Design and Implementation of iSCSI-based Object Storage Security System
Huang Jian · 2007
With the rapid development of application, IP storage of high performance and strong security has become the research hotspot of networked storage. Aiming at the above issue, an iSCSI-based object storage security system (short for iOBS3) is designed according to the OSD commands. Firstly, incurring to the block I/O channel of iSCSI and the security method within OSD, iOBS3 can provide high-speed bandwidth of block I/O channel and access control capability of object I/O. Secondly, iOBS3 can enhance its transfer security by adopting IPSec protocol at IP protocol layer. Thirdly, iOBS3 greatly improves the I/O speed using zero-copy TCP both at initiator and target. The experimental result shows that iOBS3 can achieve higher throughput comparing with iSCSI, and insuring storage security at the same time.