Re: [ceph-users] Cluster Security

2018-09-24 Thread Anthony Verevkin
Thursday, September 20, 2018 2:22:47 AM Subject: Re: [ceph-users] Cluster Security Hi, if you want to isolate your HV from ceph's public network a gateway would do that (like iscsi gateway). Note however that this will also add an extra network hop and a potential bottleneck since all c

Re: [ceph-users] Cluster Security

2018-09-20 Thread Florian Florensa
I was thinking of iscsi gateways colocated on the osd nodes and trying to distribute the luns as evenly as possible, would that setup work ? Also regarding the configuration of the iscsi target is it stored inside ceph cluster ? Le jeu. 20 sept. 2018 à 08:23, Jan Fajerski a écrit : > Hi, > if yo

Re: [ceph-users] Cluster Security

2018-09-19 Thread Jan Fajerski
Hi, if you want to isolate your HV from ceph's public network a gateway would do that (like iscsi gateway). Note however that this will also add an extra network hop and a potential bottleneck since all client traffic has to pass through the gateway node(s). HTH, Jan On Wed, Sep 19, 2018 at

[ceph-users] Cluster Security

2018-09-19 Thread Florian Florensa
Hello everyone, I am currently working on the design of a ceph cluster, and i was asking myself some question regarding the security of the cluster. (Cluster should be deployed using Luminous on Ubuntu 16.04) Technically, we would have HVs exploiting the block storage, but we are in a position wh