Best Practices Guide. Version 7.2. November 2015 Last modified: November 16, Nasuni Corporation All Rights Reserved

Transcription

1 Best Practices Guide Version 7.2 November 2015 Last modified: November 16, Nasuni Corporation All Rights Reserved

2 Document Information Best Practices Guide Version 7.2 November 2015 Copyright Copyright by Nasuni Corporation. All rights reserved. Information in this document is subject to change without notice and does not represent a commitment on the part of Nasuni. The software described in this document is furnished under a license agreement. The software may be used only in accordance with the terms of the license agreement. It is against the law to copy the software on any medium. No part of this manual may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying and recording, for any purpose without the express written permission of Nasuni Corporation. Notice Although Nasuni Corporation has attempted to ensure the accuracy of the content of this manual, it is possible that this document may contain technical inaccuracies, and typographical or other errors. Nasuni assumes no liability for any error in this publication, and for damages, whether direct, indirect, incidental, consequential or otherwise, that may result from such error, including, but not limited to loss of data or profits. Nasuni provides this publication as is without warranty of any kind, either express or implied, including, but not limited to implied warranties of merchantability or fitness for a particular purpose. Trademarks NASUNI, UNIFS, and the ovals logo are Nasuni trademarks and service marks. All other names, brands and products are the property of their respective owners. Contacting Nasuni Corporation Nasuni Corporation 313 Speen Street Natick, MA Telephone: Sales: Fax: [email protected] Technical Support Telephone: NASUNI ( ) [email protected] Technical Support is available 24/7/365 for full production customers.

3 Contents Contents iii Preface viii Audience viii What s in this Book viii Text Conventions ix Product Documentation x Electronic Publications x Chapter 1: Introducing the Nasuni Filer Nasuni Services Nasuni Filer Nasuni Management Console Key Terms About File Systems About the Cache Cache Capacity Terminology Chapter 2: Installation Installation Record your Nasuni.com Username and Password Planning multiple Nasuni Filers Planning the installation of each Nasuni Filer Platform installation options Logging in to the Nasuni Filer for the first time If you manage multiple Nasuni Filers, also install the Nasuni Management Console (NMC) Chapter 3: Configuration Configuration For each Nasuni Filer that you are configuring, determine this information Nasuni Filer Best Practices Guide 7.2 iii

4 Contents For each volume, configure Encryption Keys On the Nasuni Management Console, configure Active Directory security Place each Nasuni Filer under the control of the Nasuni Management Console For each Nasuni Filer, configure the Time Zone and the Time Server (Network Time Protocol) For each Nasuni Filer, configure Active Directory security For each volume, configure Quality of Service rules For each Nasuni Filer, configure settings For each Nasuni Filer, configure Automatic Software Updates For each Nasuni Filer, configure Remote Support Service For first Nasuni Filer, verify the default Volume and Share Enabling multiple protocols to access a volume Enabling Web Access to CIFS shares on each volume Enabling Mobile Access to CIFS shares (ios and Android devices) on each volume. 16 Enabling Desktop Client access to CIFS shares Configuring for OS X clients on each volume Configuring Snapshot Retention on each volume If this Nasuni Filer is performing data migrations, follow these steps If this Nasuni Filer is a primary file server, change the snapshot Frequency to 10 minutes or longer for the volume If this Nasuni Filer is managing backup data, schedule snapshots for once per day at a time of minimal activity Chapter 4: Operations Operations Managing Volumes Managing Shares, Exports, and FTP/SFTP directories Enabling Remote Access Adding data TO the Nasuni Filer Accessing data FROM the Nasuni Filer Resizing the cache (virtual machine) Moving Nasuni Filer to new host Changing device and network parameters (virtual machine) Enabling global file locking for a folder Verifying licensed capacity Updating Nasuni Filer Software Avoiding performance issues Nasuni Filer Best Practices Guide 7.2 iv

5 Contents Chapter 5: Security Security HTTPS proxy server Firewall protection SSL certificates Encryption keys Role-based access control notifications Antivirus protection File System Auditing SNMP monitoring Change password Snapshot directory access Remote access Snapshot retention File Alert Service CIFS authentication CIFS share security NFS export security FTP/SFTP directory security Mobile service settings Mobile licenses Data Migration Service Remote Support Service Chapter 6: Troubleshooting Troubleshooting Gathering information Performance issues Issues sending data to Nasuni Filer Nasuni Filer connectivity issues File access issues Multiple domain Active Directory issues User interface issues Miscellaneous issues Appendix A: Nasuni Terms of Service and License Agreement Nasuni Corporation Nasuni Filer Best Practices Guide 7.2 v

6 Contents Appendix B: Cache Configuration Cache Configuration About the cache Cache structure Considerations for configuring the cache Cache size Cache disk and copy-on-write (COW) disk (aka snapshot disk) Increasing cache size Cache size and performance Performance issues from cache misses Automatically releasing data from cache Loading large amounts of data into the Nasuni Filer Downloading large amounts of data from cloud Keeping all data locally (cache resident) Proactively managing the contents of the cache Different Nasuni Filers for different uses Different volumes for different uses Cache Specifications Quality of cache storage Actions affecting the cache Removing data from cache Determining if data is in the cache Bringing data into the cache manually Pinning or unpinning folders in the cache Reserving space in cache Snapshots and the cache Scheduling snapshots Manually starting snapshots Changing Quality of Service rules Changing the size of the cache disk or copy-on-write (COW) disk Supported techniques for changing the size of a disk Using the VM user interface to increase the size of the cache disk or copy-on-write (COW) disk 56 Using the Disaster Recovery procedure to change the size of the cache disk or copy-on-write (COW) disk Using a new COW disk to change the size of the COW disk Appendix C: Network Traffic Network Traffic Considerations Nasuni Filer Best Practices Guide 7.2 vi

7 Contents Selecting Traffic Groups Creating Traffic Groups Configuring Traffic Groups Configuring System Settings Appendix D: Port 443 Outbound Details Port 443 Outbound Details Amazon Web Services (AWS) Microsoft Azure Appendix E: Glossary Index Nasuni Filer Best Practices Guide 7.2 vii

8 Preface Audience This Best Practices Guide is intended to assist the IT administrator or person responsible for managing unified storage using the Nasuni Filer storage controller. What s in this Book This guide contains the following chapters: Chapter 1, Introducing the Nasuni Filer, on page 1 describes the major features and concepts of the Nasuni Filer. Chapter 2, Installation, on page 5 explains how to plan and install the Nasuni Filer and the Nasuni Filer user interface. Chapter 3, Configuration, on page 12 explains how to configure the Nasuni Filer for optimum performance. Chapter 4, Operations, on page 20 explains how to manage the Nasuni Filer during ordinary operations. Chapter 5, Security, on page 30 presents the Nasuni Filer s many security features. Chapter 6, Troubleshooting, on page 36 explains how to solve problems without the necessity of contacting Technical Support. Appendix A, Nasuni Terms of Service and License Agreement, on page 45 is the link to the Nasuni Terms of Service and License Agreement. Appendix B, Cache Configuration, on page 46 gives details about configuring the cache of the Nasuni Filer. Appendix C, Network Traffic, on page 60 gives details about configuring the Nasuni Filer with your network configuration. Appendix E, Glossary, on page 74 provides definitions of terms related to the Nasuni Filer. Nasuni Filer Best Practices Guide 7.2 viii

9 Preface What s in this Book Text Conventions The following text conventions are used in this document: Convention Description 1. Number Used to indicate a step in a task. Bullet Bold Italics Underline Monospace Used for items in a list without any particular order. Used to give emphasis to a word. Also used for named graphical elements. Used to represent options or parameters. Used for hyperlinks, such as links to Web sites. Used to indicate pathnames, filenames, folder names, typed information, and code. Nasuni Filer Best Practices Guide 7.2 ix

10 Product Documentation Electronic Publications Extensive documentation is available for all aspects of installing, configuring, and operating the Nasuni Filer. The latest version of each of the following documents is available in PDF format at Hardware Getting Started Guide: For setting up the Nasuni Filer on the Nasuni Filer hardware appliance. To download this guide for the NF-50, visit: To download this guide for the NF-200, visit: To download this guide for the NF-400, visit: To download this guide for the NF-440, visit: To download this guide for the NF-400H, visit: To download this guide for the NF-600, visit: Virtualization Getting Started Guide: For installing the Nasuni Filer on a virtual machine within a corporate network. To download this guide, visit: Virtualization Getting Started Guide for Azure: For installing the Nasuni Filer on the Microsoft Azure cloud virtual machine. To download this guide, visit: Virtualization Getting Started Guide for EC2: For installing the Nasuni Filer on the Amazon EC2 cloud virtual machine. To download this guide, visit: Nasuni Filer Best Practices Guide 7.2 x

11 Product Documentation Electronic Publications Initial Configuration Guide: For configuring and deploying the Nasuni Filer after the initial installation on the hardware appliance or virtual machine. To download this guide, visit: Administration Guide: For managing unified storage using the Nasuni Filer. To download this guide, visit: Nasuni Management Console Guide: For managing multiple Nasuni Filers. To download this guide, visit: Nasuni Management Console Quick Start Guide: To quickly get started using the Nasuni Management Console to manage multiple Nasuni Filers. To download this guide, visit: Using Multiple Protocols: Discusses scenarios requiring particular access to data, and how different combinations of protocols can help provide the access that clients need. To download this guide, visit: Third-Party Licensing Guide: Listing of third-party software used in the Nasuni Filer. To download this guide, visit: Nasuni Filer Best Practices Guide 7.2 xi

12 Chapter 1: Introducing the Nasuni Filer Nasuni Services Nasuni s Enterprise Storage Services deliver an advanced storage solution using a cloud infrastructure. The core technology is a next-generation storage controller the Nasuni Filer that offers the security and performance of traditional storage, while adding unlimited scalability, automatic offsite protection, and global multi-site access to files. The Nasuni system is managed through a single, small-footprint point of control within the enterprise s data center. The Nasuni Filer is an on-premises storage device supporting NFS, CIFS, FTP/SFTP, iscsi, and HTTP/ REST protocols. The Nasuni Filer is fully integrated with Active Directory, Distributed File System (DFS), and Windows Previous Versions. It includes a high-performance cache and takes periodic snapshots that enable file-level restores. The Nasuni Filer is available as a virtual appliance, as a hardware appliance, and as a Microsoft Azure and Amazon EC2 virtual appliance. Its reach and capacity far exceed those of a traditional controller, however, because it does not rely only on memory and local disk to manage its data: it has the entire capacity of the cloud at its disposal. All data is deduplicated, compressed, and encrypted before storage. Multi-site access enables organizations with several locations to work on a single set of shared data. Nasuni s architecture allows multiple storage controllers to have live access to the same volume of data. Organizations benefit by having a simple, safe, and secure way to share data across any number of sites. Nasuni s multi-site access enables capabilities that include: Secure data distribution to remote office/branch office (ROBO). Remote offices forwarding data to a central point. Two-way synchronized read-write. Multi-site access does away with cumbersome replication schemes and slow WAN optimizers. Nasuni Filer Nasuni s Enterprise Storage Services are delivered through the Nasuni Filer, a storage controller that runs in your data center and provides primary storage with built-in backup, offsite protection, and multisite access. With your Nasuni Filer, you manage your volumes and performance using the Web-based Nasuni Filer user interface. Nasuni Filer Best Practices Guide 7.2 1

13 Nasuni Management Console Nasuni Management Console The Nasuni Management Console enables you to monitor and manage many Nasuni Filers from one central appliance. Using the Nasuni Management Console, you can view the status of all of your managed Nasuni Filers, as well as configure their settings. With the Nasuni Management Console, you can ensure consistent settings on all your Nasuni Filers. Key Terms The following terms are helpful in understanding the Nasuni Filer: Nasuni Filer: The storage controller in your data center that integrates with your infrastructure via CIFS, NFS, iscsi, FTP/SFTP, or HTTPS/REST protocols. The Nasuni Filer can be mapped as a network drive. Nasuni Filer user interface: The Web-based graphical user interface with which you configure and manage the Nasuni Filer. The Nasuni Filer user interface is accessible with supported Web browsers including Mozilla Firefox, Internet Explorer, Safari, and Google Chrome. Nasuni Management Console (NMC): The Web-accessible appliance with which you can configure and manage multiple Nasuni Filers. The Nasuni Management Console is accessible with supported Web browsers including Mozilla Firefox, Internet Explorer, Apple Safari, and Google Chrome. Cloud storage: Internet-based, highly protected, unlimited storage. Volume: A set of files and directories (CIFS, NFS, and FTP/SFTP) or blocks of data (iscsi). Share/export: An access point to a folder on a volume that can be shared or exported on your network. Access to a CIFS share can be customized on a user-level or group-level basis. You can create many shares or exports on a volume, for different purposes or audiences. Cache: The local storage of the Nasuni Filer. All data and metadata that is accessed regularly is kept locally in the cache. If requested data is not locally resident, it is staged into the cache and provided for the request. Snapshot: A snapshot is a complete picture of your volume at a specific point in time. Snapshots offer data protection by enabling you to recover data deleted in error or to restore an entire file system. After a snapshot has been taken and is sent to cloud storage, it is not possible to modify that snapshot. Nasuni Filer Best Practices Guide 7.2 2

14 About File Systems About File Systems File system data and metadata are stored locally on the Nasuni Filer. However, permanent storage is in the form of cloud-based storage. Changes in files are sent to cloud storage by the Nasuni Filer, at times specified by your snapshot schedule and at rates specified by your specified quality of service (inbound and outbound bandwidth). You can also manually initiate snapshots. Metadata includes: Standard access control list (ACL) and file system metadata, such as permissions and file size. Version history, including operations such as creating, updating, deleting, and moving. Location of file versions. Volume encryption settings and volume protocol: CIFS, NFS, FTP/SFTP, or iscsi. Note: The Nasuni Filer supports Windows, UNIX, and Linux clients. Client capabilities and behavior vary, depending on the client type and the client operating system version. Data is versioned, with the ability to go back to a point in time at the volume, directory, and file levels. About the Cache It is generally unnecessary to pay attention to the cache s function or configuration. The cache adapts to your usage of data. The following is an overview of how the cache works. When you first launch the Nasuni Filer, the local cache contains no user data. Afterwards, any data written to a volume is staged in the local cache. After one hour, the first snapshot occurs. (To take a snapshot sooner, click Take snapshot now on the Volumes page.) Each file in the cache is encrypted, compressed, deduplicated, and sent to cloud storage. This is the only time that the entire cache is sent to cloud storage. Subsequent snapshots include only the changes between the original version of the files and the most recent version of the files. The cache continuously tracks recently changed data, such as files created or changed since the last snapshot. New data that has been saved to the cache, but has not yet been protected in cloud storage, is classified as new data in cache not yet protected. The most recently used files remain in the cache. Saved data that was written once and rarely used afterwards is eventually removed ( evicted ) from the cache to free up space for new data. If one of these evicted files is later requested for reads or writes, the Nasuni Filer retrieves the file from cloud storage and puts it back into the local cache automatically. Cache Capacity The cache keeps copies of working files for fast access to frequently accessed data. When the cache starts to become full, it first removes ( evicts ) files that have already been sent to cloud storage and are rarely accessed, using a least recently used (LRU) algorithm. If more space is necessary, a snapshot is performed to protect more data in cloud storage, after which the protected data can then be evicted from the cache. As a result, the cache rarely reaches full capacity. After a snapshot is complete, the cache status displays 0% new data in cache not yet protected, until you change data or create new data. Nasuni Filer Best Practices Guide 7.2 3

15 Terminology You can continue to use your system normally during each snapshot. The size and status of the cache is displayed on the Home page. Figure 1-1: Cache status. As a default, the Nasuni Filer tries to keep about 30 percent of the cache free to accept new data. Pinning data in the cache or manually changing the cache settings can affect the percentage of the cache that is free to accept new data. Terminology The Nasuni Filer documentation uses certain specific terms for the technology involved. Term Description Cache Data Migration Service Network Drive Notifications Quality of Service (QoS) Quota Remote Volume Sync Volume Local data storage. A Nasuni Filer service that migrates data from defined sources to a Nasuni Filer on a specified schedule. A Windows logical drive that maps to a CIFS share. Alerts and messages within the Nasuni Filer interface. The inbound and outbound bandwidth limit for moving snapshots from the Nasuni Filer to cloud storage. The maximum capacity of a volume. A volume on another Nasuni Filer on your Nasuni account that has been made accessible. Merging data from other Nasuni Filers with your Nasuni Filer. A set of data accessible by one of the Nasuni Filer's supported protocols. Also see Glossary on page 74. Nasuni Filer Best Practices Guide 7.2 4

16 Chapter 2: Installation Installation Installation includes all tasks necessary to make the Nasuni Filer and the Nasuni Filer user interface operational. All documentation is available at A. Record your Nasuni.com Username and Password Your Nasuni.com Username and Password are required for administering your account. B. Planning multiple Nasuni Filers See for a worksheet for planning configurations. You can set up different Nasuni Filers for different uses, including the following: Performing data migrations: the goal is to migrate data from outside sources to the Nasuni Filer while minimizing the effect on users. Dedicate a specific Nasuni Filer for data migrations. Applications that access the Nasuni Filer directly: the goal is to maximize performance of the application. Applications that directly access the Nasuni Filer open large numbers of files rapidly and frequently. Primary file server: the goal is timely file access for users. Providing mobile access: the goal is timely but secure file access for mobile users. Providing FTP/SFTP access to data, especially for users without the usual authentication. Standby for disaster recovery: the goal is to have files ready for reasonable user access in case the primary server goes down. The performance is expected to not equal the performance of the primary server. Backup: the goal is to preserve copies of files in case the original file is lost or corrupted. Backup consists of two processes: moving data to the Nasuni Filer s cache, and moving data from the Nasuni Filer s cache to the cloud. Dedicate a specific Nasuni Filer for backup. If you have only a single Nasuni Filer, go to step C, Planning the installation of each Nasuni Filer. If you have multiple Nasuni Filers, you must plan the resources necessary for each Nasuni Filer separately. Each Nasuni Filer should have a different name. Then proceed with step C, Planning the installation of each Nasuni Filer for each Nasuni Filer. To simplify managing multiple Nasuni Filers, install the Nasuni Management Console. Nasuni Filer Best Practices Guide 7.2 5

17 Installation C. Planning the installation of each Nasuni Filer For details, see the Nasuni Filer Initial Configuration Guide Verify minimum memory: 4 GiB (virtual machine) Recommended minimum memory is 6 GiB. A very light load might require only 4 GiB. A heavy load might require 8 GiB or more. If applications access the Nasuni Filer directly, consider adding more memory. For comparison, the Nasuni Filer hardware appliance includes 12 GiB (NF-200) or 32 GiB (NF-400, NF-400H, and NF-440) memory. Verify minimum free hard drive space to run the Nasuni Filer: 352 GB (virtual machine) The minimum free hard drive space must include the cache. See step 4 below. For comparison, the Nasuni Filer hardware appliance includes 6 TB (NF-200 and NF-400), 11 TB or 22 TB (NF-440), or 12 TB or 24 TB (NF-400H) hard drive space. Verify minimum number of CPU cores: 2 (more than 2 for optimal performance) (virtual machine) For comparison, the Nasuni Filer hardware appliance includes 6 cores (NF-200, NF-400, and NF-400H) or 12 cores (NF-440). If applications access the Nasuni Filer directly, consider adding more CPU cores. If this Nasuni Filer is performing data migrations, use the most powerful computer available. Verify minimum hard drive space for cache: 250 GB (virtual machine) For comparison, the Nasuni Filer hardware appliance includes 6 TB (NF-200 and NF-400), 11 TB or 22 TB (NF-440), or 12 TB or 24 TB (NF-400H) hard drive space. It is not necessary for all the data stored in the Nasuni service to be kept in the cache. The size of the cache should be based on the size of the working set (the amount of data being accessed by users or applications on a regular basis), including metadata. See Appendix B, Cache Configuration, on page 46 for details. If this Nasuni Filer is a standby for disaster recovery, the cache should be sufficient to hold the working set of data. If this Nasuni Filer is managing backup data, the cache should be large enough to hold one backup s worth of data. Verify supported virtualization platforms: VMware ESXi 5.0, 5.1, 5.5, and 6.0; and Windows Server 2008 R2 SP1 and Windows Server 2012 Hyper-V (virtual machine) Nasuni Filer Best Practices Guide 7.2 6

18 Installation Verify working network connections For details on configuring for network traffic, see Appendix C, Network Traffic, on page 60. (The Nasuni Filer uses bonding mode 5 (balance-tlb) for high-availability (HA) networking. This has no requirements from the switches.) Verify working connection to the Internet The Nasuni Filer must be able to access Nasuni.com and the cloud storage provider. You can run the console application nasunicheck to confirm DNS connectivity for the Nasuni Filer. If this Nasuni Filer is performing data migrations, use the location with the fastest bandwidth available. If this Nasuni Filer is a standby for disaster recovery, the higher the bandwidth, the better. If this Nasuni Filer is managing backup data, the bandwidth should be sufficient to protect one day s worth of data in cloud storage in less than one day. It takes 1 entire day to protect 1 TB of data with a 100 Mbps connection. Nasuni Filer Best Practices Guide 7.2 7

19 Installation 8. Verify corporate firewall configured to open required ports The following ports should be open, as required: Port number Associated protocols Used for Inbound (to Nasuni Filer) Outbound (from Nasuni Filer) 8443 HTTPS Access Nasuni Filer administrative interface. 443 HTTPS Nasuni Management Console Administrative Access; Web Access; Desktop and Mobile Access: Nasuni Desktop Client (Windows, Linux, and OSX clients) and Mobile Access (ios and Android clients). Optional (but not recommended), open to Nasuni Filer for external management access direct or via NAT. Optional, but required if using Web Access, or Desktop and Mobile Access and external access is desired without VPN. Optional, open to Nasuni Management Console for external management access direct or via NAT. N/A At a minimum, open to *.nasuni.com, *.amazonaws.com, and *.windows.net Note: Firewalls that process and log port 443 traffic from the Nasuni Filer can affect performance when the Nasuni Filer is communicating with the cloud. If you must use IP addresses (not recommended), see Appendix D, Port 443 Outbound Details, on page NTP (Network Time Protocol) Connecting to Network Time Protocol (NTP) servers. N/A Optional, if connecting to external Network Time Protocol (NTP) servers. 161 SNMP (Simple Network Management Protocol) Connecting to Simple Network Management Protocol (SNMP) services. N/A Optional, if using external Simple Network Management Protocol (SNMP) trap addresses. 25 SMTP (Simple Mail Transfer Protocol) Simple Mail Transfer Protocol (SMTP) processing for outgoing messages. N/A Optional, if using external servers for for Nasuni Filer messages. Nasuni Filer Best Practices Guide 7.2 8

20 Installation D. Platform installation options There are 4 platform options for installation: For a Nasuni Filer hardware appliance, go to step 1, Nasuni Filer hardware appliance (NF-200, NF-400, NF-400H, and NF-440). For a virtual machine platform, including VMware and Hyper-V, go to step 2, Installation on virtual machine (VMware or Hyper-V). For the Microsoft Azure virtual platform, go to step 3, Installation on Microsoft Azure virtual platform. For the Amazon EC2 virtual platform, go to step 4, Installation on Amazon EC2 virtual platform Nasuni Filer hardware appliance (NF-200, NF-400, NF-400H, and NF-440) See the Nasuni Filer Hardware Deployment Getting Started Guide. The Nasuni Filer software is already installed. If you re using the NF-200, NF-400, or NF-400H, determine or set the initial IP address in one of these ways: If DHCP is available on the network, make note of the IP address that appears on the LCD panel. Otherwise, connect a monitor and keyboard. Press Enter. Use username service and password service. Enter editnetwork. Enter setall static. Enter a new IP address. Enter save. If you re using the NF-440, connect a monitor to the VGA port, then determine or set the IP address in one of these ways: If DHCP is available on the network, view the console. Alternatively, search network traffic logs for the MAC address. Alternatively, set the MAC address in the DHCP host to force the Nasuni Filer to a known IP address, then restarting. Alternatively, download the Filer Finder tool: account.nasuni.com/account/get-product/ Otherwise, on the console, press Enter. Use username service and password service. Enter editnetwork. Enter setall static. Enter a new IP address. Enter save. To configure idrac (Integrated Dell Remote Access Controller), see the idrac Configuration Procedure. Continue with step E, Logging in to the Nasuni Filer for the first time. Installation on virtual machine (VMware or Hyper-V) For detailed installation instructions, see the Nasuni Filer Virtualization Getting Started Guide. When the Nasuni Filer console screen appears, note the initial IP address. Continue with step E, Logging in to the Nasuni Filer for the first time. Nasuni Filer Best Practices Guide 7.2 9

21 Installation Installation on Microsoft Azure virtual platform For detailed installation instructions, see the Nasuni Filer Virtualization Getting Started Guide for Azure. Note the initial IP address. Continue with step E, Logging in to the Nasuni Filer for the first time. Installation on Amazon EC2 virtual platform For detailed installation instructions, see the Nasuni Filer Virtualization Getting Started Guide for EC2. Note the initial IP address. E. Logging in to the Nasuni Filer for the first time Use the Username and Password that you created for administration of this Nasuni Filer. For details, see the Nasuni Filer Initial Configuration Guide Verify initial login to Nasuni Filer Use the initial IP address with a Web browser: address>:8443 If a warning appears about the site s SSL security certificate, you can ignore it. When the wizard starts, configure settings for your network For details on configuring for network traffic, see Appendix C, Network Traffic, on page 60. Enter the serial number and authorization code for this Nasuni Filer The Filer Serial Number and Authorization code are found under the Account section of or on the Account Status page of the Nasuni Management Console. For a new installation, choose an unused Filer Serial Number. To recover a prior installation, such as during disaster recovery, choose the Filer Serial Number of the prior installation. Accept the Terms of Service Create a Nasuni Filer name or description Create a Username (case-sensitive) and a Password (case-sensitive) for administration of the Nasuni Filer Nasuni Filer Best Practices Guide

22 Installation The Nasuni Filer Home page appears The Home page, and all other pages of the Nasuni Filer user interface, might look different to different users. Also, different menus and actions might be available for different users. This is because different users are assigned different permissions, based on their roles in the role-based access control system. See For each volume, configure Quality of Service rules on page 14. If migrating a large amount of data to the new Nasuni Filer, consider using Nasuni s bulk data migration service F. If you manage multiple Nasuni Filers, also install the Nasuni Management Console (NMC) The Nasuni Management Console allows you to manage multiple Nasuni Filers from one central application. For details, see the Nasuni Management Console Guide. Place Nasuni Filers under the control of the Nasuni Management Console (NMC). Continue with configuring the Nasuni Filer at Configuration on page 12. Nasuni Filer Best Practices Guide

23 Chapter 3: Configuration Configuration After installation, you can use the Nasuni Filer user interface to configure the Nasuni Filer. You can configure multiple Nasuni Filers with the Nasuni Management Console (NMC). For more details, see the Nasuni Filer Administration Guide and Nasuni Management Console Guide. All documentation is available at A. For each Nasuni Filer that you are configuring, determine this information See for a worksheet for planning configurations. Filer Description (Name): Network Configuration (for Static) Default Gateway (IP address): Search Domain: Primary DNS server (IP address): Secondary DNS server (IP address): Domain Settings (Security for Active Directory) Full Windows Domain: User Name: Workgroup: Password: Time Configuration Time Zone: Default is US/Eastern. Time Server: Default is time.nasuni.com. Settings: Default is none. Require TLS: Select / Unselect (Default is Unselected.) From name: (Default is blank.) SMTP server: (Default is blank.) SMTP port: (Default is 25.) Login (Optional.): (Default is blank.) Password (Optional.): (Default is blank.) Send to: (Default is blank.) Receive All Alerts: Select / Unselect (Default is Selected.) Tested?: Yes / No Users and Groups: Default groups: Filer Admins and File Restore. Default user: admin. Groups: Users: Nasuni Filer Best Practices Guide

24 Configuration B. For each volume, configure Encryption Keys Upload your enterprise s encryption keys It is a best practice to upload and use your enterprise s own encryption keys. Protect your encryption keys. If you ever need to perform a disaster recovery procedure, you need your encryption keys. On Nasuni Filer: Click Configuration, then select Encryption Keys. Click Upload Encryption Keys. On NMC: Click Filers, then click Encryption Keys. Click Upload Encryption Keys. Download and protect encryption keys generated by the Nasuni Filer, in case you need them for disaster recovery If you are using automatically-generated encryption keys, download and protect the encryption keys. If you ever need to perform a disaster recovery procedure, you need your encryption keys. Any generated keys are also securely escrowed with Nasuni automatically. On Nasuni Filer: Click Configuration, then select Encryption Keys. Click Download Generated Keys. C. On the Nasuni Management Console, configure Active Directory security Click Console Settings, then click Domain Settings. D. Place each Nasuni Filer under the control of the Nasuni Management Console The Nasuni Management Console allows you to manage multiple Nasuni Filers from one central application. For details, see the Nasuni Management Console Guide. On Nasuni Filer: Click Services, then select Nasuni Management Console. E. For each Nasuni Filer, configure the Time Zone and the Time Server (Network Time Protocol) On Nasuni Filer: Click Configuration, then select Time Configuration. You can also specify using NTP services from domain controllers: Configuration Domain Settings Show Advanced Options. On NMC: Click Filers, then click Time Configuration Settings. Select Nasuni Filers, then click Edit Filers. Nasuni Filer Best Practices Guide

25 Configuration F. For each Nasuni Filer, configure Active Directory security If you are using Active Directory for security, configure Active Directory security on each Nasuni Filer To join a Nasuni Filer to its first Active Directory domain, click Configuration, then select General Settings, then click Join Domain. To join a Nasuni Filer to an Active Directory domain after its first, click Configuration, then select Domain Settings. To leave an Active Directory domain, click Configuration, then select Domain Settings. G. For each volume, configure Quality of Service rules Quality of Service is the inbound and outbound bandwidth limit for moving data to and from the Nasuni Filer, such as sending snapshots to Nasuni s cloud storage. The larger the outbound Quality of Service, the faster incoming data is protected in cloud storage and the more cache space is made available for data. The best performance generally occurs with the Unlimited setting, but this depends on your enterprise s use of the network and the amount of bandwidth available to the Nasuni Filer. Inbound Quality of Service is Unlimited by default. You can create up to 12 different rules that specify the Quality of Service on different days and times. When you create one or more Quality of Service rules, the default Quality of Service bandwidth becomes unlimited during any time that is not defined by a rule. If this Nasuni Filer is performing data migrations, set the outbound Quality of Service to the maximum possible. Higher Quality of Service settings might be possible at night or on weekends, when it does not interfere with other activity. If this Nasuni Filer is managing backup data, set the outbound Quality of Service to the maximum possible. Higher Quality of Service settings might be possible at night or on weekends, when it does not interfere with other activity. If the inbound Quality of Service is too low, and data must be obtained from cloud storage, data access might be affected. If the outbound Quality of Service is large or unlimited, and the inbound Quality of Service is small, the limited inbound bandwidth for return packets (such as acknowledgements) might affect the outbound bandwidth. On Nasuni Filer: Click Configuration, then select Quality of Service. On NMC: Click Filers, then click Quality of Service. Select Nasuni Filers, then click Edit Filers. H. For each Nasuni Filer, configure settings On Nasuni Filer: To receive alerts by , click Configuration, then select Settings. On NMC: Click Filers, then click Settings. Select Nasuni Filers, then click Edit Filers. Nasuni Filer Best Practices Guide

26 Configuration I. For each Nasuni Filer, configure Automatic Software Updates To configure when to install automatic software updates: On Nasuni Filer: Click Configuration, then select Automatic Updates. On NMC: Click Filers, then click Automatic Updates. Select Nasuni Filers, then click Edit Filers. To prevent automatic software updates from occurring at inconvenient times, specify the days and times for automatic software updates to occur. To prevent automatic software updates entirely, deselect all days and times. To manually initiate software updates: On Nasuni Filer: Click Status, then select Updates. On NMC: Click Filers, then click Software Updates. Select Nasuni Filers, then click Update Filers. To avoid interface issues, clear your Web browser s cache after updating software. Updating the software disconnects all users currently using the Nasuni Filer. If this Nasuni Filer is a primary file server, configure automatic software updates during times that do not interfere with users. If this Nasuni Filer is a standby for disaster recovery, configure automatic software updates during times that do not interfere with users. J. For each Nasuni Filer, configure Remote Support Service The opt-in Remote Support Service allows authorized Nasuni Technical Support personnel to remotely and securely diagnose and resolve issues with your Nasuni Filer. On Nasuni Filer: Click Services, then select Remote Support Service. On NMC: Click Filers, then click Remote Support. Select Nasuni Filers, then click Edit Filers. K. For first Nasuni Filer, verify the default Volume and Share When you install your first Nasuni Filer, a single default volume (named files ) with an associated CIFS shared folder is created. To view the default volume: On Nasuni Filer: Click Volumes and select from the list. On NMC: Click Volumes, then select the volume. To view the default share: On Nasuni Filer: Click Status, then select CIFS Status. On NMC: Click Volumes, then click Shares. To create a new volume, see Creating a volume on page 22. To create a new share, see Creating a new share on page 24. Nasuni Filer Best Practices Guide

27 Configuration L. Enabling multiple protocols to access a volume You can use multiple protocols, including CIFS, NFS, and FTP/SFTP, to access data. On Nasuni Filer: Click Volumes, select the NFS volume from the list, then click Properties and select Volume Protocols. Select protocols for volume. On NMC: Click Volumes, then click Protocols. For selected volume, click Edit. Note: You cannot enable Global Locking for a volume that has multiple protocols enabled. See Enabling Global Locking on page 23. M. Enabling Web Access to CIFS shares on each volume You can access data stored in the Nasuni Filer using a Web browser. The actions you can perform depend on the capabilities of the Web browser. To enable Web Access: On Nasuni Filer: Click Volumes, select the volume with the CIFS protocol enabled from the list, then click the Total Shares status. Click Edit Share for the share. Select Show Advanced Options, then select the Web Access check box. On NMC: Click Volumes, then click Shares. For the selected share, click Edit. Select Show Advanced Options, then select the Web Access check box. For both: To enable Shared Links, select Enable Shared Links. N. Enabling Mobile Access to CIFS shares (ios and Android devices) on each volume Enable Mobile Access in order to use the Nasuni Desktop Client, or to access data using ios and Android devices Enabling Mobile Access for a share On Nasuni Filer: Click Volumes, select the volume with the CIFS protocol enabled from the list, then click the Total Shares status. Click Edit Share for the share. Select Show Advanced Options, then select the Desktop and Mobile Access check box. On NMC: Click Volumes, then click Shares. For the selected share, click Edit. Select the Desktop and Mobile Access check box. On your mobile device, download and install the appropriate Nasuni app for your platform. Enabling, disabling, and deleting mobile devices On Nasuni Filer: Click Services, then select Mobile Licenses. Select devices, then select Enable, Disable, or Delete. On NMC: Click Filers, then click Mobile Licenses. Select Nasuni Filers, then click Enable, Disable, or Delete. Nasuni Filer Best Practices Guide

28 Configuration 3. Providing initial login links to users On Nasuni Filer: Click Services, then select Mobile Service Settings from the list. Click Invitation Link. On NMC: Click Filers, then click Mobile Settings. Click Invitation Link for the selected Nasuni Filer. To require VPN access, use the internal hostname or IP address, and port 443. To provide direct external access, use the external hostname or IP address and port. O. Enabling Desktop Client access to CIFS shares The Nasuni Desktop Client consists of a simple interface to the Nasuni Filer on the user s computer. The Nasuni Desktop Client is available for Windows, Linux, and OSX platforms. The Nasuni Desktop Client requires a separate installation and configuration on each end user s computer. For more details see the Nasuni Desktop Client Administrator Guide and the Nasuni Desktop Client User Guide. To enable Desktop Client access: On Nasuni Filer: Click Volumes, select the volume with the CIFS protocol enabled from the list, then click the Total Shares status. Click Edit Share for the share. Select Show Advanced Options, then select the Desktop and Mobile Access check box. On NMC: Click Volumes, then click Shares. For the selected share, click Edit. Select the Desktop and Mobile Access check box. P. Configuring for OS X clients on each volume CIFS shares that have OS X clients should specify the Enhanced Support for POSIX Clients option. On Nasuni Filer: Click Configuration, then select General Settings. Click Show Advanced Options, then select the Enhanced Support for POSIX Clients check box. On NMC: Click Filers, then click CIFS Settings. Select Nasuni Filers, then click Edit Filers. Select the Enhanced Support for POSIX Clients check box. Q. Configuring Snapshot Retention on each volume For compliance purposes or your own best practices, you can specify to delete older snapshots from cloud storage. When a snapshot is removed, it is permanently deleted from cloud storage and cannot be recovered. On Nasuni Filer: Click Volumes, then select the volume from the list. Click the Snapshot Retention status. On NMC: Click Volumes, then click Snapshot Retention. For the selected volumes, click Edit Volumes. Nasuni Filer Best Practices Guide

29 Configuration R. If this Nasuni Filer is performing data migrations, follow these steps Disable Remote Access for the volume Disabling Remote Access reduces processing. On Nasuni Filer: Click Volumes, then select the volume from the list. Click the Remote Access setting. On NMC: Click Volumes, then click Remote Access. For the selected volumes, click Edit Volumes. Change the snapshot Frequency to 24 hours for the volume The strategy is to fill the cache as much as possible and as fast as possible without doing snapshot processing, then perform a snapshot with a full cache. On Nasuni Filer: Click Volumes, then select the volume from the list. Click the Snapshot Schedule setting. On NMC: Click Volumes, then click Snapshot Schedule. For the selected volumes, click Edit Volumes. Schedule snapshots of migration data for nights and weekends Otherwise, snapshots of migration data might delay snapshots of other volumes. On Nasuni Filer: Click Volumes, then select the volume from the list. Click the Snapshot Schedule setting. On NMC: Click Volumes, then click Snapshot Schedule. For the selected volumes, click Edit Volumes. Set Cache Settings to 30 percent or greater The Data Migration Service uses the cache. To ensure that the Data Migration Service has enough space, set Cache Settings to 30 percent or greater. On Nasuni Filer: Click Configuration, then select Cache Settings. On NMC: Click Filers, then click Cache Settings. For the selected Nasuni Filers, click Edit Filers. S. If this Nasuni Filer is a primary file server, change the snapshot Frequency to 10 minutes or longer for the volume Frequent snapshots can affect performance. On Nasuni Filer: Click Volumes, then select the volume from the list. Click the Snapshot Schedule setting. On NMC: Click Volumes, then click Snapshot Schedule. For the selected volumes, click Edit Volumes. Nasuni Filer Best Practices Guide

30 Configuration T. If this Nasuni Filer is managing backup data, schedule snapshots for once per day at a time of minimal activity On Nasuni Filer: Click Volumes, then select the volume from the list. Click the Snapshot Schedule setting. On NMC: Click Volumes, then click Snapshot Schedule. For the selected volumes, click Edit Volumes. Nasuni Filer Best Practices Guide

31 Chapter 4: Operations Operations This section includes ongoing operations tasks you can perform using the Nasuni Filer user interface. You can manage multiple Nasuni Filers with the Nasuni Management Console (NMC). For more details on any of these topics, see the Nasuni Filer Administration Guide and the Nasuni Management Console Guide. All documentation is available at A. Managing Volumes Connecting to a remote volume On Nasuni Filer: Click Volumes. Click Connect to Remote Volume. Select a remote volume to connect to. On NMC: Click Volumes, then click Connect Volume. For the selected share, click Edit Connections. Planning a volume See for a worksheet for planning configurations. Determine the following information to plan the features of a volume: During Initial Setup (Volumes Add New Volume) Volume Name: (Can change later.) Region: (Location-specific options.) (Cannot change later.) Encryption Key: (Default is Create New Key.) (Can add and select different key later.) Network Protocol: (Default is CIFS.) CIFS / NFS / FTP / iscsi (Can add later.) (Cannot add multiple protocols for a volume that has Global Locking enabled.) (For CIFS) Authentication mode: Active Directory / Public Nasuni Filer Best Practices Guide

32 Operations During Initial Setup (Volumes Add New Volume) Quota (GB): (Default is unlimited capacity, up to the licensed capacity.) (Can change later.) Create a default Share/Export: Select / Unselect (Default is Select.) (Can create shares, exports, or FTP/SFTP directories later.) The following can be configured at any time (Volumes select volume Edit Properties) Snapshot Directory Access: (Default is Disabled.) Remote Access: (Default is Disabled.) Enabled / Disabled Enabled / Disabled Sync Schedule: Days: Sun Mon Tue Wed Thur Fri Sat Start time: Stop time: Frequency: (Default days: every day. Default time: 24 hours. Default frequency: 5 minutes.) (Reduce frequency if Global Locking enabled.) Snapshot Schedule: Days: Sun Mon Tue Wed Thur Fri Sat Start time: Stop time: Frequency: (Default days: every day. Default time: 24 hours. Default frequency: 5 minutes.) (Reduce frequency if Global Locking enabled.) Snapshot Retention: all snapshots / a set number of snapshots / snapshots within a given time (Default is All Snapshots.) File Alert Service: (Default is Disabled.) Patterns: Antivirus Service: (Default is Disabled.) Antivirus Violations: Enabled / Disabled Enabled / Disabled Ignore / Delete Nasuni Filer Best Practices Guide

33 Operations Quotas For iscsi volumes only iscsi Volume Size (GB): (Maximum is 75 percent of cache size.) (Can increase later.) iscsi Allowed Hosts: Default is all hosts. (Can change later.) iscsi CHAP User Name and Password: Default is none. User Name: Password: (Can change later.) On Nasuni Filer: To configure directory-specific quota notifications, click File Browser, select a directory, then click Quota. On NMC: Click Volumes, then click Quota. On NMC: Click Filers, then click Quota Reports. Pinning folders to cache On Nasuni Filer and NMC: To enable pinning a folder to the cache, click File Browser, select a folder, then click Edit Cache Settings. Auto Cache for folders On Nasuni Filer and NMC: To enable Auto Cache for folders, click File Browser, select a folder, then click Edit Cache Settings. Note: Enabling Auto Cache adds a load to the system. 3. Creating a volume On Nasuni Filer: Click Volumes, then click Add New Volume. On NMC: Click Volumes, then click Create Volume. After you create a volume, download and save encryption keys: On Nasuni Filer: Click Configuration, then click Encryption Keys, then click Download Generated Keys. In trial mode, the maximum number of volumes you can have is limited to two. If applications access the Nasuni Filer directly, create an application-specific volume. If this Nasuni Filer is a standby for disaster recovery, create a shared volume that connects to the primary volume. Enable Remote Access for the primary volume, with Read-Write access for the standby Nasuni Filer. Scheduling syncs with a frequent Frequency helps to Nasuni Filer Best Practices Guide

34 Operations ensure that data is up to date. Enabling Auto Cache for folders helps to ensure that data is up to date. You can schedule snapshots with an infrequent Frequency, because the standby is not responsible for ensuring that snapshots occur. 4. Enabling Global Locking The purpose of the Global Locking feature is to prevent conflicts when two or more users attempt to change the same file on different Nasuni Filers. If you enable the Global Locking feature for a directory and its descendants, any files in that directory or its descendants can only be changed by one user at a time. Note: You cannot enable Global Locking for a volume that has multiple protocols enabled. See Enabling multiple protocols to access a volume on page 16. Tip: Enabling Global Locking can have an impact on performance, depending on factors that include network congestion, user load, and file sizes. If users do not typically collaborate on the same file at the same time, it is unnecessary to enable Global Locking. Tip: On volumes with Global Locking enabled, we recommend reducing the normal snapshot and synchronization frequency of the volume, because Global Locking provides file synchronization independently of the snapshot and synchronization frequency. On Nasuni Filer: Click File Browser, select folder, then click Edit Global Locking Settings. On NMC: Click Volumes, then click File Browser, select folder, then click Edit Global Locking Settings. Nasuni Filer Best Practices Guide

35 Operations B. Managing Shares, Exports, and FTP/SFTP directories You can create multiple CIFS shares, NFS exports, and FTP/SFTP directories for each volume. Each share, export, or FTP/SFTP directory can have different properties and permissions for different purposes and users. 1. Planning a CIFS share See for a worksheet for planning configurations. Determine the following information to plan CIFS shares: Values (Volumes select volume Total Shares Add New Share) Folder: Name: Share Visible?: Select / Unselect (Default is Selected.) Share Read-Only?: Select / Unselect (Default is Unselected.) All settings below are on the Advanced tab: Allowed Hosts: (Default is all.) Authentication (Active Directory security only): Authenticate all Users / Authenticate only specified Groups and Users (Default is Authenticate all Users.) Hide Unreadable Files: Select / Unselect (Default is Selected.) Enable Previous Versions: Select / Unselect (Default is Selected.) Case-Sensitive Paths: Select / Unselect (Default is Unselected.) Enable Snapshot Directories: Select / Unselect (Default is Unselected.) User Folders Support (Active Directory security only): Disabled / Enabled (Default is Disabled.) Desktop and Mobile Access: Select / Unselect (Default is Unselected.) Web Access: Select / Unselect (Default is Unselected.) 2. Creating a new share On Nasuni Filer: Click Volumes, select a volume with the CIFS protocol enabled from the list, then click the Total Shares status. Click Add New Share. On NMC: Click Volumes, then click Shares, then click Create Share. If applications access the Nasuni Filer directly, create an application-specific share. Nasuni Filer Best Practices Guide

36 Operations If this Nasuni Filer provides mobile access, create shares specifically for mobile access. Enable Desktop and Mobile Access. Also, select Read-Only access. Define which specific users or groups have access to each share. Some applications need Case-Sensitive Paths disabled in order to successfully access files. However, disabling Case-Sensitive Paths can cause performance issues. Some applications need Allocation Roundup Size disabled. However, disabling Allocation Roundup Size can cause performance issues. 3. Creating NFS exports On Nasuni Filer: Click Volumes, select an NFS volume from the list, then click the Total Exports status. Click Add New Export. On NMC: Click Volumes, then click Exports, then click Create Export Enabling multiple protocols for a volume To enable multiple protocols for a volume: On Nasuni Filer: Click Volumes, then select a volume from the list. From the Properties drop-down menu, select Volume Protocols. On NMC: Click Volumes, then click Protocols. For the selected volume, click Edit. Creating FTP/SFTP directories Enable the FTP protocol for the volume. See Enabling multiple protocols for a volume on page 25. To create an FTP/SFTP directory for a volume: On Nasuni Filer: Click Volumes, then select a volume that has the FTP/SFTP protocol enabled. From the Properties drop-down menu, select FTP Directories. Click Add New FTP Directory. On NMC: Click Volumes, then click FTP Directories, then click Create FTP Directory. C. Enabling Remote Access To enable access to a volume by remote offices attached to your Nasuni.com account: On Nasuni Filer: Click Volumes, select a volume from the list, then click the Remote Access status. On NMC: Click Volumes, then click Remote Access. For the selected volumes, click Edit Volumes. If this Nasuni Filer is performing data migrations, disable Remote Access for the volume. Disabling Remote Access reduces processing. Nasuni Filer Best Practices Guide

37 Operations D. Adding data TO the Nasuni Filer 1. For details, see Appendix B, Cache Configuration, on page 46. If migrating a large amount of data to the Nasuni Filer, consider using Nasuni s bulk data migration service. a. b. c. Automated Data Migration to Nasuni Filer You can use the Data Migration Service to copy data to the Nasuni Filer. Specify a data migration source On Nasuni Filer: Click Services, then select Migration Sources from the list. Add a CIFS or NFS migration source. Define a data migration On Nasuni Filer: After configuring at least one migration source, click Services, then select Add Migration. Nasuni recommends migrating to an unshared or unexported portion of a volume, so users are not accessing or changing data during data migration into that portion of the volume. If you perform large migrations or frequent migrations, consider using a different Nasuni Filer to migrate data, instead of the Nasuni Filer that your users access. Schedule a data migration On Nasuni Filer: After configuring at least one data migration, click Services, then select View Migrations. Select a migration, then click Schedule. 2. Copying data from local or network drives to Nasuni Filer In Windows, you can map volumes on the Nasuni Filer to network drives, then copy data to the mapped drives. Tip: In Windows, if a folder gives permission to the group Everyone, unprivileged users might not be able to access the folder. Instead, Nasuni recommends that you assign users to another group that has the desired permission for the folder In Linux or UNIX, you can use command line instructions to navigate to mounted volumes on the Nasuni Filer, then copy data to the volume. You can use a VMware client, such as the VMware vsphere Client, to define NFS datastores. If you do this, prepend /nfs to the name of the NFS volume or NFS export. Nasuni Filer Best Practices Guide

38 Operations 3. Web Access Using Web Access, you can drag and drop data to the Nasuni Filer with some Web browsers. (Internet Explorer does not currently support this feature.) To enable Web Access, see Enabling Web Access to CIFS shares on each volume on page 16. If you use this URL to access your Nasuni Filer: then the URL of the Web Access page is: Mobile Access Using Mobile Access, you can upload data to the Nasuni Filer. To enable Desktop and Mobile Access, see Enabling Mobile Access to CIFS shares (ios and Android devices) on each volume on page 16. See for a worksheet for planning configurations. Desktop Client If the Connection Direction is Bi-Directional or Only Client to Filer, any files or folders that you add to the target directory that you select are automatically transferred to the source folder on the Nasuni Filer that you selected. E. Accessing data FROM the Nasuni Filer Copying data from Nasuni Filer to local or network drives See Copying data from local or network drives to Nasuni Filer on page 26. Web Access Using Web Access, you can drag and drop data from the Nasuni Filer with some Web browsers. (Internet Explorer does not currently support this feature.) See Web Access on page 27. Mobile Access Using Mobile Access, you can download data from the Nasuni Filer. To enable Desktop and Mobile Access, see Enabling Mobile Access to CIFS shares (ios and Android devices) on each volume on page 16. See for a worksheet for planning configurations. Desktop Client You select a source folder from a source CIFS share on the Nasuni Filer. If the Connection Direction is Bi-Directional or Only Filer to Client, any files or folders in that source folder are available in the target directory you select. Within the target directory, navigate to the Nasuni Filer Best Practices Guide

39 Operations files or folders you want to use. You can perform actions on any of these files or folders, including opening, copying, and deleting. F. Resizing the cache (virtual machine) For details on resizing the cache, see the Nasuni Filer Virtualization Getting Started Guide. G. Moving Nasuni Filer to new host Download and protect all encryption keys before shutting down Nasuni Filer Perform snapshots on all volumes before shutting down Nasuni Filer Disaster Recovery procedure is available for use on the new host, if necessary Verify network and Internet connectivity after moving the Nasuni Filer H. Changing device and network parameters (virtual machine) You can use console commands to change network parameters such as the static IP address, netmask, MTU, hostname, default gateway, DNS servers, and search domains. You can also view the MAC address, or enable static or DHCP networking. For details, see the Nasuni Filer Initial Configuration Guide. I. Enabling global file locking for a folder The purpose of the Global Locking feature is to prevent conflicts when two or more users attempt to change the same file on different Nasuni Filers. If you enable the Global Locking feature for a directory and its descendants, any files in that directory or its descendants can only be changed by one user at a time. Any other users cannot change the same file at the same time. On Nasuni Filer and NMC: To enable global file locking for a folder, click File Browser, select a folder, then click Edit Global Locking Settings. J. Verifying licensed capacity On Nasuni Filer: Click Status, then select Subscription Status. On NMC: Licensed capacity appears on the Home page. Click the Nasuni logo. K. Updating Nasuni Filer Software You can configure the Nasuni Filer to update software automatically. On Nasuni Filer: Click Configuration, then select Automatic Updates. On NMC: Click Filers, then click Automatic Updates. Select Nasuni Filers, then click Edit Filers. Nasuni Filer Best Practices Guide

40 Operations Alternatively, you can update software manually. On Nasuni Filer: Click Status, then select Updates. On NMC: Click Filers, then click Software Updates. Select Nasuni Filers, then click Edit Filers. To avoid user interface issues when updates occur, clear your Web browser s cache. Because updating the software disconnects all users currently using the Nasuni Filer, you should choose a date and time that will minimize interruptions. When updates occur, review the release notes for the update. If this Nasuni Filer is a primary file server, configure automatic software updates during times that do not interfere with users. L. Avoiding performance issues In Windows, disable the Windows Explorer Preview Pane. Using Preview Pane can cause performance issues. Nasuni Filer Best Practices Guide

41 Chapter 5: Security Security The Nasuni Filer includes a number of security features that you can configure. For more details on any of these topics, see the Nasuni Filer Administration Guide. All documentation is available at A. HTTPS proxy server You can configure the Nasuni Filer to use a proxy server. All HTTPS traffic goes through the proxy server that you specify. A valid User Name and Password are required. On Nasuni Filer: Click Configuration, then select HTTPS Proxy from the list. B. Firewall protection You can specify which network hosts are allowed to connect to the Nasuni Filer user interface and the Nasuni Support SSH port. You can also specify firewall limits for individual traffic groups. On Nasuni Filer: Click Configuration, then select Firewall from the list. C. SSL certificates You use SSL Certificates when accessing the Nasuni Filer's Web-based user interface. You can generate a Certificate Request. You can add signed certificates. You can also create a selfsigned certificate instead of a certificate request. On Nasuni Filer: Click Configuration, then select SSL Certificates from the list. On NMC: Click Filers, then click SSL Certificates. D. Encryption keys The Nasuni Filer automatically encrypts your data at your premises using your encryption keys that you control. You can upload your encryption keys to use. You can generate keys to use, and then download them for safekeeping. You can also escrow your encryption keys with Nasuni. You can enable and disable encryption keys. On Nasuni Filer: Click Configuration, then select Security/Encryption from the list. On NMC: Click Filers, then click Encryption Keys. Nasuni Filer Best Practices Guide

42 Security E. Role-based access control You can define specific access permissions for groups and users to perform actions within the Nasuni Filer user interface. You can associate permission groups with Active Directory domain groups to enable logging in using Active Directory credentials. On Nasuni Filer: Click Configuration, then select Users/Groups from the drop-down list. F. notifications You can configure receiving notifications when certain conditions occur on the Nasuni Filer. On Nasuni Filer: Click Configuration, then select Settings from the list. On Nasuni Filer: To configure directory-specific quota notifications, click File Browser, select a directory, then click Quota. On NMC: Click Filers, then click Settings. Select Nasuni Filers, then click Edit Filers. G. Antivirus protection You can enable or disable antivirus protection for CIFS and NFS volumes, and FTP/SFTP directories. The Antivirus Service scans every new or modified file for the presence of viruses and other malware. On Nasuni Filer: Click Volumes, then select the volume from the menu. Click the Antivirus Service status. On NMC: Click Volumes, then click Antivirus Service. For the selected volumes, click Edit Volumes. H. File System Auditing You can configure extensive file system auditing and logging of operations for volumes. On Nasuni Filer: Click Volumes, then select the volume from the menu. From the Properties drop-down menu, select Auditing. On NMC: Click Volumes, then click Auditing. For the selected volumes, click Edit Volumes. I. SNMP monitoring You can configure monitoring of the Nasuni Filer via the Simple Network Management Protocol (SNMP). On Nasuni Filer: Click Configuration, then select SNMP Monitoring from the list. On NMC: Click Filers, then click SNMP Settings. Select Nasuni Filers, then click Edit Filers. Nasuni Filer Best Practices Guide

43 Security J. Change password You can change the user password. On Nasuni Filer: Click Configuration, then select Change Password from the list. K. Snapshot directory access You can enable or disable access to the directory that holds snapshot data. On Nasuni Filer: Click Volumes, then select the volume from the menu. Click the Snapshot Directory Access status. On NMC: Click Volumes, then click Snapshot Access. For the selected volumes, click Edit Volumes. L. Remote access You can enable or disable access to a volume by your remote offices attached to your Nasuni.com account. On Nasuni Filer: Click Volumes, then select the volume from the menu. Click the Remote Access status. On NMC: Click Volumes, then click Remote Access. For the selected volumes, click Edit Volumes. M. Snapshot retention For compliance purposes or your own best practices, you can specify to delete older snapshots from cloud storage, based on a configured policy for a specific volume. On Nasuni Filer: Click Volumes, then select the volume from the menu. Click the Snapshot Retention status. On NMC: Click Volumes, then click Snapshot Retention. For the selected volumes, click Edit Volumes. N. File Alert Service For compliance and other purposes, you can receive alerts (no more than one per day) when files and directories whose names match patterns you specify are written to the Nasuni Filer. On Nasuni Filer: Click Volumes, then select the volume from the menu. Click the File Alert Service status. On NMC: Click Volumes, then click File Alert Service. For the selected volumes, click Edit Volumes. Nasuni Filer Best Practices Guide

44 Security O. CIFS authentication When you create a CIFS volume, you can select either Public security or Active Directory authentication for the volume. You cannot change the authentication mode after the volume is created. P. CIFS share security You can configure a number of security features of CIFS shares. On Nasuni Filer: Click Volumes, then select the volume with the CIFS protocol enabled from the menu. Select CIFS Shares from the Properties drop-down list. For the CIFS share that you want to edit, click Edit Share. On NMC: Click Volumes, then click Shares. For the selected share, click Edit Visible Share You can enable whether a share is visible when browsing the Nasuni Filer. Read Only Share You can select that a share be read-only, so that users cannot change the contents of the share. Allowed Hosts You can specify which hosts are allowed to access the share. Hide Unreadable Files You can specify that files and folders that the user cannot access do not appear in folder listings. Mobile Access You can enable or disable access to data by mobile devices. Web Access You can enable or disable access to data via Web browsers. Authentication (Active Directory only) If Active Directory security is chosen, you can select whether to authenticate all users, or to authenticate only the groups and users that you explicitly specify. You can associate permission groups with Active Directory domain groups. Nasuni Filer Best Practices Guide

45 Security Q. NFS export security You can configure a number of security features of NFS exports. On Nasuni Filer: Click Volumes, then select the NFS volume from the menu. Select NFS Exports from the Properties drop-down list. For the NFS export that you want to edit, click Edit Export. On NMC: Click Volumes, then click Exports. For the selected export, click Edit Read Only You can select that an export be read-only, so that users cannot change the contents of the export. Allowed Hosts You can specify which hosts are allowed to access the export. R. FTP/SFTP directory security You can configure a number of security features of FTP/SFTP directories. On Nasuni Filer: Click Volumes, then select the volume that has the FTP protocol enabled from the list. Select FTP Directories Exports from the Properties drop-down list. For the FTP/SFTP directory that you want to edit, click Edit FTP Directory. On NMC: Click Volumes, then click FTP Directories. For the selected FTP/SFTP directory, click Edit Read Only You can select that an FTP/SFTP directory be read-only, so that users cannot change the contents of the FTP/SFTP directory. Visibility You can specify how much of the FTP/SFTP directory is visible to the user. Allowed Hosts You can specify which hosts are allowed to access the FTP/SFTP directory. Allowed Users You can specify which users are allowed to access the FTP/SFTP directory. Allowed Groups You can specify which groups are allowed to access the FTP/SFTP directory. Nasuni Filer Best Practices Guide

46 Security S. Mobile service settings You can configure a number of security features of Mobile Access. On Nasuni Filer: Click Services, then select Mobile Service Settings from the list. On NMC: Click Filers, then click Mobile Settings. Select Nasuni Filers, then click Edit Filers Session Expiration You can limit how long users can use Mobile Access before reauthenticating. Limit to a single device You can limit users to using a single mobile device. Allowed Devices You can specify which devices to permit Mobile Access on. T. Mobile licenses You can enable, disable, or delete licenses for Mobile Access. On Nasuni Filer: Click Services, then select Mobile Licenses from the list. On NMC: Click Filers, then click Mobile Licenses. Select Nasuni Filers, then click Enable, Disable, or Delete. U. Data Migration Service You can configure a number of security features of the Data Migration Service. On Nasuni Filer: Click Services, then select View Migrations from the list File permissions You can specify how to handle existing permissions of copied files, including creating customized permissions rules. Password retention You can select whether or not to retain passwords for automatic reconnection. V. Remote Support Service You can enable or disable remote access to your Nasuni Filer by Nasuni support personnel. On Nasuni Filer: Click Services, then select Remote Support Service from the list. On NMC: Click Filers, then click Remote Support. Select Nasuni Filers, then click Edit Filers. Nasuni Filer Best Practices Guide

47 Chapter 6: Troubleshooting Troubleshooting The purpose of this section is to present information that can help should problems occur. All documentation is available at A. Gathering information The Nasuni Filer provides many sources of information that are useful for diagnosing and solving problems Pop-up notifications are active messages that appear, based on the state of your system Pop-up notifications include messages about disconnected migration sources, recommended hardware resources, and number of notifications. You can check any or all messages on the Notifications page. The Notifications page lets you view and acknowledge Nasuni Filer messages Notifications are searchable and sortable. Informational messages describe system actions or states that do not require action or attention. Warnings describe unusual events that do not require action. Errors describe unusual or incorrect situations that the user should notice and act to resolve. Alerts describe unusual or incorrect situations that the user must act to resolve. On Nasuni Filer: Click Notifications, then click All Messages. On NMC: Click Notifications, then enter the name of the Nasuni Filer in the Filter text box and click Apply Filter. If the user has set up , alerts generate s to the user. See For each Nasuni Filer, configure settings on page 14. Nasuni Filer Best Practices Guide

48 Troubleshooting Information is available on Network status, CIFS share status, NFS export status, FTP/ SFTP directory status, iscsi volume status, platform, subscription status, and software update status On Nasuni Filer: Click Status, then click Subscription Status, Updates, Network Status, Platform Status, CIFS Status, NFS Status, FTP Directory Status, iscsi Status, or File Heuristics Updates to view information. On NMC: Click Volumes, then click Exports, FTP Directories, Shares, or iscsi to view comparable information. Click Filers, then click Network, iscsi, Platform, or Software Updates to view comparable information. To view subscription status, click Account Status. File System Auditing information available You can configure extensive file system auditing and logging of operations for volumes. SNMP information available Extensive metrics are available through SNMP monitoring, including inbound and outbound network traffic, volume size, time of last snapshot, local cache space used and free, amount of unprotected data, cache hit/miss rate, CPU percent utilization and load averages, memory utilization and swap utilization, disk performance information, number of connected CIFS clients, mobile access clients, number of merge conflicts, snapshot success count, and times for snapshots. Information on migrations is available On Nasuni Filer: Click Services, then View Migrations. On NMC: Click Filers, then click Migrations. Information on volumes, including remote access, snapshots, data in cache, and synchronizations, is available On Nasuni Filer: Click Volumes, then select the specific volume On NMC: Click Volumes, then click Remote Access, Snapshot Schedule, or Sync Schedule to view comparable information. Information on files and folders, including whether they are present or pinned in the cache and whether they are protected in the cloud, is available On Nasuni Filer: Click File Browser, then select the specific file or folder On NMC: Click Volumes, then click File Browser, then navigate to, or search for, the data you want. Nasuni Filer Best Practices Guide

49 Troubleshooting B. Performance issues Performance issues are related to many conditions Observe how often performance issues occur The frequency daily, hourly, weekly and specific times of performance issues when users begin work, when backups begin might suggest causes. Are the performance issues reproducible at will? If specific activity user access, migrating data causes performance issues, that suggests possible causes. Observe any symptoms associated with performance issues Specific symptoms slow application performance, delays opening files might suggest possible causes. Do applications access the Nasuni Filer directly? Because applications can access large amounts of data rapidly and frequently, application access can be more resource-intensive than user access. In particular, applications that poll the Nasuni Filer continually for metadata, such as document management systems, can cause large amounts of cloud access Do you access the Nasuni Filer remotely? VPNs can slow down or block access to the Nasuni Filer. Monitor actual resource utilization If using Nasuni Filer hardware appliance, check status of hard drives Verify supported virtualization platforms: VMware ESXi 5.0, 5.1, 5.5, and 6.0; and Windows Server 2008 R2 SP1 and Windows Server 2012 Hyper-V (virtual machine) Verify thin or thick provisioning (virtual machine) With thin provisioning, resources must be allocated on the fly, which can affect performance. 10. Verify minimum memory: 4 GiB (6 GiB recommended, more for heavy loads) (virtual machine) 11. Verify minimum number of CPU cores: 2 (more than 2 for optimal performance) (virtual machine) 12. Verify that server is running properly (virtual machine) Nasuni Filer Best Practices Guide

50 Troubleshooting 13. With a virtual machine, are other virtual machines running and competing for resources? If other virtual machines are contending for resources, this can affect performance. 14. Verify the type of data store Different data stores local, iscsi, various RAID types offer different performance. 15. Verify write-back cache enabled A write-back cache can improve performance. A write-back cache is a feature of some RAID controllers. 16. Does the performance issue occur during snapshots? There might be a system load issue related to processing snapshots. You can see if a snapshot is in progress by examining the Snapshot Status on the home page. 17. Does the performance issue occur while data is being obtained from cloud storage (faulting)? If data must be obtained from cloud storage, there might be an issue processing access to cloud storage. On Nasuni Filer: Click File Browser, then navigate to a specific file or folder and examine its Cache Resident status. To bring a specific file or folder into the cache, click Bring into Cache. On NMC: Click Volumes, then click File Browser, then navigate to, or search for, the data whose Cache Resident status you want to examine. To bring a specific file or folder into the cache, click Bring into Cache. If the outbound Quality of Service is large or unlimited, and the inbound Quality of Service is small, the limited inbound bandwidth for return packets (such as acknowledgements) might affect the outbound bandwidth. If the inbound Quality of Service is too low, and data must be obtained from cloud storage, data access might be affected. On Nasuni Filer: Click Configuration, then select Quality of Service. On NMC: Click Filers, then click Quality of Service. Select Nasuni Filers, then click Edit Filers. 18. When and how frequently does syncing occur for a volume? Syncing merges data from other Nasuni Filers to this volume. While this helps to ensure that everyone at all locations is using the most current data, syncs increase the processing load. On Nasuni Filer: Click Volumes, select the volume, then examine the Sync Schedule. On NMC: Click Volumes, then click Sync Schedule. Nasuni Filer Best Practices Guide

51 Troubleshooting 19. Is Auto Cache enabled for a folder? If Auto Cache is enabled for a folder, there might be an issue processing syncs. On Nasuni Filer: Click Volumes, select the volume, then examine the Auto Caching Folders status. On NMC: Click Volumes, then click Auto Cached Folders. 20. Is file system auditing enabled? File system auditing has an impact on performance. Ensure that settings are at the minimum necessary level. 21. For NFS exports, check NFS mount options Confirm that NFS is using recommended settings. Although rsize=16384 and wsize=16384 are recommended, tune rsize and wsize for your environment. 22. Is Previous Versions enabled for a CIFS share? If Previous Versions is enabled for a share, there might be an issue processing access to cloud storage. On Nasuni Filer: Click Status, then select CIFS Status. Select the share, click Show Advanced Options, then examine Enable Previous Versions status. On NMC: Click Volumes, then click Shares. For the selected share, click Edit. 23. Are users searching snapshots? Searching snapshots requires accessing large amounts of data from cloud storage. 24. Is the Antivirus Service enabled for volumes? The Antivirus Service adds a processing load. On Nasuni Filer: Click Volumes, select the volume, then examine the Antivirus Service status. On NMC: Click Volumes, then click Antivirus Service. For the selected volumes, click Edit Volumes. Nasuni Filer Best Practices Guide

52 Troubleshooting 25. Is snapshot retention not equal to all snapshots for a volume? If snapshot retention is set to a set number of snapshots or snapshots within a given time, then processing is necessary to prune unwanted snapshots. On Nasuni Filer: Click Volumes, select the volume, then examine the Snapshot Retention status. On NMC: Click Volumes, then click Snapshot Retention. For the selected volumes, click Edit Volumes. 26. Is snapshot directory access enabled? Snapshot directory access can add a significant load to the Nasuni Filer. On Nasuni Filer: Click Volumes, select the volume, then examine the Snapshot Directory Access status. On NMC: Click Volumes, then click Snapshot Access. For the selected volumes, click Edit Volumes. 27. Is a volume deletion in progress? When you delete a volume, the data in that volume must be processed and removed. For large volumes, this can take time. 28. Is Case-Sensitive Paths enabled for a CIFS share? Using case-sensitive paths improves performance. However, some links and applications might not work if Case-Sensitive Paths is enabled for a share. On Nasuni Filer: Click Status, then select CIFS Status. Select the share, click Show Advanced Options, then examine Case-Sensitive Paths status. On NMC: Click Volumes, then click Shares. For the selected share, click Edit. 29. Examine Quality of Service rules The larger the outbound Quality of Service, the faster incoming data is protected in cloud storage and the more cache space is made available for data. This is especially important if snapshots are taking too long. If the outbound Quality of Service is large or unlimited, and the inbound Quality of Service is small, the limited inbound bandwidth for return packets (such as acknowledgements) might affect the outbound bandwidth. If the inbound Quality of Service is too low, and data must be obtained from cloud storage, data access might be affected. On Nasuni Filer: Click Configuration, then select Quality of Service. On NMC: Click Filers, then click Quality of Service. Select Nasuni Filers, then click Edit Filers. Nasuni Filer Best Practices Guide

53 Troubleshooting 30. Is Remote Access enabled for this volume? Enabling Remote Access adds a processing load. On Nasuni Filer: Click Volumes, select the volume, then examine the Remote Access status. On NMC: Click Volumes, then click Remote Access. For the selected volumes, click Edit Volumes. 31. Snapshots, syncs, and data migrations interfere with other processing When snapshots, syncs, and data migrations run, they add a processing load. On Nasuni Filer: Click Volumes, select the volume, then examine the Snapshot and Sync statuses. Click Services, then View Migrations to view data migrations. On NMC: Click Volumes, then click Snapshot Schedule or Sync Schedule. Click Filers, then click Migrations. 32. Do you use offline files? If you use offline files, the synchronization that is necessary when connected adds a processing load. 33. Do you use roaming profiles? If you use roaming profiles, bringing the user profile files to the user machine adds a processing load. 34. On Macs, different file views have different performance characteristics C. Issues sending data to Nasuni Filer Nasuni Filer not accepting new data Increase the outbound Quality of Service, especially during times with few users: this allows the Nasuni Filer to protect data in cloud storage, then remove protected data from the cache. Increase the size of the cache. Use the Data Migration Service to copy data to the Nasuni Filer. Multiple migrations don t seem to be running Only one migration runs at a time. Try scheduling migrations for different times. Data not arriving fast enough at Nasuni Filer Ensure that the inbound Quality of Service (QoS) is fast enough. Nasuni Filer Best Practices Guide

54 Troubleshooting D. Nasuni Filer connectivity issues If you move the Nasuni Filer, verify network and Internet connectivity Verify that server is running properly To reconfigure the network if the Nasuni Filer user interface is not available, you can access network settings using the service menu on the console E. File access issues Users cannot view files Verify that Active Directory users and groups are set up correctly to permit all necessary users to access. Verify that server is running properly On Windows clients, files appear locked even when no one is working on them Do not highlight the file name. Do not hover the mouse over the file name so that pop-up file information appears. Disable the Preview Pane in Windows Explorer. Web Access does not work with Internet Explorer Internet Explorer does not currently support this feature. Shares are hidden Ensure that names of shares do not end with the $ character, which makes the shares hidden for Windows clients. In addition, check the setting for Visible Shares, which controls if the share is visible for all client operating systems, regardless of the name of the share. F. Multiple domain Active Directory issues You can join and leave multiple Active Directory domains using Domain Settings on the Configuration menu. If issues arise, contact Nasuni Technical Support for assistance. Nasuni Filer Best Practices Guide

55 Troubleshooting G. User interface issues Elements grayed out, or long time loading page or elements Verify that Internet Explorer is not in compatibility mode. Verify that the Web browser s security settings are not set on High. If something ever goes wrong with SSL certificates and you are unable to access the Nasuni Filer user interface, use the service menu console to reset the certificate to the default self-signed certificate H. Miscellaneous issues 1. Active Directory connection message in the Nasuni Filer user interface On Nasuni Filer: Click Configuration, then select Domain Settings. Click Update Domains or refresh the page. This forces the test to run again, and the warning often disappears. Nasuni Filer Best Practices Guide

56 Appendix A: Nasuni Terms of Service and License Agreement Nasuni Corporation The Terms of Service and License Agreement for the Nasuni Filer is located at: Nasuni Filer Best Practices Guide

57 Appendix B: Cache Configuration Cache Configuration The cache is the local storage of the Nasuni Filer. When running the Nasuni Filer on a virtualization platform, you can configure the size of the cache disk and the copy-on-write (COW) disk. On Nasuni hardware appliances, the sizes of the cache disk and the copy-on-write (COW) disk are pre-configured, and there is no need to configure them. Proper configuration of the cache and related features helps provide the following benefits: Enables access to data. Improves the performance experience of users and applications. Ensures access to data during Internet outages. Reduces use of network bandwidth. This document offers suggestions for configuring the cache of the Nasuni Filer. About the cache The cache is the local storage of the Nasuni Filer. All data and metadata that is accessed regularly is kept locally in the cache ( cache resident ). If requested data is not cache resident, the system accesses the requested data from cloud storage, the data is staged into the cache, and provided for the request. Note: You don t have to keep all data locally. The Nasuni Filer is extremely efficient at keeping only your most-needed data locally, and retrieving data from cloud storage as needed. The size and status of the cache are displayed on the Home page. Figure B-1: Local Storage Status (cache). Nasuni Filer Best Practices Guide

58 About the cache Any data written to a volume is first staged in the local cache. The first snapshot preserves each data item from the cache in Nasuni s cloud storage. Subsequent snapshots include only the changes between the original version of the data and the most recent version of the data. The cache continuously tracks recently changed data, such as data created or changed since the last snapshot. New data that has been saved to the cache, but that has not yet been preserved in Nasuni s cloud storage, is classified as new data in cache not yet protected. A chart of New Data in Cache (Not yet protected) appears on the Home page. Figure B-2: New Data in Cache chart. The most recently used data remains in the cache, including data, metadata, complete files, or parts of files. Saved data that was written once and rarely used afterwards is eventually released (or evicted ) from the cache to free up space for new data. If any of this released data is later requested for reads or writes, the Nasuni Filer retrieves the data from Nasuni s cloud storage and puts it back into the local cache automatically. Nasuni Filer Best Practices Guide

59 Cache structure Cache structure This figure illustrates the structure of the cache: Figure B-3: Cache structure. Pinned data is not removed from the cache. If too much cache space is taken up by pinned data, an Alert notification is given. iscsi volumes are always pinned in the cache. The total size of all iscsi volumes together can use up to 75 percent of the cache. Reserved space is space set aside in the cache for incoming data. By default, the Nasuni Filer automatically manages the reserved space. The maximum amount of reserved space is 90 percent of the cache size. Snapshots preserve data from the cache in Nasuni s cloud storage. You can configure the frequency of snapshots. The Quality of Service is the limit on bandwidth for snapshots. The value appears on the Home page. Figure B-4: Quality of Service. Nasuni Filer Best Practices Guide

60 Considerations for configuring the cache Considerations for configuring the cache This section discusses points to consider when configuring the cache. Cache size The size of the cache should be based on the size of the working set (the amount of data being accessed by users or applications on a regular basis), including metadata. Note: Cache size has no effect on the cost of Nasuni services. The Nasuni license is based on the storage used, not on cache size. Cache disk and copy-on-write (COW) disk (aka snapshot disk) The snapshot (copy-on-write or COW) disk is used during the snapshot process. If any writes to the Nasuni Filer occur during a snapshot, the previous data from the cache disk is copied to the COW disk, and the new data is written to the cache disk. Hence, the term copy-on-write. This allows new writes to take place at any time, even during the snapshot process. The size of the copy-on-write (COW) disk is determined by how much data can change while a snapshot is running. For example, a heavily used file server, where a lot of data can change while a snapshot is running, might need a larger copy-on-write (COW) disk than a server used mainly for backups, where the snapshot is scheduled for a time when the backup isn't running. However, if the copy-on-write (COW) disk is too small, then a snapshot might fail, then try again. The snapshot will eventually succeed, but this is very inefficient. The copy-on-write (COW) disk should generally be at least one-quarter the size of the cache disk, but generally not larger than 250 GB. Increasing cache size For an existing Nasuni Filer, you can only increase the size of the cache and copy-on-write (COW) disks (snapshot disks). This means that you cannot decrease a value once you have increased it. Therefore, make sure you understand your resizing requirements before you make changes. Note: If necessary, you can create a new Nasuni Filer with a smaller cache size, then perform a Disaster Recovery from the existing Nasuni Filer to the new Nasuni Filer. Cache size and performance With a larger cache, more data can be cache resident, and access to that data is faster. On a hardware appliance, more RAM and CPUs also improve performance. Similarly, on a virtual machine, increased physical resources also improve performance. Nasuni Filer Best Practices Guide

61 Considerations for configuring the cache Performance issues from cache misses To determine whether performance issues are caused by cache misses, first find out which specific files are having problems. Then see if those files are cache resident, by clicking File Browser, selecting the volume, navigating to each file, and examining its properties in the Properties pane. If the Cache Resident status is Yes, then the file is cache resident. Note: A file might be marked as Cache Resident even if only part of the file is present in the cache. To ensure that a given file is cache resident, use Bring into Cache on the File Browser page. If all other investigation fails to solve performance issues, contact Nasuni Technical Support to analyze the logs to see if a lot of cache misses are happening. Automatically releasing data from cache If the amount of cache resident data exceeds a specified percentage of the size of the cache, data is released from the cache until the amount of cache resident data no longer exceeds that specified percentage. Before releasing any data from the cache, the Nasuni Filer ensures that the data is stored in the cloud. The Nasuni Filer may perform a snapshot to preserve data in the cloud. Released data is not lost, because the data is stored in the cloud, ready to be retrieved. The Nasuni Filer releases the least recently used data first, using a sophisticated least recently used (LRU) algorithm. Loading large amounts of data into the Nasuni Filer Nasuni s best practices for loading large amounts of data into a Filer involve: Disable remote access temporarily. This makes the snapshots more efficient since they are less concerned with the response time of updates to the remote sites. Decrease snapshot frequency temporarily. This reduces the demand for resources, and allows freer access to the cache. Use the Data Migration Service (DMS) to move data. DMS is cache aware and slows down when the disk fills, instead of overfilling. Allow as much bandwidth (Quality of Service) as can be spared for when snapshots do occur. Nasuni offers a bulk data migration service if you have more data than you want to move over your network, such as when initially moving data into Nasuni s cloud storage. Contact Nasuni Technical Support for details. Nasuni Filer Best Practices Guide

62 Considerations for configuring the cache Downloading large amounts of data from cloud To download data from the cloud to the cache faster, do the following: Make sure that you have sufficient download bandwidth from your ISP. Adjust the Inbound Limit of the Quality of Service (QoS) rule to the highest rate possible. If the downloading is temporary, you can change or remove the rule when the downloading is complete. Ensure that the cache space is large enough to receive the data, so the system doesn't have to spend a lot of time making room. You can increase the size of the cache itself, or increase the reserved space percentage. Keeping all data locally (cache resident) To keep all data cache resident, the size of the non-reserved part of the cache must be larger than the total amount of data that you want to keep locally, including metadata. The size of the cache disk must be large enough for the cache. You can then bring all the data into the cache, and pin the data into the cache. If the cache is larger than the total amount of data, all the data remains in the cache, and pinning is not necessary. Proactively managing the contents of the cache There are situations where you might need to proactively manage the contents of the cache, because a process might not automatically bring the desired data into the cache. These situations include the following: After performing a restore. After performing a Disaster Recovery procedure that includes unpinned data. When performing bulk migrations. You can proactively manage the contents of the cache by performing any of the following actions: Pinning data in the cache. Accessing files or folders to ensure that they re brought into the cache. Bringing data into the cache manually, using Bring into Cache on the File Browser page. Different Nasuni Filers for different uses Different uses of the Nasuni Filer might have different optimum configurations of the cache. For example, the usage pattern for ordinary user access is different from the usage pattern for backups or data mining. To ensure that each use case receives the most suitable configuration, you can set up different Nasuni Filers for different uses. The Nasuni Filer is intelligent and does its best to adapt to any use, but you can help guarantee the best behavior for each use case by isolating the use cases on different Nasuni Filers. Nasuni Filer Best Practices Guide

63 Considerations for configuring the cache Here are some examples of different uses for Nasuni Filers: Performing migrations: Minimize pinned data, infrequent snapshots. Primary file server: Pin folders of commonly accessed files, moderate Quality of Service, regular snapshots. Hot standby for Disaster Recovery: Minimize pinned data, enable Auto Cache, frequent syncs. High-performance application: Pin data of commonly accessed files, high Quality of Service, regular snapshots. Different volumes for different uses It is also possible to employ different volumes on the same Nasuni Filer for different purposes. The Nasuni Filer cache adapts to any use (if Reserved Space Percentage is Automatic), but you can also adjust configurations to accommodate volumes with different uses on the same Nasuni Filer. For example, on a single Nasuni Filer, you might want to use one volume for ordinary user access to data and another for backups. To accommodate these two different uses, you might pin the most commonly used user data in the cache. You might also dedicate the Nasuni Filer to performing as a file server M-F 8-7, but then do backups at 3 AM. Nasuni Filer Best Practices Guide

64 Cache Specifications Cache Specifications The default cache size on disk is 250 GB for a VM platform. The following table lists the maximum cache size (by platform) that is supported by the Nasuni Filer. Visit VMware features and Hyper-V features for the most complete information. Virtualization Platform VMware ESXi 5.x, 6.0 NOT using VMFS-5 VMware ESXi 5.x, 6.0 Maximum Cache Size 2 TB 62 TB (using VMFS-5) 64 TB (using physical Raw Disk Mapping (RDM) (aka pass through disks )) Microsoft Hyper-V 2 TB (Server 2008) 1 EB (using pass through disks ) (Server 2008) 64 TB (using VHDX) (Server 2012) 64 TB (Server 2012 R2) Microsoft Azure Amazon EC2 1 TB 1 TB Note: Caches that are created less than 16 TB can be resized, but never larger than 16 TB. Caches that are created greater than or equal to 16 TB cannot be resized. Quality of cache storage If you are using a Nasuni Filer hardware appliance, that platform is optimized for the cache. If you are using virtual machines, ensure that the storage platform meets these specifications: Protection, such as 4+1 RAID-5. Multiple spindles. 10K RPM or faster hard drives. Battery-backed write cache ability. Nasuni Filer Best Practices Guide

65 Actions affecting the cache Actions affecting the cache This section describes the actions you can perform that affect the cache. Removing data from cache Deleting a volume removes all the volume s data stored in the cache, as well as data stored in Nasuni s cloud storage. Disconnecting from a remote volume removes any data in the cache. Determining if data is in the cache By examining a folder or file in the File Browser display, you can determine if a folder or file is currently in the cache (called cache resident ). Bringing data into the cache manually Note: This is optional. Cache management is automatic. If a file or folder is not in the cache, and you want it in the cache, find it in the File Browser display, then click Bring into Cache. Note: If accessed data is not in the cache, it is brought into the cache automatically. Pinning or unpinning folders in the cache You can enable or disable pinning folders. On the Nasuni Filer or the Nasuni Management Console, on the File Browser page, select a folder, then click Edit Cache Settings. Note: You cannot unpin iscsi volumes. iscsi volumes are always pinned in the cache. Note: Pinning a folder in the cache does not bring that folder s data into the cache. Pinning a folder prevents that folder s data from being removed from the cache. Reserving space in cache By default, the Nasuni Filer automatically manages the percentage of local cache space reserved for new, incoming data, using an advanced algorithm to optimize cache usage. The remainder of the cache retains the data locally that users are most likely to need. However, you can override the percentage reserved for new, incoming data. The percentage that you set applies to all volumes on the Nasuni Filer. The maximum percentage of the cache reserved for new, incoming data is 90 percent of the cache size. The minimum percentage is 5 percent. By setting the amount of reserved space, you disable the automatic management of this value. Nasuni Filer Best Practices Guide

66 Snapshots and the cache On the Nasuni Filer, click Configuration, then select Cache Settings. On the Cache Settings page, select Automatic or one of the available percentages from the Reserved Space Percentage dropdown list. On the Nasuni Management Console, click Filers, then click Cache Settings in the left-hand column. Select the Nasuni Filers, then click Edit Filers. Important: The Data Migration Service uses the cache. To ensure that the Data Migration Service has enough space, set Cache Settings to 30 percent or greater. Snapshots and the cache Snapshots preserve data from the cache in the cloud, making that data eligible for removal from the cache, if necessary. Thus, scheduling frequent snapshots can help free up room in the cache for incoming writes. Scheduling snapshots You can schedule snapshots on a per-volume basis. On the Nasuni Filer, on the Volumes page, select a volume, then click Edit Properties. Click edit next to the Snapshot Schedule status. On the Snapshot Scheduling page, select the days, start time, stop time, and frequency for snapshots. On the Nasuni Management Console, on the Volumes page, click Snapshot Schedule, select the volumes to change, then click Edit Volumes. Tip: On volumes with Global Locking enabled, we recommend reducing the normal snapshot and synchronization frequency of the volume, because Global Locking provides file synchronization independently of the snapshot and synchronization frequency. Manually starting snapshots On the Nasuni Filer, to take a snapshot sooner than the scheduled time, click Take snapshot now on the Volumes page. On the Nasuni Management Console, on the Volumes page, for the volume that you want to take a snapshot of, click Take Snapshot. Changing Quality of Service rules The Quality of Service is the limit on inbound and outbound bandwidth for snapshots. The default is 2 megabits per second. The larger the outbound Quality of Service, the faster snapshots complete, and the sooner space can become available in the cache. On the Nasuni Filer, to change the Quality of Service rules, click Configuration, then select Quality of Service from the list. On the Quality of Service Settings page, select the days, start time, stop time, and bandwidth limit, from 50 kilobits per second to 25 gigabits per second. You can set up to 12 rules. Nasuni Filer Best Practices Guide

67 Changing the size of the cache disk or copy-on-write (COW) disk On the Nasuni Management Console, on the Filers page, click Quality of Service, select the Nasuni Filers to change, then click Edit Filers. Changing the size of the cache disk or copy-on-write (COW) disk On the virtual platform, you can change the size of the disk that the Nasuni Filer uses for its cache. You can also change the size of the disk that the Nasuni Filer uses for copy-on-write (COW). Supported techniques for changing the size of a disk There are several techniques for achieving cache or snapshot disks of a different size: Disk Supported Technique VMware Hyper-V Azure EC2 Cache VM user interface Increase Increase COW VM user interface Increase Increase Cache New Filer, then Disaster Recovery Increase/ Decrease Increase/ Decrease * Increase/ Decrease COW New Filer, then Disaster Recovery Increase/ Decrease Increase/ Decrease * Increase/ Decrease COW Shut down Filer, delete COW, create new COW, restart Filer Increase/ Decrease Increase/ Decrease Increase/ Decrease ** Increase/ Decrease * If you add another disk, the largest disk becomes the cache disk. The second largest disk becomes the COW disk. ** You cannot delete the built-in COW disk, but you can add a new COW disk of a different size. The largest unused disk becomes the new COW disk. Note that this requires assistance from Nasuni Support for configuration. Using the VM user interface to increase the size of the cache disk or copy-on-write (COW) disk On the VMware ESX/ESXi and Microsoft Hyper-V virtual platforms, you can increase the size of the cache disk and the COW disk. Note: There must be sufficient disk space in the datastore to increase the size of the disk. Note: You must shut down the virtual machine to change the size of the disk. Caution: Perform a manual snapshot before changing the size of the disk. Tip: Nasuni recommends using Thick provisioning for all virtual disks. Nasuni Filer Best Practices Guide

68 Changing the size of the cache disk or copy-on-write (COW) disk vsphere Client platform Note: If you have taken a VMware snapshot, you cannot change the size of the disk. You must delete the snapshot first. To change the size of the disk on the vsphere Client platform, follow these steps: 1. Launch the VMware vsphere Client. The VMware vsphere Client login window appears. 2. Log in to the vsphere Client with a valid IP address and your user name and password. The vsphere Client opens. 3. In the pane on the left, expand the host to display the list of virtual machines. 4. Click the name of your Nasuni Filer. This is the name you entered when you installed the Nasuni Filer. Information about your Nasuni Filer appears in the right pane. 5. If the virtual machine is running, then shut down the virtual machine using these steps: a. On the Console tab, click in the command line area. b. Press Enter. c. Enter the login name and password for the service console. The default login name is service and the default password is service. d. Enter shutdown. e. Confirm the shutdown by entering yes. The virtual machine shuts down. 6. On the Getting Started tab, click Edit virtual machine settings. Alternatively, on the Summary tab, click Edit Settings. Alternatively, right-click the name of your Nasuni Filer in the list of virtual machines, then select Edit Settings from the drop-down list. The Virtual Machine Properties dialog box appears. 7. On the Hardware tab, select the desired disk in the Hardware list on the left side. The cache disk is disk 2 and is the largest hard disk. The copy-on-write (COW) disk is the second-largest hard disk. Information about the selected hard disk appears on the right side. 8. Enter or select the new Provisioned Size. The Provisioned Size must be less than or equal to the displayed Maximum Size of that hard disk. The new Provisioned Size must be greater than the previous Provisioned Size. For details on the size of the cache disk, see Cache Specifications on page 53. Note: Caches that are created less than 16 TB can be resized, but never larger than 16 TB. Caches that are created greater than or equal to 16 TB cannot be resized. Tip: If necessary, it is possible to reduce the size of the copy-on-write disk. To do this, shut down the Nasuni Filer (see the Nasuni Filer Administration Guide for instructions), delete the existing copy-on-write disk, create a new copy-on-write disk with the desired size, and then restart the Nasuni Filer. Nasuni Filer Best Practices Guide

69 Changing the size of the cache disk or copy-on-write (COW) disk 9. Click OK. The size of the selected hard disk changes to the specified size. 10. On the Getting Started tab, click Power on the virtual machine. Alternatively, on the Summary tab, click Power On. Alternatively, right-click the name of your Nasuni Filer in the list of virtual machines, then select Power from the drop-down list, then select Power On from the drop-down list. The virtual machine powers on. After a significant cache resize, the operations after powering on can take some time, with some performance impact during that period. The progress of the cache resize is visible on the Nasuni Filer user interface. Hyper-V Manager platform To change the size of the disk on the Hyper-V Manager platform, follow these steps: 1. Launch Hyper-V Manager. 2. In the Virtual Machines list, click the name of your Nasuni Filer. This is the name you entered when you installed the Nasuni Filer. Information about your Nasuni Filer appears. 3. If the virtual machine is running, then follow these steps: a. In the Virtual Machines list, right-click the name of your Nasuni Filer, then select Shut Down from the drop-down list. Alternatively, in the Virtual Machines list, select the name of your Nasuni Filer, then click Shut Down in the list of actions on the right side. The Shut Down Machine dialog box appears. b. Click Shut Down. The virtual machine shuts down. 4. In the Virtual Machines list, right-click the name of your Nasuni Filer, then select Settings from the drop-down list. Alternatively, in the Virtual Machines list, select the name of your Nasuni Filer, then click Settings in the list of actions on the right side. The Settings dialog box appears. 5. In the Hardware list on the left side, select the desired hard drive. The default label for the cache hard drive is Hard Drive Cache.vhd. The cache hard drive is the largest hard drive. The default label for the copy-on-write (COW) hard drive is Hard Drive Cow.vhd. Information about the selected hard drive appears on the right side. 6. Click Edit. The Edit Virtual Hard Disk Wizard dialog box appears. 7. Select Expand, then click Next. 8. Enter the New size of the disk. The New size must be less than or equal to the displayed Maximum size of that hard disk. The New size must be greater than the previous size. Then click Next. When you resize the cache, Nasuni recommends that the cache disk be no more than four times the size of the snapshot (copy-on-write or COW) disk. For details on the size of the cache disk, see Cache Specifications on page 53. Nasuni Filer Best Practices Guide

70 Changing the size of the cache disk or copy-on-write (COW) disk 9. Click Finish. The size of the disk changes to the specified size. 10. Click OK. The Settings dialog box closes. 11. In the Virtual Machines list, right-click the name of your Nasuni Filer, then select Start from the drop-down list. Alternatively, in the Virtual Machines list, select the name of your Nasuni Filer, then click Start in the list of actions on the right side. The virtual machine restarts. After a significant cache resize, the operations after powering on can take some time, with some performance impact during that period. The progress of the cache resize is visible on the Nasuni Filer user interface. Using the Disaster Recovery procedure to change the size of the cache disk or copy-onwrite (COW) disk On all virtual platforms, you can change the size of the cache disk and the COW disk using the Disaster Recovery procedure. First, create a new Nasuni Filer on the platform. The new Nasuni Filer should have the correct size of cache and COW disks. Next, perform a manual snapshot on the existing Nasuni Filer, then shut down the existing Nasuni Filer. Finally, perform a Disaster Recovery procedure to the new Nasuni Filer. Using a new COW disk to change the size of the COW disk On all virtual platforms, you can change the size of the COW disk by creating a new COW disk. First, perform a manual snapshot on the existing Nasuni Filer, then shut down the existing Nasuni Filer. Next, on all platforms except the Microsoft Azure platform, delete the existing COW disk. Then, create a new COW disk with the correct size. Finally, restart the Nasuni Filer. On the Microsoft Azure platform, the largest unused disk becomes the new COW disk. Note that this requires assistance from Nasuni Support for configuration. Nasuni Filer Best Practices Guide

71 Appendix C: Network Traffic Network Traffic Considerations Selecting Traffic Groups When configuring settings for your network during installation, you use the Network Interface Settings area. For each Device in the list, select the Traffic Group from the drop-down list. Three default traffic groups are available: Figure C-1: Network Interface Settings area. General: All traffic is in the General traffic group, unless explicitly assigned to a different traffic group. Systems with only one network interface card (NIC) always use the General traffic group. This traffic group is not for any specific purpose. Management: The Management traffic group designates a set of interfaces that carry local customer support access using SSH, and that provide user interface access to the Nasuni Filer. External: The External traffic group designates a set of interfaces that carry cloud traffic, Remote Support Service traffic (if enabled), and Nasuni API traffic. Note: You use the Firewall configuration page to configure what kind of traffic the Nasuni Filer accepts on each traffic group. You cannot combine traffic from two or more traffic groups together. Note: If a proxy is defined such that it is on one of the networks local to the Nasuni Filer, this local proxy is used for cloud traffic, Remote Support traffic, and Nasuni API traffic. Traffic flows on whichever interface can reach the local proxy. Nasuni Filer Best Practices Guide

72 Network Traffic Considerations Bonding. If you assign more than one device to the same traffic group, the assigned devices are bonded for that traffic group. A bonded interface is a virtual network interface that runs on two or more physical interfaces. The Nasuni Filer offers a transmit-load-balancing bonding mode, which is a high-availability bonding mode with a performance enhancement when sending packets. Bonding also provides failover benefits. This bonding mode monitors the state of the network interface cards (NICs) that are in the bond: if the active device fails, it switches to a different active device. In addition, when transmitting a packet, the system determines (using an internal metric) which device in the bond is least busy, and transmits the packet using that device. When the host sends a packet to the Nasuni Filer, the packet always goes to the active device. Network switch ports to which bonded Nasuni Filer ports are attached must be configured as switchport access with trunk access disabled. Any switch port where a bonded Nasuni Filer port is attached should also not be bridged with any other Nasuni Filer port. The Spanning Tree's blocking, listening, and learning stages should be disabled or bypassed on all switch ports to which a bonded Nasuni Filer port is attached. (Cisco switches have a feature called PortFast that is used to disable these Spanning Tree stages on a port-by-port basis.) Bonded Nasuni Filer port members may also be split across more than one switch in order to achieve switch redundancy. However, all switch ports that are attached to members of the same bond must comprise a single broadcast domain (namely, the same VLAN) configured on the switch port. Additionally, if problems exist after deploying a Nasuni Filer bond across more than one switch, reattach all bond members to the same switch. If the problems disappear, then the cause of the problem resides in the configuration of the switches and not in the configuration of the Nasuni Filer. Basic Configuration. Put all available NICs into the General traffic group. The Nasuni Filer uses a single IP address, and all types of traffic use that IP address. Traffic leaving the LAN uses a default gateway available on this LAN. Separating client and cloud traffic. Divide the NICs into General and External traffic groups. The Nasuni Filer uses one IP address for serving CIFS, NFS, FTP, and iscsi traffic, along with the user interface and management protocols, and one IP address for communicating with hosts outside the local network. The default gateway must be specified on the LAN that the External traffic group uses. Separating data and management traffic. Divide the NICs into General and Management traffic groups. The Nasuni Filer uses one IP address for serving CIFS, NFS, FTP and iscsi traffic in addition to communicating with cloud APIs, and a different IP address for the user interface and management protocols. This configuration expects that administrators use a separate back plane network to manage devices more securely. Nasuni Filer Best Practices Guide

73 Network Traffic Considerations Sample network topologies. This example is for General traffic only. This example is for General and External traffic. Figure C-2: General traffic only. Figure C-3: General and External traffic. Nasuni Filer Best Practices Guide

74 Network Traffic Considerations This example is for General and Management traffic. Figure C-4: General and Management traffic. Nasuni Filer Best Practices Guide

75 Network Traffic Considerations This example is for General, External, and Management traffic. Figure C-5: General, External, and Management traffic. Nasuni Filer Best Practices Guide

76 Network Traffic Considerations Creating Traffic Groups After installation of the Nasuni Filer, you can change network settings as required. See for a worksheet for planning configurations. Note: You use the Firewall configuration page to configure what kind of traffic the Nasuni Filer accepts on each traffic group. To create a traffic group, follow these steps: 1. On Nasuni Filer: Click Configuration, then select Network Configuration from the menu. The Network Configuration page appears. Figure C-6: Network Configuration page. Nasuni Filer Best Practices Guide

77 Network Traffic Considerations 2. In the Network Interface Settings area, to manage traffic groups, click Manage Traffic Groups. The Traffic Groups dialog box appears. Figure C-7: Traffic Groups dialog box. The Traffic Groups dialog box displays a list of the currently available traffic groups. For each traffic group, the traffic group s name and description appears. a. To add a new traffic group, click Add Traffic Group. The Add Traffic Group dialog box appears. Figure C-8: Add Traffic Group dialog box. i. In the Name text box, enter a short name for the new traffic group. ii. Optionally, in the Description text box, enter a description of the purpose or characteristics of the new traffic group. iii. Click OK to add the new traffic group. Alternatively, click Cancel to exit without adding a new traffic group. b. To edit a traffic group s name or description, click Edit. The Edit Traffic Group dialog box appears. The Edit Traffic Group dialog box is similar to the Add Traffic Group dialog box described in step a above. Enter a new name or description for the traffic group, then click OK. c. To delete a traffic group, click Delete. The traffic group is deleted. Nasuni Filer Best Practices Guide

78 Network Traffic Considerations d. To save all changes to the traffic groups, including added traffic groups and edited traffic groups, click Save. Alternatively, to exit without saving any changes, click Cancel. Note: You configure the network settings for each traffic group in step 4 below. 3. In the Network Interface Settings area, for each Device in the list, select the Traffic Group from the drop-down list. Figure C-9: Network Interface Settings area. 4. In the Network Interface Settings area, to configure each Traffic Group, click Edit beside the Traffic Group. The Network Settings page appears. Figure C-10: Network Settings page. From the Network Type drop-down list, select either Static or DHCP. Note: For high availability Nasuni Filer hardware appliances, such as the NF-400H, the only choice is Static. If you select DHCP (Dynamic Host Configuration Protocol), the IP Address, Netmask, and MTU Value fields become unavailable. Note: DHCP may not be enabled on more than one traffic group. Nasuni Filer Best Practices Guide

79 Network Traffic Considerations If you select Static, you must provide Network Interface Settings and System Settings. See your IT administrator for assistance. Enter the following information: Enter the static IP address in the IP Address text box. The address of a static device must not already be present on the network. The Nasuni Filer verifies this and displays an error if a collision is detected. Note: If you define more than one static device, the Nasuni Filer checks that the subnets specified do not appear more than once. If this is a high-availability hardware appliance Nasuni Filer, enter the Node 1 IP Address and the Node 2 IP Address in their text boxes. Enter a netmask address in the Netmask text box. Enter the MTU value in the MTU Value text box. Tip: MTU settings should not exceed The maximum transmission unit (MTU) is the size (in bytes) of the largest protocol data unit that the layer can pass onwards. A larger MTU brings greater efficiency, because each packet carries more user data, while protocol overheads, such as headers, remain fixed; the resulting higher efficiency means a slight improvement in the bulk protocol throughput. A larger MTU also means processing fewer packets for the same amount of data. However, large packets can occupy a slow link for some time, causing greater delays to following packets, and increasing lag and minimum latency. (Optional) You can specify a gateway for each traffic group. This gateway is used to return traffic for clients outside one of the Nasuni Filer's local networks that do not use the default gateway. In the Gateway text box, enter the IP address for the gateway. Click OK to use these values. Click Cancel to exit this page without making any changes. 5. Click Save Network Configuration to accept your entries. The Confirm Network Changes page appears. Figure C-11: Confirm Network Changes page. Nasuni Filer Best Practices Guide

80 Network Traffic Considerations 6. Enter a Username (case-sensitive) and Password (case-sensitive) that has permission to perform this operation, then click Submit. Your changes are saved. A message box appears indicating that you will be disconnected briefly from the user interface while the changes are applied. Close this message box and refresh the page, or re-access the Nasuni Filer with your new IP address. Configuring Traffic Groups Note: You use the Firewall configuration page to configure what kind of traffic the Nasuni Filer accepts on each traffic group. On Nasuni Filer: Also in the Network Interface Settings area, to configure each Traffic Group, click Edit beside the Traffic Group. The Network Settings page appears. Figure C-12: Network Settings page. From the Network Type drop-down list, select either Static or DHCP. Note: For high availability Nasuni Filer hardware appliances, such as the NF-400H, the only choice is Static. If you select DHCP (Dynamic Host Configuration Protocol), the IP Address, Netmask, and MTU Value fields become unavailable. Note: DHCP may not be enabled on more than one traffic group. Nasuni Filer Best Practices Guide

81 Network Traffic Considerations If you select Static, you must provide Network Interface Settings and System Settings. See your IT administrator for assistance. Enter the following information: Enter the static IP address in the IP Address text box. The address of a static device must not already be present on the network. The Nasuni Filer verifies this and displays an error if a collision is detected. Note: If you define more than one static device, the Nasuni Filer checks that the subnets specified do not appear more than once. If this is a high-availability hardware appliance Nasuni Filer, enter the Node 1 IP Address and the Node 2 IP Address in their text boxes. Enter a netmask address in the Netmask text box. Enter the MTU value in the MTU Value text box. Tip: MTU settings should not exceed The maximum transmission unit (MTU) is the size (in bytes) of the largest protocol data unit that the layer can pass onwards. A larger MTU brings greater efficiency, because each packet carries more user data, while protocol overheads, such as headers, remain fixed; the resulting higher efficiency means a slight improvement in the bulk protocol throughput. A larger MTU also means processing fewer packets for the same amount of data. However, large packets can occupy a slow link for some time, causing greater delays to following packets, and increasing lag and minimum latency. (Optional) You can specify a gateway for each traffic group. This gateway is used to return traffic for clients outside one of the Nasuni Filer's local networks that do not use the default gateway. In the Gateway text box, enter the IP address for the gateway. Click OK to use these values. Click Cancel to exit this page without making any changes. Nasuni Filer Best Practices Guide

82 Network Traffic Considerations Configuring System Settings In the System Settings area, from the Settings Source drop-down list, select either Static or DHCP as the source for system-wide configuration. Figure C-13: System Settings page. DHCP (Dynamic Host Configuration Protocol): Provides a network IP address for a host on an IP network automatically. The Default Gateway, Search Domain, Primary DNS Server, and Secondary DNS Server fields become unavailable. DHCP with custom DNS: Provides a network IP address for a host on an IP network automatically. The Default Gateway field becomes unavailable. Enter the following information: Enter one or more local search domains in the Search Domain text box, each separated by a space. You must enter valid hostnames. You can use search domains to avoid typing the complete address of domains that you use frequently. The search domains that you enter are automatically appended to names that you specify for purposes such as Active Directory configuration, data migration sources, HTTPS proxy, and NTP server. For example, if you specify the search domain mycompany.com, then typing server1 for one of these purposes would connect to server1.mycompany.com. Nasuni Filer Best Practices Guide

83 Network Traffic Considerations Enter the IP address for your primary DNS server in the Primary DNS server text box. You must enter a valid hostname or IP address. Enter the IP address for your secondary DNS server in the Secondary DNS server text box (if applicable). You must enter a valid hostname or IP address. Static: Address information must be entered manually. Enter the following information: Enter a default gateway address in the Default Gateway text box. The gateway address must match a subnet of a defined static network. Enter one or more local search domains in the Search Domain text box, each separated by a space. You must enter valid hostnames. You can use search domains to avoid typing the complete address of domains that you use frequently. The search domains that you enter are automatically appended to names that you specify for purposes such as Active Directory configuration, data migration sources, HTTPS proxy, and NTP server. For example, if you specify the search domain mycompany.com, then typing server1 for one of these purposes would connect to server1.mycompany.com. Enter the IP address for your primary DNS server in the Primary DNS server text box. You must enter a valid hostname or IP address. Enter the IP address for your secondary DNS server in the Secondary DNS server text box (if applicable). You must enter a valid hostname or IP address. To configure a proxy in order to reach HTTPS resources on the Internet, select the Configure A Proxy check box. Nasuni Filer Best Practices Guide

84 Appendix D: Port 443 Outbound Details Port 443 Outbound Details Nasuni does not recommend using IP addresses to configure port 443 outbound. However, if you must use IP addresses, here are some considerations. Amazon Web Services (AWS) The IP ranges for Amazon Web Services (AWS) are published here: This is a JSON file. For access to the NOC (Network Operations Center), add to your firewall all IP address ranges with a region value of us-east-1 and a service value of AMAZON. Note: This list changes periodically. An administrator should check this list at least monthly. Microsoft Azure The IP ranges for Microsoft Azure are published here: Download the Microsoft Azure Datacenter IP Ranges file. This is an XML file. If you are using NMC, for access to the NOC (Network Operations Center), add to your firewall all IP address ranges with a Region Name value of useast. Note: This list changes periodically. An administrator should check this list at least monthly. Nasuni Filer Best Practices Guide

85 Appendix E: Glossary The following terms are useful in understanding the Nasuni Filer. A Access Control List (ACL) An access control list (ACL) is a list of permissions attached to an object. An ACL specifies which users or system processes are granted access to objects, as well as what operations are allowed on given objects. Active Directory (AD) Microsoft Active Directory (AD) is a directory service for Windows domain networks. It is part of most Windows Server operating systems. Microsoft Active Directory enables administrators to assign policies, deploy software, and apply critical updates to an organization. Active Directory stores its information and settings in a central database. Advanced Encryption Standard (AES) The Advanced Encryption Standard (AES) is a specification for the encryption of electronic data. It has been adopted by the U.S. government and is used worldwide. AES is approved by the National Security Agency (NSA) for top secret information. Authorization Code A 6-character code used in conjunction with a Serial Number to validate an installation. Authorization Codes are good for one use; one successful use causes an authorization code to be changed automatically. Generating a new authorization code for a serial number does not cause a Nasuni Filer or NMC that uses that serial number to stop working. The authorization code is only used once during initial setup of a new or recovered Nasuni Filer or NMC. Because an Authorization Code is only used once, an administrator can safely issue it to a user in order to install a single Nasuni Filer or NMC without revealing Nasuni account credentials. To obtain an Authorization code for a Serial Number, visit or the Account Status page of the Nasuni Management Console. Auto Cache A feature that immediately brings new data into the local cache from other Nasuni Filers that are attached to a volume. Otherwise, new data is brought into the local cache from other Nasuni Filers when that data is accessed next. Nasuni Filer Best Practices Guide

86 C cache A cache is a computer component that stores data locally so that future requests for that data can be served faster. While all data and metadata are stored in cloud storage, data that requires regular access is kept locally. This includes files that are re-written and data that is read often. If the requested data does not reside locally, it is staged into the cache and provided for the request. Challenge-Handshake Authentication Protocol (CHAP) A protocol that authenticates a user or network host to an authenticating entity. CHAP (Challenge-Handshake Authentication Protocol) See Challenge-Handshake Authentication Protocol (CHAP) on page 75. CIFS (Common Internet File Service) A standard protocol that allows Windows users to share files across a network. copy-on-write (COW) disk The copy-on-write (COW) disk is used during the snapshot process. If any writes to the Nasuni Filer occur during a snapshot, the previous data from the cache disk is copied to the COW disk, and the new data is written to the cache disk. Hence, the term copy-on-write. This allows new writes to take place at any time, even during the snapshot process. D Direct Attached Storage (DAS) Direct-attached storage (DAS) is computer storage that is directly attached to one computer or server and is not, without special support, directly accessible to other ones. The main alternatives to directattached storage are network-attached storage (NAS) and a storage area network (SAN). directory quota A limit on the amount of data in a directory. You can configure that quota reports are sent to administrators or users when directories near or exceed their quota. Dynamic Host Configuration Protocol (DHCP) Dynamic Host Configuration Protocol (DHCP) is a network configuration protocol that provides a network IP address for a host on an IP network automatically. Nasuni Filer Best Practices Guide

87 E encryption The Nasuni Filer encrypts data sent to cloud storage using the OpenPGP standard, with AES-256 as the default encryption. eviction Data that has been copied from the Nasuni Filer to cloud storage, and that is rarely used again, is eventually removed ( evicted ) from the Nasuni Filer s cache to free up space for new data. If one of these evicted files is later requested for reads or writes, the Nasuni Filer retrieves the file from cloud storage and puts it back into the cache automatically. export A directory on a server volume that a client on your network can access. F file system A method for storing and organizing computer files and the data that they contain in order to make it easy to find and access them. FTP (file transfer protocol) File Transfer Protocol (FTP) is a standard network protocol used to transfer files from one host to another host over a TCP-based network, such as the Internet. G GB/GiB GB is an abbreviation of gigabyte, meaning 1,000,000,000 bytes. Usually used to refer to hard disk capacity. GiB is an abbreviation of gibibyte, meaning 2 30 (1,073,741,824) bytes. Usually used to refer to RAM memory. global file locking The purpose of the global file locking feature is to prevent conflicts when two or more users attempt to change the same file on different Nasuni Filers. If you enable the global file locking feature for a directory and its descendants, any files in that directory or its descendants can only be changed by one user at a time. Any other users cannot change the same file at the same time. You can also manually break the locking of a file. This might become necessary if a user leaves a file open and another user needs to open that file. Nasuni Filer Best Practices Guide

88 I initiator An initiator functions as an iscsi client. An iscsi initiator sends SCSI commands over an IP network. instance The Nasuni Filer is either a hardware appliance or virtual machine. You can have three Nasuni Filers for each terabyte you are protecting with the Nasuni Service. Internet Small Computer System Interface (iscsi) An Internet Protocol (IP)-based storage networking standard for linking data storage facilities. By carrying SCSI commands over IP networks, iscsi facilitates transferring data over intranets and managing storage over long distances. The protocol allows clients (called initiators) to send SCSI commands (CDBs) to SCSI storage devices (targets) on remote servers. iscsi is a Storage Area Network (SAN) protocol. IQN (iscsi Qualified Name) See iscsi Qualified Name (IQN) on page 77. iscsi (Internet Small Computer System Interface) See Internet Small Computer System Interface (iscsi) on page 77. iscsi Qualified Name (IQN) The iscsi Qualified Name includes these fields: M MB/MiB iqn. date that the naming authority took ownership of the domain, in yyyy-mm format. reversed domain name of the authority, such as com.nasuni. : followed by a storage target name specified by the naming authority. Example: iqn com.nasuni:filer.nasuni.net:51 MB is an abbreviation of megabyte, meaning 1,000,000 bytes. Usually used to refer to hard disk capacity. MiB is an abbreviation of mebibyte, meaning 2 20 (1,048,576) bytes. Usually used to refer to RAM memory. Nasuni Filer Best Practices Guide

89 metadata Data about data. Metadata describes how and when and by whom a particular set of data was collected, and how the data is formatted. MIB (management information base) A database for managing entities in a network, such as with the Simple Network Management Protocol (SNMP). MTU (maximum transmission unit) The maximum transmission unit (MTU) is the size (in bytes) of the largest protocol data unit that the layer can pass onwards. A larger MTU brings greater efficiency, because each packet carries more user data while protocol overheads, such as headers, remain fixed; the resulting higher efficiency means a slight improvement in the bulk protocol throughput. A larger MTU also means processing fewer packets for the same amount of data. However, large packets can occupy a slow link for some time, causing greater delays to following packets, and increasing lag and minimum latency. MTU settings should not exceed N NAS (Network Attached Storage) See Network Attached Storage (NAS) on page 79. Nasuni Filer The Nasuni Filer is a storage controller that runs in your data center and provides primary storage with built-in backup and offsite protection. The Nasuni Filer is available as both a hardware appliance and a virtual machine. The Nasuni Filer can be used instead of, or in combination with, traditional file servers. It fully supports Windows CIFS Shares as well as Active Directory. A single volume in a Nasuni Filer has unlimited capacity, due to the integration of its caching algorithms with provisioning. Nasuni Filer user interface (UI) The Web-based user interface to the Nasuni Filer. Nasuni Management Console (NMC) The Nasuni Management Console enables you to monitor and manage many Nasuni Filers from one central application. Using the Nasuni Management Console, you can view the status of all of your managed Nasuni Filers, as well as configure their settings. With the Nasuni Management Console, you can ensure consistent settings on all your Nasuni Filers. Using the Nasuni Management Console, you can manage Nasuni Filers even if they are not presently connected. Any configuration changes made will propagate to the Nasuni Filer when it becomes connected. Nasuni's cloud storage The secure unlimited online storage provided through the Nasuni Filer. Nasuni Filer Best Practices Guide

90 Network Attached Storage (NAS) Network-attached storage (NAS) is file-level computer data storage connected to a computer network. NAS devices are a convenient method of sharing files among multiple computers. NAS systems typically provide access to files using network file sharing protocols such as NFS, SMB/CIFS, or AFP. NFS (Network File System) A protocol and file system for accessing and sharing files across a computer network using UNIX and Linux. NMC (Nasuni Management Console) See Nasuni Management Console (NMC) on page 78. O offsite data protection Storing copies of critical data away from the original data centers to protect this information from natural disasters and accidental or malicious modification. on-demand provisioning The Nasuni Filer simplifies provisioning by offering instant provisioning in increments as small as 1 TB. P pinning Pinning a folder specifies that the folder and its contents must remain in the local cache at all times. This can improve performance and reduce the time necessary to return accessed data to clients. This reduces the available cache by the size of the folder. Pinning a folder does not bring the folder s data into the cache. All iscsi (SAN) volume data is already pinned in the cache, so it is not necessary to pin iscsi volumes. proxy A server that acts as an intermediary for requests from clients seeking resources from other servers. Q Quality of Service Quality of Service (QoS) settings indicate the inbound and outbound bandwidth limits of the Nasuni Filer for data moving to or from the Nasuni Filer, such as transmitting snapshots to cloud storage. quota A limit on the amount of usable storage space on a volume. Nasuni Filer Best Practices Guide

91 S SAN (Storage Area Network) See Storage Area Network (SAN) on page 80. Serial Number A unique 32-digit hexadecimal number associated with your account for use with Nasuni Filer and Nasuni Management Console (NMC) installations. Each account has multiple Serial Numbers. Unused Serial Numbers may be used to set up a new Nasuni Filer or an NMC. Serial Numbers already in use may be used to recover existing Nasuni Filers or your existing NMC. Serial Numbers are used in conjunction with Authorization Codes. To obtain a Serial Number, visit account/serial_numbers/. share A folder on a volume that can be shared on your network. Access to a share can be customized on a user or group-level basis. snapshot An instantaneous, non-changing, read-only image of a volume. Snapshots let you view any past version of the file system and restore all or part of the version quickly. A snapshot is a complete picture of the files and folders in your file system at a specific point in time. With snapshots, the Nasuni Filer can identify new or changed data. Snapshots offer data protection by enabling you to recover a file deleted in error or to restore an entire file system. After a snapshot has been taken and is sent to cloud storage, it is not possible to modify that snapshot. SNMP (Simple Network Management Protocol) An Internet-standard protocol for managing devices on IP networks. Storage Area Network (SAN) An architecture to attach remote computer storage devices (such as disk arrays, tape libraries, and optical jukeboxes) to servers in such a way that the devices appear as locally attached to the operating system. sync You can schedule when, and with what frequency, the selected volume updates data ( syncs ) from the Nasuni Service, merging your local data with any new or changed data from other Nasuni Filers connected to this volume. This helps to ensure that everyone in your organization is using the most current data. T target A storage resource located on an iscsi server. A target is a storage server instance. Nasuni Filer Best Practices Guide

92 V versioning The Nasuni Filer provides the versioning necessary to eliminate the need for separate backup and restore procedures. virtual machine A virtual machine is a tightly isolated software container that can run its own operating systems and applications as if it were a physical computer. A virtual machine behaves exactly like a physical computer and contains its own virtual (software-based) CPU, RAM, hard disk, and network interface card (NIC). virtualization Virtualization lets you run multiple virtual machines on a single physical machine, sharing the resources of that single computer across multiple environments. Different virtual machines can run different operating systems and multiple applications on the same physical computer. volume A set of files and directories. A volume can consist of multiple shares. With the Nasuni Filer, each volume can be stored in cloud storage. Nasuni Filer Best Practices Guide

93 Index (port) Network Time Protocol (NTP) (port) SNMP monitoring 8 25 (port) SMTP 8, (port) 8, 17, (port) 8, 10 A access mobile access 27 network drive 27 Web 16, 24, 27 Active Directory 1, 12, 14, 33, 43, 44, 71, 72 domain groups 31, 33 multiple domains 43 Nasuni Management Console 13 Active Directory security 33 Administration Guide xi alerts 36 allocation roundup size application and 25 allowed hosts 33, 34 CIFS share 24 iscsi 22 Amazon EC2 1, 10, 53 antivirus 31 Antivirus Service 21, 40 app installing 16 Apple Safari 2 application allocation roundup size and 25 Case-Sensitive Paths and 25, 41 CIFS share and 24 configuring Nasuni Filer for 5 CPU cores for 6 memory 6 performance 38 volume and 22 auditing 31, 37 authentication CIFS share 24 authorization code 10 Auto Cache disabling 40 enabling 23, 40 sync and 40 Azure 10, 53 Microsoft 1 B backup bandwidth and 7 cache for 6 configuring Nasuni Filer for 5 dedicated Nasuni Filer for 5 quality of service and 14 snapshot and 19 using cache 5 bandwidth backup 7 data migration 7 for disaster recovery 7 snapshot quality of service 14, 41, 42, 48, 55 Nasuni Filer Best Practices Guide

94 Index Bring into Cache cache 39, 51, 54 bulk data migration service 11, 26, 50 C cache 2, 3 Bring into Cache 39, 51, 54 Cache Resident data 39, 51, 54 capacity 3 configuration 46 data migration and 18 for backup 5, 6 for disaster recovery 6 hardware appliance 6 iscsi volume and 22, 48 maximum size 53 minimum virtual machine 6 New Data in Cache (Not yet protected) 47 pinned data and 48 quality of service and 14, 41, 42 resizing 28, 42, 49, 56 size 6, 46, 49 snapshot and 48, 55 status 3, 4, 46 structure 48 working set and 6, 49 write-back 39 cache disk size 56 cache resident 46 Cache Resident data cache 39, 51, 54 Cache Settings 18, 55 cache settings 55 capacity cache 3 quota 4, 21 Case-Sensitive Paths application 41 application and 25 CIFS share and 24, 41 certificate SSL 10, 44 CHAP user name and password iscsi 22 Chrome 2 CIFS migration source 26 network protocol 3, 20 CIFS authentication 33 CIFS share 4 allowed hosts 24 application and 24 authentication 24 Case-Sensitive Paths and 24, 41 creating 24 planning 24 previous versions 24 Previous Versions and 40 read-only 24 status 37 unreadable files 24 user folders support 24 visible 24 CIFS share security 33 CIFS volume Web access 16, 24, 27 cloud storage 3, 4 deleting snapshots from 17 protecting data in 3, 14, 41, 42 retrieving data from 3, 39, 40 sending snapshots to 14 compatibility mode Internet Explorer 44 compliance 32 compression 1, 3 configuring Nasuni Filer application 5 backup 5 data migration 5 disaster recovery 5 file server 5 mobile access 5 connecting to remote volume 20 console 7, 9, 28, 43, 44 copying data to Nasuni Filer data migration 42 mobile access 27 network drive 26 Web access 27 copy-on-write (COW) disk 49, 56 COW (copy-on-write) disk 49, 56 CPU cores application 6 data migration 6 hardware appliance 6 minimum virtual machine 6, 38 Nasuni Filer Best Practices Guide

95 Index D data Bring into Cache 39, 51, 54 Cache Resident 39, 51, 54 working set 6, 49 data migration 4, 26 bandwidth for 7 cache and 18 configuring Nasuni Filer for 5 copying data to Nasuni Filer 42 CPU cores for 6 dedicated Nasuni Filer for 5 defining 26 disable remote access for 50 disabling remote access for 18, 25 export 26 information on 37 minimizing snapshots for 50 multiple 42 Nasuni bulk data migration service 11, 26, 50 performance 38, 42 performance and 42 quality of service for 14, 50 scheduling 4, 26, 42 share 26 source 26 disconnected 36 Data Migration Service 18, 35, 55 dedicated Nasuni Filer for backup 5 for data migration 5 deduplication 1, 3 default gateway IP address 12 default share 15, 21 default volume 15 defining data migration 26 deleting snapshot 17, 21, 41 Desktop and Mobile Access 8 DHCP 9, 28, 67, 69, 71 network type 67, 69, 71 directory snapshot access 21, 41 enabling 24, 41 disaster recovery bandwidth for 7 cache for 6 configuring Nasuni Filer for 5 encryption keys 13 moving Nasuni Filer 28 serial number 10 shared volume 22 software updates 15 DNS connection 7 primary DNS server 12 secondary DNS server 12 server changing 28 domain groups Active Directory 31, 33 domains multiple Active Directory 43 download data mobile access 27 E EC2 10, 53 Amazon 1 editnetwork command 9 alerts 36 configuring 12, 14 Nasuni ii Nasuni Support ii notifications 31 encryption keys 20, 30 downloading 13, 22, 28 escrowing with Nasuni 13 for disaster recovery 13 generated 13, 22 uploading 13 errors 36 escrowing encryption keys 13 ESXi 53 VMware 6, 38 Explorer 2 export 2 data migration 26 NFS creating 25 status 37 External traffic group 60 Nasuni Filer Best Practices Guide

96 Index F file global locking 16, 23 locking 23 file alert service 21, 32 file locking 16, 23 file permissions 35 file server configuring Nasuni Filer for 5 snapshot frequency 18 software updates 15, 29 file system 3 file system auditing 31, 37, 40 file system metadata 3 file version 3 files information 37 Firefox 2 firewall 30 folder pinned 37 frequency snapshot 18, 23, 48 sync 21, 22, 39 FTP 24 FTP directory 34, 37 FTP protocol 3, 20, 25 FTP/SFTP access 5 FTP/SFTP directory 25 G gateway traffic group 68, 70 General traffic group 60 global file locking 23 and multiple protocols 16, 23 enabling 23 global locking 23 Google Chrome 2 groups 31 defining 12, 25, 43 H hard drive space hardware appliance 6 minimum virtual machine 6 status hardware appliance 38 hardware appliance cache 6 CPU cores 6 hard drive space 6 status 38 installing 9 LCD panel 9 memory 6 NF-200 6, 9 NF-400 6, 9 Hardware Getting Started Guide x hidden share 43 hide unreadable files 33 high availability network configuration 68, 70 Static network type 67, 69 high-availability (HA) network 7 HTTP/REST protocol 1 HTTPS proxy 71, 72 HTTPS proxy server 30 Hyper-V 6, 9, 38, 53 cache size 53 idrac 9 Initial Configuration Guide xi installing Nasuni app 16 Nasuni Filer 6, 9 serial number 10 virtual machine 9, 10 Internet connection 7, 28 Internet Explorer 2, 27 compatibility mode 44 Web access and 27, 43 IP address 9, 10, 68, 69, 70, 72 default gateway 12 primary DNS server 12, 72 secondary DNS server 12, 72 setting 9, 28 VPN 17 I Nasuni Filer Best Practices Guide

97 Index IP ranges 73 iscsi allowed hosts 22 CHAP user name and password 22 network protocol 3, 20 status 37 volume cache and 22 size 22 iscsi volume cache and 48 key terms 2 K L LCD panel hardware appliance 9 least recently used (LRU) algorithm 50 license 45 licensed capacity verifying 28 Linux 3, 26 locking file 16, 23 locking files 23 logging in 10, 17 login 10, 17 M MAC address 9, 28 Macs 42 Management traffic group 60 maximum cache size 53 maximum transmission unit 68, 70 memory application 6 hardware appliance 6 minimum virtual machine 6, 38 NF NF metadata 2, 3 file system 3 Microsoft Azure 1, 10, 53 Microsoft Hyper-V cache size 53 migration source CIFS 26 NFS 26 Mobile Access 8 mobile access 33, 35 configuring Nasuni Filer for 5 copying data to Nasuni Filer 27 downloading data 27 enabling 16, 24, 25, 27 Read-Only access 25 share create 25 users and groups 25 worksheet 27 moving Nasuni Filer disaster recovery 28 Mozilla Firefox 2 MTU 28, 68, 70 multiple domains Active Directory 43 multiple Nasuni Filers 5 N name Nasuni Filer 5, 10, 12 volume 20 Nasuni bulk data migration service 11, 26, 50 Nasuni app installing 16 Nasuni Desktop Client 8 Nasuni Filer 2 configuring application 5 backup 5 data migration 5 disaster recovery standby 5 file server 5 mobile access 5 dedicated for backup 5 for data migration 5 installing 6, 9 serial number 10 virtual machine 9, 10 moving 28 disaster recovery 28 name 5, 10, 12 planning 5 worksheet 5 shutting down snapshot 28 Nasuni Filer Best Practices Guide

98 Index Nasuni Filer hardware appliance NF-200 6, 9 NF-400 6, 9 Nasuni Filer user interface 2 Nasuni Management Console 2, 5, 11, 12, 20 Nasuni Management Console Guide xi Nasuni Management Console Quick Start Guide xi Nasuni.com password 5 username 5 nasunicheck command 7 netmask 68, 70 network configuration high availability 68, 70 password 69 username 69 configuring 12, 43, 60 connection 7, 28, 43 high-availability (HA) 7 parameters 28 settings for 10 setup 65 network drive 26, 27 copying data to Nasuni Filer 26 network protocol 20 CIFS 3, 20 iscsi 3, 20 NFS 3, 20 network status 37 Network Time Protocol NTP 8, 12, 13, 71, 72 port time server 12 network traffic 7, 9, 10, 60 network type DHCP 67, 69, 71 static 67, 68, 69, 70, 71 New Data in Cache (Not yet protected) cache 47 NF-200 memory 6 Nasuni Filer hardware appliance 6, 9 NF-400 memory 6 Nasuni Filer hardware appliance 6, 9 NF-400H 6, 9 NF-440 6, 9 NFS 40 migration source 26 mount options 40 network protocol 3, 20 VMware 26 NFS export creating 25 status 37 NFS export security 34 NMC Nasuni Management Console 2 notifications 36 Notifications page 36 NTP Network Time Protocol 8, 12, 13, 71, 72 time server 12, 71, 72 offline files 42 OpenPGP 76 OS X clients 3 configuring 17 O P password changing 32 Nasuni.com 5 network configuration 69 password retention 35 performance application 38 data migration 38, 42 data migration and 42 snapshot 39, 42 sync 42 permissions 31, 35 pinned folder 37 pinned data cache and 48 planning Nasuni Filer 5 worksheet 5 platform 37 platforms virtual machine 6 port 123 Network Time Protocol 8 port 161 SNMP monitoring 8 port 25 SMTP 8, 12 port 443 8, 17, 27 port , 10 Nasuni Filer Best Practices Guide

99 Index POSIX clients 17 Preview Pane disabling 29, 43 Previous Versions CIFS share and 40 previous versions CIFS share 24 primary DNS 72 server IP address 12 primary DNS server IP address 72 proxy server 30 Public security 33 Q quality of service backup 14 cache and 14, 41, 42 data migration 14, 50 snapshot bandwidth 14, 41, 42, 48, 55 quota 22 maximum capacity 4, 21 quota reports 22 R RDM 53 read-only CIFS share 24 Read-Only access mobile access 25 read-only exports 34 read-only share 33 remote access 21, 32, 37, 42 disable for data migration 50 disabling 18, 25, 42 disabling for data migration 18, 25 enabling 22, 25, 42 Remote Support Service 15, 35 remote volume 4 connecting to 20 resizing cache 28, 42, 49, 56 retaining snapshot 17, 21, 41 retention snapshot 17, 21, 41 roaming profiles 42 role-based access control 31 rsize 40 S Safari 2 scheduling data migration 4, 26, 42 snapshot 3, 18, 19, 21, 23 sync 21, 22, 39 secondary DNS 72 server IP address 12 secondary DNS server IP address 72 serial number 10 for disaster recovery 10 installing Nasuni Filer 10 service menu 43, 44 setall static command 9 SFTP 1, 24 SFTP directory 34, 37 SFTP protocol 3, 20, 25 share 2 CIFS 4 Case-Sensitive Paths and 24, 41 creating 24 planning 24 Previous Versions and 40 status 37 create mobile access for 25 data migration 26 default 15 hidden 43 volume and 2 Shared Link 16 shared volume disaster recovery 22 shutting down Nasuni Filer snapshot 28 Simple Mail Transfer Protocol 8 Simple Network Management Protocol 8 size cache disk 56 SMTP 8 port 25 8, 12 Nasuni Filer Best Practices Guide

100 Index snapshot 3 backup 19 bandwidth quality of service 14, 41, 42, 48, 55 before shutting down Nasuni Filer 28 cache and 48, 55 definition 2 deleting 17, 21, 41 details 3 directory access 21, 41 enabling 24, 41 disk 49 frequency 18, 23, 48 file server 18 initial 3 performance 39, 42 retaining 17, 21, 41 retention 17, 21, 41 scheduling 3, 18, 19, 21, 23 snapshot directory access 32 snapshot retention 32 snapshots minimizing for data migration 50 SNMP 8 SNMP monitoring 31 port software 15 updates configuring 15 disaster recovery 15 file server 15 software updates configuring 28, 29 file server 29 status 37 source data migration 26 disconnected 36 Spanning Tree 61 SSL certificates 30 SSL security certificate 10, 44 static network type 67, 68, 69, 70, 71 status cache 3, 4 CIFS share 37 iscsi 37 NFS export 37 Status page 37 storage controller 2 subscription status 37 switch 61 switch ports 61 switchport access 61 sync 4 Auto Cache and 40 frequency 21, 22, 39 performance 42 scheduling 21, 22, 39 T text conventions ix thick provisioning (virtual machine) 38 thin provisioning (virtual machine) 38 Third-Party Licensing Guide xi time server Network Time Protocol 12 NTP 12 time.nasuni.com 12 traffic 7 traffic group 60 adding 66 configuring 67 deleting 66 editing 66 External 60 gateway 68, 70 General 60 Management 60 managing 66 selecting 67 trunk access 61 U UNIX 3, 26 unreadable files CIFS share 24 unsynchronized data 3 user folders support CIFS share 24 user interface clearing browser cache 29 configuring Nasuni Filer 12 Home page 11 issues 44 not available 43, 44 operations tasks 20 username Nasuni.com 5 network configuration 69 Nasuni Filer Best Practices Guide

101 Index users 31 defining 11, 12, 25, 43 users and groups mobile access 25 Using Multiple Protocols xi version history 3 VHDX 53 virtual machine cache minimum 6 CPU cores minimum 6, 38 hard drive space minimum 6 installing 9 Nasuni Filer 9, 10 memory minimum 6, 38 platforms 6 Virtualization Getting Started Guide x Virtualization Getting Started Guide for Azure x Virtualization Getting Started Guide for EC2 x virtualization platform 53 visible CIFS share 24 visible share 33 VMFS-5 53 VMware 9, 53 ESXi 6, 38 NFS 26 VMware ESXi cache size 53 volume application and 22 creating 22 default 15 definition 2 name 20 planning 20 share 2 size iscsi 22 trial mode 22 VPN 38 IP address and 17 V W warnings 36 Web Access 8 Web access 33 CIFS volume 16, 24, 27 copying data to Nasuni Filer 27 Internet Explorer and 27, 43 Web browsers 2 Windows 3, 4, 26, 29, 43 Windows domain 12 Windows Explorer Preview Pane disabling 29, 43 Windows Previous Versions 1 workgroup 12 working set cache and 6, 49 worksheet 12, 20, 24 mobile access 27 planning Nasuni Filer 5 write-back cache 39 wsize 40 Nasuni Filer Best Practices Guide