Panzura Freedom Filer 2 GCE Deployment and...

PanzuraFreedomFiler7.2GCE-DeploymentandSetup

QUICKSTARTGUIDE:STEP-BY-STEPINSTRUCTIONSFORDEPLOYINGAPANZURAGCEINSTANCE

July20,2018

PanzuraFiler7.2GCE–DeploymentandSetup

2

Copyright©2018Panzura,Inc.

Allrightsreserved.Theinformationinthismanualissubjecttochangewithoutnotice.

OriginatedintheUSA.Anyothertrademarksappearinginthisguidearethepropertyoftheirrespectivecompanies.

CorporateHeadquarters

695CampbellTechnologyParkway,#225Campbell,CA95008+1-408-457-8504

SalesandSupport

Emailsales:[email protected]:[email protected]

Phone:1-855-PANZURA(1-855-726-9872)OutsideNorthAmerica:+1-408-457-8504

www.panzura.com


3

TableofContents

OVERVIEW 4

AUDIENCEANDSCOPE 4GOOGLE-HOSTEDSYSTEMRECOMMENDATIONS 5PREREQUISITES 5INPUTFORTHESETUPWIZARD 5

DEPLOYINGAGCEINSTANCE 9

SETUPWIZARDOVERVIEW 12SETUPWIZARDSTEPS 13


4

OverviewThisdocumentdescribesastep-by-stepprocedureforquicklydeployingandconfiguringaPanzuraFreedomFilerintheGoogleMarketplace.

Theprocessconsistsofthefollowingtasks.

1. Completingtheprerequisitetable

2. SearchingforthePanzuraFreedomFilerinGoogleMarketplace

3. LaunchingthePanzuraFreedomFiler

4. ConnectingtotheassignedpublicIPaddressusinghttps

5. ConfigurethefilerusingthePanzurasetupwizard.Thefollowingisthegeneraluserflowforthefilersetupwizard:

a. EULAacceptance

b. Networksettings

c. Filerbasicconfiguration

d. Enteryourcloudstorageprovider(CSP)information

Duration:Iftheprerequisitesarecomplete,thesesetupsteps(deployGCEinstanceandrunsetupwizard)takeabout15minutes.

AudienceandScopeThisguideisforStorageAdminsandSystemsEngineerswithbasicknowledgeoflaunchingGCEinstances,configuringVPCandcreatingabucketintheGoogleCloudPlatform.

Note:ThisdocumentdoesnotaddressnetworkingaspectsofconnectingtheGCEtoon-premPanzurafilersforahybriddeploymentmodel.


5

Google-HostedSystemRecommendationsThefollowingtableliststheminimumGCEsystemrequirements:

Size Speed Name Storage

Small 1Gbps n1-standard-4 SSD,ProvisionedIOPs

Medium 2Gbps n1-standard-8 SSD,ProvisionedIOPs

Large 4Gbps n1-standard-16 SSD,ProvisionedIOPs

PrerequisitesYouwillneedthefollowinginformationwhendeployingthePanzuraFreedomFileronGoogleCloudPlatform:

Item Yourvalue

Username

Password

BucketName

Region’sHostnameorIPAddress

Ifyoudon’thaveanaccount,gotohttps://console.cloud.google.com/getting-startedtocreateone.

InputfortheSetupWizardCompletingthetablebelowwillreducethetimeittakestodeploythefiler.Fornon-Masterdeployments,thelicenses,cloudstorageproviderinformation,passwordandsupportedprotocolsareinheritedfromthemaster.SeethePanzuraFreedomFilerAdministrationGuidefordetails.

Note:RecommendedbrowserforthesetupwizardandPanzura’sWebUIinterfaceisChrome.

Task YourValue Description

EULAAcceptance

Name,Emailaddress,CompanyName,Title

ThereisanoptiontodownloadtheEULA.

NewPassword Minimum8charactersandshouldmeetyourcorporatesecurityrequirements.

NetworkSettings


6


SharedNetwork/DedicatedNetwork

Shared:singlenetworkinterfaceusedforclientandcloudtraffic.

Dedicated:separatenetworkinterfaceforclientandcloudtraffic.

DHCP/Static

SharedNetwork-IPAddress

SharedNetwork-SubnetMask

SharedNetwork-DefaultGateway

PrimaryDNSServerIP

SecondaryDNSServerIP Optional

EnableJumboFrame On/Off.ContactyournetworkadministratorandPanzuraSupportbeforeenablingJumboFramesupport.

DedicatedNetwork-IPAddress

Ifapplicable,Cloud(WAN)Interface.

DedicatedNetwork-SubnetMask


DedicatedNetwork-DefaultGateway


DedicatedNetwork-EnableJumboFrame

On/Off.ContactyournetworkadministratorandPanzuraSupportbeforeenablingJumboFramesupport.

SystemSettings

Hostname RegisterednameofthefilerintheDNS.

FilerGeographicLocation Streetaddress,City,State/Province,Country,Zipcode/Pincode.

ContactEmailAddress


7


DNSDomain

RoleSettings

ConfigurationMode DefaultisSubordinate.Ifthisisthefirstfiler,selectMaster.OptionsareMaster/Subordinate/HA-Local/HA-Global.

CollaborativeMesh FullMeshorHub&Spokedeploymentarchitecture.DefaultisFullMesh.

PrivateSecureMode Enablethisfeatureifdeployinginsecuresitewithnopublicinternetaccess.

SupportAssistance EnablethisfeaturetoallowPanzuraSupporttoremotelyprovideassistancewithtroubleshooting,andtosenddailylogstoPanzura.

ConfigureasKeyMaster MasterFileristheAuthenticationKeyMasterforpeer-peerfilercommunication.

IfthefileristheMaster,export(download)thekey.Forallotherconfigurations,uploadthepairing.keyexportedfromtheMaster.

NTPSettings

NTPServer EnableorDisable.PanzurarecommendsenablingNTP.

NTPServerHostname Ifthefilerisinaprivatesecurenetwork,donotenterapublicNTPserveraddress.Thefilerwillnotconnecttoit.

TimeZone

DatastoreSettings&Allocation

Datastores:AutomaticorManual

ForAutomatic,uploadthejsonfilewithprivilegesforcreatingdatastores.ForManual,datastoresmustbepre-


8

Task YourValue Descriptionallocatedtothefiler.SeeInstructionsintheAppendix

PanzurarecommendsSSDstorageorprovisionedIOPSformetadataandlocalcache.

Cloudstorageavailable

Percentageofthetotaldataaccessedfrequently

Percentageofthetotaldatathatisaccessedfrequently.Thiscanbeanestimate.

PanzuraLicense

PanzuraLicenseToken ThisisahexadecimalstringprovidedbyPanzuracontainingpurchasedlicenses.Thiscanbeskippedifyouhavelicensefiles.Contactsales@panzura.comforthelicensetoken

CloudStorageProvider

Cloudstorageprovider(CSP) Panzurasupports13publicandprivateCSPs.RefertothePanzuraadminguideforthecredentialsyouwillneedforthecloudstorageyouplantouse.


9

DeployingaGCEInstanceFollowthesestepstodeployaGoogleComputeEngine(GCE)instanceofthePanzuraFreedomFiler.

1. InyourChromebrowser,logintotheGoogleMarketplacehttps://cloud.google.com

2. Intheleftnavigationpanel,selectMarketplace


10

3. OntheMarketplacepage,searchforPanzuraandselectthePanzuraFreedomFileroffering.

Thefollowingpagewilldisplay.

4. Asummarypagedisplayswhenthecomputeengineissuccessfullydeployed.ThispageincludestheinstanceIDandexternalIPaddresstoPanzurafilerforsetupandmanagement.

Panzura


11


12

SetupWizardOverviewThesetupwizardwillenableyoutocompletethebasicconfigurationofthefilerinordertobringitintoanoperationalstate.

Thewizardhasthefollowingsections:

• Welcome:Overviewofthewizard,EULAacceptanceandassigninganewpassword.

• Network:Setthefiler’sIPaddresses,domainandNetworkTimeProtocol(NTP)addressortimesettings.

• Role:Definesthegeneralcharacteristicsofthefiler.

Thewizardscreenhasthefollowingsections:

• Helptextontheleft

• Userinputinthecenter


13

• Notificationsontheright

Asyouprogressthroughthewizardtheiconsintheuserinputsectionwillturnfromgraytobluetoindicateprogress.Youcanenable/disablehelptextbyslidingthetogglebarandclickingonthescrollbartoviewadditionaltextintheuserinputsection.

SetupWizardSteps

1. UseaChromebrowsertoconnecttothePanzuraGCEinstanceusingtheexternalIPaddressassignedtotheFilerduringinstancedeployment.EntertheIPaddressintheChromebrowserURL:https://filer-ipaddr


14

Sincethereisnocertificateloadedforthefiler,the“Yourconnectionisnotprivatemessage”appears.ClickAdvanced,thenclickthe“Proceedtofiler-IPaddr(unsafe)”linktocontinuetothePanzuramanagementWebUI.

Note:Itmaytake5minutesforthefilertofullypoweronandrespondtoawebloginrequest.

2. Loginwithusernameadminanddefaultpasswordadmin.YoucanignorethefieldaboveUsername,thiswilldisplaythefiler’shostnameonceassigned.

3. AfteryouclickLogIn,theConfigurationWizardpageappears.ClickStarttobeginthewizardsetup.


15

4. ReadandacceptthePanzuraEndUserLicenseAgreement(EULA).YoumustclickIACCEPTtoproceedorexitwithoutproceeding.Includeyourname,emailaddress,companynameandtitle.ClickNext.


16

5. Reviewthesetuprequirements,thenNext.


17

6. Changethedefaultpasswordfortheadminaccounttoasecurepasswordthatmeetsyourcorporatepolicyforcreatingsecurepasswords.Yournewpasswordmustbeatleast8charactersinlength.Youmustthenre-enteryourpasswordinthenextfield.Youwillnotbeabletoproceediftheydonotmatch.Rememberyourpassword,asyouwillnotbeabletochangeorresetyourpasswordinthefuturewithoutit.

Note:TheWelcomeiconisblueindicatingthissectioniscomplete.ThenextsectionistheNetworkSettingsforthefiler.

7. Configurenetworksettings.

• Network(Client&Cloud)Settings:Ifyouhaveasinglenetworkinterfaceforclient(LAN)andcloud(WAN)traffic,selectSharedNetwork.Iftheclientandcloudtrafficareonseparatenetworkinterfaces,selectDedicatedNetworkinterface.Thissettingwilldisplayadditionalfieldsforyoutoenterthenetworkinformationforcloudtraffic.

• Client(LAN)InterfaceSettings:SelectDHCPorStatic.IfyoustartedoffwithDHCPbutprefertoassignastaticIPaddress,enterthefollowingvalues:

• IPaddress

• Subnetmask

• Defaultgatewayaddress

• PrimaryDNSserver

• SecondaryDNSserver(optional)

• JumboFrames:Thisdisabledbydefault.ConsultyournetworkadministratorandPanzuraSupportpriortoenablingthisfeature.


18

Inthisexample,SharedNetworkisselected.TheaddressallocationmethodisleftsettoDHCP.(Thiscombinationisnotrequired.Forexample,theStaticoptioncanbeselectedwitheitherSharedNetworkorDedicatedNetwork.)Whencomplete,clickNext.

8. Configuresystemsettings.

• Hostname:ThisisthehostnameofthefilerandshouldbeuniqueandDNSresolvable.

• FilerLocation:Enteravalidgeographicaladdressorlatitudeandlongitude.

• ContactEmail:Enteravalidemailaddress.

• DomainName:EntertheDNSdomaintowhichthisfilerbelongs.


19

9. Configurefilerrolesettings.Thissectionofthewizardconfiguresthefollowing

functionsforthefiler:

• RoleSettings:

• ConfigurationMode:Selectthefiler'sroleintheCloudFS:

• Master:ThisfileristhefirstfileryouaresettingupfortheCloudFS.

• Subordinate:Thisfilerisanactivefiler(notanHAfiler)thatalsoisnottheMaster.

• HA-Local:Thisfilerwilltakeoverforaspecificindividualfilerifthatfilerbecomesunavailable.

• HA-Global:Thisfilerwilltakeoverforanyfilerintheclusterthatbecomesunavailable.

Note:Ifthefilerisanon-Master,theMasterFilerHostnameappears.YouwillneedtoentertheMasterFiler’shostnamesincetheSubordinatewillpullitsconfigurationinformationfromtheMaster.IfAutoFailoverisenabled,enterthesharedhostnameinthisfield.

• CollaborativeMesh:SelectFullMeshorHub&Spoke.ThisoptionisavailableifthefilerisaMaster.

• ConfigureasaKeyMaster:ThisenabledbydefaultontheMasterandisnotavailablefornon-Masterconfigurationmodes.Atthebottomofthepage,clickExporttoexportthepairing.keyfile.WhenusingthesetupwizardtoconfigureSubordinateorHAfilers,youwillneedtouploadthiskeyfileontothefilerandimportitintothenon-Masterfilersinthecluster.Thiswillenableallthefilersintheclustertosecurelycommunicatewitheachotherusingauniquelyspecificauthenticationforyourenvironment.


20

• PrivateSecureSiteMode:Enablethisifthereisnopublicinternetaccessallowedforthefiler.A

• SupportAssistance:EnableuploadingofsupportlogstoPanzuraSupporttoremotelytroubleshootandresolvecasesquickly.ThisisdisabledifPrivateSecureSiteModeisenabled.

• Peer-to-PeerAuthenticationKey:IfthefilerisaMaster,exportthekeyfileandsaveitlocally.AnUploadbuttonwillappearfornon-Masterfilerconfigurationsforyoutouploadthepairing.keyfile.Thiswillenablethefilerstocommunicatewitheachotherinthecluster.IfitisaMaster,thereisanoptiontoregeneratethekey.


21


22

10. ClickNext.Thefollowingconfirmationdialogappears:

11. ConfiguretimesettingsandclickNext.

Note:PanzurarecommendsselectingaNTPserverfortimesynchronization.InPrivateSecureModedeployments,enteralocaltimerserver.

• IfNTPisenabled,entertheNTPserverandselectthetimezonetheserverisin.

• IfNTPisdisabled,enterthetime,dateandtimezone.

12. Configuredatastoresettings.

Thissectionwillenableyoutodiscoverdatastoresthatwillusedtoassigntothefiler.PanzurarequiresSSDsformetadataandcachestorage,whichcanbeassignedautomaticallyormanually.ThedatastoresmustbeinRAIDgroupstospreadtheloadacrossmultipledrivesandpreserveaccesstodataintheeventofdrivefailure.

• Automatic:Thewizardwilldiscoverthedatastorestoassigntothefilerbyuploadingajsonfilecontainingtheprivatekeytoauthorizethefilertocreatedatastores.

• Manual:Ifthedatastoreshavealreadybeenassignedtothefiler.

• CloudStorageToAllocate:Entertheestimatedcloudstorage.Thisistheamountofdatathatwillbemovedtocloudstorageandmanagedbythefiler.


23

ThisamountistherawcapacityoftheFiler(datathatisnotcompressedordeduplicatedbytheFiler).

• PercentageofCache:Thisistheestimatedpercentageofdatathatwillbeaccessedfrequently.Avalueof10(percent)isappropriateformostenvironments.

Note:TheCloudStorageandPercentageofCachecanbeexpandedlaterwithoutadditionalcostbutdoesrequireafullylicensedfilertoken.


24

13. Configuredatastoreallocationsettings.

Thissectionofthewizardallowsyoutoassigndatastorestometadataandcache.PanzurarecommendsSSDsordatastoreswithSSD-likehighperformancerandomaccessformetadataandcache.

• DatastoreforMetadata

• MetadataStorageSize

• MetadataDatastoreType

• DatastoreforCache

• CacheStorageSize

• CacheDatastoreType


25

14. ClickNext.Thefollowingconfirmationdialogappears:


26

15. Enterthelicensetoken.

EnterthelicensetokenprovidedbyPanzuraandclickNext.Thefilerwillconnecttothelicenseportaltovalidatethetokenanddownloadthelicensingfilesbeforecontinuing.

Note:Forenvironmentswherethereisnooutsidenetworkconnectivity,leavetheLicenseTokenfieldblank.Fornon-Masterdeployments,thelicensetokenisretrievedfromtheMaster.

16. Entercloudstorageprovider(CSP)settings.

Entertheinformationforthecloudstorageproviderthatthisfilerwillusetostorethedatainthecloud.

RefertothePanzuraAdminGuidefordetailsontheavailablecloudprovidersandtheinformationrequiredforeachvendortoconnecttothestorage.Thetablealsoliststhenetworkportstoleaveopen.Seetheonlinehelpforadditionaldetails.

Note:Ifyouwouldprefertoconfigurethecloudstorageprovidersettingslater,selectNone.ClickNext.

ThefollowingexampleisforGoogleCloudStorage(GCE).


27

Thispagewillenableyoutoselectthatcloudstorageprovidethatwillbeusedtostorethedata.Thebucketorstorageblobmustbecreatedpriortocompletingthissection.ClickHelpformoredetails.ClickNext,whendone.

Note:MostoftheCSPinformationwillberetrievedfromtheMasterfilerexceptforthesecretkeyorthepasswordforcloudstorage.Onceyouenterallthecloudcredentials,youwillseethefollowingmessagetoacknowledgebeforeproceeding.


28

17. Enablefileprotocols.

Selecttheprotocolsthiswillfilerwillsupport.PanzurasupportsSMB,NFSorboth.

Note:Fornon-Masterdeployments,protocolinformationisretrievedfromtheMaster.

18. EnterActiveDirectory(AD)domainsettings.

• ADDomainName:EntertheActiveDirectoryservernamethisfilerwillusetoauthenticateusers.

• NetBIOS:Optional.


29

• DomainController:Panzurarecommendsselecting“Any”incasetheprimaryDNSfails.

• ADAdministrator,ADAdministratorPassword:EntertheADadministratorloginandpasswordtoconnectthisfilertotheADserver.ClickNextwhencomplete

19. Reviewthesettingsandfinishthewizard.YoucanselectBacktomakeanychangesor

clickFinishtocompletethewizard.


30

Oncethewizardcompletesthefilerconfiguration,youwillhavetheoptiontogotothemainWebUIhomepage.

IfthefilerisdeployedastheCloudFSMaster,thefollowingiconsappear


31

Panzura Freedom Filer 2 GCE Deployment and...

Documents

Transcript of Panzura Freedom Filer 2 GCE Deployment and...