Abstract
NVMe over IP is a technology able to provide complete and scalable SAN solutions. Security is of paramount importance for SANs and the fundamental methods to secure NMVe over IP fabrics (i.e., DH-HMAC-CHAP authentication and TLS secure channel) have been defined. However, the security provisioning of these methods does not scale yet to large fabrics. This presentation will explain these scalability constraints and will explain how an additional mechanism, called Authentication Verification Entity, is able to make security for NVMe over IP fabrics simple, scalable, and effectively deployable.
