NFS Best Practice And Implementation Guide

Transcription

RPCTechnical ReportNFS Best Practice and Implementation GuideJustin Parisi, NetAppJuly 2017 TR-4067

Version HistoryVersionDateDocument Version HistoryVersion 4.2July 2017Updated for ONTAP 9.2Version 4.1October 2016Updated for ONTAP 9.1Version 4.0July 2016Updated for ONTAP 9.0Version 3.2February 2016Updated for ONTAP 8.3.2Version 3.1July 2015Updated for ONTAP 8.3.1Version 3.0February 2015Updated for ONTAP 8.3Version 2.2September 2014Updated for ONTAP 8.2.2Version 2.1January 2014Updated for ONTAP 8.2.1Version 2.0October 2013Updated for ONTAP 8.2Version 1.0June 2013Initial releaseTABLE OF CONTENTSVersion History . 21 Introduction . 82341.1Scope .81.2Intended Audience and Assumptions .8Overview of Clustered Data ONTAP . 92.1Business Challenges with Traditional Storage .92.2Clustered Data ONTAP .9Architecture . 103.1Important Components of Clustered Data ONTAP .103.2NFS Options Explained .123.3Cluster Namespace .123.4Steps to Bring Up a Clustered Data ONTAP NFS Server .133.5Data LIF Best Practices with NAS Environments .133.6Dynamic NAS TCP Autotuning .163.7NAS Flow Control .173.8Pseudo File Systems in Clustered Data ONTAP .193.9Does Clustered Data ONTAP Support 32-Bit and 64-Bit File IDs? .26Export Policies and Rules in Clustered Data ONTAP . 274.12Export Policy Rule Options Explained .28NFS Best Practice and Implementation Guide 2017 NetApp, Inc. All Rights Reserved

4.2Export Policy Sharing and Rule Indexing .284.3UNIX Users and Groups .294.4The Anon User .314.5The Root User.314.6Limiting Access to the SVM Root Volume .384.7Volume-Based Multitenancy Using Export Policies and Rules.404.8Mapping All UIDs to a Single UID (squash all) .454.9Umask .484.10 Export Policy Rule Inheritance .504.11 The Export Policy Rule Index .544.12 Export Policy Rules: Clientmatch .554.13 Export Policy Rule Caching.564.14 Export Policy Rule Access Verification (exportfs -c) .5856Showmount in Clustered Data ONTAP . 595.1What Happens During Showmount? .605.2Showmount Plug-In for Clustered Data ONTAP .615.3Showmount for Clustered Data ONTAP 8.3 and Later .61Name Services . 626.17Name Services Best Practices .63Nondisruptive Operations (NDO) with NFS. 647.1Replay/Reply Cache .647.2File Locking .647.3NFSv4.1 Sessions .667.4What Happens During LIF Migrations in NFSv4.x? .677.5General Best Practices for NDO with NFS in Clustered Data ONTAP .678NFSv3 in Clustered Data ONTAP . 689NFSv4.x in Clustered Data ONTAP . 759.1Advantages of Using NFSv4.x .759.2NFSv4.0 .77NFSv4 User ID Mapping . 839.3NFSv4.1 .1079.4Mount Option Best Practices with NFS .11110 NFS Auditing . 11410.1 NFS Audit Setup .1143NFS Best Practice and Implementation Guide 2017 NetApp, Inc. All Rights Reserved

11 NFS on Nontraditional Operating Systems . 116NFS Using Apple OS .11912 Multiprotocol User Mapping . 12012.1 Credential Caching in Clustered Data ONTAP .12012.2 User Name Mapping During Multiprotocol Access .12313 NetApp FlexGroup Volumes . 13713.1Supported Features with NetApp FlexGroup . 13713.2Ideal Use Cases . 13713.3Nonideal Cases . 13714 Unified Security Style (Infinite Volumes) . 13814.1 What Is Unified Security Style? .13814.2 UNIX, NTFS, and Mixed Security Styles .13814.3 Unified Security Style Behavior in Clustered Data ONTAP .14214.4 Unreachable Attributes .14714.5 Infinite Volume Export Policies.14715 NFS Events, Performance Monitoring, and Data Gathering . 149Appendix . 166NFS Server Option List in Clustered Data ONTAP .166Export Policy Rule Option List .174NFSv3 Option Changes in Clustered Data ONTAP .176NFSv4 Option Changes in Clustered Data ONTAP .177NFSv3 Port Changes.179References . 1804NFS Best Practice and Implementation Guide 2017 NetApp, Inc. All Rights Reserved

LIST OF BEST PRACTICESBest Practices 1: NFS Server Options Recommendation (See Best Practices 2) .12Best Practices 2: NFS Block Size Changes (See Best Practices 3) .16Best Practices 3: RPC Slot Maximum for RHEL 6.3 and Later (See Best Practices 4) .18Best Practices 4: Export Policy Rule Requirement (See Best Practices 5) .27Best Practices 5: Protocol Services Recommendation (See Best Practices 6) .30Best Practices 6: Name Services Recommendation (See Best Practices 7) .30Best Practices 7: Configuration Management (See Best Practices 8) .30Best Practices 8: Hiding Snapshot Copies (See Best Practices 9) .44Best Practices 9: Export Policy Rules: Parent Volumes (See Best Practices 10) .53Best Practices 10: Export Policy Rule Index Maximum (See Best Practices 11).54Best Practices 11: Export Policy Rule Index Ordering (See Best Practices 12) .55Best Practices 12: Showmount Permissions Considerations (See Best Practices 13) .61Best Practices 13: Showmount Security Style Considerations (See Best Practices 14) .61Best Practices 14: NFSv3 and File Locking (See Best Practices 15) .

Version 3.0 February 2015 Updated for ONTAP 8.3 Version 2.2 September 2014 Updated for ONTAP 8.2.2 Version 2.1 January 2014 Updated for ONTAP 8.2.1 Version 2.0 October 2013 Updated for ONTAP 8.2 Version 1.0 June 2013 Initial release TABLE OF CONTENTS Version History . 2 1 Introduction . 8 1.1 Scope.8 1.2 Intended Audience and Assumptions.8 2 Overview of Clustered Data ONTAP .