Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Cloud

10/22/2008
11:29 AM
George Crump
George Crump
Commentary
50%
50%

Clustered NAS In The Cloud

It seems that nowhere is the use of clustered NAS going to be more prevalent than in the cloud. They seem tailor made for each other because cloud-based services have the need for massive scaling and moderate performance while being very cost effective. Clustered NAS solutions seem to fill that bill.

It seems that nowhere is the use of clustered NAS going to be more prevalent than in the cloud. They seem tailor made for each other because cloud-based services have the need for massive scaling and moderate performance while being very cost effective. Clustered NAS solutions seem to fill that bill.Interestingly, a difference between local and cloud-based network-attached storage systems is the requirement on local NAS systems for CIFS and NFS protocol support. This isn't the case with cloud-based storage. While more and more cloud service providers are adding NFS and CIFS support, the protocols aren't considered ideal for the bandwidth-sensitive Internet. These protocols give way to HTTP, FTP, or webdev, for example.

There have been interesting solutions to resolve the gap between NFS/CIFS and the reality of the Internet. Nirvanix, for example, has rolled out a NFS/CIFS gateway that is installed at the local data center and acts as a protocol converter to its cloud storage service. Other than some support concerns about local hardware, this provides the user with a more familiar transfer protocol interface while providing transfer efficiency that a cloud storage service desires because of the thinner bandwidth and latency of the Internet.

The cloud storage providers have a key decision to make as it relates to clustered NAS, and the jury seems to be out on the best approach. Do you develop the technology in-house or use current technology? Amazon and Nirvanix are examples of companies that are leveraging their own IP and then offering a turnkey service. Other companies, such as Cleversafe or ParaScale, are providing the clustered NAS technology to infrastructure providers or even standalone organizations to create a private cloud. This allows these types of companies to focus on their core competencies and add value in other ways, not having to re-invent the storage wheel.

The distributed nature of the cloud services also plays into the hands of clustered NAS quite well, since most of these solutions have replication built into the OS. Replication isn't an add-on like in traditional storage; the capability is basically a part of the operating system itself. Clouds need this distribution of data for both protection of that data in the event of a site failure or in the distribution of that data for streaming applications. For example, if you had a movie posted to the Internet, it could be streamed from the closest, least-busy set of nodes.

In the next entry we will dive a little deeper into the performance and scale differences between tightly coupled clusters and loosely coupled clusters and how those differences might determine what type of solution you select for clustered storage, be it local or cloud.

Be sure to register for our upcoming webinar, Demystifying Primary Storage Data Reduction.

Track us on Twitter: http://twitter.com/storageswiss.

Subscribe to our RSS feed.

George Crump is founder of Storage Switzerland, an analyst firm focused on the virtualization and storage marketplaces. It provides strategic consulting and analysis to storage users, suppliers, and integrators. An industry veteran of more than 25 years, Crump has held engineering and sales positions at various IT industry manufacturers and integrators. Prior to Storage Switzerland, he was CTO at one of the nation's largest integrators.

Comment  | 
Print  | 
More Insights
Comments
Threaded  |  Newest First  |  Oldest First
NSA Appoints Rob Joyce as Cyber Director
Dark Reading Staff 1/15/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win an Amazon Gift Card! Click Here
Latest Comment: Hunny, I looked every where for the dorritos. 
Current Issue
2020: The Year in Security
Download this Tech Digest for a look at the biggest security stories that - so far - have shaped a very strange and stressful year.
Flash Poll
Assessing Cybersecurity Risk in Today's Enterprises
Assessing Cybersecurity Risk in Today's Enterprises
COVID-19 has created a new IT paradigm in the enterprise -- and a new level of cybersecurity risk. This report offers a look at how enterprises are assessing and managing cyber-risk under the new normal.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-8567
PUBLISHED: 2021-01-21
Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to v0.2.0 allow an attacker who can create specially-crafted SecretProviderClass objects to write to arbitrary file paths on the host filesystem, including /var/lib/kubelet/pods.
CVE-2020-8568
PUBLISHED: 2021-01-21
Kubernetes Secrets Store CSI Driver versions v0.0.15 and v0.0.16 allow an attacker who can modify a SecretProviderClassPodStatus/Status resource the ability to write content to the host filesystem and sync file contents to Kubernetes Secrets. This includes paths under var/lib/kubelet/pods that conta...
CVE-2020-8569
PUBLISHED: 2021-01-21
Kubernetes CSI snapshot-controller prior to v2.1.3 and v3.0.2 could panic when processing a VolumeSnapshot custom resource when: - The VolumeSnapshot referenced a non-existing PersistentVolumeClaim and the VolumeSnapshot did not reference any VolumeSnapshotClass. - The snapshot-controller crashes, ...
CVE-2020-8570
PUBLISHED: 2021-01-21
Kubernetes Java client libraries in version 10.0.0 and versions prior to 9.0.1 allow writes to paths outside of the current directory when copying multiple files from a remote pod which sends a maliciously crafted archive. This can potentially overwrite any files on the system of the process executi...
CVE-2020-8554
PUBLISHED: 2021-01-21
Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.externalIPs field, to intercept traffic to that IP address. Additionally, an attacker who is able to patch the status (which is considered a privileged operation and should not typicall...