Managing Cloud Settings¶
icon on the upper right corner of the screen and selecting the Settings option on the drop down menu.Cloud setting managed by command center are divided into 5 categories:
Category |
Description |
|---|---|
General |
General Cloud level setting |
Security |
Cloud level security settings |
Network |
Cloud networking parameters |
VPSA |
Settings effecting VPSA instances defined on the cloud |
Object Storage |
Settings effecting VPSA Object Storage instances defined on the cloud |
Management |
Management protocols settings |
General Cloud Settings¶
Cloud Name Allows to change the Cloud name
Note
Domain Name
Sets the domain name that will be used for sender address in emails sent from the cloud.
Internet Access Toggles between Online and Offline Cloud. An Offline cloud is defined as a Cloud that has no internet access for management. Users of offline clouds are required to provide local SMTP , FTP and NTP services and to configure support ticket and Zsnap methods accordingly. In offline clouds license management is also performed manually as there is availability of a remote licensing server.
Note
Support ticket method Toggles support tickets sending on/off and to select the ticket transmission method. Valid options for support ticket transmissions are Zendesk or SMTP
Settings for Zendsesk ticket transmission:
Parameter |
Description |
|---|---|
Zendesk URL |
URL for the Zendesk Application |
Zendesk user |
User id used for Zendesk login |
ZenDesk Password |
Zendesk users password |
Settings for SMTP ticket transmission:
Parameter |
Description |
|---|---|
Server |
SMTP server address |
Login |
SMTP server login required? |
Login User |
SMTP User id |
AUTH method |
SMTP Authentication method to be used (PLAIN or LOGIN supported) |
Password |
Password for SMTP user |
Port |
TCP port number for SMTP service |
Port SSL |
TCP port number for SMTP service is SSL is used |
Secure |
Force secure SMTP(via TLS) |
From user |
Email sender address |
To User |
Email recipient address |
Emails sending method
Allows the cloud admin to configure a personalized email account from which customer emails will be issued. The cloud admin can also define the support email address which will refenced in the emails body as the support contact email.
Note
Settings for personalized SMTP account
Parameter |
Description |
|---|---|
Server |
SMTP server address |
Login |
SMTP server login required? |
Login User |
SMTP User id |
AUTH method |
SMTP Authentication method to be used (PLAIN or LOGIN supported) |
Password |
Password for SMTP user |
Port |
TCP port number for SMTP service |
Port SSL |
TCP port number for SMTP service is SSL is used |
Secure |
Force secure SMTP(via TLS) |
From user |
Email sender address |
To User |
Email recipient address |
ZSNAP upload settings
Sets the target and upload method of Zadara ZSNAPs.
Settings for AWS S3 ZSNAP upload:
Parameter |
Description |
|---|---|
Access key |
AWS S3 access key |
Secret key |
AWS S3 secret key |
Bucket |
AWS S3 bucket for ZSANP upload |
Region |
AWS Region for the specified bucket |
Settings for VPSA Object Storage ZSNAP upload:
Parameter |
Description |
|---|---|
Access key |
VPSA Object Storage S3 access key |
Secret key |
VPSA Object Storage S3 secret key |
Bucket |
AWS S3 bucket for ZSANP upload |
EndPoint |
VPSA Object Storage FQDN |
Region |
VPSA Object Storage Region for the specified bucket |
Settings for FTP ZSNAP upload:
Parameter |
Description |
|---|---|
Server |
FTP server address |
User |
FTP login user id |
Password |
Password for FTP login user id |
Max-allowed-mb |
When using CCmaster FTP server. maximum ZSNAP capacity threshold |
Max-retain-mb |
When using CCmaster FTP server. minimum ZSNAP capacity retained |
Zadara MAG upload settings
Sets the target and upload method of Zadara MAGs.
Settings for AWS S3 MAG upload:
Parameter |
Description |
|---|---|
Access key |
AWS S3 access key |
Secret key |
AWS S3 secret key |
Bucket |
AWS S3 bucket for MAG upload |
Region |
AWS Region for the specified bucket |
Settings for VPSA Object Storage MAG upload:
Parameter |
Description |
|---|---|
Access key |
VPSA Object Storage S3 access key |
Secret key |
VPSA Object Storage S3 secret key |
Bucket |
AWS S3 bucket for MAG upload |
EndPoint |
VPSA Object Storage FQDN |
Region |
VPSA Object Storage Region for the specified bucket |
Cache/AFA-Meta drives settings
Configures the behavior of the cloud when provisioning VPSA all flash and whether to allow the use of cloud solid state drives as AFA cache instead of Optane drives.
Note
Parameter |
Description |
|---|---|
Allow temporarily setting SSDs as AFA-Meta Drive |
Enables setting SSDs as AFA cache |
SSD Cache Max usable capacity |
Sets the Maximum capacity that will be used for an SSD drive designated as AFA cache |
Ticket threshold
Sets timed thresholds for specific events to be considered for support ticket generation:
Parameter |
Description |
|---|---|
Failed drive ticket time |
Allowed Failure time before user ticket generation |
Failed drive support ticket time |
Allowed Failure time before support ticket generation |
Failed heartbeat ticket time |
Allowed Failure time before user ticket generation |
CCVM Engine size
Sets the CCVM configuration in terms of CPU and memory.
Engine size |
Number of CPUs |
Ram(Gib) |
|---|---|---|
Small |
1 |
2 |
Medium |
2 |
4 |
Large |
4 |
8 |
Automatic drive replacement
Configuration for the cloud automatic drive replacement feature. When Automatic drive replacement is enabled replacement will be triggered for a failed drive reported in any cloud resident VPSA. The Drive replacement will be performed after a user provided monitoring interval. Failed drives will be replace by drives from similar model an similar capacity ( given that spares from this drive types exist in the cloud).
Parameter |
Description |
|---|---|
Enable Automatic Drive Replacement |
Is auto replace enabled |
Failed drive support ticket time |
The time (in minutes) after which replacement will be triggered for a drive presumed to be failed |
Note
Security Settings¶
Password expiration
Settings to determine the managed entities password expiration and replacement policy.
Parameter |
Description |
|---|---|
Enforce Password Expiration |
ON - User Password expires and replacement is required after the specified period |
Password Expire After |
Number of days a certain password is valid |
Password history |
Number password replacement cycles in which a password cannot be repeated |
VPSA API Passthrough
Allows VPSA instances running in the cloud to be managed using Command Center as an API endpoint. This option should be used when an application requires management access to VPSAs from a dedicated network outside of the Zadara cloud.
Custom Certificate for Command Center & Provisioning Portal
Allows replacement of the default certificate used in Command Center and Provisioning Portal to
a user provided certificate. Users are required to upload their .crt and .key files to perform the certificate replacement.
Note
Trusted CAs
Allows for adding certificate authorities to the VPSACommand Center Trusted CA lists by uploading Certificates signed by them
bundled in a .zip file.
Dual Factor Turns on dual factor authentication for all local command center users.
Network Settings¶
MTU Size
Allows user to increase their Cloud Networks MTU.
Parameter |
Description |
|---|---|
FE MTU size |
MTU size for the VPSA network (Front-End |
Public MTU size |
MTU size for the public network |
Note
Protection Zones backend connectivity
Allows to configure the use of the iSCSI protocol instead of the iSER protocol in multizone clouds. Protection Zones backend connectivity settings modifies the backend protocol used for inter-zone connectivity only (in-zone requests will still use iSER). Inter-Zone Backend connectivity should be switched to iSCSI only in cases where iSER connectivity cannot be established between zones ( for example due to the network setup).
To configure iSCSI Inter-Zone Backend connectivity first make sure that no multizone VPSA\Object storage is already configured in the cloud .
Set Remote region backend protocol to iSCSI and click on the Update button to apply settings.
When Remote region backend protocol is set to iSCSI a warning message will be displayed on Command center Protection Zone tab.
Warning
VPSA Settings¶
Domain name
Sets the domain name to be used for VPSA entities defined on the cloud.
Recycle bin
Sets the period (in days) in which deleted VPSA entities remain in the recycle bin before being purged from the system therefore becoming unrecoverable.
Certificate
Allows replacement of the default certificate used in VPSA web management application to
a user provided certificate. Users are required to upload their .crt and .key files to perform the certificate replacement.
Note
Object Storage Settings¶
Certificate
Allows replacement of the default certificate used for newly VPSA Object storage web management application to
a user provided certificate. Users are required to upload their .crt and .key files to perform the certificate replacement.
Note
Management Settings¶
SNMP
The Zadara cloud ecosystem supports Cloud/VPSA/Object Storage administrator level infrastructure monitoring via SNMP Traps. Zadara Cloud SNMP traps are architecture to alert administrator on infrastructure events and are produced in parallel to Zendesk tickets.
SNMP traps can be sent from:
VPSA
VPSA Object Storage
Cloud Storage Nodes
CCVM
The Zadara cloud SNMP MIB is publicly available for downloading at the following link: https://zadarastorage-software.s3.amazonaws.com/snmp-mib/20.01/ZADARA-MIB.txt
Note
General SNMP Setting
Parameter |
Description |
|---|---|
Enable SNMP |
If checked - SNMP Traps will be sent from all the cloud monitored elements according to the specified configuration |
Minimum ticket priority |
Minimum priority set for a Zendesk ticket from which an SNMP trap will also be sent |
Protocol Version |
SNMP version to be used (supported versions are SNMPv2 and SNMPv3) |
Note
Settings for SNMPV2
Parameter |
Description |
|---|---|
Community |
SNMPv2 trap community to be used |
Settings for SNMPV3
Parameter |
Description |
|---|---|
Username |
SNMPV3 username for sending traps |
Minimum ticket priority |
Minimum priority set for a Zendesk ticket from which an SNMP trap will also be sent |
Auth Protocol |
SNMPv3 Authentication protocol to use. Supported protocols are: none, MD5, SHA-1, SHA-2-224, SHA-2-256, SHA-2-384 and SHA-2-512. |
Auth key |
SNMPv3 authentication password (valid of Auth protocol is set to any value but none). Minimum Auth key lengths is 8 characters. |
Privacy Protocol |
SNMPv3 privacy(encryption) protocol to use. Supported protocols are: none, AES128 , AES192, AES256 and DES |
Priv key |
SNMPv3 privacy(encryption) key (valid of privacy protocol is set to any value but none) Minimum. Priv key lengths is 8 characters. |
Note
Testing SNMP Settings
Cloud Administrator can test and validate their SNMP settings prior to applying then by sending a test trap.
Test traps are produced by clicking on the Test button on the SNMP settings dialog, Test traps are produced and transmitted according to the specified settings.
Working with SNMPv3 Engine IDs Sending and receiving SNMPv3 Traps requires the usage of a managed element identifier known as SNMP Engine ID. Each managed element engine ID should be configured in the SNMP trap recipient to allow receival of traps from this entity. The Zadara cloud defines a different engine ID for :
The Zadara Cloud infrastructure(All Storage Node and the Cloud Controller VM)
Each VPSA/VPSA Object Storage entity
The Engine ID for the Zadara Cloud infrastructure is specified on the bottom right corner of the screen.
The Engine ID for a VPSA/VPSA object Storage entity is specified in the entities property tab.
Note