Hi, I'm due for a hardware refresh of my backup targets. I'm currently using Dell MD arrays connected to a VMWare host that runs a Veeam proxy. I am considering changing things up a bit and switching to a Hardened Linux Repository. My first thought is to build a server with DAS and fill it with consumer SATA drives. I'm having trouble finding servers that either support enough internal storage, or external DAS from the same vendor so I can get a supported package. If this keeps up, I'll end up buying used hardware and going with third-party support, which I don't like to do.
What are others doing?
Also, any concerns around running a hardened repository, and then having driver issues or crashes in the future, that may be difficult to troubleshoot on a hardened server?
-
- Enthusiast
- Posts: 86
- Liked: 2 times
- Joined: Jan 20, 2011 5:45 pm
- Full Name: Mike Schlottman
- Contact:
-
- Service Provider
- Posts: 94
- Liked: 24 times
- Joined: Sep 24, 2020 2:14 pm
- Contact:
Re: What hardware for Hardened Linux Repository?
Running a dozen HLR for around ~4? years now on Dell HW without a single problem. We have R7x0XD 12x3.5" with external MD arrays as well as R7x0XD2 which offer internal 24x3.5" drives. Others use HPE Apollo or Supermicro. Last year we deliver 3x Dell H760xd2 with around 300TB RAID6 to a customer.
Regards,
Joerg
Regards,
Joerg
-
- VP, Product Management
- Posts: 7148
- Liked: 1534 times
- Joined: May 04, 2011 8:36 am
- Full Name: Andreas Neufert
- Location: Germany
- Contact:
Re: What hardware for Hardened Linux Repository?
For the hardware, I think the most important investments are for the raid controller (use a good one with battery backed caches) and fast reliable network cards (server grade).
For the number of disks: Lenovo SR650, HPE Apollo, Cisco S3260, Cisco C240, SuperMicro X13,...
The idea of the hardened repository is to not give Veeam any account that can damage the system. Locally you can use root for troubleshooting, but you should not expose this to the network or SSH. As well don´t use KVM switches or ILO as they are known for getting hacked as well.
For the number of disks: Lenovo SR650, HPE Apollo, Cisco S3260, Cisco C240, SuperMicro X13,...
The idea of the hardened repository is to not give Veeam any account that can damage the system. Locally you can use root for troubleshooting, but you should not expose this to the network or SSH. As well don´t use KVM switches or ILO as they are known for getting hacked as well.
Who is online
Users browsing this forum: No registered users and 52 guests