Mark N Muhlestein, Age 695831 Placita Alta Reposa, Tucson, AZ 85750

6457130, Sep 24, 2002

Mar 3, 1998

09/035234

David Hitz - Portola Valley CA
Andrea Borr - Los Gatos CA
Robert J. Hawley - San Jose CA
Mark Muhlestein - Morgan Hill CA
Joan Pearson - Menlo Park CA

Network Appliance, Inc. - Sunnyvale CA

G06F 1100

713201, 714 38

The invention provides a method and system for enforcing file access control among client devices using multiple diverse access control models and multiple diverse file server protocols. A multi-protocol file server identifies each file with one particular access control model out of a plurality of possible models, and enforces that one particular model for all accesses to that file. When the file server receives a file server request for that file using a different access control model, the file server translates the access control limits for that file into no-less-restrictive limits in the different model. The file server restricts access by the client device using the translated access control limits. Each file is assigned the access control model of the user who created the file or who last set access control limits for the file. When a user having a different access control model sets access control limits, the access control model for the file is changed to the new model.

6643654, Nov 4, 2003

Jun 25, 2001

09/891159

Kayuri Patel - Cupertino CA
Mark Muhlestein - Tuscon AZ

Network Appliance, Inc. - Sunnyvale CA

G06F 1700

707 10, 709217, 711100

A technique provides on-disk representations of multiple named data streams for a file system of a network storage appliance. The network storage appliance or filer includes a file system that implements a Write Anywhere File Layout (WAFL) disk format, wherein files are described by inodes of which there may be various types, including directory and regular inodes. A named stream inode type is defined that represents named data streams in the WAFL file system. Multiple data streams may be stored on disk(s) of the filer as representations embodying the named stream inode type associated with a file. The names and file handles of the data streams are stored in a âhiddenâ directory within the file system that is referenced by the base mode. The hidden directory is represented as a stream_dir inode type.

6665689, Dec 16, 2003

May 17, 2001

09/861090

Mark Muhlestein - Morgan Hill CA

Network Appliance, Inc. - Sunnyvale CA

G06F 1730

707204, 707205, 711162, 714 6

The invention provides a file server that provides for backup and restore of files in a heterogeneous file server environment. Metadata associated with each file by each model or protocol is preserved across backup and restore operations. The file server performs at least three tasks as part of the backup and restore operations. The file server notes all file attributes associated with each file in either model. These file attributes can include Unix perms, ownership and timestamp information, and link information. On backup, the file server records those file attributes in an analogous record using a different model. The file server records each element of Unix metadata as an NT Extended Attribute for use by an NT backup element. On restore, the file server restores those file attributes from the analogous record. The NT Extended Attributes provided by an NT restore element are translated into Unix metadata.

6895429, May 17, 2005

Dec 28, 2001

10/035666

Gaurav Banga - Sunnyvale CA, US
Mark Smith - Cupertino CA, US
Mark Muhlestein - Tuscon AZ, US

Network Appliance, Inc. - Sunnyvale CA

G06F015/167

709215, 711212, 711213, 711214, 711216, 711217, 711218

A technique enables a server, such as a filer, configured with a plurality of virtual servers, such as virtual filers (vfilers), to participate in a plurality of private network address spaces having potentially overlapping network addresses. The technique also enables selection of an appropriate vfiler to service requests within a private address space in a manner that is secure and distinct from other private address spaces supported by the filer. An IPspace refers to each distinct address space in which the filer and its storage operating system participate. An IPspace identifier is applied to translation procedures that enable the selection of a correct vfiler for processing an incoming request and an appropriate routing table for processing an outgoing request.

6968345, Nov 22, 2005

Feb 27, 2002

10/083828

Mark Muhlestein - Tuscon AZ, US

Network Appliance, Inc. - Sunnyvale CA

G06F017/30

707103R, 707 10, 7071041, 709220, 709232, 715501, 715514

A widelink directive provides an enhanced level of indirection with respect to a resource, such as a unit of storage, attached to a destination, such as a storage system. The widelink has a scope of indirection that is “wider” than a conventional symbolic link (“symlink”). The novel widelink directive is similar to the distributed file system (DFS) facility that allows DFS-enabled common internet file system clients to resolve uniform naming convention paths to locations that may or may not be on an original storage system, such as a multi-protocol filer, or original protocol server of the filer. By taking advantage of clients that support the DFS facility, the widelink directive is quite flexible in that it can be used to resolve symlinks that “leave” a share.

6983296, Jan 3, 2006

Aug 12, 2002

10/217119

Mark Muhlestein - Tuscon AZ, US
Wesley R. Witte - Campbell CA, US

Network Appliance, Inc. - Sunnyvale CA

G06F 17/30

707206

A technique keeps track of files that have been modified on a filer server by identifying full pathnames of files that have been modified and maintaining a listing of those pathnames for processing by the file server. The technique is illustratively-implemented by a plurality of processes executing in a file access protocol code layer of a file server embodied as a multi-protocol filer. The processes are configured to identify modified files, load the identified pathnames of the modified files onto a temporary storage element or data structure and maintain those pathnames on the data structure for a predetermined time. Thereafter, the files associated with those pathnames may be processed by a function of the filer.

7143307, Nov 28, 2006

Mar 15, 2002

10/098814

Wesley R. Witte - Campbell CA, US
Mark Muhlestein - Tuscon AZ, US
Gaurav Banga - Sunnyvale CA, US

Network Appliance, Inc. - Sunnyvale CA

G06F 11/00

714 6, 714 7

A technique efficiently creates and serves a backup data set on a backup filer located at a remote site from a primary filer by essentially moving an entire operating environment of a primary data set to the backup filer. The primary filer is organized into one or more virtual filers (vfilers), one of which (the primary vfiler) is configured to serve data, such as the primary data set, for a client. In the event that the primary filer or primary vfiler becomes unavailable, the technique may be implemented as a disaster recovery or data migration sequence to enable efficient instantiation of a backup vfiler to serve the backup data set for the client.

7162486, Jan 9, 2007

Sep 8, 2003

10/657573

Kayuri Patel - Cupertino CA, US
Mark Muhlestein - Tuscon AZ, US

Network Appliance, Inc. - Sunnyvale CA

G06F 17/30
G06F 17/00

707102, 707205, 711100

A technique provides on-disk representations of multiple named data streams for a file system of a network storage appliance. The network storage appliance or filer includes a file system that implements a Write Anywhere File Layout (WAFL) disk format, wherein files are described by inodes of which there may be various types, including directory and regular modes. A named stream mode type is defined that represents named data streams in the WAFL file system. Multiple data streams may be stored on disk(s) of the filer as representations embodying the named stream inode type associated with a file. The names and file handles of the data streams are stored in a “hidden” directory within the file system that is referenced by the base inode. The hidden directory is represented as a stream_dir inode type.