News
1/4/2010
10:48 AM
George Crump
George Crump
Commentary
50%
50%

Four Tiers For The New Decade

The storage component is changing, becoming either dramatically faster with Solid State Disk (SSD) technology or fundamentally more cost effective thanks to capacity-efficient disk archiving or overhead-efficient cloud storage. In addition all current storage will still need to be managed. A four-tier storage strategy will allow storage managers to develop a storage environment that is both cost efficient and meets increasing performance demands.

The storage component is changing, becoming either dramatically faster with Solid State Disk (SSD) technology or fundamentally more cost effective thanks to capacity-efficient disk archiving or overhead-efficient cloud storage. In addition all current storage will still need to be managed. A four-tier storage strategy will allow storage managers to develop a storage environment that is both cost efficient and meets increasing performance demands.Ironically the last decade kicked off with the coming of SATA drive technology and the idea of tiered storage and, dare I say it, ILM (Information Lifecycle Management). While the initiatives had merit, part of what doomed them to failure was a lack of need by IT. Now however things have changed. The rapid growth of unstructured data (data not in a database) in most organizations in requiring longer and more managed retention. At the same time database applications as well as applications with incredibly high user counts thanks to web 2.0 are causing performance problems. Finally the unabated rollout of server virtualization is moving operating system data to the SAN or NAS to leverage the flexibility that a virtualized server environment can bring.

As I mentioned earlier there is also a more dramatic difference in the tiers of storage available now. SSD is exponentially faster but also somewhat more expensive. If the investment is made in SSD you want to make sure the right data is on that tier for the right amount of time; while it is immediately active. At the other end of the spectrum is archive storage designed to be cost effective, scalable, capacity optimized and power efficient. Finally cloud storage as an archive has a role to play as possibly the even longer term or permanent resting ground for data. Somewhere in the middle of SSD and Archive are traditional SAS based mechanical drives that will store near-active data or, as we discuss in our Visual SSD Readiness Guide, data from applications that can't benefit from SSD's speed.

With four tiers of storage available to the storage manager that each have their own justifiable differentiations, the missing ingredient is how to decide which set of data should go where? Should this be a manual process or is this something that should be automated? Over the next several entries we will examine some of the options available to storage managers and how they might help them develop a four tier storage strategy that maximizes cost, performance and reliability.

Track us on Twitter: http://twitter.com/storageswiss

Subscribe to our RSS feed.

George Crump is lead analyst of Storage Switzerland, an IT analyst firm focused on the storage and virtualization segments. Find Storage Switzerland's disclosure statement here.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Flash Poll
10 Recommendations for Outsourcing Security
10 Recommendations for Outsourcing Security
Enterprises today have a wide range of third-party options to help improve their defenses, including MSSPs, auditing and penetration testing, and DDoS protection. But are there situations in which a service provider might actually increase risk?
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2015-5084
Published: 2015-08-02
The Siemens SIMATIC WinCC Sm@rtClient and Sm@rtClient Lite applications before 01.00.01.00 for Android do not properly store passwords, which allows physically approximate attackers to obtain sensitive information via unspecified vectors.

CVE-2015-5352
Published: 2015-08-02
The x11_open_helper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted mode is not used, lacks a check of the refusal deadline for X connections, which makes it easier for remote attackers to bypass intended access restrictions via a connection outside of the permitted time ...

CVE-2015-5537
Published: 2015-08-02
The SSL layer of the HTTPS service in Siemens RuggedCom ROS before 4.2.0 and ROX II does not properly implement CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a different vulnerability than CVE-2014-3566.

CVE-2015-5600
Published: 2015-08-02
The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumptio...

CVE-2015-1009
Published: 2015-07-31
Schneider Electric InduSoft Web Studio before 7.1.3.5 Patch 5 and Wonderware InTouch Machine Edition through 7.1 SP3 Patch 4 use cleartext for project-window password storage, which allows local users to obtain sensitive information by reading a file.

Dark Reading Radio
Archived Dark Reading Radio
What’s the future of the venerable firewall? We’ve invited two security industry leaders to make their case: Join us and bring your questions and opinions!