For example, if a disk fails completely and is unrecoverable, the portions of content contained on the disk can be recovered from an alternate copy of the content within the system or across systems and/or from an encoded reconstruction method.

[0111] Depending on the implementation, the content provisioning service may determine the best mapping for storing a piece of content that provides a satisfactory degree of popularity, resilience and/or integrity to that piece of content.

[0112] Referring to FIG. 5, some schemas that provide different degrees of popularity, resilience, and integrity are shown in schema table 500. For example, referring to schema 4 (S4), in uploading a relatively low popularity title that requires a certain degree of resilience, one primary copy is provided to satisfy the popularity demand. In the mean time, two secondary copies of the title are stored to ensure that in the case of a failed read on the primary copy, customers are still able to access this title through the secondary copies without experiencing service interruption. Schema 5 (S5) provides another scenario of uploading a relatively low popularity title that is nevertheless important such that a high level of integrity is desired. Here, high level of integrity can be provided for example, by using advanced redundancy codes (although this can be computational expensive).

[0113] In some prior art systems, resilience and integrity are generally implicit and bound together within a storage redundancy method (e.g., RAID 5). In this description, one advantage of decoupling and making explicit the way resilience and integrity requirements are handled for each piece of content, is in allowing a system to support a combination of each requirement on a title by title basis and to use the most appropriate methods in satisfying the combination.

6 Other Examples of the Distributed System

[0114] Referring again to FIG. 1, in some examples, the access server platforms 120 of the distributed system 100 may provide other types of access services 127 in addition to the services described above. One example is a content re-provisioning service, which may decide to re-provision (including up and down provision) content in situations such as the occurrence of usage anomaly and content aging. Another example is a management service, which may coordinate the configuration, monitoring, control and data collection in the system. The management service may track both normal and exceptional events to diagnose system problems and anomalies and when necessary, trigger other services (such as re -provisioning services) in the system to perform subsequent actions.

[0115] Each service provided by the system may be implemented in various manners. In some examples, services may be bound to a particular platform (e.g., servers). Although such services are not individually resilient to occurrence of component failures, system resilience can be achieved by virtue of service replication and session level reassignment. In some examples, services may be distributed in multiple instances across a set of platforms. Distribution may be accomplished by partitioning the problem space (e.g., by process-pipelining, or by object- symmetric concurrency, etc.) to a degree necessary to achieve the performance and resilience requirement of the service. In some other examples, services can migrate from one platform to another. In particular, if a service is not implemented in a distributed manner, migration allows services to be relocated to other platforms in the system in case of service failure or degradation on one platform. [0116] In some implementations, a storage server platform can be a well configured off- the-shelf computing system equipped with storage controller and network controller cards, configured to provide e.g., 10GbE line-rate access to a set of storage resources (e.g., disks, memory). Controller cards can either be developed internally or qualified from readily available third party sources. In some examples, storage controllers provide unfettered high bandwidth access to the underlying storage devices. Examples of storage devices include disk drives, solid-state memories (such as RAM), and non-volatile memories (such as flash).

[0117] In some implementations, an access server platform can be a well configured off- the-shelf computing system equipped with network controller cards, configured to support a set of access regimes to content stored in the system. Access regimes are provided by access servers that may adopt a multitude of protocols and vary widely in performance and efficiency. One example of an access server is a Microsoft Windows Media Server (WMS), commonly used for streaming media on the Internet. Another example is an HTTP server, which uses HTTP protocol to provide clients access to content on the system. A third example is an Adobe's Flash Media Server.

[0118] Note that administrative servers and download servers are just two of potentially many types of access servers. Access servers are the general class of services that provide external access to objects in the system according to prescribed sets of rules.

[0119] Although the access servers (and services) and storage servers (and services) have been described as residing respectively on access and storage platforms, in some embodiments, a combination or all of access and storage servers and services can be configured to reside on a common platform.

[0120] In some embodiments, operations network 140 is isolated from the delivery network 150. The administrative server 121 and download server 122 may be exclusively accessible to the operations clients 112 and access clients 114, respectively. The download server 122 may provide features or semantics that are not suitable for operations clients, and vice versa.

[0121] It is to be understood that the foregoing description is intended to illustrate and not to limit the scope of the invention, which is defined by the scope of the appended claims. Other embodiments are within the scope of the following claims.

Claims

What is claimed is:

1. A distributed system for content storage and access comprising: a storage platform having at least a first storage component; and an access platform having one or multiple access components, each access component associated with at least one of a plurality of access services including: an administrative service for receiving a service request initiated by a first user, the service request being associated with a first item of content, and for identifying a characteristic of the service request; a content management service for determining, based at least in part on the characteristic of the service request, a specification of a data transfer operation to be executed in association with the first storage component; and a directory service for maintaining information associated with the first item of content.

2. The distributed system of claim 1, wherein the specification of the data transfer operation includes an identifier of a data transfer operation type and a persistent fully- resolvable identifier for an element of the first storage component.

3. The distributed system of claim 1, wherein the service request includes an upload request.

4. The distributed system of claim 3, wherein the content management service comprises: an upload service for allocating resources of the first storage component to determine a partial resource allocation arrangement in response to the upload request, and further to commit a complete resource allocation arrangement according to the partial resource allocation arrangement; wherein the specification of the data transfer operation includes a description of the complete resource allocation arrangement.

5. The distributed system of claim 4, wherein the upload request includes a first set of attributes that characterizes one or more operational objectives of a first item of content, and the upload service determines the complete resource allocation arrangement based at least in part on one or more of the first set of attributes.

6. The distributed system of claim 5, wherein the upload request further includes the first item of content, and the data transfer operation includes storing elements of the first item of content in respective elements of the allocated resources of the first storage component according to the complete resource allocation arrangement.

7. The distributed system of claim 6, wherein the directory service maintains a description of a result of storing elements of the first item of content in respective elements of the allocation resources of the first storage component.

8. The distributed system of claim 7, wherein the description of the result of storing elements of the first item of content enables locating the first item of content in the allocated resources of the first storage component with specificity for further access operations.

9. The distributed system of claim 1, wherein the service request includes a download request.

10. The distributed system of claim 9, wherein the content management service comprises: a download service for identifying, by interacting with the directory service, an existing resource allocation arrangement associated with the first item of content in response to the download request; wherein the data transfer operation includes a download operation.

11. The distributed system of claim 10, wherein the directory service maintains a description of the existing resource allocation arrangement, including associations of elements of the first item of content with respective elements of the first storage component allocated to the first item.

12. The distributed system of claim 11, wherein the download service performs a set of inquires to determine whether a condition for initiating the download operation is satisfied.

13. The distributed system of claim 12, wherein the set of inquires include an assessment of one or more of the following: an overall workload condition of the first storage component, a deviation in load across the respective elements of the first storage component associated with the element of the first item, availability of resources to be involved with the data transfer operation, and a present level of resource utilization by various operations in the distributes system associated with first item of content.

14. The distributed system of claim 13, wherein, upon satisfaction of the condition for initiating the data transfer operation, the download service determines the specification of the download operation, including a selected set of elements among the elements of the first storage component associated with the first item to be accessed for the download operation.

15. The distributed system of claim 1, wherein the first storage component includes one or multiple storage devices selected from at least one of the following types: disk drives, solid-state memories, and non-volatile memories.

16. The distributed system of claim 1, wherein the service requests includes a plurality of attributes comprising one or more of the following: name, data length, data type, and a set of attributes characterizing one or more operational objectives of a plurality of items of the content.

17. The distributed system of claim 16, wherein the one or more operational objectives includes one or more of the following: popularity, integrity, resilience, accessibility, power consumption, geographical affinity and exclusion, and topological affinity and exclusion.

18. The distributed system of claim 1 , wherein the plurality of access services further comprises a system management service for coordinating operations performed by one or multiple of the plurality of access services in the distributed system.

19. The distributed system of claim 1 , further comprising a plurality of access service platforms, each having one or multiple access components, wherein at least one of the plurality of access services provided by the access components is distributed in multiple instances across one or multiple access service platforms.

20. The distributed system of claim 1, wherein the directory service provides an interface to a persistent database that is used to store information associated with content being handled by the distributed system.

21. The distributed system of claim 1, wherein the administrative service provides a secure means to receive a particular type of service request based on a verification of an identity of the first user.

22. The distributed system of claim 1, wherein the data transfer operation includes one or more of the following types: upload, download, delete, and move.

23. A computer-implemented method comprising: receiving a content transfer request that includes a first set of provisioning attributes that characterizes one or more operational objectives of a first item of content; and processing the content transfer request to allocate resources of a storage environment to store the first item of content.

24. The computer-implemented method of claim 23, wherein processing the content transfer request includes: comparing the first set of provisioning attributes against sets of schema attributes to identify a set of schema attributes that satisfies the one or more operational objectives of the first item of content; allocating resources of the storage environment to the first item of content to commit a complete resource allocation arrangement determined based on a partial resource allocation arrangement associated with the identified set of schema attributes; and taking an action to cause the first item of content to be stored in the allocated resources of the storage environment.

25. The computer-implemented method of claim 24, wherein the complete resource allocation arrangement includes a description of a destination on the resources of the storage environment associated with each one of multiple elements of the first item of content.

26. The computer-implemented method of claim 24, further comprising: prior to receiving the content transfer request, configuring the sets of schema attributes and the partial resource allocation arrangements associated with the respective sets of schema attributes using domain-specific knowledge.

27. The computer-implemented method of claim 26, further comprising: storing the sets of schema attributes and the associated partial resource allocation arrangements in a first database.

28. The method of claim 23, wherein the one or more operational objectives of the first item of content comprise one or more of the following: popularity, integrity, resilience, accessibility, power consumption, geographical affinity and exclusion, and topological affinity and exclusion.

29. The computer-implemented method of claim 24, wherein each of the sets of schema attributes has a corresponding partial resource allocation arrangement.

30. The computer-implemented method of claim 24, wherein each of the sets of schema attributes represents a storage schema that specifies a partial resource allocation arrangement for a particular attribute-based category of content items.

31. The computer-implemented method of claim 24, wherein the content transfer request further includes the first item of content, and wherein the method of taking the action to cause the first item of content to be stored in the allocated resources of the storage environment comprises: storing elements of the first item of content in respective elements of the allocated resources of the storage environment.

32. The computer-implemented method of claim 24, further comprising: determining the complete resource allocation arrangement based on the partial resource allocation arrangement associated with the identified set of schema attributes.

33. The computer-implemented method of claim 32, wherein determining the complete resource allocation arrangement comprises: iteratively generating a candidate of the complete allocation arrangement based on the partial resource allocation arrangement; evaluating a quality of the candidate according to a resource allocation criterion; and selecting the complete resource allocation arrangement based on a result of the evaluating of the quality of the candidate.

34. The computer-implemented method of claim 33, wherein the resource allocation criterion is associated with a distribution of workload among resources of the storage environment.

35. The computer-implemented method of claim 33, wherein the resource allocation criterion is associated with a degree of potential resource allocation conflict.

36. The computer-implemented method of claim 33, wherein the resource allocation criterion is associated with an assessment of a hierarchical relevance of each one of a set of operational objectives characterizing a plurality of items of the content.

37. The computer-implemented method of claim 36, wherein the assessment of the hierarchical relevance of each of the one or more operational objectives is specific to each of at least some of the plurality of items of the content.

38. The computer-implemented method of claim 33, wherein selecting the complete resource allocation arrangement comprises: defining an objective function according to the resource allocation criterion, wherein the selected complete resource allocation arrangement optimizes the objective function.

39. The computer-implemented method of claim 24, wherein allocating the resources of the storage environment comprises: mapping elements of the first item of content to respective allocated resources of the storage environment.

40. The computer-implemented method of claim 39, further comprising: documenting a result of mapping the elements of the first item of content to respective allocated resources of the storage environment in a second database.

41. The computer-implemented method of claim 40, wherein the documenting the result of mapping in the second database enables locating the first item of content in the allocated resources of the storage environment with specificity for further access operations.

42. The computer-implemented method of claim 23, wherein resources of the storage environment include one or multiple storage devices selected from at least one of the following types: disk drives, solid-state memories, and non-volatile memories.

43. The computer-implemented method of claim 23, wherein the content transfer request further includes a second set of provisioning attributes comprising one or more of the following: name, data length and data type.

44. A computer- implemented method comprising: receiving a request for access to a first item of content stored on resources of a storage environment, the request for access being initiated by a first user; identifying an existing resource allocation arrangement associating elements of the first item of content with respective elements of the resources of the storage environment; performing an inquiry to determine whether an admission condition is satisfied; and upon satisfaction of the admission condition, generating a specification of an access operation, the access operation configured to enable a selected set of elements among the respective elements of the resources of the storage environment to be accessed.

45. The computer-implemented method of claim 44, wherein performing the inquiry comprises: evaluating a workload condition of the resources of the storage components.

46. The computer-implemented method of claim 44, wherein performing the inquiry comprises: evaluating a deviation in load across the respective elements of the resources of the storage environment associated with the first item of content.

47. The computer-implemented method of claim 44, wherein performing the inquiry comprise: determining an availability of a capacity of a first storage component, the first storage component being an aggregation of some of the respective elements of the resources of the storage components associated with the first item of content.

48. The computer-implemented method of claim 47, wherein the capacity of a first storage component includes an access capacity characterized at least in part by a maximum data readout rate of the first storage component.

49. The computer-implemented method of claim 47, wherein the first storage component include one or multiple storage devices selected from at least one of the following types; disk drives, solid-state memories, and non-volatile memories.

50. The computer-implemented method of claim 44, wherein a description of the existing resource allocation arrangement is maintained in a first database, the description including a representation of a plurality of mappings, each mapping being associated with each one of multiple instances of the first item of content stored on the resources of the storage environment.

51. The computer-implemented method of claim 50, wherein generating the specification of the access operation comprises: evaluating a quality of each of the plurality of mappings associated with the first item of content; based on a result of the evaluating the quality, selecting a preferred mapping among the plurality of mappings according to a preset criterion.

52. The computer-implemented method of claim 51 , wherein the preset criterion is associated with a degree of potential resource allocation conflict.

53. The computer-implemented method of claim 44, wherein the access request includes an attribute characterizing the first item of content.

54. The computer-implemented method of claim 53, wherein the generating the specification of the access operation depends at least in part on the attribute characterizing the first item of content.

55. The computer-implemented method of claim 53, wherein the attribute includes a set of attributes comprising one or more of the following: file name, data length, data type, and a universal resource identifier (URI).

56. The computer-implemented method of claim 44, further comprising: receiving a particular set of access request through a secured channel based on a verification of an identity of the first user.