Nasuni and ARTESCA on Two Sites for Disaster Recovery¶

Prerequisites¶

These prerequisites and configuration steps are specifically for an ARTESCA installation across two sites to enable disaster recovery, and do not apply to an ARTESCA installation on a single site. Two ARTESCA deployments are installed and DNS is resolvable between them for their respective S3 endpoints.

Important

Nasuni does not support automatic failover. Failover process requires contacting Nasuni’s support to perform the failover actions.

Configure ARTESCA for Nasuni¶

Important

The following steps need to be run on both primary and secondary ARTESCA.

Create an Account for the Nasuni application on both ARTESCA.
Create IAM Users for the Nasuni application on both ARTESCA.

Create IAM Policies to grant the Nasuni application access to the S3 repository and manage data on both ARTESCA.

Use the following policy for primary and secondary ARTESCA:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "VisualEditor0",
      "Effect": "Allow",
      "Action": [
        "s3:CreateBucket",
        "s3:GetBucketLocation",
        "s3:DeleteBucket",
        "s3:PutObject",
        "s3:GetObject",
        "s3:DeleteObject"
      ],
      "Resource": [
        "arn:aws:s3:::nasuni*/*",
        "arn:aws:s3:::nasuni*"
      ]
    },
    {
      "Sid": "VisualEditor1",
      "Effect": "Allow",
      "Action": [
        "s3:ListAllMyBuckets",
        "s3:ListBucket"
      ],
      "Resource": "*"
    }
  ]
}

Create DNS entries (A records) for the target endpoint of the on-premises object storage that point to the desired IP address, in this form:

s3.your.domain

*.s3.your.domain

Configure Nasuni to Use ARTESCA as Storage¶

Configure Cloud Credentials¶

Important

Cloud Credentials need to be created for both the primary and secondary ARTESCA.

In the Nasuni Management Console (NMC), click Configuration.
Select Account, then click Cloud Credentials.
Click Add Amazon S3 Credentials.

Note

Alternatively, click Add New Credentials and select Amazon S3 from the drop-down list.
Enter the following information provided by ARTESCA:
- Name: A descriptive name for the credentials (for example, artesca1).
- Access Key ID: The ARTESCA bucket or container username used for authentication.
- Secret Access Key: The ARTESCA bucket or container password used for authentication.
- Hostname: The hostname of the ARTESCA object storage endpoint.
- Verify SSL Certificates: Select this option only if the endpoint uses a public SSL certificate.
- Filers (NMC only): Select the target Nasuni Edge Appliances.
Click Save Credentials.

Add a New Volume¶

Important

Volumes should be added only for the primary ARTESCA.

Primary ARTESCA¶

Click Volumes, then select Add New Volume.
On the Add New Volume page, provide the following information:
- Name: A human-readable name for the volume.
- Cloud Provider: Select Amazon S3.
- Credentials: Select the cloud credentials created earlier (for example, artesca1).
- Region: Use the default value, Other (S3 Compatible).
Configure any remaining options as appropriate for your environment.
Click Save.

After Volume configuration, Nasuni will create a bucket with the name nasuni. Nasuni also writes some objects to the bucket as part of the volume creation process.

Secondary ARTESCA¶

Important

This step needs to be run on the second ARTESCA.

Create a bucket with the same name that Nasuni created on the primary ARTESCA.
Because Cross-Region Replication (CRR) only duplicates objects created after its workflow is established, any objects previously created on the primary ARTESCA by Nasuni must be manually copied to the secondary ARTESCA bucket using a utility like rclone.
```
rclone sync primary_artesca:nasuniXXX secondary_artesca:nasuniXXX
```

Enable Bucket Versioning¶

Enable versioning on the buckets on both the primary and secondary ARTESCA prior to activating replication on ARTESCA.

Replicating Objects Between Primary and Secondary ARTESCA Instances¶

Configure CRR between primary and secondary ARTESCA using Bi-directional Replication Setup instructions.
Create a Replication Workflow on the Nasuni bucket in the primary ARTESCA to enable.
Enable Lifecycle Expiration Workflow on both the primary and secondary ARTESCA with the rules.
- Expire Previous version of objects set to 7 days
- Remove expired Delete markers set to 1 day
- Expire incomplete Multipart uploads set to 7 days

Failover From Primary to Secondary ARTESCA¶

Call Nasuni Support referencing this procedure.
1. Make sure to have the CRR destination bucket name available for Nasuni Support.
2. Enable remote support on the Primary appliance.
On all remote appliances connected to a volume, perform these steps:
1. Disconnect all users from the affected volume on all Edge Appliances sharing the volume using NMC.
2. Execute a final snapshot on all Edge Appliances sharing the impacted volumes if this is a planned failover and primary ARTESCA is still available.
3. Convert all shares to read only.
On the Primary appliance, perform these steps:
1. Disconnect all users from the affected volume on all Edge Appliances sharing the volume. You can use the Edge Appliance UI or the NMC for this.
2. Convert all shares to read only.
Nasuni Support must switch the bucket and region via remote support.
After the previous step is complete, on the Primary appliance, make all shares read/write where appropriate.

After these steps, the data is available. If initial access performance is important on remote appliances, “warm” the cache by using the “Bring into cache” option in the NMC.