HP ProLiant DL380G5-WSS 3.7.0 HP StorageWorks HP Scalable NAS File Serving Sof - Page 254

ssh configuration

Page 254 highlights

system's physical memory. For example, for a 16GB system, this would mean setting the parameter to 800000. HP has seen some cases where a slightly higher value (6 or 7% of physical memory) further improves replication performance. • vm.Vfs_cache_pressure controls the rate at which filesystem inode structures are freed from the system and should be set to a value of 10000 when replicating large sets of files. This will ensure that the system cache does not get overrun with filesystem inode structures when replicating. In the HP Scalable NAS software-only product, the SizingActions script (found in /etc/opt/hpcfs) sets these parameters to values that are appropriate for a system not running replication. You can edit the SizingActions file to change these parameters as appropriate; use your favorite text editor to edit the file and save it back in the same location. (Elsewhere in this guide, HP recommends against editing the SizingActions file. In this instance, editing it is the appropriate solution to setting the parameters.) If, as is the case with some configurations, you do not run the SizingActions script at startup (for example, you are running Oracle or some other major application that has its own tuning recommendations), you will need to set the parameters in the /etc/sysctl.conf file so that they are reset at system startup. ssh configuration The replication feature uses ssh to communicate with the destination cluster. To use ssh, a matching key pair must be in place on the source and destination clusters. HP Scalable NAS includes a default key pair that should be installed on each cluster. (If desired, you can create a custom key pair and then install that key pair on the source and destination clusters. See Create a custom ssh key pair, page 269.) The rplkeys command is used to install the key pair. The command also tunes the sshd_config file on each cluster to support 200 simultaneous ssh connection starts (the default is 10). The command adds a comment before the changed line in the file indicating when the value was changed. The replication processes are run as root, but the private key used is not in the default location (~root/.ssh) on the source cluster. Instead, it is in /_adminfs/ replication/authentication/replication_ssh_key. The public key is published to the destination cluster node in ~/.ssh/authorized_keys with 'replication' in the comment section at the end of the key. 254 Configure and manage replication

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282
  • 283
  • 284
  • 285
  • 286
  • 287
  • 288
  • 289
  • 290
  • 291
  • 292
  • 293
  • 294
  • 295
  • 296
  • 297
  • 298
  • 299
  • 300
  • 301
  • 302
  • 303
  • 304
  • 305
  • 306
  • 307
  • 308
  • 309
  • 310
  • 311
  • 312
  • 313
  • 314
  • 315
  • 316
  • 317
  • 318
  • 319
  • 320
  • 321
  • 322
  • 323
  • 324
  • 325
  • 326
  • 327
  • 328
  • 329
  • 330
  • 331
  • 332
  • 333
  • 334
  • 335
  • 336
  • 337
  • 338
  • 339
  • 340
  • 341
  • 342
  • 343
  • 344
  • 345
  • 346
  • 347
  • 348
  • 349
  • 350
  • 351
  • 352
  • 353
  • 354
  • 355
  • 356
  • 357
  • 358
  • 359
  • 360
  • 361
  • 362
  • 363
  • 364
  • 365
  • 366
  • 367
  • 368
  • 369
  • 370
  • 371
  • 372
  • 373
  • 374
  • 375
  • 376
  • 377
  • 378
  • 379
  • 380
  • 381
  • 382
  • 383
  • 384
  • 385
  • 386
  • 387
  • 388
  • 389
  • 390
  • 391
  • 392
  • 393
  • 394
  • 395
  • 396
  • 397
  • 398
  • 399
  • 400
  • 401
  • 402
  • 403
  • 404
  • 405
  • 406
  • 407
  • 408
  • 409
  • 410
  • 411
  • 412
  • 413
  • 414
  • 415
  • 416
  • 417
  • 418
  • 419
  • 420
  • 421
  • 422
  • 423
  • 424
  • 425
  • 426
  • 427
  • 428
  • 429
  • 430
  • 431
  • 432
  • 433
  • 434
  • 435

system
s physical memory. For example, for a 16GB system, this would mean
setting the parameter to 800000. HP has seen some cases where a slightly
higher value (6 or 7% of physical memory) further improves replication perform-
ance.
vm.Vfs_cache_pressure controls the rate at which filesystem inode structures are
freed from the system and should be set to a value of 10000 when replicating
large sets of files. This will ensure that the system cache does not get overrun with
filesystem inode structures when replicating.
In the HP Scalable NAS software-only product, the
SizingActions
script (found
in
/etc/opt/hpcfs
) sets these parameters to values that are appropriate for a
system not running replication. You can edit the
SizingActions
file to change
these parameters as appropriate; use your favorite text editor to edit the file and save
it back in the same location. (Elsewhere in this guide, HP recommends against editing
the
SizingActions
file. In this instance, editing it is the appropriate solution to
setting the parameters.)
If, as is the case with some configurations, you do not run the
SizingActions
script at startup (for example, you are running Oracle or some other major application
that has its own tuning recommendations), you will need to set the parameters in the
/etc/sysctl.conf
file so that they are reset at system startup.
ssh configuration
The replication feature uses
ssh
to communicate with the destination cluster. To use
ssh
, a matching key pair must be in place on the source and destination clusters.
HP Scalable NAS includes a default key pair that should be installed on each cluster.
(If desired, you can create a custom key pair and then install that key pair on the
source and destination clusters. See
Create a custom ssh key pair
, page 269.)
The
rplkeys
command is used to install the key pair. The command also tunes the
sshd_config
file on each cluster to support 200 simultaneous
ssh
connection
starts (the default is 10). The command adds a comment before the changed line in
the file indicating when the value was changed.
The replication processes are run as root, but the private key used is not in the default
location (
~root/.ssh
) on the source cluster. Instead, it is in
/_adminfs/
replication/authentication/replication_ssh_key
. The public key is
published to the destination cluster node in
~/.ssh/authorized_keys
with
'replication' in the comment section at the end of the key.
Configure and manage replication
254