Granite Core and Edge Appliance Deployment Guide December 2014

156 Pages·2014·5.69 MB·English

Granite™ Core and Edge Appliance
Deployment Guide
Version 3.6
December 2014
© 2014 Riverbed Technology, Inc. All rights reserved.
Riverbed®, SteelApp™, SteelCentral™, SteelFusion™, SteelHead™, SteelScript™, SteelStore™, SteelHead®, Cloud Steelhead®,
SteelHead (virtual edition)®, Granite™, Interceptor®, SteelApp product family™, Whitewater®, SteelStore OS™, RiOS®, Think
Fast®, AirPcap®, BlockStream™, FlyScript™, SkipWare®, TrafficScript®, TurboCap®, WinPcap®, Mazu®, OPNET®, and
SteelCentral® are all trademarks or registered trademarks of Riverbed Technology, Inc. (Riverbed) in the United States and other
countries. Riverbed and any Riverbed product or service name or logo used herein are trademarks of Riverbed. All other
trademarks used herein belong to their respective owners. The trademarks and logos displayed herein cannot be used without the
prior written consent of Riverbed or their respective owners.
Akamai® and the Akamai wave logo are registered trademarks of Akamai Technologies, Inc. SureRoute is a service mark of
Akamai. Apple and Mac are registered trademarks of Apple, Incorporated in the United States and in other countries. Cisco is a
registered trademark of Cisco Systems, Inc. and its affiliates in the United States and in other countries. EMC, Symmetrix, and
SRDF are registered trademarks of EMC Corporation and its affiliates in the United States and in other countries. IBM, iSeries, and
AS/400 are registered trademarks of IBM Corporation and its affiliates in the United States and in other countries. Juniper
Networks and Junos are registered trademarks of Juniper Networks, Incorporated in the United States and other countries. Linux
is a trademark of Linus Torvalds in the United States and in other countries. Microsoft, Windows, Vista, Outlook, and Internet
Explorer are trademarks or registered trademarks of Microsoft Corporation in the United States and in other countries. Oracle and
JInitiator are trademarks or registered trademarks of Oracle Corporation in the United States and in other countries. UNIX is a
registered trademark in the United States and in other countries, exclusively licensed through X/Open Company, Ltd. VMware,
ESX, ESXi are trademarks or registered trademarks of VMware, Inc. in the United States and in other countries.
This product includes Windows Azure Linux Agent developed by the Microsoft Corporation (http://www.microsoft.com/).
Copyright 2012 Microsoft Corporation.
This product includes software developed by the University of California, Berkeley (and its contributors), EMC, and Comtech
AHA Corporation. This product is derived from the RSA Data Security, Inc. MD5 Message-Digest Algorithm.
The SteelHead (virtual edition) Mobile Controller includes VMware Tools. Portions Copyright © 1998-2013 VMware, Inc. All
Rights Reserved.
NetApp Manageability Software Development Kit (NM SDK), including any third-party software available for review with such
SDK which can be found at http://communities.netapp.com/docs/DOC-1152, and are included in a NOTICES file included
within the downloaded files.
For a list of open source software (including libraries) used in the development of this software along with associated copyright
and license agreements, see the Riverbed Support site at https//support.riverbed.com.
This documentation is furnished “AS IS” and is subject to change without notice and should not be construed as a commitment
by Riverbed. This documentation may not be copied, modified or distributed without the express authorization of Riverbed and
may be used only in connection with Riverbed products and services. Use, duplication, reproduction, release, modification,
disclosure or transfer of this documentation is restricted in accordance with the Federal Acquisition Regulations as applied to
civilian agencies and the Defense Federal Acquisition Regulation Supplement as applied to military agencies. This documentation
qualifies as “commercial computer software documentation” and any use by the government shall be governed solely by these
terms. All other use is prohibited. Riverbed assumes no responsibility or liability for any errors or inaccuracies that may appear
in this documentation.
Riverbed Technology
680 Folsom Street
San Francisco, CA 94107
Phone: [phone]
Fax: [phone] Part Number
Web: http://www.riverbed.com 712-00079-06
Contents
Preface.........................................................................................................................................................1
About This Guide..........................................................................................................................................1
Audience..................................................................................................................................................2
Document Conventions.........................................................................................................................2
Documentation and Release Notes.............................................................................................................2
Contacting Riverbed......................................................................................................................................3
What Is New...................................................................................................................................................3
Chapter 1 - Overview of Granite Core and Granite Edge as a System..................................................5
Introducing Branch Converged Infrastructure..........................................................................................5
How the Granite Product Family Works....................................................................................................6
System Components and Their Roles.........................................................................................................7
Chapter 2 - Deploying Granite Core and Granite Edge as a System.....................................................9
The Granite Family Deployment Process...................................................................................................9
Provisioning LUNs on the Storage Array...........................................................................................9
Installing the Granite Appliances......................................................................................................10
LUN Pinning and Prepopulation in the Granite Core....................................................................11
Configuring Snapshot and Data Protection Functionality.............................................................11
Managing vSphere Datastores on LUNs Presented by Granite Core...........................................12
Single-Appliance Versus High-Availability Deployments....................................................................12
Single-Appliance Deployment............................................................................................................13
High-Availability Deployment...........................................................................................................13
Connecting Granite Core with Granite Edge...........................................................................................14
Prerequisites..........................................................................................................................................14
Process Overview: Connecting the Granite Product Family Components..................................14
Adding Granite Edges to the Granite Core Configuration............................................................16
Configuring Granite Edge...................................................................................................................16
Mapping LUNs to Granite Edges.......................................................................................................16
Riverbed Turbo Boot....................................................................................................................................18
Granite Core and Edge Appliance Deployment Guide iii
Contents

Chapter 3 - Deploying the Granite Core Appliance...............................................................................21
Prerequisites.................................................................................................................................................21
Interface and Port Configuration..............................................................................................................22
Granite Core Ports................................................................................................................................22
Configuring Interface Routing...........................................................................................................23
Configuring Granite Core for Jumbo Frames...................................................................................26
Configuring the iSCSI Initiator..................................................................................................................27
Configuring LUNs.......................................................................................................................................27
Exposing LUNs.....................................................................................................................................28
Configuring Fibre Channel LUNs......................................................................................................28
Removing a LUN from a Granite Core Configuration....................................................................28
Configuring Redundant Connectivity with MPIO.................................................................................29
MPIO in Granite Core..........................................................................................................................29
Configuring Granite Core MPIO Interfaces......................................................................................29
Granite Core Pool Management................................................................................................................30
Overview of Granite Core Pool Management..................................................................................30
Pool Management Architecture..........................................................................................................31
Configuring Pool Management..........................................................................................................31
Changing Pool Management Structure.............................................................................................34
High Availability in Pool Management.............................................................................................35
Chapter 4 - Granite and Fibre Channel...................................................................................................37
Overview of Fibre Channel........................................................................................................................37
Fibre Channel LUN Considerations..................................................................................................39
How VMware ESXi Virtualizes Fibre Channel LUNs.....................................................................39
How Core VE Connects to RDM Fibre Channel LUNs...................................................................41
Requirements for Core VE and Fibre Channel SANs......................................................................42
Specifics About Fibre Channel LUNs Versus iSCSI LUNs.............................................................42
Deploying Fibre Channel LUNs on Core VEs.........................................................................................43
Deployment Prerequisites...................................................................................................................43
Configuring Fibre Channel LUNs......................................................................................................43
Configuring Fibre Channel LUNs in a Core VE HA Scenario..............................................................46
The ESXi Servers Hosting the Core VEs Are Managed by vCenter..............................................47
The ESXi Servers Hosting the Core VEs Are Not Managed by vCenter......................................49
Populating Fibre Channel LUNs...............................................................................................................49
Best Practices and Recommendations.......................................................................................................50
Best Practices.........................................................................................................................................51
Recommendations................................................................................................................................51
Troubleshooting...........................................................................................................................................52
Chapter 5 - Configuring the Granite Edge..............................................................................................55
Interface and Port Configurations.............................................................................................................55
Granite Edge Ports................................................................................................................................56
Configuring Granite Edge for Jumbo Frames..................................................................................57
iv Granite Core and Edge Appliance Deployment Guide
Contents

Configuring iSCSI Initiator Timeouts................................................................................................58
Granite Edge Storage Specifications.........................................................................................................58
Configuring Disk Management.................................................................................................................59
Configuring Granite Storage......................................................................................................................59
MPIO in Granite Edge.................................................................................................................................60
Chapter 6 - Granite Appliance High-Availability Deployment..............................................................61
Overview of Storage Availability..............................................................................................................61
Granite Core High Availability..................................................................................................................62
Granite Core with MPIO.....................................................................................................................62
Granite Core HA Concepts.................................................................................................................63
Configuring HA for Granite Core......................................................................................................64
Granite Edge High Availability.................................................................................................................73
Using the Correct Interfaces for Granite Edge Deployment..........................................................74
Choosing the Correct Cables...............................................................................................................76
Overview of Granite Edge HA...........................................................................................................77
Granite Edge HA Peer Communication............................................................................................80
Configuring WAN Redundancy................................................................................................................81
Configuring WAN Redundancy with No Granite Core HA..........................................................81
Configuring WAN Redundancy in an HA Environment...............................................................83
Chapter 7 - Snapshots and Data Protection...........................................................................................85
Setting Up Application-Consistent Snapshots........................................................................................85
Configuring Snapshots for LUNs..............................................................................................................86
Volume Snapshot Service Support............................................................................................................87
Implementing Riverbed Host Tools for Snapshot Support..................................................................87
Overview of RHSP and VSS................................................................................................................88
Riverbed Host Tools Operation and Configuration........................................................................88
Configuring the Proxy Host for Backup...................................................................................................89
Configuring the Storage Array for Proxy Backup..................................................................................89
Data Protection.............................................................................................................................................90
Data Recovery..............................................................................................................................................91
Branch Recovery..........................................................................................................................................92
Overview of Branch Recovery............................................................................................................92
How Branch Recovery Works.............................................................................................................93
Branch Recovery Configuration.........................................................................................................93
Branch Recovery CLI Configuration Example.................................................................................94
Chapter 8 - Security and Data Resilience...............................................................................................97
Recovering a Single Granite Core..............................................................................................................97
Recovering a Single Physical Granite Core.......................................................................................97
Granite Core and Edge Appliance Deployment Guide v
Contents

Recovering a Single Core VE..............................................................................................................98
Granite Edge Replacement.........................................................................................................................99
Disaster Recovery Scenarios.....................................................................................................................100
Granite Appliance Failure—Failover...............................................................................................100
Granite Appliance Failure—Failback..............................................................................................101
Best Practice for LUN Snapshot Rollback..............................................................................................103
At-Rest and In-Flight Data Security........................................................................................................104
Enable Data At-Rest Block Store Encryption..................................................................................104
Enable Data In-Flight Secure Peering Encryption.........................................................................106
Chapter 9 - Granite Appliance Upgrade...............................................................................................107
Planning Software Upgrades...................................................................................................................107
Upgrade Sequence.....................................................................................................................................108
Minimize Risk During Upgrading..........................................................................................................108
Performing the Upgrade...........................................................................................................................109
Granite Edge Upgrade.......................................................................................................................109
Granite Core Upgrade........................................................................................................................109
Chapter 10 - Network Quality of Service..............................................................................................111
Rdisk Protocol Overview..........................................................................................................................111
QoS for Granite Replication Traffic.........................................................................................................113
QoS for LUNs.............................................................................................................................................113
QoS for Unpinned LUNs...................................................................................................................113
QoS for Pinned LUNs........................................................................................................................113
QoS for Branch Offices..............................................................................................................................113
QoS for Branch Offices That Mainly Read Data from the Data Center......................................114
QoS for Branch Offices Booting Virtual Machines from the Data Center..................................114
Time-Based QoS Rules Example..............................................................................................................114
Chapter 11 - Deployment Best Practices..............................................................................................115
Granite Edge Best Practices......................................................................................................................115
Segregate Traffic..................................................................................................................................116
Pin the LUN and Prepopulate the Block Store...............................................................................116
Segregate Data onto Multiple LUNs................................................................................................116
Ports and Type of Traffic....................................................................................................................116
Changing IP Addresses on Granite Edge, ESXi Host, and Servers.............................................117
Configure Disk Management............................................................................................................118
Rdisk Traffic Routing Options..........................................................................................................118
Deploying Granite with Third-Party Traffic Optimization..........................................................119
Windows and ESX Server Storage Layout—Granite-Protected LUNs Versus Local LUNs....119
VMFS Datastores Deployment on Granite LUNs..........................................................................123
Enable Windows Persistent Bindings for Mounted iSCSI LUNs................................................124
Set Up Memory Reservation for VMs Running on VMware ESXi in the VSP..........................125
vi Granite Core and Edge Appliance Deployment Guide
Contents

Boot from an Unpinned iSCSI LUN.................................................................................................126
Running Antivirus Software.............................................................................................................126
Running Disk Defragmentation Software.......................................................................................126
Running Backup Software.................................................................................................................126
Configure Jumbo Frames...................................................................................................................127
Granite Core Best Practices......................................................................................................................127
Deploy on Gigabit Ethernet Networks............................................................................................127
Use Challenge Handshake Authentication Protocol.....................................................................127
Configure Initiators and Storage Groups or LUN Masking.........................................................127
Granite Core Hostname and IP Address.........................................................................................128
Segregate Storage Traffic from Management Traffic.....................................................................128
When to PIN and Prepopulate the LUN.........................................................................................128
Granite Core Configuration Export.................................................................................................129
Granite Core in HA Configuration Replacement..........................................................................129
iSCSI Initiators Timeouts..........................................................................................................................129
Microsoft iSCSI Initiator Timeouts...................................................................................................129
ESX iSCSI Initiator Timeouts............................................................................................................130
Operating System Patching......................................................................................................................130
Patching at the Branch Office for Virtual Servers Installed on iSCSI LUNs..............................130
Patching at the Data Center for Virtual Servers Installed on iSCSI LUNs.................................130
Chapter 12 - Granite Appliance Sizing.................................................................................................133
General Sizing Considerations.................................................................................................................133
Granite Core Sizing Guidelines...............................................................................................................134
Granite Edge Sizing Guidelines...............................................................................................................135
Appendix A - Granite Edge Network Reference Architecture............................................................137
Converting In-Path Interfaces to Data Interfaces..................................................................................137
Multiple VLAN Branch with Four-Port Data NIC................................................................................139
Single VLAN Branch with Four-Port Data NIC....................................................................................141
Multiple VLAN Branch Without Four-Port Data NIC.........................................................................143
Granite Core and Edge Appliance Deployment Guide vii
Contents

viii Granite Core and Edge Appliance Deployment Guide
Preface
Welcome to the Granite Core and Edge Appliance Deployment Guide. Read this preface for an overview of the
information provided in this guide and the documentation conventions used throughout, hardware and
software dependencies, additional reading, and contact information. This preface includes the following
sections:
 “About This Guide” on page 1
 “Documentation and Release Notes” on page 2
 “Contacting Riverbed” on page 3
 “What Is New” on page 3
About This Guide
The Granite Core and Edge Appliance Deployment Guide provides an overview of the Granite Core and Granite
Edge appliances and shows you how to install and configure them as a system.
Riverbed products names have changed. At the time of publication, the user interfaces of the products
described in this guide may have not changed, and the original names may be used in the text. For the
product naming key, see http://www.riverbed.com/products/#Product_List.
Note: This documents uses the old product name of Granite instead of SteelFusion in the Management Console, the
diagrams, and the text.
This guide includes information relevant to the following products:
 Riverbed Granite product family (Granite appliances or Granite)
 Riverbed Granite Core appliance (Granite Core)
 Riverbed Granite Core Virtual Edition (Core VE)
 Riverbed Granite Edge appliance (Granite Edge)
 Riverbed Optimization System (RiOS)
 Riverbed SteelHead EX (SteelHead EX)
 Riverbed SteelHead (SteelHead)
Granite Core and Edge Appliance Deployment Guide 1
Preface Documentation and Release Notes

 Riverbed SteelCentral Controller for SteelHead (SCC or Controller)
 Riverbed Virtual Services Platform (VSP)
This guide is intended to be used together with all the documentation and technical notes available at
https://support.riverbed.com.
Audience
This guide is written for storage and network administrators familiar with administering and managing
storage arrays, snapshots, backups, and VMs, and Fibre Channel and iSCSI.
This guide requires you to be familiar with virtualization technology, the Granite Core Management Console
User’s Guide, the Riverbed Command-Line Interface Reference Manual, the Riverbed Granite Core Command-Line
Interface Reference Manual, and the SteelHead Management Console User’s Guide.
Document Conventions
This guide uses the following standard set of typographical conventions.
Convention Meaning
italics Within text, new terms, emphasized words, and REST API URIs appear in italic typeface.
boldface Within text, CLI commands, CLI parameters, and REST API properties appear in bold
typeface.
Courier Code examples appears in Courier font:
amnesiac > enable
amnesiac # configure terminal
< > Values that you specify appear in angle brackets: interface <ipaddress>
[ ] Optional keywords or variables appear in brackets: ntp peer <addr> [version <number>]
{ } Required keywords or variables appear in braces: {delete <filename>}
| The pipe symbol represents a choice to select one keyword or variable to the left or right of
the symbol. The keyword or variable can be either optional or required: {delete <filename> |
upload <filename>}
Documentation and Release Notes
To obtain the most current version of all Riverbed documentation, go to the Riverbed Support site at
https://support.riverbed.com.
If you need more information, see the Riverbed Knowledge Base for any known issues, how-to documents,
system requirements, and common error messages. You can browse titles or search for keywords and
strings. To access the Riverbed Knowledge Base, log in to the Riverbed Support site at
https://support.riverbed.com.
Each software release includes release notes. The release notes identify new features in the software as well
as known and fixed problems. To obtain the most current version of the release notes, go to the Software
and Documentation section of the Riverbed Support site at https://support.riverbed.com.
2 Granite Core and Edge Appliance Deployment Guide