VMware

This Question is Answered

1 2 Previous Next 29 Replies Last post: Dec 4, 2008 6:58 AM by whuber97   Go to original post

Re: How important is iSCSI switch isolation?

15. Apr 14, 2008 4:47 AM in response to: mike.laspina
Click to view jeremypage's profile Hot Shot 181 posts since
Mar 4, 2005
I understand what you are saying (and in fact have redudant 3850's dedicated for back end storage traffic only in my environment) but realize that for smaller shops the questions is "do I buy a switch for iSCSI (or NFS as the case may be) or use my existing switches"?

In my opinion redundancy is more important than isolated hardware. So I'd rather use a dedicated VLAN for iSCSI across multiple switches then a single switch for iSCSI only.


Obviously if you can afford redundancy and it makes business sense to pay for it, do so. Keep in mind that the VMware best practices are written from VMware's point of view, i.e. what's going to make their product as bulletproof as possible. That does not always equate to what's best for your business, which is why there is so much discussion on the topic.

Re: How important is iSCSI switch isolation?

16. Apr 14, 2008 5:51 AM in response to: jeremypage
Click to view mike.laspina's profile Virtuoso 2,273 posts since
May 26, 2006
For small shops there are significant reasons that the whole availability/confidentially/integrity part would be mush less important. But in the same light these companies still have an obligation to the information protection acts. And there are very inexpensive switches out there in the $300 to 1500 range which solve the issue of cost for small shops. The smaller shop is less likely to be using a system that needs this type of configuration. But in the long run what it comes down to is risk verses cost how much would it cost if the system went down verses how much does it cost to mitigate the risk element and what is the probability of the failure event. The challenge is not the actual hardware fault e.g. the power supply fails in the switch. It is the combination of elements that can lead to failure.

If the switch was separate what is the probability that an error will happen during a network change that is unrelated to the SAN.

What is the probability that a port will be plugged into the wrong network etc.

Re: How important is iSCSI switch isolation?

18. Apr 14, 2008 5:51 PM in response to: mattjk
Click to view mike.laspina's profile Virtuoso 2,273 posts since
May 26, 2006

I use the HP 2810 and 2900 series. The 1800 series are also a very good cost effective solution and will serve well.All the HP switches are reliable. I see no problem at all.

Re: How important is iSCSI switch isolation?

20. Apr 15, 2008 3:20 AM in response to: mattjk
Click to view pasikarkkainen's profile Enthusiast 100 posts since
Jan 17, 2006

Don't forget that if/when you have many initiators talking to a single array you need switch with big buffers and good flow control implementation to get good performance.

Many (cheaper) HP switches can't do for example jumbo frames and flow control at the same time..

And many cheap switches are known to have really crappy flow control..


Re: How important is iSCSI switch isolation?

21. Apr 16, 2008 6:12 PM in response to: mike.laspina
Click to view ac57846's profile Hot Shot 98 posts since
Oct 24, 2006

Great cautionary tale.

To me though this isn't a tle of why you should have seperate switches, the outage would have occurred when the update was applied to the seperate switches.

The way to avoid the outage would be to have a test environment that replicates the production environment and to test the update before applying it to your core switches.


Re: How important is iSCSI switch isolation?

23. Apr 17, 2008 5:19 AM in response to: mattjk
Click to view pasikarkkainen's profile Enthusiast 100 posts since
Jan 17, 2006
mattjk wrote:

Don't forget that if/when you have many initiators talking to a single array you need switch with big buffers and good flow control implementation to get good performance.
Any idea how big is big enough (for buffers)? The packet buffer size is listed on the specs of the various ProCurve's (500kb for 1800-24G, 750kb for 2810-24G), but I've got no idea how to figure out what size is the right size.

More the better.. ask your iSCSI SAN / storage array vendor for recommended/supported/tested switches..


Many (cheaper) HP switches can't do for example jumbo frames and flow control at the same time..
My understanding is that the "lowest" 24-port gigabit switch that HP make which can do both jumbo frames & flow control at the same time is the 2900-24G. Unfortunately, using 2900-24G's for our for the SAN-side switches is simply > not possible (out of our price range), so we're going to have to accept no flow control + jumbo frames at once anyway.

If you need to choose between jumbos and flow control you should choose flow control.. in a bigger environment it wil help more than jumbos. The point with good flow control is that it will prevent the buffers of the switch (port) getting full and the switch having to drop packets.. this could happen often in a bigger environment with many initiators and/or switches.
if the switch drops packets it will cause TCP retransmits and that makes TCP go slow.. which makes your iSCSI slow.

So good flow control will use pause frames preventing the switch buffers from overflowing and this will keep your traffic flows (iSCSI) running smoothly and fast.

Note that you need to run flow control on every NIC/HBA and on every switch and on your storage arrays.

Bad/poor flow control implementation in the switch will also kill your performance.. good and cheap come in a different packages :)

And many cheap switches are known to have really crappy flow control..
Cheap as in cheap brands, or cheap as in cheap models inside HP/Cisco/etc's ranges?

I think even Cisco has some models with bad/poor flow control implementation.. usually Cisco 3750G-24 has been safe choise (and recommended by the storage vendors for iSCSI traffic).

HP is known to have many bad/problematic models, and some OK models too..

Hopefully that helps.

Re: How important is iSCSI switch isolation?

24. Apr 17, 2008 5:57 PM in response to: mattjk
Click to view mike.laspina's profile Virtuoso 2,273 posts since
May 26, 2006

Unless you have a really seriously heavy load all these points will not even come into play.

Even if you could push 4GB sustained flow to your storage system how is that going to task your 48G HP backplane?

There is no special processing, no routing no encapsulation just pure iSCSI data flow at layer 2.

The switch is certainly not going to be your bottleneck.

The FAS 20x0 will not surpass the switch in I/O it simply does not have the power to do it..

Not something I would even worry about.


Re: How important is iSCSI switch isolation?

25. Apr 18, 2008 2:12 AM in response to: mike.laspina
Click to view pasikarkkainen's profile Enthusiast 100 posts since
Jan 17, 2006
mike.laspina wrote:
Unless you have a really seriously heavy load all these points will not even come into play.

Even if you could push 4GB sustained flow to your storage system how is that going to task your 48G HP backplane?

There is no special processing, no routing no encapsulation just pure iSCSI data flow at layer 2.

The switch is certainly not going to be your bottleneck.

The FAS 20x0 will not surpass the switch in I/O it simply does not have the power to do it..

Not something I would even worry about.


Yes, you absolutely need to use switches with "wirespeed" backplace..

The problem I was referring to happens with every switch, even with good ones if you're not running (good) flow control..

Example: Your storage array is connected to your switch with a single gigabit connection. You have two initiators (servers) accessing the storage.
Now think about both of these servers writing to the storage array at the same time..

What happens? Obviously the port on the switch where storage array is connected gets full, because it can only take one gigabit/sec in.. and you have two servers trying to push gigabit/sec into it, total of 2 gigabit/sec into it..
now the switch needs to drop packets when the port buffers get full -> tcp needs to do retransmits (causing delays) and adapt to slower speed to prevent packet loss.. in the end both servers talk at about 500 Mbit/sec max (sharing the gigabit connection), but all of this could have been done without packets loss and tcp retransmits.. by using flow control.

flow control in the switch sends "pause frames" before the buffers get full and tell the servers to wait for a short while so there's no need to drop packets.. these flow control "pause frames" are much shorter than tcp retransmits -> you get better and smoother performance.

Now, this very same problem happens also in a bigger environment when you have more bandwitdth from the initiators than you have bandwitdth to your storage array.. and this is usually always the case.

Fibre Channel has same kind of "flow control" built into it.. FCOE btw needs ethernet flow control too.

Re: How important is iSCSI switch isolation?

27. Jul 28, 2008 2:02 PM in response to: mattjk
Click to view jbrockwa's profile Lurker 1 posts since
Jul 28, 2008
Matt-

Was wondering how well the 1800's worked out on the SAN side? Did you experience any performance issues?

Re: How important is iSCSI switch isolation?

28. Jul 28, 2008 9:11 PM in response to: jbrockwa
Click to view tbrown's profile Enthusiast 107 posts since
Jul 7, 2004

I know this thread is dead and revived but I'll throw my 2 cents into the ring on HP switches, ESX, iSCSI.

I use HP 5300XL's, 5400ZL's, 2810's, 2848's 2824's one thing all the manuals say (I'm not positive on the 5400zl's) Do not use jumbo packets and flow control pick one or the other although there is nothing in the OS to stop you. I was careful at the begining and decided at the recommendation of my SAN vendor to use flow-control. I have since turned on both with no ill effects. All of the switches have full wirespeed back planes and have been rock solid for me. I have only replaced a fan in a 5300 (which was unfortunately a complete replacement chassis the 5400 has a replaceable fan tray). Please make sure you buy redundant power supplies its a small investment you don't want your "fabric" to go dark over something as trivial as a dead p/s.

I am very happy with my decision on HP swithes in our DEV environment I wish our network team would use them in production as well but no such luck.

Re: How important is iSCSI switch isolation?

29. Dec 4, 2008 6:58 AM in response to: jbrockwa
Click to view whuber97's profile Enthusiast 30 posts since
Jan 30, 2008

I too am wondering how it went with the 1800s. We are quoting a small ESX implementation with HP iSCSI storage, and wanted to use the 1800s for our iSCSI (dedicated) network.

Thanks,

VMware Developer

SDKs, APIs, Videos, Learn and much more in the Developer community.

Learn More

Developer Sample Code

Increase your developer productivity with VMware API sample code.

Learn More

VMworld Sessions & Labs

Online access to the latest VMworld Sessions & Labs and online services.

Learn more

Purchase PSO Credits Online

Purchase credits to redeem training and consulting services online.

Buy Now

Community Hardware Software

View reported configurations or report your own.

Learn More

VMware vSphere

Come witness the next giant leap in virtualization.

Register Today

Communities