1. Library of Congress – Storage Architectures for Digital Collection Preservation
Rajeev Bhardwaj
Director, Product Management
Data Center Business Unit (DCBU)

2. Outline
Clients
Address the role of a Storage Area Networks (SANs) in storage architectures for digital collection preservation in terms of:
Costs of long-term storage, including media and facilities
Data integrity
Migration to new technologies
Security
LAN
Servers
SAN
Storage Devices

3. How can a SAN Reduce Costs of Long-Term Storage?
Fabric Consolidation
500+ ports SAN Directors
4G, 8G, 10G FC connectivity
Virtual SAN (VSAN)
SAN Routing for Any-to-Any Connectivity
SAN 1
SAN 2
SAN 3
Storage Virtualization
Optimal Utilization
Tiered Storage
Storage Compression
Tier 1
Arrays
Tier 2
Tier 3
Off-Site Storage
SAN Extension over Distance
SCSI Protocol Acceleration
Data De-duplication
Data Integrity and Encryption
WAN
Primary Storage Site
Off-site Storage

4. Storage Media Encryption (SME) Data Stored with Data Integrity Field
Tape Library
Servers
Storage Media Encryption (SME)
Data Integrity for Data-at-Rest
Add “Data Integrity Field” in Data
Check for “Data Integrity Field” when reading from device
Data Stored with Data Integrity Field
CRC Checks on a per FC Frame Basis
Data Integrity for Data-in-Motion
Cisco MDS 9000

5. Migration to New Technologies
Application Servers
Enable SAN-based storage lifecycle management
Driven by technology refresh
Online data migration across heterogeneous arrays
Network-hosted storage virtualization provides non-disruptive data migration
Network-hosted storage virtualization provides high-performance migration capabilities
Migrate multiple TBs of data per hour
Data integrity checks
Ensure integrity of migrated data on new array
Cryptographically erase data on old array
Data Migration
Application I/O
Data Migration
Old Array
New Array

6. SAN Security for Digital Collection Preservation
Management Access Controls
Data Integrity and Encryption
SSHv2, SNMPv3, SSL
Centralized AAA
- RADIUS, TACACS+
Role Based Access Controls
VSAN based RBAC
IP ACLs
Security of Data-at-Rest
- Tapes and Disks
Security for Data-in-Motion
- IPSec for FCIP & iSCSI
Device Authorization and Authentication
Server and Target Access Controls
Port Security
Fabric Binding
Host/Switch Authentication
iSCSI CHAP Authentication
VSANs
Hardware Zoning
LUN Zoning
Read-only Zones

7. Summary
Reduce the costs of long-term storage, including media and facilities:
Fabric consolidation with large-scale SAN Directors, VSANs, SAN Routing
Storage Virtualization
Off-site Storage
Provide Data Integrity
CRC checks on a per frame basis
Data Integrity for data-at-rest
Enable migration to new technologies
High performance data mobility
Heterogeneous capability
Preserves data integrity
Robust and holistic security capabilities
Management access controls
Server and Target access controls
Device-level authorization and authentication
Data integrity and encryption of data-at-rest and data-in-motion
LAN
Clients
Servers
SAN
Storage Devices
SANs play a strategic role in storage architectures for digital collection preservation