DSM 5.0: iSCSI Features

Synology's DSM is quite feature rich, and it is impossible to do it justice in a single review. Starting with the DS214play, we decided to use each review to focus on one particular aspect of the DSM / firmware ecosystem. The DS214play review dealt with the media aspects and associated apps and the DS414j review explored the backup and synchronization infrastructure. With its Atom-based platform, comparatively large amount of RAM and four network links, we decided that the ioSafe 1513+ was the perfect candidate to explore the iSCSI features of Synology DSM 5.0

Background

Readers dabbling in virtualization would be quite familiar with iSCSI and can conveniently skip this sub-section to move on to the discussion of Synology's iSCSI features further down. In layman's terms, iSCSI is a protocol which allows storage on a networked device to be presented as a physical device on another machine. Readers wanting to go into further detail on the various aspects of iSCSI can refer to Wikipedia.

iSCSI has been attracting a lot of interest from NAS vendors in the recent past due to the rising popularity of virtualized infrastructure. Since iSCSI devices appear as physical drives on the machines in which they are mapped, they are ideal for virtual machine hosts. The mapped iSCSI drives can be used as physical disks for the guest machines or simply as a store for the virtual hard disk files mapped to the guests.

In order to understand iSCSI implementations, it is important to be aware of two concepts, the LUN and the target. The LUN (Logical Unit Number) refers to a device that can be addressed via SCSI protocols and supports read/write operations. On the other hand, a target is an endpoint in the SCSI system to which an initiator (or master) connects. A target without a LUN is essentially useless, as there is nothing that be read or written. A target can have one or more LUNs associated with it.

Source: VMWare

In simple setups, each target is associated with a single LUN. If there are multiple LUNs associated with a target, each of them will appear as a separate physical disk for the initiator connecting to the target. In the rest of this coverage, we will be proceeding with the single LUN on single target configuration.

Synology's iSCSI Implementation

Synology has a step-by-step guide to get iSCSI services up and running on DSM. In this section, we share our experience and configurations steps with the ioSafe 1513+. After completing all the benchmarks in the previous section, we were left with a SHR volume (1-disk fault tolerance) having a few shared folders. Upon proceeding to create an iSCSI LUN, we were presented with three choices, two of which were grayed out. The only available option was to create a iSCSI LUN (Regular Files).

File-Based LUNs

Synology implements iSCSI LUN (Regular Files) as files under the path "/volume1/@iSCSITrg/". As seen from the above screenshot, Synology touts the dynamic capacity management using Thin Provisioning as the most advantageous aspect. Trying to create such a LUN rightly exposes an option for 'Thin Provisioning'. Enabling this allows for capacity expansion at a later stage.

The ioSafe 1513+ carries virtualization logos in its marketing collateral ("VMware READY", "CITRIX ready" and "Windows Server 2012 Certified"). Synology NAS units carrying these logos have an option for 'Advanced LUN Features' that can be turned on or off. If enabled, VMware VAAI - vStorage APIs for Array Integration - support is reported back to the initiator. This offloads storage tasks such as thin provisioning and cloning of virtual disks from the VM host to the NAS itself. On the Windows side, the advanced LUN features include ODX - Offloaded Data Transfers - for data transfer to not clog up the network bandwidth if possible (i.e, data movement from one part of the NAS volume to another) as well as LUN snapshotting and cloning.

Block-Level LUNs

Instead of file-based LUNs, users can also create block-based ones. Synology sums up the implementation difference succinctly in this graphic:

The trick to enable creation of block-based LUNs is to avoid the auto-creation of a SHR volume (or any other RAID volume) when the NAS gets initialized in the beginning. If such volumes exist, it is necessary to remove them. Once all volumes are removed, we can see the two previously-grayed out options getting enabled.

There are two ways to proceed with either of these two options. One is to follow the directions given in the LUN creation wizard and make it automatically create a Disk Group in a particular RAID configuration. The other is to create a disk group beforehand and use it while initializing the new LUN. Note that SHR is not available for such groups.

Choosing the Single LUN on RAID option utilizes the full capacity of all the disks in the Disk Group to a single target with one LUN. Such a LUN could potentially be mapped on a VM host and multiple virtual hard disk files could be create on it. Synology indicates that this configuration provides the best performance.

On the other hand, the Multiple LUNs on RAID option allows for specification of LUN size during creation. Synology claims this provides optimized performance. The advantage is that multiple LUNs can be created to map on as separate physical drives for multiple VMs. The left-over space can be used for the creation of a standard volume on which one can have the usual CIFS / NFS shares. An important aspect to note is that the VAAI and ODX capabilities are not available for block-level LUNs, but only for the regular file-based ones.

In the next section, we deal with our benchmarking methodology and performance numbers for various iSCSI configurations in the ioSafe 1513+.

Multi-Client Performance - CIFS DSM 5.0: Evaluating iSCSI Performance
Comments Locked

43 Comments

View All Comments

  • bkleven - Friday, August 15, 2014 - link

    Most modern safes have a small hole in the back for cabling, which is usually intended to bring electricity into the safe to power humidity control equipment (and that is usually just a heater). When you are forced to place a safe in a location that is not climate controlled it's pretty important to prevent condensation from occurring anywhere inside.

    I've never looked into the impact that hole has on fire protection (I presume there is some impact) but obviously flooding is an issue unless you spay foam it or use some sort of grommet.
  • bsd228 - Monday, August 18, 2014 - link

    Cannon, for example, provides power and a cat 5 connection on most of their safes. It's not a problem.
  • Beany2013 - Saturday, August 16, 2014 - link

    I doubt the floor of my flat is rated to half a ton of spot weight. Nor that of most SOHO offices in houses or houses converted to office buildings (as with a lot of small town businesses).

    It's a pretty practical solution, though, I'll grant you, if your floor is rated for it.
  • robb.moore - Monday, August 18, 2014 - link

    Engineers have another word for power supplied into perfectly insulated boxes - "ovens" :)
    Great for baking bread, not so good for computers.

    Plus, if it gets hot enough inside, it'll actually cause the insulation to kickoff prematurely rendering the safe useless in a fire. It's a non-trivial balance between heat produced during normal operation and heat resistance during a fire event. DIY and proceed with caution.

    Robb Moore, CEO
    ioSafe Inc.
  • Essence_of_War - Wednesday, August 13, 2014 - link

    Nice review! I certainly don't think I could roll my own one of these!

    I had a question about some of the time scales you present in the misc/concluding remarks section.

    Have you considered testing/reporting RAID1 or RAID10 rebuild times? Or are they so much (and consistently so) faster than the RAID5 times that it isn't particularly interesting?
  • Gigaplex - Wednesday, August 13, 2014 - link

    How does a device like this ensure good thermal transfer such that the hard drives don't overheat under regular use, while still giving good thermal isolation so they don't melt in the event of a fire?
  • jmke - Wednesday, August 13, 2014 - link

    well they have active cooling, check the cooling fans. In case of fire you can see that white stuff "DataCast Insulation" will keep the heat of the fire under control, converting to gas (and thereby taking up the heat)

    I tested the smaller brother (ioSafe 214) with fire and water and filmed it. http://www.madshrimps.be/articles/article/1000593/...

    others have put them in cars , houses, etc https://www.youtube.com/watch?v=OygRpR4qtcM and the drives survive.

    During normal operation the active cooling keeps the drive well within the safe limits.
    If you want to enjoy data disaster recovery service make sure that you take HDDs from the qualified lists.

    you can also just launch up Ubuntu and mount the Synology drives like this to copy your data.
    ideal would be a second unit to just plug and play the drives...
  • Herschel55 - Wednesday, August 13, 2014 - link

    Folks, a normal DS1513+ diskless on Amazon is $780. This is $1600, more than twice the amount. For this price I would invest in a true DR solution that mirrored a normal DS1513+ to a cloud service like S3 or Glacier, or even another DS1513+ offsite. The latest Synology DSM supports all of the above and the strategy covers ALL disasters, natural or otherwise.
  • Gigaplex - Wednesday, August 13, 2014 - link

    This is a 5 bay device, which is usually configured in a RAID5 equivalent. With 4-6TB drives, that's 16-24TB capacity. Finding a cloud provider and Internet uplink capable of transferring that amount of data in a reasonable timeframe is not trivial.
  • robb.moore - Thursday, August 14, 2014 - link

    You're right in the mark Gigaplex. With this unit, 90TB is possible with 2 expansion bays. For people concerned about recovering quickly, it can take months (maybe a year?) to stream 90TB back. And for many cloud providers, they might offer to ship a single HDD back but not an entire array.
    Robb Moore, CEO
    ioSafe Inc.

Log in

Don't have an account? Sign up now