NetApp Guest Connected Storage Options for AWS

Contributors kevin-hoke

AWS supports guest connected NetApp storage in the following configurations:

Configure Amazon FSx for NetApp ONTAP with VMware Cloud on AWS

Amazon FSx for NetApp ONTAP files shares and LUNs can be mounted from VMs that are created within the VMware SDDC environment at VMware Cloud at AWS. The volumes can also be mounted on the Linux client and mapped on the Windows client using the NFS or SMB protocol, and LUNS can be accessed on Linux or Windows clients as block devices when mounted over iSCSI. Amazon FSx for the NetApp ONTAP file system can be set up quickly with the following steps.

Note Amazon FSx for NetApp ONTAP and VMware Cloud on AWS must be in the same availability zone to achieve better performance and avoid data transfer charges between availability zones.

Create and mount Amazon FSx for ONTAP volumes

To create and mount Amazon FSx for NetApp ONTAP file system, complete the following steps:

  1. Open the Amazon FSx console and choose Create file system to start the file system creation wizard.

  2. On the Select File System Type page, choose Amazon FSx for NetApp ONTAP, and then choose Next. The Create File System page appears.

    aws fsx guest 1

  3. In the Networking section, for Virtual Private Cloud (VPC), choose the appropriate VPC and preferred subnets along with the route table. In this case, vmcfsx2.vpc is selected from the dropdown.

    aws fsx guest 2

  4. For the creation method, choose Standard Create. You can also choose Quick Create, but this document uses the Standard create option.

    aws fsx guest 3

  5. In the Networking section, for Virtual Private Cloud (VPC), choose the appropriate VPC and preferred subnets along with the route table. In this case, vmcfsx2.vpc is selected from the dropdown.

    aws fsx guest 4

    Note In the Networking section, for Virtual Private Cloud (VPC), choose the appropriate VPC and preferred subnets along with the route table. In this case, vmcfsx2.vpc is selected from the dropdown.
  6. In the Security & Encryption section, for the Encryption Key, choose the AWS Key Management Service (AWS KMS) encryption key that protects the file system’s data at rest. For the File System Administrative Password, enter a secure password for the fsxadmin user.

    aws fsx guest 5

  7. In virtual machine and specify the password to use with vsadmin for administering ONTAP using REST APIs or the CLI. If no password is specified, a fsxadmin user can be used for administering the SVM. In the Active Directory section, make sure to join Active Directory to the SVM for provisioning SMB shares. In the Default Storage Virtual Machine Configuration section, provide a name for the storage in this validation, SMB shares are provisioned using a self-managed Active Directory domain.

    aws fsx guest 6

  8. In the Default Volume Configuration section, specify the volume name and size. This is an NFS volume. For Storage Efficiency, choose Enabled to turn on the ONTAP storage efficiency features (compression, deduplication, and compaction) or Disabled to turn them off.

    aws fsx guest 7

  9. Review the file system configuration shown on the Create File System page.

  10. Click Create File System.

    aws fsx guest 8
    aws fsx guest 9
    aws fsx guest 10

For more detailed information, see Getting started with Amazon FSx for NetApp ONTAP.

After the file system is created as above, create the volume with the required size and protocol.

  1. Open the Amazon FSx console.

  2. In the left navigation pane, choose File systems, and then choose the ONTAP file system that you want to create a volume for.

  3. Select the Volumes tab.

  4. Select the Create Volume tab.

  5. The Create Volume dialog box appears.

For demo purposes, an NFS volume is created in this section that can be easily mounted on VMs running on VMware cloud on AWS. nfsdemovol01 is created as depicted below:

aws fsx guest 11

Mount FSx ONTAP volume on Linux client

To mount the FSx ONTAP volume created in the previous step. from the Linux VMs within VMC on AWS SDDC, complete the following steps:

  1. Connect to the designated Linux instance.

  2. Open a terminal on the instance using Secure Shell (SSH) and log in with the appropriate credentials.

  3. Make a directory for the volume’s mount point with the following command:

    $ sudo mkdir /fsx/nfsdemovol01
  4. Mount the Amazon FSx for NetApp ONTAP NFS volume to the directory that is created in the previous step.

    sudo mount -t nfs nfsvers=4.1,198.19.254.239:/nfsdemovol01 /fsx/nfsdemovol01

    aws fsx guest 20

  5. Once executed, run the df command to validate the mount.

    aws fsx guest 21

Attach FSx ONTAP volumes to Microsoft Windows clients

To manage and map file shares on an Amazon FSx file system, the Shared Folders GUI must be used.

  1. Open the Start menu and run fsmgmt.msc using Run As Administrator. Doing this opens the Shared Folders GUI tool.

  2. Click Action > All tasks and choose Connect to Another Computer.

  3. For Another Computer, enter the DNS name for the storage virtual machine (SVM). For example, FSXSMBTESTING01.FSXTESTING.LOCAL is used in this example.

    Note Tp find the SVM’s DNS name on the Amazon FSx console, choose Storage Virtual Machines, choose SVM, and then scroll down to Endpoints to find the SMB DNS name. Click OK. The Amazon FSx file system appears in the list for the Shared Folders.

    aws fsx guest 22

  4. In the Shared Folders tool, choose Shares in the left pane to see the active shares for the Amazon FSx file system.

    aws fsx guest 23

  5. Now choose a new share and complete the Create a Shared Folder wizard.

    aws fsx guest 24
    aws fsx guest 25

    To learn more about creating and managing SMB shares on an Amazon FSx file system, see Creating SMB Shares.

  6. After connectivity is in place, the SMB share can be attached and used for application data. To accomplish this, Copy the share path and use the Map Network Drive option to mount the volume on the VM running on VMware Cloud on the AWS SDDC.

    aws fsx guest 26

Connect a FSx for NetApp ONTAP LUN to a host using iSCSI

iSCSI traffic for FSx traverses the VMware Transit Connect/AWS Transit Gateway via the routes provided in the previous section. To configure a LUN in Amazon FSx for NetApp ONTAP, follow the documentation found here.

On Linux clients, make sure that the iSCSI daemon is running. After the LUNs are provisioned, refer to the detailed guidance on iSCSI configuration with Ubuntu (as an example) here.

In this paper, connecting the iSCSI LUN to a Windows host is depicted:

Provision a LUN in FSx for NetApp ONTAP:

  1. Access the NetApp ONTAP CLI using the management port of the FSx for the ONTAP file system.

  2. Create the LUNs with the required size as indicated by the sizing output.

    FsxId040eacc5d0ac31017::> lun create -vserver vmcfsxval2svm -volume nimfsxscsivol -lun nimofsxlun01 -size 5gb -ostype windows -space-reserve enabled

    In this example, we created a LUN of size 5g (5368709120).

  3. Create the necessary igroups to control which hosts have access to specific LUNs.

    FsxId040eacc5d0ac31017::> igroup create -vserver vmcfsxval2svm -igroup winIG -protocol iscsi -ostype windows -initiator iqn.1991-05.com.microsoft:vmcdc01.fsxtesting.local
    
    FsxId040eacc5d0ac31017::> igroup show
    
    Vserver   Igroup       Protocol OS Type  Initiators
    
    --------- ------------ -------- -------- ------------------------------------
    
    vmcfsxval2svm
    
              ubuntu01     iscsi    linux    iqn.2021-10.com.ubuntu:01:initiator01
    
    vmcfsxval2svm
    
              winIG        iscsi    windows  iqn.1991-05.com.microsoft:vmcdc01.fsxtesting.local

    Two entries were displayed.

  4. Map the LUNs to igroups using the following command:

    FsxId040eacc5d0ac31017::> lun map -vserver vmcfsxval2svm -path /vol/nimfsxscsivol/nimofsxlun01 -igroup winIG
    
    FsxId040eacc5d0ac31017::> lun show
    
    Vserver   Path                            State   Mapped   Type        Size
    
    --------- ------------------------------- ------- -------- -------- --------
    
    vmcfsxval2svm
    
              /vol/blocktest01/lun01          online  mapped   linux         5GB
    
    vmcfsxval2svm
    
              /vol/nimfsxscsivol/nimofsxlun01 online  mapped   windows       5GB

    Two entries were displayed.

  5. Connect the newly provisioned LUN to a Windows VM:

    To connect the new LUN tor a Windows host residing on VMware cloud on AWS SDDC, complete the following steps:

    1. RDP to the Windows VM hosted on the VMware Cloud on AWS SDDC.

    2. Navigate to Server Manager > Dashboard > Tools > iSCSI Initiator to open the iSCSI Initiator Properties dialog box.

    3. From the Discovery tab, click Discover Portal or Add Portal and then enter the IP address of the iSCSI target port.

    4. From the Targets tab, select the target discovered and then click Log On or Connect.

    5. Select Enable Multipath, and then select “Automatically Restore This Connection When the Computer Starts” or “Add This Connection to the List of Favorite Targets”. Click Advanced.

      Note The Windows host must have an iSCSI connection to each node in the cluster. The native DSM selects the best paths to use.

      aws fsx guest 30

LUNs on the storage virtual machine (SVM) appear as disks to the Windows host. Any new disks that are added are not automatically discovered by the host. Trigger a manual rescan to discover the disks by completing the following steps:

  1. Open the Windows Computer Management utility: Start > Administrative Tools > Computer Management.

  2. Expand the Storage node in the navigation tree.

  3. Click Disk Management.

  4. Click Action > Rescan Disks.

    aws fsx guest 31

When a new LUN is first accessed by the Windows host, it has no partition or file system. Initialize the LUN and, optionally, format the LUN with a file system by completing the following steps:

  1. Start Windows Disk Management.

  2. Right-click the LUN, and then select the required disk or partition type.

  3. Follow the instructions in the wizard. In this example, drive F: is mounted.

    aws fsx guest 32

Deploy new Cloud Volumes ONTAP instance in AWS (do it yourself)

Cloud Volumes ONTAP shares and LUNs can be mounted from VMs that are created in the VMware Cloud on AWS SDDC environment. The volumes can also be mounted on native AWS VM Linux Windows clients, and LUNS can be accessed on Linux or Windows clients as block devices when mounted over iSCSI because Cloud Volumes ONTAP supports iSCSI, SMB, and NFS protocols. Cloud Volumes ONTAP volumes can be set up in a few simple steps.

To replicate volumes from an on-premises environment to the cloud for disaster recovery or migration purposes, establish network connectivity to AWS, either using a site-to-site VPN or DirectConnect. Replicating data from on-premises to Cloud Volumes ONTAP is outside the scope of this document. To replicate data between on-premises and Cloud Volumes ONTAP systems, see Setting up data replication between systems.

Note Use the Cloud Volumes ONTAP sizer to accurately size the Cloud Volumes ONTAP instances. Also, monitor on-premises performance to use as inputs in the Cloud Volumes ONTAP sizer.
  1. Log into NetApp Cloud Central; the Fabric View screen is displayed. Locate the Cloud Volumes ONTAP tab and select Go to Cloud Manager. After you are logged in, the Canvas screen is displayed.

    aws cvo guest 1

  2. On the Cloud Manager home page, click Add a Working Environment and then select AWS as the cloud and the type of the system configuration.

    aws cvo guest 2

  3. Provide the details of the environment to be created including the environment name and admin credentials. Click Continue.

    aws cvo guest 3

  4. Select the add-on services for Cloud Volumes ONTAP deployment, including Cloud Data Sense, Cloud Backup, and Cloud Insights. Click Continue.

    aws cvo guest 4

  5. On the HA Deployment Models page, choose the Multiple Availability Zones configuration.

    aws cvo guest 5

  6. On the Region & VPC page, enter the network information and then click Continue.

    aws cvo guest 6

  7. On the Connectivity and SSH Authentication page, choose connection methods for the HA pair and the mediator.

    aws cvo guest 7

  8. Specify the floating IP addresses and then click Continue.

    aws cvo guest 8

  9. Select the appropriate route tables to include routes to the floating IP addresses and then click Continue.

    aws cvo guest 9

  10. On the Data Encryption page, choose AWS-managed encryption.

    aws cvo guest 10

  11. Select the license option: Pay-As-You-Go or BYOL for using an existing license. In this example, the Pay-As-You-Go option is used.

    aws cvo guest 11

  12. Select between several preconfigured packages available based on the type of workload to be deployed on the VMs running on the VMware cloud on AWS SDDC.

    aws cvo guest 12

  13. On the Review & Approve page, review and confirm the selections.To create the Cloud Volumes ONTAP instance, click Go.

    aws cvo guest 13

  14. After Cloud Volumes ONTAP is provisioned, it is listed in the working environments on the Canvas page.

    aws cvo guest 14

Additional configurations for SMB volumes

  1. After the working environment is ready, make sure the CIFS server is configured with the appropriate DNS and Active Directory configuration parameters. This step is required before you can create the SMB volume.

    aws cvo guest 20

  2. Select the CVO instance to create the volume and click the Create Volume option. Choose the appropriate size and cloud manager chooses the containing aggregate or use advanced allocation mechanism to place on a specific aggregate. For this demo, SMB is selected as the protocol.

    aws cvo guest 21

  3. After the volume is provisioned, it is availabe under the Volumes pane. Because a CIFS share is provisioned, you should give your users or groups permission to the files and folders and verify that those users can access the share and create a file.

    aws cvo guest 22

  4. After the volume is created, use the mount command to connect to the share from the VM running on the VMware Cloud in AWS SDDC hosts.

  5. Copy the following path and use the Map Network Drive option to mount the volume on the VM running on the VMware Cloud in AWS SDDC.

    aws cvo guest 23
    aws cvo guest 24

Connect the LUN to a host

To connect the Cloud Volumes ONTAP LUN to a host, complete the following steps:

  1. On the Cloud Manager Canvas page, double-click the Cloud Volumes ONTAP working environment to create and manage volumes.

  2. Click Add Volume > New Volume, select iSCSI, and click Create Initiator Group. Click Continue.

    aws cvo guest 30
    aws cvo guest 31

  3. After the volume is provisioned, select the volume, and then click Target IQN. To copy the iSCSI Qualified Name (IQN), click Copy. Set up an iSCSI connection from the host to the LUN.

To accomplish the same for the host residing on the VMware Cloud on AWS SDDC, complete the following steps:

  1. RDP to the VM hosted on VMware cloud on AWS.

  2. Open the iSCSI Initiator Properties dialog box: Server Manager > Dashboard > Tools > iSCSI Initiator.

  3. From the Discovery tab, click Discover Portal or Add Portal and then enter the IP address of the iSCSI target port.

  4. From the Targets tab, select the target discovered and then click Log On or Connect.

  5. Select Enable Multipath, and then select Automatically Restore This Connection When the Computer Starts or Add This Connection to the List of Favorite Targets. Click Advanced.

Note The Windows host must have an iSCSI connection to each node in the cluster. The native DSM selects the best paths to use.

+
aws cvo guest 32

LUNs from the SVM appear as disks to the Windows host. Any new disks that are added are not automatically discovered by the host. Trigger a manual rescan to discover the disks by completing the following steps:

  1. Open the Windows Computer Management utility: Start > Administrative Tools > Computer Management.

  2. Expand the Storage node in the navigation tree.

  3. Click Disk Management.

  4. Click Action > Rescan Disks.

aws cvo guest 33

When a new LUN is first accessed by the Windows host, it has no partition or file system. Initialize the LUN; and optionally, format the LUN with a file system by completing the following steps:

  1. Start Windows Disk Management.

  2. Right-click the LUN, and then select the required disk or partition type.

  3. Follow the instructions in the wizard. In this example, drive F: is mounted.

aws cvo guest 34

On the Linux clients, ensure the iSCSI daemon is running. After the LUNs are provisioned, refer to the detailed guidance on iSCSI configuration for your Linux distribution. For example, Ubuntu iSCSI configuration can be found here. To verify, run lsblk cmd from the shell.

Mount Cloud Volumes ONTAP NFS volume on Linux client

To mount the Cloud Volumes ONTAP (DIY) file system from VMs within VMC on AWS SDDC, complete the following steps:

  1. Connect to the designated Linux instance.

  2. Open a terminal on the instance using secure shell (SSH) and log in with the appropriate credentials.

  3. Make a directory for the volume’s mount point with the following command.

    $ sudo mkdir /fsxcvotesting01/nfsdemovol01
  4. Mount the Amazon FSx for NetApp ONTAP NFS volume to the directory that is created in the previous step.

    sudo mount -t nfs nfsvers=4.1,172.16.0.2:/nfsdemovol01 /fsxcvotesting01/nfsdemovol01

aws cvo guest 40
aws cvo guest 41