Nasuni Filer Best Practices Guide

Transcription

1 Nasuni Filer Best Practices Guide Version 5.0 July Nasuni Corporation All Rights Reserved

2 Document Information Nasuni Filer Best Practices Guide Version 5.0 July 2013 Copyright Copyright by Nasuni Corporation. All rights reserved. Information in this document is subject to change without notice and does not represent a commitment on the part of Nasuni. The software described in this document is furnished under a license agreement. The software may be used only in accordance with the terms of the license agreement. It is against the law to copy the software on any medium. No part of this manual may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying and recording, for any purpose without the express written permission of Nasuni Corporation. Notice Although Nasuni Corporation has attempted to ensure the accuracy of the content of this manual, it is possible that this document may contain technical inaccuracies, and typographical or other errors. Nasuni assumes no liability for any error in this publication, and for damages, whether direct, indirect, incidental, consequential or otherwise, that may result from such error, including, but not limited to loss of data or profits. Nasuni provides this publication as is without warranty of any kind, either express or implied, including, but not limited to implied warranties of merchantability or fitness for a particular purpose. Trademarks NASUNI, UNIFS, and the intersecting ovals logo are Nasuni trademarks and service marks. All other names, brands and products herein are the designations of their respective owners. Contacting Nasuni Corporation Nasuni Corporation 313 Speen Street Natick, MA Telephone: Sales: Fax: info@nasuni.com Technical Support Telephone: NASUNI ( ) support@nasuni.com Technical Support is available 24/7/365 for full production customers.

3 Contents Contents iii Preface viii Audience viii What s in this Book viii Text Conventions ix Product Documentation x Electronic Publications x Chapter 1: Introducing the Nasuni Filer Nasuni Filer Nasuni Management Console (NMC) Key Terms About File Systems About the Cache Cache Capacity Terminology Chapter 2: Installation Installation Record your Nasuni.com Username and Password Planning multiple Nasuni Filers Planning the installation of each Nasuni Filer Platform installation options Logging in to the Nasuni Filer for the first time If you manage multiple Nasuni Filers, also install the Nasuni Management Console (NMC) Chapter 3: Configuration Configuration For each Nasuni Filer that you are configuring, determine the following information 10 For each volume, configure Encryption Keys Nasuni Filer Best Practices Guide 5.0 iii

4 Contents For each Nasuni Filer, configure the Time Zone and the Time Server (Network Time Protocol) For each Nasuni Filer, configure Active Directory security For each volume, configure Quality of Service rules For each Nasuni Filer, configure settings For each Nasuni Filer, configure Automatic Software Updates For each Nasuni Filer, configure Remote Support Service For each Nasuni Filer, verify the default Volume and Share Enabling Browser-based Access to CIFS data on each volume Enabling Mobile Device Access to CIFS data (iphone, ipad, Android phones) on each volume Configuring SMB2 protocol on each volume Configuring for OS X clients on each volume Configuring Snapshot Retention on each volume If this Nasuni Filer is performing data migrations, disable Remote Access for the volume If this Nasuni Filer is performing data migrations, change the snapshot Frequency to 24 hours for the volume If this Nasuni Filer is a primary file server, change the snapshot Frequency to 10 minutes or longer for the volume If this Nasuni Filer is performing data migrations, schedule snapshots of migration data for nights and weekends If this Nasuni Filer is managing backup data, schedule snapshots for once per day at a time of minimal activity Chapter 4: Operations Operations Managing Volumes Managing Shares and Exports Enabling Remote Access Adding data TO the Nasuni Filer Accessing data FROM the Nasuni Filer Resizing the cache (virtual machine) Moving Nasuni Filer to new host Changing device and network parameters (virtual machine) Verifying licensed capacity Updating Nasuni Filer Software Avoiding performance issues Chapter 5: Security Nasuni Filer Best Practices Guide 5.0 iv

5 Contents Security HTTPS proxy server Firewall protection SSL certificates Encryption keys Role-based access control notifications Antivirus protection SNMP monitoring Change password Snapshot directory access Remote access Snapshot retention File Alert Service CIFS authentication CIFS Share security NFS Export security Mobile service settings Mobile licenses Data Migration Service Remote Support Service Chapter 6: Troubleshooting Troubleshooting Gathering information Performance issues Issues sending data to Nasuni Filer Nasuni Filer connectivity issues File access issues Multiple domain Active Directory issues User interface issues Miscellaneous issues Appendix A: Glossary Appendix B: Nasuni Terms of Service and License Agreement Nasuni Corporation Appendix C: Cache Configuration Nasuni Filer Best Practices Guide 5.0 v

6 Contents Cache Configuration About the cache Cache structure Considerations for configuring the cache Recommended cache size Cache disk and copy-on-write (COW) disk (aka snapshot disk) Increasing cache size Cache size and performance Performance issues from cache misses Automatically releasing data from cache Loading large amounts of data into the Nasuni Filer Downloading large amounts of data from cloud Keeping all data locally (cache resident) Proactively managing the contents of the cache Different Nasuni Filers for different uses Different volumes for different uses Cache Specifications Quality of cache storage Actions affecting the cache Removing data from cache Determining if data is in the cache Bringing data into the cache manually Pinning or unpinning CIFS and NFS volumes in the cache Reserving space in cache Snapshots and the cache Scheduling snapshots Manually starting snapshots Changing Quality of Service rules Changing the size of the cache disk or copy-on-write (COW) disk vsphere Client platform Hyper-V Manager platform Appendix D: Network Traffic Network Traffic Considerations Selecting Traffic Groups Creating Traffic Groups Configuring Traffic Groups Configuring System Settings Nasuni Filer Best Practices Guide 5.0 vi

7 Contents Index Nasuni Filer Best Practices Guide 5.0 vii

8 Preface Audience This Best Practices Guide is intended to assist the IT administrator or person responsible for managing unified storage using the Nasuni Filer storage controller. What s in this Book This guide contains the following chapters: Chapter 1, Introducing the Nasuni Filer, on page 1 describes the major features and concepts of the Nasuni Filer. Chapter 2, Installation, on page 5 explains how to plan and install the Nasuni Filer and the Nasuni Filer user interface. Chapter 3, Configuration, on page 10 explains how to configure the Nasuni Filer for optimum performance. Chapter 4, Operations, on page 16 explains how to manage the Nasuni Filer during ordinary operations. Chapter 5, Security, on page 24 presents the Nasuni Filer s many security features. Chapter 6, Troubleshooting, on page 29 explains how to solve problems without the necessity of contacting Technical Support. Appendix A, Glossary, on page 36 provides definitions of terms related to the Nasuni Filer. Appendix B, Nasuni Terms of Service and License Agreement, on page 43 is the link to the Nasuni Terms of Service and License Agreement. Appendix C, Cache Configuration, on page 44 gives details about configuring the cache of the Nasuni Filer. Appendix D, Network Traffic, on page 58 gives details about configuring the Nasuni Filer with your network configuration. Nasuni Filer Best Practices Guide 5.0 viii

9 What s in this Book Text Conventions The following text conventions are used in this document: Convention Description 1. Number Used to indicate a step in a task. Bullet Bold Italics Underline Monospace Used for items in a list without any particular order. Used to give emphasis to a word. Used to represent options or parameters. Used for hyperlinks, such as links to Web sites. Used to indicate pathnames, filenames, and folders. Nasuni Filer Best Practices Guide 5.0 ix

10 Product Documentation Electronic Publications The latest version of each of the publications listed below is available in PDF format on the Nasuni Web site. All documentation is available at Hardware Getting Started Guide: For setting up the Nasuni Filer on the hardware appliance. To download this guide for the NF 200, visit: pdf To download this guide for the NF 400, visit: pdf Virtualization Getting Started Guide: For installing the Nasuni Filer on a virtual machine within a corporate network. To download this guide, visit: Nasuni_Filer_Virtualization_GS_Guide.pdf Initial Configuration Guide: For configuring and deploying the Nasuni Filer on a corporate network after the initial installation on the hardware appliance or virtual machine. To download this guide, visit: Nasuni_Filer_Initial_Configuration_Guide.pdf Users Guide: For managing unified storage using the Nasuni Filer. To download this guide, visit: Third-Party Licensing Guide: Listing of third-party software used in the Nasuni Filer. To download this guide, visit: Party_Licenses_Guide.pdf Nasuni Management Console Guide: For managing multiple Nasuni Filers. To download this guide, visit: Nasuni Management Console Quick Start Guide: To quickly get started using the Nasuni Management Console to manage multiple Nasuni Filers. To download this guide, visit: x

11 xi

12 Chapter 1: Introducing the Nasuni Filer Nasuni s Enterprise Storage Services deliver an advanced storage solution using a cloud infrastructure. The core technology is a next-generation storage controller the Nasuni Filer that offers the security and performance of traditional storage, while adding unlimited scalability, automatic offsite protection, and global multi-site access to files. The Nasuni system is managed through a single, small-footprint point of control within the enterprise s data center. The Nasuni Filer is an on-premises unified storage device supporting NFS, CIFS, and iscsi protocols. The Nasuni Filer is fully integrated with Active Directory, Distributed File System (DFS), and Windows Previous Versions. It includes a high-performance cache and takes periodic snapshots that enable filelevel restores. The Nasuni Filer is available as a virtual or physical appliance. Its reach and capacity far exceed those of a traditional controller, however, because it does not rely only on memory and local disk to manage its data: it has the entire capacity of the cloud at its disposal. All data is deduplicated, encrypted, and compressed before storage. Multi-site access enables organizations with several locations to work on a single set of shared data. Nasuni s architecture allows multiple storage controllers to have live access to the same volume of snapshots. Organizations benefit by having a simple, safe, and secure way to share data across any number of sites. Nasuni s multi-site access enables capabilities that include: Secure data distribution to remote office/branch office (ROBO). Remote offices forwarding data to a central point. Two-way synchronized read-write. Multi-site access does away with cumbersome replication schemes and slow WAN optimizers. Nasuni Filer Nasuni s Enterprise Storage Services are delivered through the Nasuni Filer, a storage controller that runs in your data center and provides primary storage with built-in backup, offsite protection, and multisite access. With your Nasuni Filer, you manage your volumes and performance using the Web-based Nasuni Filer user interface. Nasuni Management Console (NMC) The Nasuni Management Console (NMC) enables you to monitor and manage many Nasuni Filers from one central application. Using the Nasuni Management Console, you can view the status of all your managed Nasuni Filers, as well as configure their settings. With the Nasuni Management Console, you can ensure consistent settings on all your Nasuni Filers. Nasuni Filer Best Practices Guide 5.0 1

13 Key Terms Key Terms The following terms are helpful in understanding the Nasuni Filer: Nasuni Filer: The storage controller in your data center that integrates with your infrastructure via CIFS, NFS, or iscsi, and can be mapped as a network drive. Nasuni Filer user interface: The Web-based graphical user interface with which you can configure and manage the Nasuni Filer. The Nasuni Filer user interface is accessible with supported Web browsers including Mozilla Firefox, Internet Explorer, Safari, and Google Chrome. Nasuni Management Console (NMC): The Web-based graphical user interface with which you can configure and manage multiple Nasuni Filers. The Nasuni Management Console is accessible with supported Web browsers including Mozilla Firefox, Internet Explorer, Safari, and Google Chrome. Cloud storage: Cloud-based, highly protected, unlimited storage. Volume: A set of files and directories (CIFS and NFS) or blocks of data (iscsi). Share/export: An access point to a folder on a volume that can be shared or exported on your network. Access to a CIFS share can be customized on a user or group-level basis. You can create many shares or exports on a volume. Cache: The local storage of the Nasuni Filer. All data and metadata that is accessed regularly is kept locally in the cache. If requested data is not locally resident, it is staged into the cache and provided for the request. Snapshot: A snapshot is a complete picture of your volume at a specific point in time. Snapshots offer data protection by enabling you to recover data deleted in error or to restore an entire file system. After a snapshot has been taken and is sent to cloud storage, it is not possible to modify that snapshot. About File Systems File system data and metadata are stored locally on the Nasuni Filer. However, permanent storage is in the form of cloud-based storage. Changes in files are sent to cloud storage by the Nasuni Filer, at times specified by your snapshot schedule and at rates specified by your specified quality of service (outgoing bandwidth). You can also manually initiate snapshots. Metadata includes: Standard access control list (ACL) and file system metadata, such as permissions and file size. Version history, including operations such as creating, updating, deleting, and moving. Location of file versions. Volume protocol: CIFS, NFS, or iscsi. Volume encryption settings. Note: The Nasuni Filer supports Windows, UNIX, and Linux clients. Client capabilities and behavior vary, depending on the client type and version of the client operating system. Nasuni Filer Best Practices Guide 5.0 2

14 About the Cache Data is versioned with the ability to go back to a point in time at the volume, directory, and file levels. About the Cache It is generally unnecessary to pay attention to the cache s function or configuration. The cache adapts to your usage of data. The following is an overview of how the cache works. When you first launch the Nasuni Filer, the local cache contains no user data. Afterwards, any data written to a volume is staged in the local cache. After one hour, the first snapshot occurs. (To take a snapshot sooner, click Take snapshot now on the Volumes page.) Each file in the cache is encrypted, compressed, deduplicated, and sent to cloud storage. This is the only time that the entire cache is sent to cloud storage. Subsequent snapshots include only the changes between the original version of the files and the most recent version of the files. The cache continuously tracks recently changed data, such as files created or changed since the last snapshot. New data that has been saved to the cache, but has not yet been protected in cloud storage, is classified as new data in cache not yet protected. The most recently used files remain in the cache. Saved data that was written once and rarely used afterwards is eventually removed ( evicted ) from the cache to free up space for new data. If one of these evicted files is later requested for reads or writes, the Nasuni Filer retrieves the file from cloud storage and puts it back into the local cache automatically. Cache Capacity The cache keeps copies of working files for fast access to frequently accessed data. When the cache starts to become full, it first removes ( evicts ) files that have already been sent to cloud storage and are rarely accessed, using a least recently used (LRU) algorithm. If more space is necessary, a snapshot is performed to protect more data in cloud storage, after which the protected data can then be evicted from the cache. As a result, the cache rarely reaches full capacity. After a snapshot is complete, the cache status displays 0% new data in cache not yet protected, until you change data or create new data. You can continue to use your system normally during each snapshot. The size and status of the cache is displayed on the Home page. Figure 1-1: Cache status. As a default, the Nasuni Filer tries to keep about 30 percent of the cache free to accept new data. Pinning volumes in the cache or manually changing the cache settings can affect the percentage of the cache that is free to accept new data. Nasuni Filer Best Practices Guide 5.0 3

15 Terminology Terminology The Nasuni Filer documentation uses certain specific terms for the technology involved. Term Description Cache Data Migration Service Network Drive Notifications Quality of Service (QoS) Quota Remote Volume Sync Volume Local data storage. A Nasuni Filer service that migrates data from defined sources to a Nasuni Filer on a specified schedule. A Windows logical drive that maps to a CIFS share. Alerts and messages within the Nasuni Filer interface. The outbound bandwidth limit for moving snapshots from the Nasuni Filer to cloud storage. The maximum capacity of a volume. A volume on another Nasuni Filer on your Nasuni account that has been made accessible. Merging data from other Nasuni Filers with your Nasuni Filer. A set of data accessible by one of the Nasuni Filer's supported protocols. Nasuni Filer Best Practices Guide 5.0 4

16 Chapter 2: Installation Installation Installation includes all tasks necessary to make the Nasuni Filer and the Nasuni Filer user interface operational. All documentation is available at A. Record your Nasuni.com Username and Password Your Nasuni.com Username and Password are required for administering your account. B. Planning multiple Nasuni Filers See for a worksheet for planning configurations. You can set up different Nasuni Filers for different uses, including the following: Performing data migrations: the goal is to migrate data from outside sources to the Nasuni Filer while minimizing the effect on users. Dedicate a specific Nasuni Filer for data migrations. Applications that access the Nasuni Filer directly: the goal is to maximize performance of the application. Applications that directly access the Nasuni Filer open large numbers of files rapidly and frequently. Primary file server: the goal is timely file access for users. Providing mobile access: the goal is timely but secure file access for mobile users. Standby for disaster recovery: the goal is to have files ready for reasonable user access in case the primary server goes down. The performance is expected to not equal the performance of the primary server. Backup: the goal is to preserve copies of files in case the original file is lost or corrupted. Backup consists of two processes: moving data to the Nasuni Filer s cache, and moving data from the Nasuni Filer s cache to the cloud. Dedicate a specific Nasuni Filer for backup. If you have only a single Nasuni Filer, go to step C, Planning the installation of each Nasuni Filer. If you have multiple Nasuni Filers, you must plan the resources necessary for each Nasuni Filer separately. Each Nasuni Filer should have a different name. Then proceed with step C, Planning the installation of each Nasuni Filer for each Nasuni Filer. To simplify managing multiple Nasuni Filers, install the Nasuni Management Console. Nasuni Filer Best Practices Guide 5.0 5

17 Installation C. Planning the installation of each Nasuni Filer For details, see the Nasuni Filer Initial Configuration Guide. 1. Verify minimum memory: 4 GiB (virtual machine) The Nasuni Filer hardware appliance includes 16 GiB (NF-200) or 32 GiB (NF-400) memory. If applications access the Nasuni Filer directly, consider adding more memory. 2. Verify minimum free hard drive space to run the Nasuni Filer: 136 GB (virtual machine) The Nasuni Filer hardware appliance includes 3 TB or 6 TB (NF-200) or 6 TB or 12 TB (NF-400) hard drive space. 3. Verify minimum number of CPU cores: 2 (more than 2 for optimal performance) (virtual machine) The Nasuni Filer hardware appliance includes 6 cores (NF-200) or 12 cores (NF-400). If applications access the Nasuni Filer directly, consider adding more CPU cores. If this Nasuni Filer is performing data migrations, use the most powerful computer available. 4. Verify minimum hard drive space for cache: 64 GB (virtual machine) The Nasuni Filer hardware appliance includes 3 TB or 6 TB (NF-200) or 6 TB or 12 TB (NF-400) hard drive space. It is not necessary for all the data stored in the Nasuni service to be kept in the cache. The size of the cache should be based on the size of the working set (the amount of data being accessed by users or applications on a regular basis), including metadata. See Appendix C, Cache Configuration, on page 44 for details. If this Nasuni Filer is a standby for disaster recovery, the cache should be sufficient to hold the working set of data. If this Nasuni Filer is managing backup data, the cache should be large enough to hold one backup s worth of data. 5. Verify supported virtualization platforms: VMware ESX 4.1, VMware ESXi 4.1 and 5.0, and Windows Server 2008 R2 Hyper-V SP1 (virtual machine) 6. Verify working network connections For details on configuring for network traffic, see Appendix D, Network Traffic, on page 58. (The Nasuni Filer uses bonding mode 5 (balance-tlb) for high-availability (HA) networking. This has no requirements from the switches.) Nasuni Filer Best Practices Guide 5.0 6

18 Installation D. 7. Verify working connection to the Internet The Nasuni Filer must be able to access Nasuni.com and the cloud storage provider. You can run the console application nasunicheck to confirm DNS connectivity for the Nasuni Filer. If this Nasuni Filer is performing data migrations, use the location with the fastest bandwidth available. If this Nasuni Filer is a standby for disaster recovery, the higher the bandwidth, the better. If this Nasuni Filer is managing backup data, the bandwidth should be sufficient to protect one day s worth of data in cloud storage in less than one day. It takes 1 entire day to protect 1 TB of data with a 100 Mbps connection. 8. Verify corporate firewall configured to open port 8443 (required), port 443 (required) and optionally ports 123 (Network Time Protocol), 161 (SNMP monitoring), and 25 (SMTP) for outgoing traffic Platform installation options There are 2 platform options for installation: For a Nasuni Filer hardware appliance, go to step 1, Nasuni Filer hardware appliance (NF-200 or NF-400). For a virtual machine platform, go to step 2, Installation on virtual machine (VMware or Hyper-V). 1. Nasuni Filer hardware appliance (NF-200 or NF-400) See the Nasuni Filer Hardware Deployment Getting Started Guide. The Nasuni Filer software is already installed. If you re using the NF-200, determine or set the initial IP address in one of these ways: If DHCP is available on the network, make note of the IP address that appears on the LCD panel. Otherwise, connect a monitor and keyboard. Press Enter. Use username service and password service. Enter editnetwork. Enter setall static. Enter a new IP address. Enter save. If you re using the NF-400, determine or set the IP address in one of these ways: If DHCP is available on the network, connect a monitor to the VGA port. Alternatively, search network traffic logs for the MAC address. Alternatively, set the MAC address in the DHCP host to force the Nasuni Filer to a known IP address, then restarting. Alternatively, download the Filer Finder tool: account.nasuni.com/account/get-product/ Otherwise, connect a monitor and keyboard. Press Enter. Use username service and password service. Enter editnetwork. Enter setall static. Enter a new IP address. Enter save. Continue with step E, Logging in to the Nasuni Filer for the first time. Nasuni Filer Best Practices Guide 5.0 7

19 Installation E. 2. Installation on virtual machine (VMware or Hyper-V) For detailed installation instructions, see the Nasuni Filer Virtualization Getting Started Guide. When the Nasuni Filer console screen appears, note the initial IP address. Logging in to the Nasuni Filer for the first time Use the Username and Password that you created for administration of this Nasuni Filer. For details, see the Nasuni Filer Initial Configuration Guide. 1. Verify initial login to Nasuni Filer Use the initial IP address with a Web browser: address>:8443 If a warning appears about the site s SSL security certificate, you can ignore it. 2. When the wizard starts, configure settings for your network For details on configuring for network traffic, see Appendix D, Network Traffic, on page Enter the serial number and authorization code for this Nasuni Filer The Filer Serial Number and Authorization code are found under the Account section of For a new installation, choose an unused Filer Serial Number. To recover a prior installation, such as during disaster recovery, choose the Filer Serial Number of the prior installation. 4. Accept the Terms of Service 5. Create a Filer name 6. Create a Username (case-sensitive) and a Password (case-sensitive) for administration of the Nasuni Filer 7. The Nasuni Filer Home page appears The Home page, and all other pages of the Nasuni Filer user interface, might look different to different users. Also, different menus and actions might be available for different users. This is because different users are assigned different permissions, based on their roles in the rolebased access control system. See For each volume, configure Quality of Service rules on page If migrating a large amount of data to the Nasuni Filer, consider using Nasuni s bulk Data Migration Service See Automated Data Migration to Nasuni Filer on page 20. Nasuni Filer Best Practices Guide 5.0 8

20 Installation F. If you manage multiple Nasuni Filers, also install the Nasuni Management Console (NMC) The Nasuni Management Console allows you to manage multiple Nasuni Filers from one central application. For details, see the Nasuni Management Console Guide. Continue with configuring the Nasuni Filer at Configuration on page 10. Nasuni Filer Best Practices Guide 5.0 9

21 Chapter 3: Configuration Configuration After installation, you can use the Nasuni Filer user interface to configure the Nasuni Filer. You can configure multiple Nasuni Filers with the Nasuni Management Console (NMC). For more details, see the Nasuni Filer Users Guide and the Nasuni Management Console Guide. All documentation is available at A. For each Nasuni Filer that you are configuring, determine the following information See for a worksheet for planning configurations. Filer Description (Name): Network Configuration (for Static) Default Gateway (IP address): Search Domain: Primary DNS server (IP address): Secondary DNS server (IP address): Domain Settings (Security for Active Directory) Full Windows Domain: User Name: Workgroup: Password: Time Configuration Time Zone: Default is US/Eastern. Time Server: Default is time.nasuni.com. Settings: Default is none. Require TLS: Select / Unselect (Default is Unselected.) From name: (Default is blank.) SMTP server: (Default is blank.) SMTP port: (Default is 25.) Login (Optional.): (Default is blank.) Password (Optional.): (Default is blank.) Send to: (Default is blank.) Receive All Alerts: Select / Unselect (Default is Selected.) Tested?: Yes / No Users and Groups: Default groups are Filer Administrators and File Restore. Default user is admin. Groups: Users: Nasuni Filer Best Practices Guide

22 Configuration B. For each volume, configure Encryption Keys 1. Upload your enterprise s encryption keys It is a best practice to upload and use your enterprise s own encryption keys. Protect your encryption keys. If you ever need to perform a disaster recovery procedure, you need your encryption keys. On Nasuni Filer: Click Configuration, then select Encryption Keys. Click Upload Encryption Keys. On NMC: Click Filers, then click Encryption Keys. Click Upload Encryption Keys. 2. Download and protect encryption keys, in case you need them for disaster recovery If you are using automatically-generated encryption keys, download and protect the encryption keys. If you ever need to perform a disaster recovery procedure, you need your encryption keys. Any generated keys are also securely escrowed with Nasuni automatically. On Nasuni Filer: Click Configuration, then select Encryption Keys. Click Download Generated Keys. C. For each Nasuni Filer, configure the Time Zone and the Time Server (Network Time Protocol) D. On Nasuni Filer: Click Configuration, then select Time Configuration. You can also specify using NTP services from domain controllers: Configuration Domain Settings Show Advanced Options. On NMC: Click Filers, then click Time Configuration Settings. Select Nasuni Filers, then click Edit Filers. For each Nasuni Filer, configure Active Directory security If you are using Active Directory for security, configure Active Directory security on each Nasuni Filer. 1. To join a Nasuni Filer to its first Active Directory domain, click Configuration, then select General Settings, then click Join Domain. 2. To join a Nasuni Filer to an Active Directory domain after its first, click Configuration, then select Domain Settings. 3. To leave an Active Directory domain, click Configuration, then select Domain Settings. Nasuni Filer Best Practices Guide

23 Configuration E. For each volume, configure Quality of Service rules Quality of Service is the outgoing bandwidth limit for sending snapshots to Nasuni s cloud storage. The larger the Quality of Service, the faster incoming data is protected in cloud storage and the more cache space is made available for data. You can create up to 12 different rules that specify the Quality of Service on different days and times. When you create one or more Quality of Service rules, the default Quality of Service bandwidth becomes unlimited during any time that is not defined by a rule. If this Nasuni Filer is performing data migrations, set the Quality of Service to the maximum possible. Higher Quality of Service settings might be possible at night or on weekends, when it does not interfere with other activity. If this Nasuni Filer is managing backup data, set the Quality of Service to the maximum possible. Higher Quality of Service settings might be possible at night or on weekends, when it does not interfere with other activity. On Nasuni Filer: Click Configuration, then select Quality of Service. On NMC: Click Filers, then click Quality of Service. Select Nasuni Filers, then click Edit Filers. F. For each Nasuni Filer, configure settings On Nasuni Filer: To receive alerts by , click Configuration, then select Settings. G. For each Nasuni Filer, configure Automatic Software Updates To configure when to install automatic software updates: On Nasuni Filer: Click Configuration, then select Automatic Updates. On NMC: Click Filers, then click Automatic Updates. Select Nasuni Filers, then click Edit Filers. To prevent automatic software updates from occurring at inconvenient times, specify the days and times for automatic software updates to occur. To prevent automatic software updates entirely, deselect all days and times. To manually initiate software updates: On Nasuni Filer: Click Status, then select Updates. On NMC: Click Filers, then click Software Updates. Select Nasuni Filers, then click Update Filers. To avoid interface issues, clear your Web browser s cache after updating software. Updating the software disconnects all users currently using the Nasuni Filer. If this Nasuni Filer is a primary file server, configure automatic software updates during times that do not interfere with users. If this Nasuni Filer is a standby for disaster recovery, configure automatic software updates during times that do not interfere with users. Nasuni Filer Best Practices Guide

24 Configuration H. For each Nasuni Filer, configure Remote Support Service The opt-in Remote Support Service allows authorized Nasuni Technical Support personnel to remotely and securely diagnose and resolve issues with your Nasuni Filer. On Nasuni Filer: Click Services, then select Remote Support Service. On NMC: Click Filers, then click Remote Support. Select Nasuni Filers, then click Edit Filers. I. For each Nasuni Filer, verify the default Volume and Share When you install your first Nasuni Filer, a single default volume (named files ) with an associated CIFS shared folder is created. To view the default volume: On Nasuni Filer: Click Volumes and select from the list. On NMC: Click Volumes, then select the volume. To view the default share: On Nasuni Filer: Click Status, then select CIFS Status. On NMC: Click Filers, then click CIFS. To create a new volume, see Creating a volume. To create a new share, see Creating a new share. J. Enabling Browser-based Access to CIFS data on each volume You can access data stored in the Nasuni Filer using a Web browser. The actions you can perform depend on the capabilities of the Web browser. To enable Browser-based Access: On Nasuni Filer: Click Volumes, select the CIFS volume from the list, then click the Total Shares status. Click Edit Share for the share. Select Show Advanced Options, then select the Browser-based access check box. On NMC: Click Volumes, then click Shares. For the selected share, click Edit. K. Enabling Mobile Device Access to CIFS data (iphone, ipad, Android phones) on each volume 1. Enabling mobile access for a share On Nasuni Filer: Click Volumes, select the CIFS volume from the list, then click the Total Shares status. Click Edit Share for the share. Select Show Advanced Options, then select the Mobile Access check box. On NMC: Click Volumes, then click Shares. For the selected share, click Edit. On your mobile device, download and install the appropriate Nasuni app for your platform. Nasuni Filer Best Practices Guide

25 Configuration 2. Enabling, disabling, and deleting mobile devices On Nasuni Filer: Click Services, then select Mobile Licenses. Select devices, then select Enable, Disable, or Delete. On NMC: Click Filers, then click Mobile Licenses. Select Nasuni Filers, then click Enable, Disable, or Delete. 3. Providing initial login links to users To require VPN access, use the internal host name or IP address, and port 443. To provide direct external access, use the external hostname or IP address and port. L. Configuring SMB2 protocol on each volume Nasuni recommends the SMB2 protocol, which can improve performance. On Nasuni Filer: Click Configuration, then select General Settings. Click Show Advanced Options, then, from the Protocol Level drop-down list, select CIFS & SMB2. M. Configuring for OS X clients on each volume N. CIFS shares that have OS X clients should specify the Enhanced Support for POSIX Clients option. On Nasuni Filer: Click Configuration, then select General Settings. Click Show Advanced Options, then select the Enhanced Support for POSIX Clients check box. Configuring Snapshot Retention on each volume For compliance purposes or your own best practices, you can specify to delete older snapshots from cloud storage. When a snapshot is removed, it is permanently deleted from cloud storage and cannot be recovered. On Nasuni Filer: Click Volumes, then select the volume from the list. Click the Snapshot Retention status. On NMC: Click Volumes, then click Snapshot Retention. For the selected volumes, click Edit Volumes. O. If this Nasuni Filer is performing data migrations, disable Remote Access for the volume Disabling Remote Access reduces processing. On Nasuni Filer: Click Volumes, then select the volume from the list. Click the Remote Access setting. On NMC: Click Volumes, then click Remote Access. For the selected volumes, click Edit Volumes. Nasuni Filer Best Practices Guide

26 Configuration P. If this Nasuni Filer is performing data migrations, change the snapshot Frequency to 24 hours for the volume The strategy is to fill the cache as much as possible and as fast as possible without doing snapshot processing, then perform a snapshot with a full cache. On Nasuni Filer: Click Volumes, then select the volume from the list. Click the Snapshot Schedule setting. On NMC: Click Volumes, then click Snapshot Schedule. For the selected volumes, click Edit Volumes. Q. If this Nasuni Filer is a primary file server, change the snapshot Frequency to 10 minutes or longer for the volume Snapshots can cause performance issues. On Nasuni Filer: Click Volumes, then select the volume from the list. Click the Snapshot Schedule setting. On NMC: Click Volumes, then click Snapshot Schedule. For the selected volumes, click Edit Volumes. R. If this Nasuni Filer is performing data migrations, schedule snapshots of migration data for nights and weekends Otherwise, snapshots of migration data might delay snapshots of other volumes. On Nasuni Filer: Click Volumes, then select the volume from the list. Click the Snapshot Schedule setting. On NMC: Click Volumes, then click Snapshot Schedule. For the selected volumes, click Edit Volumes. S. If this Nasuni Filer is managing backup data, schedule snapshots for once per day at a time of minimal activity On Nasuni Filer: Click Volumes, then select the volume from the list. Click the Snapshot Schedule setting. On NMC: Click Volumes, then click Snapshot Schedule. For the selected volumes, click Edit Volumes. Nasuni Filer Best Practices Guide

27 Chapter 4: Operations Operations This section includes ongoing operations tasks you can perform using the Nasuni Filer user interface. You can manage multiple Nasuni Filers with the Nasuni Management Console (NMC). For more details on any of these topics, see the Nasuni Filer Users Guide and the Nasuni Management Console Guide. All documentation is available at A. Managing Volumes 1. Connecting to a remote volume On Nasuni Filer: Click Volumes. Click Connect to Remote Volume. Select a remote volume to connect to. On NMC: Click Volumes, then click Connect Volume. For the selected share, click Edit Connections. 2. Planning a volume See for a worksheet for planning configurations. Determine the following information to plan the features of a volume: Initial Setup (Volumes --> Add New Volume) Any time (Volumes --> select volume --> Edit Properties) Volume Name: (Can change later.) Region: Location-specific options. (Cannot change later.) Encryption Key: Default is Create New Key. (Can add and select different key later.) Volume Pinned: Default is Disabled. Enabled / Disabled Snapshot Directory Access: Default is Disabled. Enabled / Disabled Remote Access: Default is Disabled. Enabled / Disabled Nasuni Filer Best Practices Guide

28 Operations Initial Setup (Volumes --> Add New Volume) Network Protocol: Default is CIFS. CIFS / NFS / iscsi (For CIFS) Authentication mode: Active Directory/ Public (Cannot change later.) Quota (GB): Default is unlimited capacity, up to the licensed capacity. (Can change later.) Create a default Share/Export: Default is Yes. Select / Unselect (Can create shares or exports later.) Settings below for iscsi protocol only. iscsi Volume Size (GB): Maximum is 75 percent of cache size. (Cannot change later.) iscsi Allowed Hosts: Default is all hosts. (Can change later.) iscsi CHAP User Name and Password: Default is none. User Name: Password: Any time (Volumes --> select volume --> Edit Properties) Sync Schedule: Default is daily at midnight every 5 minutes. Days: Sun Mon Tue Wed Thur Fri Sat Start time: Stop time: Frequency: Auto Cache: Default is Disabled. Enabled / Disabled Snapshot Schedule: Default is daily at midnight every 5 minutes. Days: Sun Mon Tue Wed Thur Fri Sat Start time: Stop time: Frequency: Snapshot Retention: Default is All Snapshots. all snapshots / a set number of snapshots / snapshots within a given time File Alert Service: Default is Disabled. Enabled / Disabled Patterns: Antivirus Service: Default is Disabled. Enabled / Disabled Antivirus Violations: Ignore / Delete (Can change later.) On Nasuni Filer: To configure directory-specific quota notifications, click Versions, select a directory, then click Quota. Nasuni Filer Best Practices Guide

29 Operations 3. Creating a volume On Nasuni Filer: Click Volumes, then click Add New Volume. On NMC: Click Volumes, then click Create Volume. After you create a volume, download and save encryption keys: On Nasuni Filer: Click Configuration, then click Encryption Keys, then click Download Generated Keys. In trial mode, the maximum number of volumes you can have is limited to two. If applications access the Nasuni Filer directly, create an application-specific volume. If this Nasuni Filer is a standby for disaster recovery, create a shared volume that connects to the primary volume. Enable Remote Access for the primary volume, with Read-Write access for the standby Nasuni Filer. Scheduling syncs with a frequent Frequency helps to ensure that data is up to date. Enabling Auto Cache helps to ensure that data is up to date. You can schedule snapshots with an infrequent Frequency, because the standby is not responsible for ensuring that snapshots occur. Nasuni Filer Best Practices Guide

30 Operations B. Managing Shares and Exports You can create multiple CIFS shares or NFS exports for each volume. Each share or export can have different properties and permissions for different purposes and users. 1. Planning a CIFS share See for a worksheet for planning configurations. Determine the following information to plan CIFS shares: Values (Volumes -->select volume --> Total Shares --> Edit Share) Folder: Name: Share Visible?: Select / Unselect (Default is Selected.) Share Read-Only?: Select / Unselect (Default is Unselected.) All settings below are on the Advanced tab: Allowed Hosts: (Default is all.) Authentication (Active Directory security only): Authenticate all Users / Authenticate only specified Groups and Users (Default is Authenticate all Users.) Hide Unreadable Files: Select / Unselect (Default is Selected.) Enable Previous Versions: Select / Unselect (Default is Selected.) Case-Sensitive Paths: Select / Unselect (Default is Selected.) Enable Snapshot Directories: Select / Unselect (Default is Unselected.) User Folders Support (Active Directory security only): Disabled / Enabled (Default is Disabled.) Support Folder Change Notifications (Active Directory security only): Select / Unselect (Default is Selected.) Mobile Access: Select / Unselect (Default is Unselected.) Browser-based Access: Select / Unselect (Default is Unselected.) Nasuni Filer Best Practices Guide