VTL and DR Series specifications
This topic describes key specifications of VTL support in QoreStor.
- Supported VTL Types — QoreStor supports two types of virtual tape libraries.
- Standard emulation of StorageTek L700 library
- Quest OEM version of the StorageTek L700 library
|
|
NOTE: The Quest type VTL is supported only with VeritasBackup Exec and Netbackup data management applications (DMAs). |
|
|
NOTE: Refer to the documentation for your specific QoreStor version, which includes DMA best practices whitepapers and the latest QoreStor Interoperability Guide, for a complete list of the supported DMAs. Visit the following site and select your specific QoreStor to download documentation: support.quest.com/qorestor. |
- Number of Tape Drives — Each tape library contains 10 tape drives of the type IBM-LTO-4 (‘ULT3580-TD4’)
- Tapes or Media Sizes— Each library initially is created with 60 slots housing 60 tape media of the default size of 800GiB, which is the equivalent of an LTO4 tape.
You can add additional tapes to the library as needed by editing the container in the GUI or by using the following CLI command:
vtl --update_carts –-name <name> –-add --no_of_tapes <number>NOTE: For more information about using the CLI, see the QoreStor Command Line Interface Reference Guide.
A library can only contain tapes of the same size. For example, if the library is originally created with 10 tapes of size 10GB, additional tapes of size 10GB can only be added.
The table below details the tape size and capacity configurations supported by each QoreStor installation type.
Table 9: Supported tape configurations per installation mode Tape Large installation Standard installation Cloud-Optimized installation Size Max number of slots supported Size Max number of slots supported Size Max number of slots supported LTO-4 800GB 2000 800GB 1000 800GB 500 LTO-4 400GB 4000 400GB 2000 400GB 1000 LTO-4 200GB 8000 200GB 4000 200GB 2000 LTO-4 100GB 10000 100GB 5000 100GB 2500 LTO-4 50GB 10000 50GB 5000 50GB 2500 LTO-4 10GB 10000 10GB 5000 10GB 2500 - Maximum Number of DMAs or Initiators Supported — A tape library can be accessed by one DMA or iSCSI initiator at a time.
NOTE: A Fibre Channel (FC) VTL container on a QoreStor system supports multiple initiators, making it possible for the VTL to be shared across multiple clients of a DMA.
Guidelines for configuring VTL
The overall steps and recommended guidelines for using and configuring a virtual tape library (VLT) with QoreStor are described below.
Plan your Environment
Determine the following before creating a container of type VTL.
- Identify the Data Management Application (DMA) that you will be using to back up data. Refer to the QoreStor Interoperability Guide for a complete list of the supported DMAs.
- For the NDMP protocol, determine the filer that will be backed up using NDMP Refer to the QoreStor Interoperability Guide for a list of the supported Filers and Operating systems.
- For the iSCSI protocol, determine the iSCSI initiator’s properties – This is the DMA IP, hostname or IQN of the software initiator on the operating system.
- For the FC protocol, determine the initiator WWPN, and create the FC switch zone and enable it. (Refer to the administrator documentation for your switch for more information.) FC zoning is required to be "single target single initiator" zoned.
NOTE: Point to point cabling is not supported (directly attaching the QoreStor system to another system rather than using a switch), and multi-pathing is not currently supported.
- Assess the estimated size of full and incremental backups and retention periods.
NOTE: The size of the full and incremental backups will determine the tape capacity size that you set. You should use a larger tape size for full backups and a smaller size for incremental backups that have smaller retention periods. Note that faster expiration periods of incremental backups residing on smaller tapes results in the release of space back to the system for future backups.
Create Containers of Type VTL
- Determine the VTL library type (NDMP, iSCSI, or FC) that you should be using as per the suggested type in the best practices guide of your preferred DMA.
Refer to the QoreStor documentation, which includes DMA best practices whitepapers for your specific QoreStor version at support.quest.com/qorestor.
- When creating the container in the GUI or by using the CLI, you will need to set the connection type of either NDMP, iSCSI, or FC. You need to provide either the DMA IP/hostname for NDMP, the IP/hostname or IQN for an iSCSI connection type, or the initiator WWPN for FC.
Refer to the topics, Creating Storage Containers and Creating a VTL Type Container, for detailed instructions about creating containers. Refer to the QoreStor Command Line Interface Guide for details about the CLI commands for creating containers.
Authentication/User Management Considerations
- You can use the following commands to view user information for the iSCSI user: iscsi_user, and NDMP user: ndmp_user.
iscsi --showndmp --show
Refer to the QoreStor Command Line Reference Guide for more details about using these commands.
- For iSCSI, you need to set the system-wide CHAP account for the QoreStor system. You can add this user on the Users page in the QoreStor GUI. See the topic, Adding a User, for instructions for adding an iSCSI user and password.
- For NDMP, you can set the password for ndmp_user by using the Users page in the QoreStor GUI. These credentials are needed for configuring the NDMP-VTL in the DMA. See the topic, Adding a User, for instructions for adding an NDMP user and password.
Verify the Tape Library Creation
You can easily check that the library has been created and is available for use by using the following commands.
- Check the container properties by executing the following command:
container --show –verbose- Upon initial addition of the connection, the NDMP/iSCSI connection status shows as ‘Added”. At this time, the library is not officially created.
- After a few minutes, the NDMP/iSCSI connection status changes to “Available” . This status indicates that the library is online, and the tape drives and media is available for usage.
- To check the status of the virtual tape library and all the tapes in the library, you can execute one of the following commands:
vtl –showvtl --show --name <container_name> --verbose
Configure the Library in the DMA
See the QoreStor documentation, which includes DMA best practices whitepapers for your specific QoreStor version at:
support.quest.com/qorestor.Configuring and Using Encryption at Rest
This chapter introduces the concept of Encryption at Rest as used by QoreStor as well as related concepts and tasks.
|
|
NOTE: Due to export regulations, the encryption at rest feature is not available in certain markets, and, therefore, may not be available in your locale. |
Understanding Encryption at Rest
Data that resides in QoreStor can be encrypted. When encryption is enabled, QoreStor uses the Industry standard FIPS 140-2 compliant 256-bit Advanced Encryption Standard (AES) encryption algorithm for encrypting and decrypting user data. The content encryption key is managed by the key manager, which operates in either a Static mode or an Internal mode. In Static mode, a global, fixed key is used to encrypt all data. In internal mode, key lifecycle management is performed in which the keys are periodically rotated. The minimum key rotation period before the content encryption key can be rotated and a new key is generated is 7 days. This rotation period is user-configurable and can be specified in days.
A user-defined passphrase is used to generate a pass phrase key, which is used to encrypt the content encryption keys. It is mandatory to define a passphrase to enable encryption. The system supports up to a limit of 1023 different content encryption keys. All streams of a data-store are encrypted or re-encrypted with the same content encryption key. QoreStor statistics report the amount of data encrypted and decrypted bytes consistently.