Mucking about with OpenFiler

| 3 Comments
I've been playing around with OpenFiler the last week. It seems to fit our need for a free-to-us software package that allows us to serve both CIFS and iSCSI from the same host, in an easy to manage package. I haven't done much serious testing with it, but I have done enough to get a feel for how it works.

One thing is pretty clear, if we domain this thing certain UI elements become unusable due to timeouts building the page. Because we have so many groups in our AD tree, and the fact that it has to list every single group in the system in one big pick-list on the Share Permission screen, that page takes a very very long time to load. Long enough that it won't show the network-based permissions dialog at the bottom of the page, and is critical for enabling CIFS sharing in the first place. Unless I can find a tweak somewhere, that's a pretty serious road-block for CIFSiness.

iSCSI, on the other hand, just flies like a dream. I haven't had a chance to try out real complexity with it, I lack enough servers with GigE NICs capable of an MTU larger than 1500b that can be used for testing, so I can't say how robust it is. But I can say that I can saturate the GigE NIC in the OpenFiler box.

This does suggest a solution, though. We'll need another (%!#$!) server, upon which we'll install a Winders of some flavor and use an iSCSI presentation for the storage. Or, if we feel like we need more hand-holding in our lives, a Linux box of some flavor and hand-roll the Samba config needed.

This thing can also do NFS, but we have limited demand for that. The same for 1980's style FTP. There is also a WebDAV option, but I shiver at the notion of turning that on; the WebDAV setup in our existing file-cluster has already caused enough hair loss thank you.

It can also do snapshots. Since this thing is Linux based, these are LVM-level snapshots. That could be useful.

File-systems are restricted to Ext3 and XFS, which is good to a point. These are not the filesystems you want for multi-million-file shares. However, if all you want is bulk storage for disk images, they're just peachy. Or a departmental share space (hundreds of thousands of files). Neither of these are terribly great at handling the "bajillion files in one directory" problem, but we have few of those as it is.

But if we can't figure out a way to make the CIFS sharing useful, file-system choice is mostly moot.

Anyway, more testing!

3 Comments

You don't need jumbo mtu to do iscsi properly. That's a common misconception. You might need jumbo (or more properly, 9216 or 9000) mtu to get the final percentage of performance or if the cpu is stuck at a high load.

Equally important is to make sure you've got flow control from the initiator to the target and to disable unicast storm control on the affected ports.

If you don't mind my advice, forget all the protocols it offers except for iSCSI.

One of the secrets to my success with Openfiler has been using it as a back-end iSCSI SAN provider. If you get a couple of them in tandem, it is practically unbeatable for cost/value (I mean hardware too).

In regard to iSCSI performance, it stands up to everything I throw at it. But the best thing of all is the ability to use it as a back end in a VM environment, *and* use the iSCSI snapshots for re-offering the snapshot as an alternate iSCSI target for full backups. Awesome!

By the way... I would not touch the domain integration with a 10 foot pole...

;)