Difference between revisions of "LeftHand Networks NSM 100"
Jump to navigation
Jump to search
m (→bonus points?) |
|||
Line 19: | Line 19: | ||
** hard drive encryption |
** hard drive encryption |
||
** hard drive encryption keys stored off the device |
** hard drive encryption keys stored off the device |
||
− | ** IPSEC |
+ | ** IPSEC security for the IP layer between the NFS server and its clients |
** turn on Kerberos support (krb5i ensures data integrity, krb5p provides data privacy as well) |
** turn on Kerberos support (krb5i ensures data integrity, krb5p provides data privacy as well) |
||
* No single points of failure for physical drives |
* No single points of failure for physical drives |
Revision as of 16:55, 19 January 2015
LeftHand Networks (LHN) was a Boulder, Colorado based vendor of iSCSI storage appliances. The company has been bought by Hewlett-Packard. I have an NSM100, their first generation product at home. I don't do much iSCSI, though, so let's see if we can make this a little bit more useful for me.
Hardware description
- 1U rackmount chassis
- 4 hot swap 3.5 inch drive carriers in the front
- Dual 200 Watt power supplies (There is a selector switch at the back of the chassis to choose which power supply is feeding power. It appears a power failure is not handled transparently.)
- A small form-factor Wintel system board with onboard Ethernet
- A PCI slot holding a 1000baseT Ethernet card (the cutout on the back of the case is quite non-standard, though)
Platform limitations
- decade old CPU and motherboard
- Parallel ATA (IDE) hard drives are used.
- Not a lot of RAM inside
- 1 100baseT port for management and a single 1000baseT port for data traffic (some gentle use of a Dremel tool or file should make this better)
Desired end state
- NFS storage service. With 4 320Gbyte IDE drives in a RAID6 or ZFS + RAIDZ2, approximately 0.5 Tbytes of usable space should be available.
- As many layers of security as feasible:
- hard drive encryption
- hard drive encryption keys stored off the device
- IPSEC security for the IP layer between the NFS server and its clients
- turn on Kerberos support (krb5i ensures data integrity, krb5p provides data privacy as well)
- No single points of failure for physical drives
bonus points?
- second NIC for storage traffic?
- iSCSI option
- CIFS/SMB option
- faster IO than a USB (2.0) attached hard drive