Library of Congress – Storage Architectures for Digital Collection Preservation Rajeev Bhardwaj Director, Product Management Data Center Business Unit (DCBU)

Outline Clients Address the role of a Storage Area Networks (SANs) in storage architectures for digital collection preservation in terms of: Costs of long-term storage, including media and facilities Data integrity Migration to new technologies Security LAN Servers SAN Storage Devices

How can a SAN Reduce Costs of Long-Term Storage? Fabric Consolidation 500+ ports SAN Directors 4G, 8G, 10G FC connectivity Virtual SAN (VSAN) SAN Routing for Any-to-Any Connectivity SAN 1 SAN 2 SAN 3 Storage Virtualization Optimal Utilization Tiered Storage Storage Compression Tier 1 Arrays Tier 2 Tier 3 Off-Site Storage SAN Extension over Distance SCSI Protocol Acceleration Data De-duplication Data Integrity and Encryption WAN Primary Storage Site Off-site Storage

Storage Media Encryption (SME) Data Stored with Data Integrity Field Tape Library Servers Storage Media Encryption (SME) Data Integrity for Data-at-Rest Add “Data Integrity Field” in Data Check for “Data Integrity Field” when reading from device Data Stored with Data Integrity Field CRC Checks on a per FC Frame Basis Data Integrity for Data-in-Motion Cisco MDS 9000

Migration to New Technologies Application Servers Enable SAN-based storage lifecycle management Driven by technology refresh Online data migration across heterogeneous arrays Network-hosted storage virtualization provides non-disruptive data migration Network-hosted storage virtualization provides high-performance migration capabilities Migrate multiple TBs of data per hour Data integrity checks Ensure integrity of migrated data on new array Cryptographically erase data on old array Data Migration Application I/O Data Migration Old Array New Array

SAN Security for Digital Collection Preservation Management Access Controls Data Integrity and Encryption SSHv2, SNMPv3, SSL Centralized AAA - RADIUS, TACACS+ Role Based Access Controls VSAN based RBAC IP ACLs Security of Data-at-Rest - Tapes and Disks Security for Data-in-Motion - IPSec for FCIP & iSCSI Device Authorization and Authentication Server and Target Access Controls Port Security Fabric Binding Host/Switch Authentication iSCSI CHAP Authentication VSANs Hardware Zoning LUN Zoning Read-only Zones

Summary Reduce the costs of long-term storage, including media and facilities: Fabric consolidation with large-scale SAN Directors, VSANs, SAN Routing Storage Virtualization Off-site Storage Provide Data Integrity CRC checks on a per frame basis Data Integrity for data-at-rest Enable migration to new technologies High performance data mobility Heterogeneous capability Preserves data integrity Robust and holistic security capabilities Management access controls Server and Target access controls Device-level authorization and authentication Data integrity and encryption of data-at-rest and data-in-motion LAN Clients Servers SAN Storage Devices SANs play a strategic role in storage architectures for digital collection preservation