toasters

toasters@lists.teaparty.net

13513 discussions

Odd Kahuna behaviour W/Pam
by Jeffrey Mohler 15 Apr '15

15 Apr '15

I have an HA pair, both with pam. One does NOT have PAM enabled. We have some uniquely bursty workloads at the top of every hour, and they are unusually high peaks 3 or 4 hours every day in the AM. The PAM enabled system suffers VERY High concurrency & latency on these few peaks, but the non PAM system does not. PAM hit rate is about 60%. I'm wondering if this is because these sudden user-based spike workloads are almost 0% cachable, that Kahuna takes a hit evicting an unusually high amount of blocks from PAM..and updating the in-ram hash of what's actually in PAM. When I enable PAM on controller 2, this odd concurrency/latency spike then also shows up on that head too. Thoughts? _________________________________Jeff MohlerTech Yahoo, Storage Architect, Principal(831)454-6712TW: @PrincipalYahooYM: Supra89ta

3 2

Re: Firing up an old F760...
by Jeffrey Mohler 15 Apr '15

15 Apr '15

700s done have one of those. 600's do. Ever do an NVRAM swap on one? It's surgery. :) _________________________________Jeff MohlerTech Yahoo, Storage Architect, Principal(831)454-6712TW: @PrincipalYahooYM: Supra89ta On Wednesday, April 15, 2015 10:31 AM, "Hughes, Patrick" <Patrick.Hughes(a)netapp.com> wrote: Don't forget to check the flux capacitor. ;-) Sent from my iPhone using two clumsy thumbs and sometimes my nose On Apr 15, 2015, at 11:24 AM, Steiner, Jeffrey <Jeffrey.Steiner(a)netapp.com> wrote: #yiv7465649218 #yiv7465649218 -- _filtered #yiv7465649218 {panose-1:2 4 5 3 5 4 6 3 2 4;} _filtered #yiv7465649218 {font-family:Calibri;panose-1:2 15 5 2 2 2 4 3 2 4;} _filtered #yiv7465649218 {font-family:Tahoma;panose-1:2 11 6 4 3 5 4 4 2 4;} _filtered #yiv7465649218 {}#yiv7465649218 #yiv7465649218 p.yiv7465649218MsoNormal, #yiv7465649218 li.yiv7465649218MsoNormal, #yiv7465649218 div.yiv7465649218MsoNormal {margin:0in;margin-bottom:.0001pt;font-size:12.0pt;}#yiv7465649218 a:link, #yiv7465649218 span.yiv7465649218MsoHyperlink {color:blue;text-decoration:underline;}#yiv7465649218 a:visited, #yiv7465649218 span.yiv7465649218MsoHyperlinkFollowed {color:purple;text-decoration:underline;}#yiv7465649218 span.yiv7465649218EmailStyle17 {color:#1F497D;}#yiv7465649218 .yiv7465649218MsoChpDefault {font-size:10.0pt;} _filtered #yiv7465649218 {margin:1.0in 1.0in 1.0in 1.0in;}#yiv7465649218 div.yiv7465649218WordSection1 {}#yiv7465649218 I was once at a customer doing an upgrade on a massively parallel database environment. It was about 5 racks of little 1U servers with FCP connectivity. The timeouts for FCP were set to 0, meaning if you lose one single SCSI command, just reboot. That was legit for local disk, but not SAN. Ever seen 200 servers reboot in perfect synchronization? I have. I was in the hot aisle, sandwiched between the servers and the storage system. As soon as the controller rebooted, it got very, very bright as all the LED’s on the backs of the servers lit up during self-test. Then it got very hot and loud as all the self-test progressed and all the fans spun up to maximum speed. From:toasters-bounces@teaparty.net [mailto:toasters-bounces@teaparty.net]On Behalf Of Jeffrey Mohler Sent: Wednesday, April 15, 2015 7:03 PM To: Steve Rikli Cc: toasters(a)teaparty.net Subject: Re: Firing up an old F760... Ive seen that, but at scale. Was in PS at Netapp, and I was asked to sit-in on a customer moving racks of 500s, 600s, and a few 700s from telco racks to cabinets. At the time the cabinets were 240v only. I was in another room...sit-in help as needed, I was not allowed in the DC. They made a show of 'lets hit the breakers and turn on all 11 cabinets at once'. Most of them were full of shelves with 120v only power supplies, at the time I think that was "green button" supplies. Lots of oil..lots of fire. Replaced 100+ supplies with switching ones, and all was good in the end. Them was the dayz.. _________________________________ Jeff Mohler Tech Yahoo, Storage Architect, Principal (831)454-6712 TW: @PrincipalYahoo YM: Supra89ta On Wednesday, April 15, 2015 9:51 AM, Steve Rikli <sr(a)genyosha.net> wrote: Don't stand directly behind it when you turn it on. :-) Semi-seriously though, I once had a very old original DS14 shelf p/s (the ones with the vertial bar handles) flame out at me. We'd just finished re-racking the rig, so I flipped on the breakers and moved down the row to start on the next one, when the p/s spat out a small and brief burst of smoke and spark. It wouldn't have been harmful and probably wouldn't have even left a mark, but it was still a surprise. On Wed, Apr 15, 2015 at 04:39:04PM +0000, Jeffrey Mohler wrote: > This could be fun...and old F760 with say, 4 shelves of 36G drives.. > > Replace the NVRAM battery, check power supplies for leaking capacitor oil...reseat cards and DIMMS... > > What're the odds it'll work, and any other fire-prevention steps to take??????? :) _______________________________________________ Toasters mailing list Toasters(a)teaparty.net http://www.teaparty.net/mailman/listinfo/toasters

1 0

Re: FAS8040 network configuration in CDOT
by tmac 15 Apr '15

15 Apr '15

Yeah, keep looking back at the FAS8020 for some reason...only has the four ports. Make sure you have the X6599A (the 10-GIG SFP) and not the X6596(FC SFP). For each controller: a0a should consist of e0e/e0g which should go to the same switch, if possible, different blades on the same switch and e0f/e0h which should go to the same switch, if possible, different blades on the same switch --> if you cannot split across blades, at least split across ASICs on the same blade. --tmac *Tim McCarthy* *Principal Consultant* On Thu, Apr 9, 2015 at 8:24 AM, Clark, André M. <Andre.Clark(a)redeight.com> wrote: > Each 8040/60/80 controller has 4 10GbE ports (e0a-e0d) and 4 UTA2 ports > (e0e-e0h). Ports e0a-e0d, in a cDOT configuration, are used for the > private cluster network while ports e0e-e0h are used for data > communications. No extra 10G card is needed at this time. > > > > Regards, > > > > André M. Clark <Andre.Clark(a)redeight.com> | Sr. Consulting Architect | > 917.388.8236 > > *Tell me I will forget... Show me I may remember... Involve me I WILL > UNDERSTAND!!! Start by doing what's necessary, then what's possible, and > suddenly you are doing the impossible!!!* > > *Red8*, An Insight Investments Company > > www.redeight.com > > > > *From:* toasters-bounces(a)teaparty.net [mailto: > toasters-bounces(a)teaparty.net] *On Behalf Of *tmac > *Sent:* Thursday, 9 April, 2015 06:22 > *To:* Francis Kim > *Cc:* toasters(a)teaparty.net > *Subject:* Re: FAS8040 network configuration in CDOT > > > > No that won't work. > > If you are configuring cDOT, at least two ports per controller are > reserved for the cluster network (e0a & e0c) > > This leaves e0b and e0d available for normal network access > > > > The recommended configuration is to use all four ports for the cluster > network (e0a, e0b, e0c & e0d). > > In this case, if you need/want 10gig network connections you would need an > extra 10gig card > > > > AS indicated earlier in this thread, from each controller: > > a0a should be a multimode_lacp VIF and contain: > > e0b -> switch 1 > > e0d -> switch 2 > > > > Then you can create your VLANs: a0a-123, a0a-456 > > > > Place your LIFs on the tagged VLANs > > > > Create a failover group for node-01:a0a-123 and node-02:a0a-123 > > Create a failover group for node-01:a0a-456 and node-02:a0a-456 > > > > Assign the failover group to the appropriate LIF > > > > PS: DO NOT FORGET to disable spanning tree on the switch ports. > > --> spanning tree protocol should only be enabled on ports connected to > other switches. > > --> it is not needed on ports connected to en hosts > > --> in a cluster failover event it could take an extra 45 seconds for a > port to become available.(not good) > > --> remember to use the right version of the command. if it is a trunk, > you usually need that on the line > > > > --tmac > > > > *Tim McCarthy* > > *Principal Consultant* > > > > > > > > On Wed, Apr 8, 2015 at 11:36 PM, Francis Kim <fkim(a)berkcom.com> wrote: > > You can also tie the four links into a single interface group and carve > it up into multiple VLANs. > > > > What ports are you going to use for the cluster interconnect? I assume > you're ordering a switchless cluster of two nodes? > > > > > > *Francis Kim *| Engineer > > 510-644-1599 x334 | fkim(a)berkcom.com > > > > *BerkCom* | www.berkcom.com > > NetApp | Cisco | Supermicro | Brocade | VMware > > > > On Apr 8, 2015, at 3:51 PM, Sayla, Mustafa <MSAYLA(a)mesirowfinancial.com> > wrote: > > > > We are looking to buy new FAS8040 and configure it with CDOT. I am looking > for network recommendation with Cisco 6509 VSS. 8040 has four 10G ports per > controller and I want to use all four ports to create an interface group > with two VLAN, using VLAN tagging. I want 2 ports to go to one VSS switch > and 2 ports to go to other VSS switch so I have switch redundancy also. I > am not sure if it is doable since I am going to two different switches. Any > recommendation is appreciated. > > > > Mustafa > > *Visit us on the Web at mesirowfinancial.com > <http://mesirowfinancial.com/>* > > *This communication may contain privileged and/or confidential > information. It is intended solely for the use of the addressee. If you are > not the intended recipient, you are strictly prohibited from disclosing, > copying, distributing or using any of this information. If you received > this communication in error, please contact the sender immediately and > destroy the material in its entirety, whether electronic or hard copy. > Confidential, proprietary or time-sensitive communications should not be > transmitted via the Internet, as there can be no assurance of actual or > timely delivery, receipt and/or confidentiality. This is not an offer, or > solicitation of any offer to buy or sell any security, investment or other > product.*_______________________________________________ > Toasters mailing list > Toasters(a)teaparty.net > http://www.teaparty.net/mailman/listinfo/toasters > > > > > _______________________________________________ > Toasters mailing list > Toasters(a)teaparty.net > http://www.teaparty.net/mailman/listinfo/toasters > > >

8 16

DFM LDAP auth/Linux
by Edward Rolison 14 Apr '15

14 Apr '15

I've been setting up a new instance of DFM on Linux, and have started configuring up DFM. I've finally figured out why it's not been working though - it's because the 'CN' for all our accounts contains a bracket. CN=Full Name (unixID) This leaves me in a bit of an irritating position. I can't change my account config across my active directory - at least not very easily. Can I do 'LDAP auth' via the local system somehow? I can log in to my DFM box as me, and when I add my user... it recognises the account. But it doesn't seem to allow a password auth (not unless I set a local account, which is a route that'll mean having to wrangle with security). Anyone else run into this problem or got a line of investigation? (I have a ticket open, but this feels like the sort of thing that's irritatingly difficult to 'fix' on the fly).

3 4

gfigueroa@berkcom.com
by Guadalupe Figueroa 10 Apr '15

10 Apr '15

gfigueroa(a)berkcom.com

1 0

FAS8040 network configuration in CDOT
by Sayla, Mustafa 09 Apr '15

09 Apr '15

We are looking to buy new FAS8040 and configure it with CDOT. I am looking for network recommendation with Cisco 6509 VSS. 8040 has four 10G ports per controller and I want to use all four ports to create an interface group with two VLAN, using VLAN tagging. I want 2 ports to go to one VSS switch and 2 ports to go to other VSS switch so I have switch redundancy also. I am not sure if it is doable since I am going to two different switches. Any recommendation is appreciated. Mustafa Visit us on the Web at mesirowfinancial.com This communication may contain privileged and/or confidential information. It is intended solely for the use of the addressee. If you are not the intended recipient, you are strictly prohibited from disclosing, copying, distributing or using any of this information. If you received this communication in error, please contact the sender immediately and destroy the material in its entirety, whether electronic or hard copy. Confidential, proprietary or time-sensitive communications should not be transmitted via the Internet, as there can be no assurance of actual or timely delivery, receipt and/or confidentiality. This is not an offer, or solicitation of any offer to buy or sell any security, investment or other product.

5 4

Snapvault with system shutdown and rename
by Jeff Cleverley 08 Apr '15

08 Apr '15

Greetings, We're going to be splitting data from a 7-mode cluster (7.3.7). Some data is being SM to an 8.0.2 7-mode cluster with a new name. The remaining data and the original cluster will be moved to a new location and offline for a couple of days. My questions revolve around the snapvault snapshots and relationships. A couple of years ago we replaced the cluster heads and the backup relationships broke because schedule created a new snapshot which did not match the one the secondary was looking for. We had to re-baseline a lot of data. 1. Do I need to disable the SV schedules on both primary and secondary volumes for the cluster that will be offline for a couple of days, or will it be fine and pick up where it left off when it comes back up? 2. I know I'll need to modify the existing SV relationship with the data migrating to the new cluster. Since there are no SV schedules in place on the new cluster, there shouldn't be any issues with a new SV snapshot being created before I do a snapvault start -S with the new relationship to update it. It's 1am so I'm sure I may be missing something and wanted to check. Thanks, Jeff -- Jeff Cleverley IT Engineer 4380 Ziegler Road Fort Collins, Colorado 80525 970-288-4611

2 1

DFM misbehaving - 'going sluggish' about 10m after restart
by Edward Rolison 02 Apr '15

02 Apr '15

We've a DFM (an older version) that's misbehaving. At startup we get 'Service did not reach 'started' state due to timeout'. It does actually start and we can use the web interface... but after a few minutes (10ish) it starts to get very sluggish. restarting clears it up, but only (very) temporarily. I've turned off PerfAdvisor, because I spotted some substantially large logs. Is anyone able to offer me suggestions of where else to look to troubleshoot? It looks like dbsrv10.exe is consuming all of a processor, trying to do 'something' but I have no idea what that might be. Perhaps a post restart 'tidy up'? I suspect this might be an 'open a case' situation, but I thought I'd seek some wisdom here too. Thanks, Ed.

4 4

Snapmirror relationships
by Jeff Cleverley 02 Apr '15

02 Apr '15

Greetings, We have to split a cluster and one shelf will go to one site, and the rest go to another site. The single shelf (DS4243, 2 TB SATA) comprising 2 aggregates and 11 volumes will get moved to a different NetApp. The shelf will end up on a system with new names and no aliases can be used. There are some variable moving parts so I need a sanity check. FilerA 7.3.7 - owner of the one shelf FilerB 8.1.2P4 - soon to be owner of the one shelf I've setup a snapmirror with a daily cron update that goes from FilerA to FilerB. This seems OK. If we can get the shelf owners to split the same day the other moves, I'm just going to move the shelf, change ownership, import the aggregate/volumes, create cifs shares, and update the snapvault relationship. If they insist on moving before that, I have to break the mirrors after a final sync, rename the current snapmirror destination volumes, update snapvault relationships and create cifs shares. This seems OK. Now the questions :-) 1. Are there any issues associated with this process with the OS differences or snapmirror not keeping filesystem security type, share, permissions, etc? 2. If I have to split the shelf later, I want to add it to FilerB and make that shelf the production shelf. This is a short term solution and the heads and shelves are not supported. Is there a graceful way to sync back to the DS4243 shelf? I don't want to disrupt the CIFS users very much. 3. Any other glaring issues that stand out? Thanks, Jeff -- Jeff Cleverley IT Engineer 4380 Ziegler Road Fort Collins, Colorado 80525 970-288-4611

6 7

cDOT security best practise reference?
by Martin 01 Apr '15

01 Apr '15

Hi, I've recently written a Netapp security policy for 7-mode Ontap. I used the TRs for reference: Data ONTAP Security Guidance - TR-3950 (November 2011) PCI-DSS Version 2.0 and Data ONTAP 8.1 TR-3996 (August 2012) Both of these are fairly old and not specific to cDOT. I've seen TR-4191 but that is specific to Windows File services: TR-4191 - Best Practices Guide for Clustered Data ONTAP 8.2.x Windows File Services Does anyone know of any best practise documents for cDOT whether Netapp or otherwise? Thanks Martin -- View this message in context: http://network-appliance-toasters.10978.n7.nabble.com/cDOT-security-best-pr… Sent from the Network Appliance - Toasters mailing list archive at Nabble.com.

9 13

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters