WO2016106661A1

WO2016106661A1 - Access control method for storage device, storage device, and control system

Info

Publication number: WO2016106661A1
Application number: PCT/CN2014/095847
Authority: WO
Inventors: 冯锐
Original assignee: 华为技术有限公司
Priority date: 2014-12-31
Filing date: 2014-12-31
Publication date: 2016-07-07
Also published as: CN106165367A; CN106165367B

Abstract

Method and system for controlling access to storage device. The method comprises: the storage device receives an access mask message with respect to the node, where the access mask message comprises an identifier of the node and access permission information corresponding to the identifier, and the access permission information is used for indicating that the node has no access permission with respect to the storage device; the storage device configures, on the basis of the access mask message, the access permission corresponding to the identifier of the node as: no access permission; the storage device transmits a firewall policy modification notification to the storage device, where the firewall policy modification notification is used for instructing the node to modify a firewall policy of a firewall corresponding to the node, thus masking I/O access requests transmitted by the node to the storage device. Employment of the method allows effective implementation of control of access to the storage device.

Description

Access control method, storage device and control system for storage device

Technical field

The present invention relates to the field of storage technologies, and in particular, to an access control method, a storage device, and a control system for a storage device.

Background technique

A cluster is a group of independent computers that are interconnected by a high-speed network. Each computer in the cluster is called a node. There is a management node in the cluster, which is specified by the administrator or the system configuration. An important function of the management node is to detect whether the node in the cluster is faulty and notify the failed node to exit from the cluster.

In an application scenario where a node in a cluster accesses a storage device, once a node fails, the faulty node needs to be notified to exit from the cluster to prevent the faulty node and other non-faulty nodes from simultaneously reading and writing access to the storage resource. When there is a problem with the data inconsistency.

In solving the access control problem of the faulty node to the storage device, the prior art adopts Fencing technology, which includes three types of solutions: Persistent Reservation Fencing (PRF) technology, Fiber Channel Fencing. (Fibre Channel Isolation, hereinafter referred to as FCF) technology, and Power Fencing (hereinafter referred to as PF) technology. Among them, the PRF technology requires the storage device to support the SCSI-3Persistent Reservation function, where SCSI refers to the small computer system interface, the full name is the Small Computer System Interface. The FCF technology is adopted to control the fiber switch to disable the Fibre Channel port connected to the faulty node and cut off the storage link to the fiber link of the faulty node, thereby preventing the faulty node from accessing the storage device. By adopting the PF technology, by controlling the power supply module of the faulty node, the power of the faulty node is directly cut off, thereby avoiding the access of the faulty node to the storage device.

In the above prior art, not all storage devices support SCSI-3Persistent The Reservation function, so using PRF technology, has certain limitations; while using FCF technology or PF technology, there may be security issues.

Summary of the invention

In view of this, an embodiment of the present invention provides an access control method, a storage device, and a control system for a storage device, which can effectively implement control of accessing a storage device by a faulty node.

In a first aspect, an access control method for a storage device is provided, which is applied to an access process of a node to a storage device in a cluster, the method comprising: the storage device receiving an access mask message for the node, the access mask message And including the identifier of the node, and the access authority information corresponding to the identifier, where the access permission information is used to indicate that the node has no access right to the storage device; and the storage device according to the access screening message The access authority corresponding to the node identifier is set to: no access permission; the storage device sends a notification to modify the firewall policy to the node, where the notification of modifying the firewall policy is used to instruct the node to modify the corresponding firewall of the node. A firewall policy that blocks an IO access request sent by the node to the storage device.

With reference to the first aspect, in a first possible implementation, after the storage device sets the access authority corresponding to the node identifier to a non-access right according to the access screening message, the method includes: the storing Receiving, by the device, an IO access request sent by the node, where the IO access request includes an identifier of the node; and the storage device determines, according to the access control list and the IO access request, an access right corresponding to the identifier of the node When there is no access right, an abnormality indication message is sent to the node, and the abnormality indication message is used to instruct the node to perform a restart operation.

With reference to the first possible implementation manner of the first aspect, in a second possible implementation manner, after the storage device sends the abnormality indication message to the node, the method further includes: the storage device receiving the management node The sent access screening release message, the access screening release message includes: the node identifier, and access authority information corresponding to the node identifier, where the access rights information is used to indicate that the node has access to the storage device Permission, the access mask message Sending, by the node, a request to join the cluster to the management node, and determining that the node is a recovery node, and then sending, by the management node, the storage device to the storage device; In the access control list, the access authority corresponding to the node identifier is set to: having access rights.

With reference to the second possible implementation manner of the first aspect, in a third possible implementation manner, in the access control list, the corresponding access to the node identifier is performed according to the access screening release message After the privilege is set to have access rights, the method further includes: the storage device sending a notification to the node to modify a firewall policy, where the notification of modifying the firewall policy is used to instruct the node to modify a firewall corresponding to the firewall of the node A policy that allows the node to send an IO access request to the storage device.

With reference to the first aspect or the first to third possible implementation manners of the first aspect, in a fourth possible implementation, before the receiving an access screening message for the node, the method further includes: An access control list of the storage device is set in advance, the access control list includes: the node identifier, and access authority information corresponding to the node identifier, where the access permission information is used to indicate that the node is to the storage The device has access rights; and a firewall policy corresponding to the firewall of the node is preset, and the firewall policy is used to indicate a firewall corresponding to the node, and allows the node to send an IO access request to the storage device.

In a second aspect, a storage device is provided, the storage device comprising:

a processor, a memory, a communication interface, and a bus, wherein the processor, the memory, and the communication interface communicate via the bus;

The communication interface is configured to communicate with a management node and a node in the cluster;

The memory is used to store a program;

The processor is operative to execute the program stored by the memory to perform the method of one of the various implementations of the first aspect described above when the storage device is in operation.

A third aspect provides a storage device having an access control function, the storage device being applied to an access of the node in the cluster to the storage device, the storage device comprising: a receiving unit, configured to receive, for the node Accessing a masking message, where the access screening message includes an identifier of the node, and access authority information corresponding to the identifier, where the access permission information is used to indicate that the node has no access right to the storage device; And the sending unit is configured to send, to the node, a notification for modifying a firewall policy, where the notification for modifying the firewall policy is used, according to the access screening message, the access permission corresponding to the node identifier is set to: no access permission; Instructing the node to modify a firewall policy of the node corresponding to the firewall, and masking an IO access request sent by the node to the storage device.

With reference to the third aspect, in a first possible implementation, the receiving unit is further configured to receive an IO access request sent by the node, where the IO access request includes an identifier of the node, and the sending unit, And the method is further configured to send, according to the access control list and the IO access request, an access indication that is not the access permission of the identifier of the node, to send an abnormality indication message to the node, where the abnormality indication message is used to indicate The node performs a restart operation.

With reference to the first possible implementation manner of the third aspect, in a second possible implementation manner, the receiving unit is further configured to receive an access screening release message sent by the management node, where the access screening release message includes: a node identifier, and access authority information corresponding to the node identifier, where the access rights information is used to indicate that the node has access rights to the storage device, and the access screening message is sent to the management at the node The node sends a request to join the cluster, and after determining that the node is a recovery node, is sent by the management node to the storage device; the setting unit is further configured to perform, according to the access screening release message, the access control In the list, the access permission corresponding to the node identifier is set to: access rights.

With the second possible implementation of the third aspect, in a third possible implementation, the sending unit is further configured to send, to the firewall of the node, a notification for modifying a firewall policy, where the firewall policy is modified. Notifying a firewall for indicating the node, allowing the node to send an IO access request to the storage device.

With the third aspect or the first to third possible implementation manners of the third aspect, in a fourth possible implementation, the setting unit is further configured to preset an access control list of the storage device, where The access control list includes: the node identifier, and access authority information corresponding to the node identifier, where the access authority information is used to indicate that the node has access rights to the storage device; and the node firewall is preset a firewall policy for indicating a firewall of the node, allowing an IO access request sent by the node to the storage device.

A fourth aspect provides a control system for implementing storage device access, the system comprising: a cluster and a storage device, the cluster includes at least one node, and one of the at least one node is capable of performing the storage device Accessing, the storage device, configured to receive an access screening message for the node, where the access screening message includes an identifier of the node, and access permission information corresponding to the identifier, where the access permission information is used to indicate The node has no access right to the storage device, and is configured to set, according to the access screening message, an access right corresponding to the node identifier to a non-access right, and a notification for sending the modified firewall policy to the node, The notification of modifying the firewall policy is used to instruct the node to modify the firewall policy of the firewall corresponding to the node, and block the IO access request sent by the node to the storage device; the node is configured to modify the firewall policy according to the Notification, modify the firewall policy corresponding to the firewall.

With reference to the fourth aspect, in a first possible implementation, the storage device is further configured to receive an IO access request sent by the node, where the IO access request includes an identifier of the node, according to the access control And the IO access request, when the access permission corresponding to the identifier of the node is determined to be no access right, sending an abnormality indication message to the node, where the abnormality indication message is used to instruct the node to perform a restart operation; The node is further configured to perform the node restart operation according to the abnormality indication message.

In conjunction with the first possible implementation of the fourth aspect, in a second possible implementation, the cluster further includes a management node, where the management node is configured to receive the join sent by the node. After the request of the cluster determines that the node is a recovery node, sending an access screening release message to the storage disk, where the access screening release message includes: the node identifier, and access authority information corresponding to the node identifier, The access authority information is used to indicate that the node has access rights to the storage device; the storage device is further configured to receive an access screening release message sent by the management node, and according to the access screening release message, in the access In the control list, the access authority corresponding to the node identifier is set to have access rights.

With reference to the second possible implementation of the fourth aspect, in a third possible implementation, the storage device is further configured to send, to the node, a notification for modifying a firewall policy, where the notification of the firewall policy is modified Instructing the node to modify the firewall policy of the node corresponding to the firewall, allowing the node to send an IO access request to the storage device; the node is further configured to modify the corresponding firewall according to the notification of modifying the firewall policy Firewall policy.

With the fourth aspect or the first to third possible implementation manners of the fourth aspect, in a fourth possible implementation, the storage device is further configured to preset the access control list, where the access control is The list includes: the node identifier, and access authority information corresponding to the node identifier, where the access authority information is used to indicate that the node has access rights to the storage device; and the node is further configured to be preset The node corresponds to a firewall policy of the firewall, where the firewall policy is used to indicate a firewall corresponding to the node, and the IO access request sent by the node to the storage device is allowed.

Based on the foregoing implementation, the embodiment of the present invention receives an access screening message for a node by using a storage device, thereby changing an access right of the node to access the storage device, and sending a notification for modifying the firewall policy to the node, causing the node to modify the corresponding The firewall policy of the firewall effectively shields the node from IO access requests to the storage device.

DRAWINGS

In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the following will be BRIEF DESCRIPTION OF THE DRAWINGS The drawings used in the following description are briefly introduced. It is obvious that the drawings in the following description are only some embodiments of the present invention, and those skilled in the art can also These figures take additional drawings.

FIG. 1 is a schematic structural diagram of an access system formed by a cluster and a storage device according to an embodiment of the present invention.

2 is a schematic diagram of Embodiment 1 of a method for controlling access to a storage device according to the present invention.

3 is a schematic diagram of a second embodiment of a method for controlling access to a storage device according to the present invention.

4 is a schematic diagram of a third embodiment of a method for controlling access to a storage device according to the present invention.

FIG. 5 is a schematic diagram of Embodiment 4 of a method for controlling access to a storage device according to the present invention.

FIG. 6 is a schematic block diagram of Embodiment 1 of a memory device implemented by the present invention.

FIG. 7 is a schematic block diagram of a second embodiment of a memory device implemented by the present invention.

FIG. 8 is a schematic block diagram of an embodiment of a control system for implementing storage device access according to the present invention.

detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are a part of the embodiments of the present invention, but not all embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts shall fall within the scope of the present invention.

Generally, program modules include routines, programs, components, data structures, and other types of structures that perform particular tasks or implement particular abstract data types. Moreover, those skilled in the art will appreciate that embodiments can be implemented in other computer system configurations, including hand-held devices, multi-processor systems, microprocessor-based or programmable consumer electronics, minicomputers, mainframe computers, and the like. Computing device. Embodiments can also be implemented in a distributed computing environment where tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules can be located in both local and remote memory storage devices.

Various embodiments may be implemented as a computer-implemented process, a computing system, or a computer storage medium, such as a computer program product or a computer program of a computer system executing instructions of the example process. For example, a computer readable storage medium can be implemented via one or more of volatile computer memory, nonvolatile memory, a hard drive, a flash drive, a floppy disk or a compact disk and the like.

Throughout this specification, the term "cluster" is a group of independent computers interconnected by a high speed network that form a group and are managed in a single system mode. Each computer in the cluster is called a "node."

Throughout this specification, the term "Node" generally refers to a computing device that executes one or more software programs in a networked environment, however, in a particular application, a "node" may also be implemented as a server in a network. A virtual node (software program) executed on one or more computing devices. A node refers to a physical machine or a virtual machine installed on a physical machine.

Throughout this specification, the term "Storage Device" generally refers to a device for storing information, typically by digitizing information and then storing it in a storage medium using electrical, magnetic or optical means.

Throughout this specification, the term "Firewall" generally refers to a device that assists in securing information and allows or restricts the passage of transmitted data in accordance with specific rules. In a specific implementation, the firewall may be a dedicated piece of hardware or a set of software built on general hardware.

Throughout this specification, the term "IO access request" generally refers to a request received by a storage device to read or write data stored on the storage device. The IO read request generally includes the address information of the storage device that needs to be read; for the IO write request, the address information of the storage device that needs to be written includes the data that needs to be written.

System architecture of an embodiment of the present invention

Before introducing an embodiment of the present invention, a schematic diagram of an access system architecture composed of a cluster and a storage device is generally introduced, as shown in FIG. The system includes:

The cluster 100 is composed of N nodes (N≥1, and N is an integer). Each node can be deployed on a physical node (such as a server) or on a virtual node (such as a virtual machine). An application or a data access request sent by the client, and converting the data access request into An IO access request to the storage device. Among the N nodes included in the cluster 100, there is one management node (taking node 2 as a management node as an example), and the management node is selected and configured from the nodes by an administrator or other system. The management node is responsible for detecting the failure of other nodes in the cluster and notifying the failed node to exit from the cluster.

The storage device resource pool 200 has M (M ≥ 1 and M is an integer) storage devices, and each storage device can be understood as a storage device including storage management software and a storage medium. The connection manners of the M storage devices in the storage device resource pool 200 are various, and the M storage devices shown in FIG. 1 are connected by a ring structure (herein only shown). In actual applications, there may be The star structure, the bus structure, the distributed structure, the tree structure, the mesh structure, the honeycomb structure, and the like, for which the embodiments of the present invention are not described.

The nodes in the cluster 100 and the storage devices in the storage resource pool 200 can be directly connected or connected through a network (not shown in FIG. 1). Since these connection methods are common knowledge in the art, the embodiments of the present invention are not described herein.

Embodiment of the present invention

FIG. 2 shows a first embodiment of a method for controlling access to a storage device. The method embodiment includes:

201. Receive an access mask message for a node, where the access mask message includes an identifier of the node, and access authority information corresponding to the identifier, where the access permission information is used to indicate that the node does not have access to the storage device. Permissions.

Wherein, the method flow can be performed by a storage device. When a node has a fault, or when the administrator intends to control a certain node, the management node in the cluster or a node designated by the management node sends an access mask message to the storage device. In a specific implementation, the identifier of the node may be the IP address of the node, or the number of the node in the cluster. For this, the embodiment of the present invention is not limited.

202. Set the access permission corresponding to the node identifier according to the foregoing access screening message: No access.

In the specific implementation process, by accessing the identifier of the node in the masked message, the access permission corresponding to the identifier of the node may be searched in a preset access control list (ACL), and the access permission is modified to “reject”. Access: You can also record the access rights corresponding to the node ID on the storage disk as: no access rights. It can be understood that the foregoing preset access control list may be stored on the storage device or may be stored in other devices. For this reason, all embodiments of the present invention are not limited. It can be understood by those skilled in the art that the access control list ACL is only an implementation manner, and other implementation manners may be included in the actual application, and the embodiments of the present invention are not limited thereto.

In this embodiment, the accessing the masking message for a certain node by the storage device enables the storage device to control the access authority of the node according to the masking message, thereby shielding the sending of the storage device when the node has a fault. IO access request.

It can be understood that the above embodiment is to control the access of the storage device when a certain node in the cluster is faulty. This embodiment can also be applied to other application scenarios, for example, according to other service requirements, The access rights of the node to the storage device.

FIG. 3 shows a second embodiment of the method for controlling the access of the storage device. In the process of accessing the storage device by the node of the cluster, referring to FIG. 3, the method embodiment includes:

301. The storage device receives an access screening message for a node, where the access screening message includes an identifier of the node, and access permission information corresponding to the node identifier, where the access permission information is used to indicate that the node has no access right to the storage device. .

In a specific implementation, the identifier of the node may be an IP address of the node, or a number of the node in the cluster.

302. The storage device sets, according to the access screening message, the access permission corresponding to the node identifier to: no access permission.

In a specific implementation, an access control list may be preset, and the access control list may be pre- It is first stored in a storage device or other network device. When the access control list is stored on the storage device, after the storage device receives the access masking message, the storage device directly sets the access authority corresponding to the node identifier in the access control list stored in the storage device; when the access control list is pre-stored in the other After the storage device receives the access masking message, the storage device sends a request for modifying the access authority corresponding to the node identifier to the other network device storing the access control list, and the network device performs the modification of the access authority. In another implementation manner, the access control list is not set in advance, and after the storage device receives the access masking message, the access permission corresponding to the node identifier is set to: no access right. In this regard, the manner in which the implementation is implemented is not limited in all embodiments of the present invention.

The setting of the access authority corresponding to the node identifier includes: setting the access permission corresponding to the node identifier to “the node sets the storage device to have no access right”.

303. The storage device sends a notification to modify the firewall policy to the node, where the notification of modifying the firewall policy is used to indicate that the node modifies the firewall policy of the firewall corresponding to the node, and shields the IO access request sent by the node to the storage device.

In the specific implementation process, the implementation of the firewall is various, and may be a network layer firewall, or an application layer firewall, and other types of firewalls. In the specific implementation process, the firewall corresponding to the node may be firewall software installed on the node, or a separate server is set to install the firewall. The notification of the firewall policy is modified to instruct the node to modify the firewall policy of the firewall corresponding to the node, and the notification of modifying the firewall policy is transmitted through a reliable channel between the storage device and the node. The establishment of the above-mentioned reliable channel can be implemented by using the SSH (Secure Shell) protocol. The use of the SSH protocol to implement a reliable channel belongs to the prior art, and details are not described herein.

In the above embodiment, receiving the masking message for a certain node by using the storage device enables the storage device to control the access authority of the node according to the masking message, and updates the notification of the firewall policy by setting the access authority. The node corresponds to the firewall policy of the firewall, so that when the node has a fault, the node is effectively shielded from the storage device. IO access request.

Further, based on the foregoing second embodiment, the following implementation steps may be further included:

After the storage device sets the access authority corresponding to the node identifier to the non-access right according to the foregoing access screening message, the method further includes:

302. The storage device receives an IO access request sent by the node, where the IO access request includes an identifier of the node, and the storage device determines, according to the access authority corresponding to the node identifier, that the node that sends the IO access request has no access. When the permission is performed, an abnormality indication message is sent to the node, and the abnormality indication message is used to instruct the node to perform a restart operation.

In a specific implementation process, the foregoing step 302 ′ is performed after the step 302, and may be performed in parallel with the step 303, or after the step 303 and the node completes the firewall policy corresponding to the firewall of the node according to the notification of modifying the firewall policy. Execute before modification. In this regard, embodiments of the invention do not limit the order of execution of the steps described above.

Further, after step 302', the embodiment further includes the following steps:

302". After receiving the abnormal indication message, the node performs a restart operation.

Specifically, the node performs an operation, which can be implemented by the following two steps:

(1) The storage device sends an abnormality indication message to the node, where the abnormality indication message is used to instruct the node to perform a restart operation;

(2) The node performs a node restart operation according to the abnormality indication message described above.

It should be noted that the restart of the node is divided into different modes: the restart of the entire system of the node, mainly for the hardware or operating system fault of the node; the restart of an application software of the node, and the application software for the node exists. malfunction. In the specific implementation process, the corresponding restart mode can be selected according to the actual scenario.

Further, after step 303, the embodiment further includes the following implementation steps:

304. The node modifies the firewall policy of the firewall corresponding to the firewall according to the foregoing notification of modifying the firewall policy.

In a specific implementation, the node modifies the firewall policy of the corresponding firewall according to the foregoing notification of modifying the firewall policy. The manner and process of modifying the firewall policy are common knowledge in the field, and will not be described here.

Further, optionally, after the node performs the restart process in step 302, the method embodiment further includes:

305. The node sends a request for rejoining the cluster to the management node. After the management node determines that the node is the restart node, the management node sends an access screening release message to the storage device.

In a specific implementation, since the management node pre-stores information of all the nodes in the cluster (including the identifier of the node), when the node sends a request to re-join the cluster to the management node, it is determined that the node has been previously determined according to the identifier of the node. After joining the cluster and now resending the request to join the cluster, it is determined that the node is a recovery node, and the management node sends an access screening release message to the storage device.

The process of joining a node to a cluster belongs to the prior art in the art, and all the embodiments of the present invention are not limited thereto.

306. The storage device receives an access screening release message sent by the management node, where the access screening release message includes: the node identifier, and access authority information corresponding to the node identifier, where the access permission information is used to indicate the node to the storage device. Have access.

It should be noted that the foregoing access screening message is sent by the management node to the storage device after receiving the request of the node to join the cluster and determining that the node is a recovery node.

307. The storage device sets, according to the foregoing access screening release message, the access permission corresponding to the node identifier to: having access rights.

Further, optionally, after the accessing the message is removed according to the access screening, the storage device sets the access authority corresponding to the node identifier to have the access right, and the method embodiment further includes:

308. The storage device sends a notification to modify the firewall policy to the node, where the notification for modifying the firewall policy is used to indicate that the node modifies the firewall policy of the firewall corresponding to the node, and allows the section. An IO access request sent to the storage device.

309. The node modifies the firewall policy of the firewall corresponding to the firewall according to the foregoing notification of modifying the firewall policy.

Further, before receiving the access screening message for the node in step 301, the method further includes the following steps:

300. Pre-setting a firewall policy corresponding to the firewall of the node, where the firewall policy is used to allow an IO access request sent by the node to the storage device to pass through the firewall.

Further, when the access control list ACL is used to implement the access control of the storage disk by the node, the method embodiment further includes the following steps:

300', the access control list of the storage device is preset, and the access control list includes: an identifier of the node, and access authority information corresponding to the node identifier, where the access permission information is used to indicate that the node has access rights to the storage device.

The foregoing implementation manner enables the storage device to record the access authority of the node according to the access control list, and sends an access mask/access mask release message to the node corresponding firewall according to the access right, thereby effectively implementing the IO access request for the node. The purpose of control.

For the foregoing embodiments, the embodiment of the present invention further provides two specific implementation manners, which are respectively introduced as follows:

FIG. 4 shows a third embodiment of a method for performing access control on a faulty node. Referring to FIG. 4, in FIG. 4, three entities are included: a management node, a common node A, and a storage device A. among them,

Management node: A management node in a cluster mentioned in the system architecture corresponding to the embodiment of the present invention.

Ordinary node A: Any node other than the management node in the cluster, and the ordinary node A can access the storage device A.

Storage device A: a storage device accessible by ordinary node A or accessible Any of a number of storage devices.

It should be noted that for a storage device-based node access system, there are two application modes, namely: Share Everything and Share Nothing. In the Share Everything application mode, each node in the cluster can access any storage device in the storage device resource pool; in the Share Nothing application mode, each node in the cluster can access some of the storage in the storage device resource pool. Device.

The method embodiment includes the following process:

Step 0, the system initializes the configuration.

There are two types of configurations, one of which is the configuration of each node in the cluster; the other is the configuration of each storage device in the storage resource pool.

There are two configurations for the configuration of each node in the cluster:

(1) The management node and the common node in the cluster adopt a unified configuration mode: that is, for each node in the cluster, description information about the storage devices accessible by each node in the cluster is stored on the node.

(2) Different configuration modes are adopted for the management node and the common node in the cluster: that is, for the management node, the description information of the storage device that can be accessed by each node is stored internally; for the ordinary node, only the internal node stores the description Description information of the storage device that the node can access.

In a specific implementation, the description information includes: a node identifier and a correspondence between the identifiers of the storage devices that the node can access. As an example, the cluster contains five nodes: a management node and four common nodes. The configuration information for the five nodes in the cluster is shown in Table 1:

节点node	节点所能够访问的存储装置Storage device accessible by the node
节点node	节点所能够访问的存储装置Storage device accessible by the node	管理节点Management node	存储装置A、存储装置B、存储装置DStorage device A, storage device B, storage device D
普通节点AOrdinary node A	存储装置A、存储装置CStorage device A, storage device C	管理节点Management node
普通节点AOrdinary node A	存储装置A、存储装置CStorage device A, storage device C	普通节点BCommon node B	存储装置B、存储装置DStorage device B, storage device D
普通节点COrdinary node C	存储装置A、存储装置DStorage device A, storage device D	普通节点BCommon node B	存储装置B、存储装置DStorage device B, storage device D

Ordinary node D

Storage device B, storage device C

Table I

For the configuration of the storage device, the ACL includes: (1) an identifier of a node that can access the storage device (in a specific implementation, the identifier of the node may be The IP address of the node, or the number of the node in the cluster, etc.; (2) The access rights of the node that can access the storage device (initialization configures the access right to: allow access). In the specific implementation, according to Table 1, the storage device A is taken as an example, and the initial configuration information of the storage device can be as shown in Table 2:

节点标识Node identifier	访问权限access permission
节点标识Node identifier	访问权限access permission	管理节点标识Management node ID	允许访问Allow access
普通节点A标识Common node A identifier	允许访问Allow access	管理节点标识Management node ID	允许访问Allow access
普通节点A标识Common node A identifier	允许访问Allow access	普通节点C标识Common node C identifier	允许访问Allow access

Table II

Step 1. The management node detects that the normal node A is a faulty node according to the heartbeat or lease information, and records the identifier of the node.

In the specific implementation, due to various reasons, the common node A may be faulty. The fault of the node includes the following types: fault of the physical node, network fault of the node (for example, the network card fails), or an application or a certain node of the node A process has a fault. The management node includes two ways to detect a node failure:

(1) Node failure detection method based on lease (Lease)

In this method, each node in the cluster periodically requests a lease from the lease manager (Lease Manager); the lease manager maintains a record for each node about the lease held by the node, where the node is recorded Obtained the lease. Whenever the lease manager receives each node When the lease request is made, the record is updated to reflect the node's latest information on the lease. If the lease manager does not receive a renewal request from a node within the specified period (Lease Duration), it will actively detect the status of the node (for example, use Ping to detect whether the node is faulty or Whether the network connection status of the node is faulty. If the status of the node is not detected for several times (for example, there is no response to the Ping packet), the node is considered to have failed and the node is faulty. The notification is sent to the management node.

(2) Heartbeat based node fault detection method

In this method, the system constructs a heartbeat ring in each node according to a certain topology. Through this heartbeat ring, heartbeat information is sent between each node (the period of sending heartbeat information is usually longer than the lease period). To be much shorter, when the heartbeat information of these nodes is brought together, it is usually summarized on the management node of the cluster to identify whether the heartbeat information from a certain node is lost. In order to avoid misjudgment, it is usually repeated several times. If there is no heartbeat information from a certain node for several consecutive times, it is determined that the node may be faulty. (At this time, the probe can be actively detected to further confirm whether the node is faulty. ).

Through the node fault detection method described above, when the management node in the cluster detects the fault node of the normal node A, the identifier of the node is recorded.

Here, the identifier of the node may have multiple implementation manners, such as: the IP address of the node (for example, 10.11.201.12), or the unique identifier of the node in the cluster (for example: number 0010) or other implementation manner, The embodiments of the present invention are not described in detail.

In this step, for the faulty node, the identifier of the node is recorded, which is a process of access control to the storage device in the case of a faulty node; for those skilled in the art, it can be understood that there are other applications. For example, in an access security application scenario, the administrator controls the access of some nodes to the storage device, and the implementation process of this embodiment may also be adopted. In this regard, the embodiment is not limited.

Step 2: The management node sends an access control message to the storage device A that the common node A can access, and the message carries the identifier of the common node A and the modification information of the access authority.

Specifically, based on the initialization configuration information of the system, the management node stores description information of the storage device accessible by each node in the cluster, and the management node may access the storage device accessible to the faulty common node A according to the description information. A sends an access control message carrying the identifier of the ordinary node A. As an example, the format of the access control message can be expressed as shown in Table 3:

节点标识Node identifier	访问权限修改信息Access rights modification information
节点标识Node identifier	访问权限修改信息Access rights modification information	普通节点A的标识Common node A's identity	允许访问—>拒绝访问Allow access -> Deny access

Table 3

Step 3: The storage device A receives the access control message, and updates its own ACL according to the access control message, and sets the access permission corresponding to the identifier of the common node A carried in the message to be denied access.

Specifically, according to the system configuration process in step 0, the configuration information of the storage device A is referred to Table 2. After receiving the access control message, the access authority corresponding to the common node A identifier is set to be denied access, and the set storage device is configured. The access control list for A is:

节点标识Node identifier	访问权限access permission
节点标识Node identifier	访问权限access permission	管理节点标识Management node ID	允许访问Allow access
普通节点A标识Common node A identifier	拒绝访问access denied	管理节点标识Management node ID	允许访问Allow access
普通节点A标识Common node A identifier	拒绝访问access denied	普通节点C标识Common node C identifier	允许访问Allow access

Table 4

Step 4: The normal node A generates an IO request for the storage device A, and delivers the IO request to the storage device A.

In the specific implementation process, although the normal node A has a fault, the node may not recognize that it has a fault (such as the network of the node and the management node is faulty), and the node should Or a process will also send an IO request to storage device A that it can access. The above IO request includes a request to read or write data stored in the storage device A.

Step 5: The storage device A determines, according to the access control list, that the access right corresponding to the normal node A is the access denied, and discards the IO request sent by the ordinary node A.

Specifically, referring to the access control list in Table 4, when the storage device A determines that the IO request corresponding to the normal node A is denied access, the application of the ordinary node A or the IO request sent by a certain process is discarded.

It should be noted that, in a specific implementation process, the access control list may be stored in the storage device A or may be stored in a third-party device. For this reason, all embodiments of the present invention are not limited.

Step 6. The storage device A returns an abnormal response E_OVERDUE to the normal node A.

Specifically, after discarding the IO request sent by the normal node A, the storage device A returns an abnormal response code E_OVERDUE (error code) to an application or a certain process that issues the IO request to the normal node A. It can be understood that the E_OVERDUE is used to indicate an error identification code. In the specific implementation, other error code formats may also be used, which is not limited in this embodiment.

Step 7. After receiving the abnormal response E_OVERDUE returned by the storage device A, the normal node A restarts the node.

Specifically, after receiving the abnormal response E_OVERDUE, the normal node A determines that it has a fault, and then restarts the node. For the restart of a node, there are two implementation modes: when the hardware or operating system of the common node A fails, the normal node A restarts the operating system of the node, that is, the entire node restarts; when a common node A When an application or process fails, normal node A restarts the corresponding application or corresponding process of the node.

Step 8. The ordinary node A sends a cluster join request to the management node.

Specifically, after the node is restarted, the common node A sends a cluster join request to the management node, and the cluster join request belongs to the common knowledge in the field, which is not described in this embodiment.

Step 9. After receiving the cluster join request, the management node determines that the common node A is a fault recovery node.

Specifically, after receiving the cluster join request of the common node A, the management node extracts the identifier of the common node A, compares the identifier with the faulty node identifier recorded in step 1, and finds that the identifier of the ordinary node A is recorded as occurring. Fault, the node now issues a cluster join request to determine that the normal node A is a failover node.

Step 10: The management node sends an access screening release message to the storage device A, where the message carries the identifier of the ordinary node A and the modification information of the access authority.

Specifically, corresponding to the access control message in Table 3, the foregoing access cancellation message may adopt the following format:

节点标识Node identifier	访问权限修改信息Access rights modification information
节点标识Node identifier	访问权限修改信息Access rights modification information	10.11.201.1210.11.201.12	拒绝访问—>允许访问Denied access -> Allow access

Step 11: The storage device A updates the access control list ACL stored in the message according to the access mask release message, and sets the access authority corresponding to the identifier of the common node A carried in the message to allow access.

Specifically, corresponding to the storage device A configuration information in step 3, by accessing the mask release message, the updated access control list is as shown in Table 5:

Table 5

Step 12: After completing the setting of the access authority to the ordinary node A, the storage device A The management node sends an access control release complete message.

Step 13: After receiving the access control release complete message sent by the storage device A, the management node returns the join success response information to the normal node A.

Through the implementation process described above, the storage device can control the access of the storage device by maintaining the access control list of the node that can access the storage device, and the entire control process is simple and easy, and the efficiency is high.

The foregoing steps 1-2, 8-10, and 12-13 are all performed by the management node. It can be understood that, in the specific implementation process, the management node may also specify other nodes with control rights to implement, and the present invention The embodiment is not limited.

FIG. 5 shows a fourth embodiment of the method for performing access control on a faulty node. Referring to FIG. 5, the entities included in FIG. 5 and FIG. 4 are the same, and details are not described herein again.

The method embodiment includes the following process:

Step 0, the system initializes the configuration.

In the specific implementation process, in addition to the configuration of each node in the cluster and the configuration of the storage device in step 0 of the third embodiment of the method, the firewall corresponding to the firewall of the management node and the common node A is required. The policy is configured to pre-set the firewall policy to allow requests to be sent to all storage devices. In addition, a reliable channel of the normal node A and the storage device A is established in advance to transmit a modified notification of the firewall policy. The above reliable channels can be implemented in two ways:

(1) Adopt a common, encrypted channel that is authenticated by a key, such as SSH (Secure Shell).

(2) Use a dedicated port to establish a dedicated channel, such as a VPN (Virtual Private Network).

Steps 1-3 are similar to the implementation of steps 1-3 in the third embodiment of the method. For this reason, the description is not repeated herein.

Step 4: The storage device A notifies the normal node A to modify the firewall policy of the corresponding firewall, and the firewall policy is to reject the ordinary node A and then send the IO request to the storage device A.

In a specific implementation, the storage device A sends a notification for modifying the firewall policy to the common node A through a reliable channel established during the system initialization configuration process.

Step 5: After receiving the notification of modifying the firewall policy sent by the storage device A, the normal node A modifies the firewall policy of the corresponding firewall according to the notification, and restarts the node.

Specifically, the process of restarting the local node by the common node A includes (not shown): after the normal node A receives the notification of modifying the firewall policy sent by the storage device A, the storage device A sends an abnormality indication message to the ordinary node A, where The abnormality indication message is used to instruct the node to perform a restart process; the node performs a node restart process according to the abnormality indication message.

Steps 6-9 are similar to the implementations of the steps 8-11 in the third embodiment of the method. For this reason, the description is not repeated herein.

Step 10: The storage device A sends a notification to the normal node A to modify the firewall policy, which is used to instruct the common node A to modify the firewall policy of the corresponding firewall, and allows the ordinary node A to send an IO request to the storage device A.

Step 11: The ordinary node A modifies the firewall policy of the corresponding firewall, that is, allows the node to send an IO access request to the storage device A.

For a person skilled in the art, the process of modifying the local firewall policy is common knowledge in the art, and the embodiments of the present invention are not described herein again.

Step 12: The normal node A sends a firewall policy modification completion notification message to the storage device A, and the notification message is used to notify the storage device A that the firewall policy modification corresponding to the node is completed.

Step 13: The storage device A sends an access control release complete message to the management node, to notify the management node that the access control for the normal node A has been released.

Step 14: The management node sends a response to the normal node A to join the cluster successfully.

It can be understood that, in a specific implementation process, step 11 in this embodiment may be performed after step 14.

The foregoing implementation manner enables the storage device to record the access rights of the node according to the access control list, and send an access mask/access mask release message to the firewall corresponding to the node according to the access right, thereby effectively implementing the IO access request to the node. The purpose of control.

FIG. 6 is a schematic structural diagram of a storage device according to an embodiment of the present invention. As shown in FIG. 6, the controller includes at least a processor 610, a memory 620, a communication interface 630, and a bus 640. The processor 610, the memory 620, and the communication interface 630 communicate through the bus 640.

The memory 620 is used to store programs. Specifically, the program code may be included in the program, and the program code includes a computer execution instruction. The memory 620 may be a high speed RAM memory or a non-volatile memory such as at least one disk memory.

The processor 610 is configured to execute an execution instruction stored by the memory 620, which may be a single core or a multi-core central processing unit (CPU), or an application specific integrated circuit (ASIC), or One or more integrated circuits configured to implement embodiments of the present invention.

The communication interface 630 is for communicating with a control point switch.

When the controller is running, the processor 610 runs a program to perform the method of any of the above four method embodiments.

Referring to FIG. 7, an embodiment of the present invention further provides a storage device 700 with an access control function. The storage device 700 is applied to an access of the node in the cluster to the storage device. The storage device 700 includes:

The receiving unit 710 is configured to receive an access screening message for the node, where the access screening message includes an identifier of the node, and access permission information corresponding to the identifier of the node, where the access permission information is used to indicate that the node has no access right to the storage device;

The setting unit 720 is configured to set, according to the access screening message, the access permission corresponding to the identifier of the node to: no access permission;

The sending unit 730 is configured to send a notification to the node to modify the firewall policy, where the notification of the modified firewall policy is used to instruct the node to modify the firewall policy of the firewall corresponding to the node, and block the IO access request sent by the node to the storage device.

Further, in the storage device 700:

The receiving unit 710 is further configured to receive an IO access request sent by the node, where the IO access request includes an identifier of the node;

The sending unit 730 is further configured to: when the node that sends the IO access request is in the non-access right according to the access authority corresponding to the identifier of the node, send an abnormality indication message to the node, where the abnormality indication message is used to instruct the node to perform a restart operation.

Further, in the storage device 700:

The receiving unit 710 is further configured to receive an access screening release message sent by the management node, where the access screening release message includes: an identifier of the node, and access permission information corresponding to the node identifier, where the access permission information is used to indicate that the node has access to the storage device. The access mask message is sent by the node to the management node to join the cluster, and after the node is determined to be the recovery node, is sent by the management node;

The setting unit 720 is further configured to set, according to the access screening release message, the access permission corresponding to the node identifier to: having access rights.

Further, in the storage device 700:

The sending unit 730 is further configured to send, to the node, a notification for modifying the firewall policy, where the notification of the modified firewall policy is used to instruct the node to modify the firewall policy of the corresponding firewall, and allow the node to send an IO access request to the storage device.

Further, the storage device 700 includes:

The setting unit 720 is further configured to preset a firewall policy of the node corresponding firewall, where the firewall policy is used to indicate that the node corresponds to the firewall, and allows the node to send an IO access request to the storage device.

Referring to FIG. 8, an embodiment of the present invention further provides a control system 800 for implementing storage device access. Embodiments of the system include:

The cluster 810 and the storage device 820, the cluster 810 includes at least one node, wherein the at least one node includes a node 811, and the node 811 can implement access to the storage device 820, where:

The storage device 820 is configured to receive an access mask message for the node 811, where the mask message includes an identifier of the node 811, and access authority information corresponding to the node identifier, where the access permission information is used to indicate the node 811 to the foregoing The storage device 820 has no access right, and is configured to set, according to the foregoing access screening message, an access right corresponding to the node identifier to a non-access right, and a notification for sending the modified firewall policy to the node 811, where the modifying the firewall policy is notified. The node 811 is instructed to modify the firewall policy of the node 811 corresponding to the firewall 813, and the IO access request sent by the node 811 to the storage device 820 is blocked.

The firewall 813 of the above node is used to modify the firewall policy according to the notification of modifying the firewall policy.

Further, for the foregoing control system 800, the storage device 820 is further configured to receive an IO access request sent by the node 811, where the IO access request includes an identifier of the node, and determines to send according to the access authority corresponding to the identifier of the node. When the node 811 of the IO access request has no access right, the node 811 sends an abnormality indication message, and the abnormality indication message is used to instruct the node 811 to perform a restart operation;

The node 811 is further configured to perform a restart operation according to the abnormality indication message.

Further, for the foregoing control system 800, the cluster further includes a management node 812.

The management node 812 is configured to receive the request for joining the cluster sent by the node 811, and after determining that the node 811 is the recovery node, send an access screening release message to the storage device 820, where the access screening release message includes: an identifier of the node, and an identifier of the node The access authority information is used to indicate that the node 811 has access rights to the storage device 820;

The storage device 820 is further configured to receive the access screening release message sent by the management node 812, and set the access permission corresponding to the identifier of the node to have access rights according to the access screening release message. limit.

Further, with respect to the above control system 800,

The storage device 820 is further configured to send a notification to the node 811 to modify the firewall policy, where the notification of the modified firewall policy is used to instruct the node 811 to modify the firewall policy corresponding to the firewall 813, and allow the node 811 to send an IO access request to the storage device 820;

The node 811 is further configured to modify the firewall policy of the corresponding firewall 813 according to the foregoing notification of modifying the firewall policy.

Further, with respect to the above control system 800,

The storage device 820 is further configured to preset a firewall policy of the node 811 corresponding to the firewall 813. The firewall policy is used to indicate the firewall 813 corresponding to the node 811, and allows the node 811 to send an IO access request to the storage device 820.

It is to be understood that the specific examples of the invention are intended to be illustrative of the embodiments of the invention.

It should also be understood that in various embodiments of the present invention, the size of the sequence numbers of the above processes does not imply a sequence of executions, and the order of execution of the processes should be determined by its function and internal logic, and should not be implemented by the present invention. The implementation of the examples constitutes any limitation.

It should also be understood that in the embodiments of the present invention, the term "and/or" is merely an association describing the associated object, indicating that there may be three relationships. For example, A and/or B may indicate that A exists separately, and A and B exist simultaneously, and B cases exist alone. In addition, the character "/" in this article generally indicates that the contextual object is an "or" relationship.

Those of ordinary skill in the art will appreciate that the elements and algorithm steps of the various examples described in connection with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of both, for clarity of hardware and software. Interchangeability, the composition and steps of the various examples have been generally described in terms of function in the above description. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the solution. Professionals can use different methods to implement the described functions for each specific application, but this implementation should not be considered super The scope of the invention is intended.

A person skilled in the art can clearly understand that for the convenience and brevity of the description, the specific working process of the device and the unit described above, and the specific process of the method, refer to the corresponding description in the foregoing system embodiment, and no longer Narration.

In the several embodiments provided by the present application, it should be understood that the disclosed systems, devices, and methods may be implemented in other manners. For example, the device embodiments described above are merely illustrative. For example, the division of the unit is only a logical function division. In actual implementation, there may be another division manner, for example, multiple units or components may be combined or Can be integrated into another system, or some features can be ignored or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed may be an indirect coupling or communication connection through some interface, device or unit, or an electrical, mechanical or other form of connection.

The units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, may be located in one place, or may be distributed to multiple network units. Some or all of the units may be selected according to actual needs to achieve the objectives of the embodiments of the present invention.

In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above integrated unit can be implemented in the form of hardware or in the form of a software functional unit.

The integrated unit, if implemented in the form of a software functional unit and sold or used as a standalone product, may be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present invention contributes in essence or to the prior art, or all or part of the technical solution may be embodied in the form of a software product stored in a storage medium. A number of instructions are included to cause a computer device (which may be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods described in various embodiments of the present invention. The foregoing storage medium includes: a U disk, a mobile hard disk, and a read only memory (ROM, Read-Only Memory), random access memory (RAM), disk or optical disk, and other media that can store program code.

The above is only the specific embodiment of the present invention, but the scope of the present invention is not limited thereto, and any equivalent person can be easily conceived within the technical scope of the present invention by any person skilled in the art. Modifications or substitutions are intended to be included within the scope of the invention. Therefore, the scope of protection of the present invention should be determined by the scope of the claims.

Claims

An access control method for a storage device, characterized in that, in a process of accessing a node in a cluster to the storage device, the method includes:

The storage device receives an access mask message for the node, where the access mask message includes an identifier of the node, and access rights information corresponding to the identifier, where the access rights information is used to indicate the node pair The storage device has no access rights;

The storage device sets, according to the access screening message, the access permission corresponding to the node identifier to: no access permission;

The storage device sends a notification to the node to modify a firewall policy, where the notification of modifying the firewall policy is used to instruct the node to modify a firewall policy of the firewall corresponding to the node, and block the IO sent by the node to the storage device. Access request.
The method according to claim 1, wherein after the storing device sets the access right corresponding to the node identifier to the non-access right according to the access screening message, the method further includes:

The storage device receives an IO access request sent by the node, where the IO access request includes an identifier of the node;

The storage device sends an abnormality indication message to the node when the node that sends the IO access request has no access right, according to the access authority corresponding to the node identifier, where the abnormality indication message is used to indicate the node Perform a reboot.
The method according to claim 2, wherein after the storing means sends an abnormality indication message to the node, the method further comprises:

The storage device receives an access screening release message sent by the management node, where the access screening release message includes: the node identifier, and access authority information corresponding to the node identifier, where the access permission information is used to indicate the node Having access to the storage device, the access The masking message is that the node sends a request to join the cluster to the management node, and the management node determines that the node is a recovery node, and is sent by the management node to the storage device;

The storage device sets the access authority corresponding to the node identifier to: having access rights according to the access screening release message.
The method according to claim 3, wherein after the storing means sets the access right corresponding to the node identifier to have access rights according to the access screening release message, the method further includes:

The storage device sends a notification to the node to modify a firewall policy, where the notification for modifying the firewall policy is used to instruct the node to modify a firewall policy of the firewall corresponding to the node, and allow the node to send the IO to the storage device. Access request.
The method according to any one of claims 1 to 4, wherein before the storing means receives an access masking message for the node, the method further comprises:

The firewall policy of the node corresponding to the firewall is preset, and the firewall policy is used to indicate a firewall corresponding to the node, and the IO access request sent by the node to the storage device is allowed.
A storage device, characterized in that the storage device comprises:

a processor, a memory, a communication interface, and a bus, wherein the processor, the memory, and the communication interface communicate via the bus;

The communication interface is configured to communicate with a management node and a node in the cluster;

The memory is used to store a program;

The processor is operative to execute the program stored by the memory to perform the method of any of claims 1-5 when the storage device is in operation.
A storage device with an access control function, wherein the storage device is applied to an access process of a node in a cluster to the storage device, the storage device includes:

a receiving unit, configured to receive an access screening message for the node, where the access screening message includes an identifier of the node, and access permission information corresponding to the identifier, where the access permission information is used to indicate the node pair The storage device has no access rights;

a setting unit, configured to set, according to the access screening message, an access right corresponding to the node identifier: no access right;

a sending unit, configured to send, to the node, a notification for modifying a firewall policy, where the notification for modifying the firewall policy is used to indicate that the node modifies a firewall policy of the firewall corresponding to the node, and shields the node from sending to the storage device IO access request.
A storage device according to claim 7, wherein

The receiving unit is further configured to receive an IO access request sent by the node, where the IO access request includes an identifier of the node;

The sending unit is further configured to: when determining, according to the access authority corresponding to the node identifier, that the node that sends the IO access request has no access right, send an abnormality indication message to the node, where the abnormality indication message is used. Instructing the node to perform a restart operation.
A storage device according to claim 8 wherein:

The receiving unit is further configured to receive an access screening release message sent by the management node, where the access screening release message includes: the node identifier, and access authority information corresponding to the node identifier, where the access authority information is used Instructing the node to have access rights to the storage device, where the access screening message is that the node sends a request to join the cluster to the management node, and after determining that the node is a recovery node, the management node is Sent by the storage device;

The setting unit is further configured to: set the access permission corresponding to the node identifier to: having access rights according to the access screening release message.
A storage device according to claim 9, wherein

The sending unit is further configured to send, to the node, a notification for modifying a firewall policy, where the repair The notification of the firewall policy is used to instruct the node to modify the firewall policy of the firewall corresponding to the node, and allow the node to send an IO access request to the storage device.
A storage device according to any of claims 7-10, characterized in that

The setting unit is further configured to preset a firewall policy of the node corresponding to the firewall, where the firewall policy is used to indicate a firewall corresponding to the node, and the IO access request sent by the node to the storage device is allowed.
A control system for implementing storage device access, characterized in that the system comprises: a cluster and a storage device, the cluster comprising at least one node, and one of the at least one node is capable of accessing the storage device ,

The storage device is configured to receive an access screening message for the node, where the access screening message includes an identifier of the node, and access permission information corresponding to the identifier, where the access permission information is used to indicate the The node has no access right to the storage device, and is configured to set, according to the access screening message, an access right corresponding to the node identifier to a non-access right, and a notification for sending the modified firewall policy to the node, where The notification of modifying the firewall policy is used to instruct the node to modify a firewall policy of the firewall corresponding to the node, and block an IO access request sent by the node to the storage device;

The node is configured to modify a firewall policy of the corresponding firewall according to the notification of modifying the firewall policy.
The control system according to claim 12, characterized in that

The storage device is further configured to receive an IO access request sent by the node, where the IO access request includes an identifier of the node, and determine, according to the access right corresponding to the node identifier, the sending the IO access request. When the node has no access right, sending an abnormality indication message to the node, where the abnormality indication message is used to instruct the node to perform a restart operation;

The node is further configured to perform the node restart operation according to the abnormality indication message.
The control system according to claim 13, wherein said cluster further comprises a management node.

The management node is configured to receive a request for joining the cluster sent by the node, and after determining that the node is a recovery node, send an access screening release message to the storage disk, where the access screening release message includes: the node identifier And access authority information corresponding to the node identifier, where the access rights information is used to indicate that the node has access rights to the storage device;

The storage device is further configured to receive an access screening release message sent by the management node, and set the access authority corresponding to the node identifier to have access rights according to the access screening release message.
The control system according to claim 14 wherein:

The storage device is further configured to send, to the node, a notification for modifying a firewall policy, where the notification for modifying the firewall policy is used to instruct the node to modify a firewall policy of the firewall corresponding to the node, and allow the node to store the An IO access request sent by the device;

The node is further configured to modify a firewall policy of the corresponding firewall according to the notification of modifying the firewall policy.
A control system according to any of claims 12-15, characterized in that

The storage device is further configured to preset a firewall policy of the node corresponding to the firewall, where the firewall policy is used to indicate a firewall corresponding to the node, and allow the node to send an IO access request to the storage device.