Deployment Guide-Dell EMC ECS

Dell EMC ECS
Deployment Guide
UPDATED: 19 October 2018

Dell EMC ECS
Copyright Notices
Copyright © 2002-2018 KEMP Technologies, Inc. All rights reserved. KEMP Technologies and the KEMP
Technologies logo are registered trademarks of KEMP Technologies, Inc.
KEMP Technologies, Inc. reserves all ownership rights for the LoadMaster and KEMP 360 product line
including software and documentation.
Used, under license, U.S. Patent Nos. 6,473,802, 6,374,300, 8,392,563, 8,103,770, 7,831,712, 7,606,912,
7,346,695, 7,287,084 and 6,970,933
Copyright © 2002 - 2018 KEMP Technologies, Inc. All Rights Reserved. 2

Dell EMC ECS
Table of Contents
1 Introduction 5
1.1 Document Purpose 5
1.2 Intended Audience 5
2 Template 6
3 Dell EMC ECS 7
4 LoadMaster Global Settings 9
4.1 Enable Subnet Originating Requests Globally 9
5 LoadMaster Virtual Services 10
5.1 S3 Virtual Services 10
5.1.1 S3 HTTP 10
5.1.1.1 S3 HTTP Application Template Settings (optional) 11
5.1.2 S3 HTTPS Offload 11
5.1.2.1 S3 HTTPS Offload Application Template Settings (optional) 12
5.1.3 S3 HTTPS 12
5.1.3.1 S3 HTTPS Application Template Settings (optional) 13
5.2 Atmos Virtual Services 14
5.2.1 Atmos HTTP 14
5.2.1.1 Atmos HTTP Application Template Settings (optional) 14
5.2.2 Atmos HTTPS Offload 15
5.2.2.1 Atmos HTTPS Offload Application Template Settings (optional) 16
5.2.3 Atmos HTTPS 16
5.2.3.1 Atmos HTTPS Application Template Settings (optional) 17
5.3 Swift Virtual Services 17
5.3.1 Swift HTTP 17
5.3.1.1 Swift HTTP Application Template Settings (optional) 18

Dell EMC ECS
5.3.2 Swift HTTPS Offload 19
5.3.2.1 Swift HTTPS Offload Application Template Settings (optional) 19
5.3.3 Swift HTTPS 20
5.3.3.1 Swift HTTPS Application Template Settings (optional) 21
5.4 ECS Web Interface Virtual Services 21
5.4.1 ECS Web Interface 21
5.4.1.1 ECS Web Interface Application Template Settings (optional) 22
5.5 NFS Virtual Services 23
5.5.1 NFS Portmap 23
5.5.1.1 NFS Portmap Application Template Settings (optional) 23
5.5.2 NFS Mountd 24
5.5.2.1 NFS Mountd Application Template Settings (optional) 25
5.5.3 NFS Lockd 25
5.5.3.1 NFS Lockd Application Template Settings (optional) 26
6 Troubleshooting 27
6.1 Connections Rejected 27
7 References 28
Last Updated Date 29

Dell EMC ECS
1 Introduction
1 Introduction
The DELL EMC Elastic Cloud Storage (ECS) is a rack-based, flexible, and expandable object storage
solution. The ECS is configured through a Web Management Interface frontend (HTTPS). In combination
with a KEMP load balancer, an ECS can provide object storage using the protocols S3, Atmos, SWIFT, and
Network File System (NFS) in addition to the Web Management Interface. Other protocols such as CAS
are also possible but are published without load balancers.
1.1 Document Purpose

This deployment guide provides instructions on how to configure the KEMP LoadMaster to load balance
DELL EMC ECS services using KEMP LoadMaster application templates. This guide should only be used as
a reference for the load balancing configuration of ECS services because each environment is unique and
may have different requirements. This guide outlines the load balancing configuration using the default
ECS ports using KEMP LoadMaster application templates, but unique ports can also be leveraged based
on the environment.
This guide outlines the configuration of VSs based on best practices. When SSL/TLS offloading is not
required, Layer 4 is used to pass the traffic back to the ECS nodes. Transparency is automatically enabled
when using Layer 4. This sends the original source IP address to the Real Servers. For more information,
see the Transparency document on the KEMP Documentation page. Using Layer 4 has the following
requirements:
l The LoadMaster must be set up in a two-ARM configuration.

l ECS nodes must use the KEMP LoadMaster as the default gateway.
l All connections to the ECS environment must be initiated from a different subnet.
Contact KEMP Support for any questions regarding configuration options.
1.2 Intended Audience

Anyone interested in configuring the KEMP LoadMaster to load balance Dell EMC ECS.

Dell EMC ECS
2 Template
2 Template
KEMP has developed a template containing our recommended settings for this workload. You can install
this template to help when creating Virtual Services (VSs) because it automatically populates the settings.
This is quicker and easier than manually configuring each VS. If needed, changes can be made to any of
the VS settings after using the template.
Download released templates from the Templates section on the KEMP Documentation Page: .
For more information and steps on how to import and use templates, refer to the Virtual Services and
Templates, Feature Description on the KEMP Documentation Page.

Dell EMC ECS
3 Dell EMC ECS
3 Dell EMC ECS

Dell EMC ECS is a software-defined object storage solution that can be deployed as a complete storage
appliance or leverage supported standard hardware. Dell EMC ECS consists of the following components:
l ECS Portal and Provisioning Services

l Data Services
l Storage Engine
l Fabric
l Infrastructure
l Hardware
The following table provides a list of the Dell EMC ECS default ports and protocols used for accessing the
storage.
ECS Protocol Transport Protocol or Daemon Service Port

HTTP 9020
S3
HTTPS 9021
HTTP 9022
Atmos
HTTPS 9023
HTTP 9024
Swift
HTTPS 9025
Portmap 111
Mountd, nfsd 2049
NFS
Lockd 10000

Dell EMC ECS
3 Dell EMC ECS

Dell EMC ECS
4 LoadMaster Global Settings
4 LoadMaster Global Settings

Before setting up the Virtual Services, the following global settings should be configured to support the
workload.
4.1 Enable Subnet Originating Requests Globally

It is best practice to enable the Subnet Originating Requests option globally.
In a one-armed setup (where the Virtual Service and Real Servers are on the same network/subnet)
Subnet Originating Requests is usually not needed. However, enabling Subnet Originating Requests
should not affect the routing in a one-armed setup.
In a two-armed setup where the Virtual Service is on network/subnet A, for example, and the Real
Servers are on network B, Subnet Originating Requests should be enabled on LoadMasters with
firmware version 7.1-16 and above.
When Subnet Originating Requests is enabled, the LoadMaster routes traffic so that the Real Server
sees traffic arriving from the LoadMaster interface that is in that network/subnet and not the Virtual
Service address.
When Subnet Originating Requests is enabled globally, it is automatically enabled on all Virtual Services.
If the Subnet Originating Requests option is disabled globally, you can choose whether or not to enable
Subnet Originating Requests on a per-Virtual Service basis.
To enable Subnet Originating Requests globally, follow the steps below:
1. In the main menu of the LoadMaster Web User Interface (WUI), go to System Configuration >
Miscellaneous Options > Network Options.
2. Select the Subnet Originating Requests check box.

Dell EMC ECS
5 LoadMaster Virtual Services

This step-by-step setup of VSs leverages the KEMP Application Template for Dell EMC ECS.
The table in each section outlines the settings configured by the application template. You can use this
information to manually configure Virtual Services or using KEMP LoadMaster Application Programming
Interface (API) and automation tools.
5.1 S3 Virtual Services

The following section outlines the configuration options for using S3 with Dell EMC ECS.
5.1.1 S3 HTTP
The following are the steps involved and the recommended settings to configure the S3 HTTP using the
application template:
1. In the main menu of the LoadMaster WUI, go to Virtual Services > Add New.
2. Type a valid Virtual Address.
3. Select the S3-HTTP template in the Use Template drop-down list.
4. Click Add this Virtual Service.
5. Expand the Real Servers section.
6. Click Add New.
7. Enter the Real Server Address.
8. Confirm that Port 9020 is entered.
9. Click Add This Real Server.

Dell EMC ECS
5.1.1.1 S3 HTTP Application Template Settings (optional)
This table outlines the configuration options set using the KEMP application template. These settings can
be used if doing a manual configuration or leveraged with scripts and automation tools.
Option Value
VS Port 9020
VS Protocol tcp
Service Type Generic
Force L4 Enabled
Scheduling Method Least Connection
Real Server Check Method TCP Connection Only
Checked Port 9020
5.1.2 S3 HTTPS Offload

The following are the steps involved and the recommended settings to configure the S3 HTTPS Offload
using the application template. SSL/TLS certificates should be added before creating this VS. The link to
the SSL/TLS Accelerated Services guide can be found in the References Section.
3. Select the S3-HTTPS-Offload template in the Use Template drop-down list.
5. Expand the SSL Properties section.

Dell EMC ECS
6. Select the certificate to use in the Available Certificates and click the “arrow” > to move it to
Assigned Certificates.
7. Click Set Certificate.
9. Click Add New.
5.1.2.1 S3 HTTPS Offload Application Template Settings (optional)
Option Value
VS Port 9021
VS Protocol tcp
Subnet Originating Address Enabled
Scheduling Method least connection
SSL Acceleration Enabled
TLS1.0, TLS1.1, TLS1.2 Enabled
Cipher Set Best Practices
Checked Port 9020
5.1.3 S3 HTTPS
The following are the steps involved and the recommended settings to configure the S3 HTTPS using the

Dell EMC ECS
3. Select the S3-HTTPS template in the Use Template drop-down list.
6. Click Add New.
5.1.3.1 S3 HTTPS Application Template Settings (optional)
This table outlines the configuration options set using the KEMP application template. These settings
can be used if doing a manual configuration or leveraged with scripts and automation tools.
Option Value
VS Port 9021
VS Protocol tcp
Force L4 Enabled
Checked Port 9021

Dell EMC ECS
5.2 Atmos Virtual Services

The following section outlines the configuration options for using Atmos with Dell EMC ECS.
5.2.1 Atmos HTTP

The following are the steps involved and the recommended settings to configure the Atmos HTTP using
the application template:
3. Select the Atmos-HTTP template in the Use Template drop-down list.
6. Click Add New.
5.2.1.1 Atmos HTTP Application Template Settings (optional)
Option Value
VS Port 9022
VS Protocol tcp

Dell EMC ECS
Option Value

Force L4 Enabled
Checked Port 9022
5.2.2 Atmos HTTPS Offload

The following are the steps involved and the recommended settings to configure the Atmos HTTPS
Offload using the application template. SSL/TLS certificates should be added before creating this VS. The
link to the SSL/TLS Accelerated Services guide can be found in the References Section.
3. Select the Atmos-HTTPS-Offload template in the Use Template drop-down list.
9. Click Add New.

Dell EMC ECS
5.2.2.1 Atmos HTTPS Offload Application Template Settings (optional)
Option Value
VS Port 9023
VS Protocol tcp
Checked Port 9022
5.2.3 Atmos HTTPS

The following are the steps involved and the recommended settings to configure the Atmos HTTPS using

Dell EMC ECS
3. Select the Atmos-HTTPS template in the Use Template drop-down list.
6. Click Add New.
5.2.3.1 Atmos HTTPS Application Template Settings (optional)
This table outlines the configuration options set using the KEMP application template. These setting can
be used if doing a manual configuration or leveraged with scripts and automation tools
Option Value
VS Port 9023
VS Protocol tcp
Force L4 Enabled
Checked Port 9023
5.3 Swift Virtual Services

The following section outlines the configuration options for using Swift with Dell EMC ECS.
5.3.1 Swift HTTP

The following are the steps involved and the recommended settings to configure the Swift HTTP using

Dell EMC ECS
3. Select the Swift-HTTP template in the Use Template drop-down list.
6. Click Add New.
5.3.1.1 Swift HTTP Application Template Settings (optional)
Option Value
VS Port 9024
VS Protocol tcp
Force L4 Enabled
Checked Port 9024

Dell EMC ECS
5.3.2 Swift HTTPS Offload

The following are the steps involved and the recommended settings to configure the Swift HTTPS Offload
using the application template. SSL/TLS certificates should be added before creating this VS. The link to
the SSL/TLS Accelerated Services guide can be found in the References Section.
3. Select the Swift-HTTPS-Offload template in the Use Template drop-down list.
9. Click Add New.
5.3.2.1 Swift HTTPS Offload Application Template Settings (optional)

Dell EMC ECS
Option Value
VS Port 9025
VS Protocol tcp
Checked Port 9024
5.3.3 Swift HTTPS

The following are the steps involved and the recommended settings to configure the Swift HTTPS using
3. Select the Swift-HTTPS template in the Use Template drop-down list.
6. Click Add New.

Dell EMC ECS
5.3.3.1 Swift HTTPS Application Template Settings (optional)
Option Value
VS Port 9025
VS Protocol tcp
Force L4 Enabled
Checked Port 9025
5.4 ECS Web Interface Virtual Services

The following section outlines the configuration options for using ECS Web Interface with Dell EMC ECS.
5.4.1 ECS Web Interface

The following are the steps involved and the recommended settings to configure the ECS Web Interface
using the application template. An additional redirect Virtual Service is created to direct all traffic to
HTTPS. SSL/TLS certificates should be added before creating this VS. The link to the SSL/TLS Accelerated
Services guide can be found in the References Section.
3. Select the ECS Web Interface template in the Use Template drop-down list.

Dell EMC ECS
5. Click View/Modify Services and select the ECS Web Interface HTTPS Re-encrypted Virtual
Service on port 443.
8. Click Set Certificates.
10. Click Add New.
5.4.1.1 ECS Web Interface Application Template Settings (optional)
Option Value
VS Port 443
VS Protocol tcp
Service Type HTTP-HTTP/2-HTTPS
SSL Reencrypt Enabled
Real Server Check Method HTTPS Protocol

Dell EMC ECS
5.5 NFS Virtual Services

The following section outlines the configuration options for using NFS with Dell EMC ECS.
5.5.1 NFS Portmap

The following are the steps involved and the recommended settings to configure the NFS PortMap using
1. In the main menu of the LoadMaster Web User Interface (WUI), go to Virtual Services > Add
New.
3. Select the NFS-Portmap template in the Use Template drop-down list.
6. Click Add New.
10. Add additional Real Servers.
5.5.1.1 NFS Portmap Application Template Settings (optional)
Option Value
VS Port 111

Dell EMC ECS
VS Protocol tcp
Force L4 Enabled
Persistence Mode Source IP Address
Timeout 1 Day
Checked Port 111
5.5.2 NFS Mountd

The following are the steps involved and the recommended settings to configure NFS Mountd, nfsd
using the application template:
1. In the main menu of the LoadMaster Web User Interface (WUI), go to Virtual Services > Add
New.
3. Select the NFS Mountd template in the Use Template drop-down list.
6. Click Add New.

Dell EMC ECS
5.5.2.1 NFS Mountd Application Template Settings (optional)
Option Value
VS Port 2049
VS Protocol tcp
Force L4 Enabled
Timeout 1 Day
Checked Port 2049
5.5.3 NFS Lockd

The following are the steps involved and the recommended settings to configure the NFS Lockd using the
1. In the main menu of the LoadMaster Web User Interface (WUI), go to Virtual Services > Add New.
2. Select the NFS-Lockd template in the Use Template drop-down list.

Dell EMC ECS
5. Click Add New.
5.5.3.1 NFS Lockd Application Template Settings (optional)
Option Value
VS Port 10000
VS Protocol tcp
Force L4 Enabled
Persistence Timeout 1 Day
Checked Port 10000

Dell EMC ECS
6 Troubleshooting
6 Troubleshooting
Refer to the sections below for details on some common issues seen when load balancing the Dell EMC
ECS workload.
6.1 Connections Rejected

When using a non-default TCP port or offloading for ECS services, you must ensure the Real Server port is
correct. This is a common mistake when configuring the Real Servers when the Virtual Services port is
different from the Real Server port. See the table in the Dell EMC ECS Section of this document for the
required Real Server ports for Dell EMC ECS.

Dell EMC ECS
7 References
7 References
Some resources on Dell EMC ECS are listed below:
Dell EMC ECS Solutions
Useful, related KEMP documents are listed below:
SSL Accelerated Services, Feature Description on the KEMP Documentation page.
Transparency, Feature Description on the KEMP Documentation page.
RESTful API, Interface Description on the KEMP Documentation page.

Dell EMC ECS
Last Updated Date
Last Updated Date

This document was last updated on 19 October 2018.

Deployment Guide-Dell EMC ECS

Uploaded by

Copyright:

Available Formats

Deployment Guide-Dell EMC ECS

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Deployment Guide-Dell EMC ECS

Uploaded by

Copyright:

Available Formats

Dell EMC ECS

UPDATED: 19 October 2018

Copyright © 2002 - 2018 KEMP Technologies, Inc. All Rights Reserved. 2

1.1 Document Purpose 5

1.2 Intended Audience 5

3 Dell EMC ECS 7

4 LoadMaster Global Settings 9

4.1 Enable Subnet Originating Requests Globally 9

5 LoadMaster Virtual Services 10

5.1 S3 Virtual Services 10

5.1.1.1 S3 HTTP Application Template Settings (optional) 11

5.1.2 S3 HTTPS Offload 11

5.1.2.1 S3 HTTPS Offload Application Template Settings (optional) 12

5.1.3.1 S3 HTTPS Application Template Settings (optional) 13

5.2 Atmos Virtual Services 14

5.2.1 Atmos HTTP 14

5.2.1.1 Atmos HTTP Application Template Settings (optional) 14

5.2.2 Atmos HTTPS Offload 15

5.2.2.1 Atmos HTTPS Offload Application Template Settings (optional) 16

5.2.3 Atmos HTTPS 16

5.2.3.1 Atmos HTTPS Application Template Settings (optional) 17

5.3 Swift Virtual Services 17

5.3.1 Swift HTTP 17

5.3.1.1 Swift HTTP Application Template Settings (optional) 18

Copyright © 2002 - 2018 KEMP Technologies, Inc. All Rights Reserved. 3

5.3.2 Swift HTTPS Offload 19

5.3.2.1 Swift HTTPS Offload Application Template Settings (optional) 19

5.3.3 Swift HTTPS 20

5.3.3.1 Swift HTTPS Application Template Settings (optional) 21

5.4 ECS Web Interface Virtual Services 21

5.4.1 ECS Web Interface 21

5.4.1.1 ECS Web Interface Application Template Settings (optional) 22

5.5 NFS Virtual Services 23

5.5.1 NFS Portmap 23

5.5.1.1 NFS Portmap Application Template Settings (optional) 23

5.5.2 NFS Mountd 24

5.5.2.1 NFS Mountd Application Template Settings (optional) 25

5.5.3 NFS Lockd 25

5.5.3.1 NFS Lockd Application Template Settings (optional) 26

6.1 Connections Rejected 27

Last Updated Date 29

Copyright © 2002 - 2018 KEMP Technologies, Inc. All Rights Reserved. 4

1.1 Document Purpose

l The LoadMaster must be set up in a two-ARM configuration.

Contact KEMP Support for any questions regarding configuration options.

1.2 Intended Audience

Copyright © 2002 - 2018 KEMP Technologies, Inc. All Rights Reserved. 5

Copyright © 2002 - 2018 KEMP Technologies, Inc. All Rights Reserved. 6

3 Dell EMC ECS

l ECS Portal and Provisioning Services

ECS Protocol Transport Protocol or Daemon Service Port

Copyright © 2002 - 2018 KEMP Technologies, Inc. All Rights Reserved. 7

Copyright © 2002 - 2018 KEMP Technologies, Inc. All Rights Reserved. 8

4 LoadMaster Global Settings

4.1 Enable Subnet Originating Requests Globally

To enable Subnet Originating Requests globally, follow the steps below:

2. Select the Subnet Originating Requests check box.

Copyright © 2002 - 2018 KEMP Technologies, Inc. All Rights Reserved. 9

5 LoadMaster Virtual Services