dell emc dell emc storage with genetec security center … · dell emc storage with genetec...

SurveillanceDell EMC Storage with Genetec SecurityCenter

Sizing GuideH13495

REV 2.6

Copyright © 2014-2018 Dell Inc. or its subsidiaries. All rights reserved.

Published May 2018

Dell believes the information in this publication is accurate as of its publication date. The information is subject to change without notice.

THE INFORMATION IN THIS PUBLICATION IS PROVIDED “AS-IS.“ DELL MAKES NO REPRESENTATIONS OR WARRANTIES OF ANY KIND

WITH RESPECT TO THE INFORMATION IN THIS PUBLICATION, AND SPECIFICALLY DISCLAIMS IMPLIED WARRANTIES OF

MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. USE, COPYING, AND DISTRIBUTION OF ANY DELL SOFTWARE DESCRIBED

IN THIS PUBLICATION REQUIRES AN APPLICABLE SOFTWARE LICENSE.

Dell, EMC, and other trademarks are trademarks of Dell Inc. or its subsidiaries. Other trademarks may be the property of their respective owners.

Published in the USA.

Dell EMCHopkinton, Massachusetts 01748-91031-508-435-1000 In North America 1-866-464-7381www.DellEMC.com

2 Dell EMC Storage with Genetec Security Center Sizing Guide

Introduction 5Solution overview......................................................................................... 6Scope........................................................................................................... 6Key objectives.............................................................................................. 7

Configured components 9Dell EMC Surveillance Lab test environment...............................................10Isilon clustered storage system................................................................... 10

Data protection...............................................................................11Cluster size..................................................................................... 11

Dell EMC Unity and EMC VNX.....................................................................11Dell EMC PowerEdge servers......................................................................12SV-16 and SV-32 appliance configuration................................................... 12

Solution components 13Dell EMC storage........................................................................................ 14Storage protocols....................................................................................... 14Genetec Security Center............................................................................ 14Genetec SV-16 and SV-32 appliances......................................................... 15RSA SecurID............................................................................................... 15

RSA SecurID two-factor authentication......................................... 15RSA SecurID appliance...................................................................16Credentialing methods................................................................... 16Deployment and maintenance........................................................ 16

Sizing the solution 17Block storage (SAN, local).......................................................................... 18

Unity.............................................................................................. 18SC series........................................................................................ 19VNX and VNXe............................................................................... 19Symmetrix VMAX.......................................................................... 20

File storage (NAS)...................................................................................... 21Isilon node and cluster....................................................................21

Servers.......................................................................................................22Dell EMC PowerEdge servers........................................................ 22Dell EMC PowerEdge FX chassis................................................... 24

Genetec SV-16 and SV-32 servers............................................................. 25ESXi host class servers.............................................................................. 25Bandwidth sizing guidelines........................................................................ 26

Testing and validation 27Test objectives........................................................................................... 28Test parameters......................................................................................... 28Tests conducted.........................................................................................28

Video playback test .......................................................................28Disk failure test..............................................................................29NIC failure test.............................................................................. 29

Chapter 1

Chapter 2

Chapter 3

Chapter 4

Chapter 5

CONTENTS

Dell EMC Storage with Genetec Security Center Sizing Guide 3

NIC Failure test with NIC aggregation in Active/Passive .............. 30Node poweroff test ...................................................................... 30

Storage bandwidth and configuration......................................................... 31SV-16 and SV-32........................................................................................ 32SV-16 and SV-32 scenario 2....................................................................... 32

Conclusion 33Summary.................................................................................................... 34

EMC VNX arrays............................................................................34Dell EMC Unity arrays....................................................................34EMC VNX-VSS arrays................................................................... 34EMC VNXe arrays..........................................................................34Dell EMC Isilon scale-out storage.................................................. 35

Chapter 6

CONTENTS


CHAPTER 1

Introduction

This chapter provides information on the purpose and scope of this solution.

l Solution overview.................................................................................................6l Scope...................................................................................................................6l Key objectives...................................................................................................... 7

Introduction 5

Solution overviewThe purpose of this guide is to help you understand the benefits of using a Dell EMCstorage solution with Genetec Security Center. The solution includes both hardwareand software elements for video surveillance.

Use this guide to determine the requirements for a successful Genetec SecurityCenter installation. The storage platforms include VMware ESXi hosts that are runningGenetec Security Center. This paper also includes information on VMwarevirtualization.

This document discusses Genetec Security Center. Security Center is a superset ofOmnicast, although Omnicast is indirectly discussed because it is the video recordingengine for Security Center.

This guide also provides information on tests that were carried out on the GenetecSV-16v2 and SV-32v1 appliances. The Genetec SV-16 and SV-32 are small form factordevices that are intended for minimal standalone implementations or as remoteentities in a large federated corporate or government implementation.

ScopeThis guide is intended for use by internal Dell EMC sales and pre-sales personnel, andqualified Dell EMC and Genetec partners.

The guidelines presented are for storage platform positioning and system sizing. Thesizing recommendations are based on performance and storage protocol conclusionsderived from Dell EMC testing.

The guidelines for sizing this video storage solution describe the use of the followingstorage platforms:

l Dell EMC Isilon™

l Dell EMC Unity™

l Dell EMC SC series™

l EMC VNX™

l EMC VNXe™

l EMC VMAX™

These guidelines include the following design considerations:

l Bandwidth recommendations for Genetec Security Center 5.4 SP4 and higherwhen they are attached to specific Dell EMC storage systems

l Dell EMC storage array configurations that are ideal for physical security solutionswith Security Center

l Configuration guidelines for the Genetec SV-16v2 and SV-32v1 appliances

l Architectural overview of Genetec Security Center

l Dell EMC storage considerations for Genetec Security Center

l Result summaries for the tests carried out by Dell EMC engineers in a VMwareESXi virtualized infrastructure

Use this guide to determine the best configuration for the following:

l Number of Genetec Archivers

Introduction


l Mix of nodes and Genetec Archivers based on the expected bandwidth in an Isilonimplementation

l Storage using Fibre Channel (FC) and Internet SCSI (iSCSI) on VNX systems

l Storage using Server Message Block (SMB) on Isilon systems

l Load factors related to the use of Dell EMC storage arrays in the customer'ssolution

Note

All performance data contained in this report was obtained in a rigorously controlledenvironment. Network topology and system environment variables can havesignificant impact on performance and stability. Follow the best practices as outlinedin the Dell EMC Storage with Genetec Security Center: Configuration Guide regardingnetwork and storage array configuration. Server and network hardware can also affectperformance. Performance varies depending on the specific hardware and software,and might be different from what is outlined here. Performance results will be similar ifyour environment uses similar hardware and network topology.

Key objectivesThe configurations documented in this guide are based on tests conducted in the DellEMC Surveillance Lab and actual production implementations.

These are the key objectives of this solution:

l Measure the sizing needs for specific system requirements so that animplementation can be correctly sized and the appropriate Dell EMC products canbe matched to a customer's requirements.

l Recommend VNX cache configuration.

l Determine the VNX, VNXe, and VSS LUN bandwidth within the storage pool.

l Recommend an Isilon SMB configuration.

l Calculate array or node maximum bandwidths.

l Recommend disk drive types.

l Determine the Archiver service's maximum bandwidth to specific Dell EMCstorage arrays and clusters.

l Determine the Genetec SV-16v2 and SV-32v1 performance properties.

l Confirm the previous test results with lab controlled failures, such as disabledstorage processors, disk rebuilds, node removals, and network path failures.

Introduction

Key objectives 7

Introduction


CHAPTER 2

Configured components

This chapter provides information about the components configured in this solution.

l Dell EMC Surveillance Lab test environment...................................................... 10l Isilon clustered storage system...........................................................................10l Dell EMC Unity and EMC VNX............................................................................ 11l Dell EMC PowerEdge servers............................................................................. 12l SV-16 and SV-32 appliance configuration........................................................... 12

Configured components 9

Dell EMC Surveillance Lab test environmentThe Dell EMC Surveillance Lab is constantly being upgraded to the most recentsoftware releases.

In order to test this solution, the Dell EMC Surveillance Lab was configured as follows:

Virtualized environment:

l 8vCPUs

l 16 GB memory

l Network adapter type: VMXNET3 (GbE and 10 GbE), E1000, or VMXNET2 (GbEonly)

l Isolated VLAN for storage (if not FC)

Physical/Baremetal minimum environment:

l 8 Cores

l 32 GB memory

Network environment:

l Network adapter type: 10 GbE

l Camera user VLAN

l Storage VLAN

All storage and server tests are conducted using 10 GbE NICs unless otherwise noted.

For all the tests, the virtual CPU (vCPU), memory, and network were configuredaccording to Genetec best practices. The VMware vSphere configuration was inaccordance with the VMware Compatibility Guide (www.vmware.com/resources/compatibility/search.php). In addition, Dell EMC PowerPath™ is recommended for usewith block storage (FC and iSCSI) implementations on VNX and VNXe arrays, whileMicrosoft MPIO is recommended for use with Unity arrays.

The Dell EMC Surveillance Lab's host hardware met and exceeded the minimumsystem requirements for an ESXi/ESX installation. The Genetec Archiver VM wasrunning on an ESXi 6.0 host using Cisco UCS B230 Blade Servers, and various DellEMC servers, such as the Dell EMC FC630s, FC430s, and R730xd. For moreinformation about VM configuration, see the General recommendations for storageand sizing section of the Using EMC VNX storage with VMWare VSphere guide.

Watermarking and motion detection require additional vCPU and memory.

Isilon clustered storage systemIsilon NAS was designed and developed specifically for storing, managing, andaccessing digital content and other unstructured data.

An Isilon clustered storage system is composed of three or more nodes. Each node is aself-contained, rack-mountable device that contains industry-standard hardware suchas disk drives, CPUs, memory, and network interfaces. These nodes are integratedwith the proprietary Isilon OneFS™ operating system, which is a distributed networkedfile system that unifies a cluster of nodes into a single shared resource.



http://www.vmware.com/resources/compatibility/search.php

http://www.vmware.com/resources/compatibility/search.php

Data protectionOneFS does not rely on hardware-based RAID for data protection. The Isilon systemuses the Reed-Solomon algorithm for N+M protection with Forward Error Correction(FEC).

Protection is applied at the file level, enabling the cluster to recover data quickly andefficiently. Nodes, directories, and other metadata are protected at the same or ahigher level as the data blocks they reference. Since all data, metadata, and FECblocks are spread across multiple nodes, dedicated parity drives are not required. Formore information about Isilon data protection, see Dell EMC Isilon OneFS: A TechnicalOverview.

Although cluster sizes as small as three nodes are possible, for surveillanceapplications we recommend a minimum of nodes. Sizing calculations need to include aminimum free space calculation for proper cluster sizing. We recommend a cluster sizethat enables a node to be removed while retaining a minimum of 10 percent free spacein the remaining capacity. This cluster size ensures that node removal and nodefailures have minimal or no impact on video ingestion.

The Isilon sizing tool provides an accurate calculation. You can find this tool athttps://isilon-sizing-tool.herokuapp.com. Other sizing tools from video managementsoftware (VMS) and camera vendors may also be used for sizing the necessarybandwidth and storage capacity.

Cluster sizeWe recommend a minimum cluster size of nodes, even if you are not writing to all ofthem. For example, if you are implementing a four-node Archiver solution, implement a-node cluster. This also meets the recommended best practices for data protection.

To estimate the ideal number of nodes in a cluster, you need to consider clusterbandwidth and capacity.

Sizing by bandwidth

We recommend a cluster size with one or more additional nodes than calculated inbandwidth sizing. This ensures that failover of a node allows for redistribution ofNAS connections and avoids any frame loss.

Sizing by aggregate capacity

We recommend a cluster size with enough usable capacity to handle 110 percentof the calculated space requirement, with a minimum added capacity of one fullnode plus 10 percent. The values are based on camera bit rate.

The Isilon sizing tool can use both the sizing by bandwidth and sizing by aggregatecapacity methods when calculating ideal cluster size.

Dell EMC Unity and EMC VNXDell EMC Unity and EMC VNX storage arrays are ideal for recording and managingterabytes of video from distributed locations. This section describes best practices forconfiguring a Unity or VNX storage system for this solution. The VNX family includesthe VNX, VNXe, and VNX-VSS series arrays.

The Unity and VNX series arrays are designed for midtier to enterprise storageenvironments, are ideal for distributed environments, and can scale to handle largepetabyte (PB) environments with block-only requirements at central locations.


Data protection 11

https://isilon-sizing-tool.herokuapp.com

https://isilon-sizing-tool.herokuapp.com

Dell EMC PowerEdge serversDell EMC PowerEdge™ servers are ideal for recording and managing terabytes of videofrom distributed locations.

PowerEdge 1U servers are used where external NAS clusters or block arrays areplanned for surveillance storage.

PowerEdge 2U rack servers are used for local video storage where externalsurveillance storage will not be used.

SV-16 and SV-32 appliance configurationThe SV-16 and SV-32 are fixed-configuration appliances. The operating system andGenetec Security Center are pre-installed and configured. These appliances are suitedfor back office or remote location implementations.

You can use iSCSI arrays, NAS arrays, or clusters for storage if they are available atthe remote site.



CHAPTER 3

Solution components

This chapter provides information about storage options for video and audio data.

l Dell EMC storage................................................................................................14l Storage protocols............................................................................................... 14l Genetec Security Center.................................................................................... 14l Genetec SV-16 and SV-32 appliances.................................................................15l RSA SecurID.......................................................................................................15

Solution components 13

Dell EMC storageDell EMC storage arrays are ideal for storing video and audio data.

This guide describes the tests for the following storage arrays:

l Isilon clusters

l Unity arrays

l SC arrays

l VNX arrays

l VNXe arrays

l VMAX arrays

Note

The solution also supports VMAX arrays but we have not fully benchmarked thissystem. Consult with the Dell EMC Physical Security Solution Development teamfor VMAX array configuration recommendations.

For our testing, we used both single and dual storage processors for the full range ofVNX, VNXe, and VSS storage arrays and single- and multi-node performance testingon the Isilon storage array.

Storage protocolsDell EMC uses standard file protocols to enable users and applications to access datathat is consolidated on a Dell EMC storage solution.

This guide provides information about these network protocols:

l FC

l iSCSI

l SMB (CIFS)

Genetec Security CenterA Genetec Security Center installation can consist of a single server or multipleservers in a hierarchical structure.

You can configure Security Center to handle anything from a few cameras to severalthousand cameras.

Note

Security Center 5.5 is not supported. The Dell EMC Surveillance Lab has validatedSecurity Center versions up to 5.4 and Security Center 5.6 or later.

The following table describes two primary Security Center services.

Solution components


Table 1 Security Center primary services

Service Description

Archiver Security Center records video through the Archiver service. The Archiveris responsible for dynamic discovery and status polling of units. This iswhere all video and multimedia streams are processed and committed tostorage. "Archiving" is the term used for storing video.

Directory The Directory is the main server application whose service is required toprovide a centralized catalog for the other Security Center services andapplications on the system. From the Directory, applications can reviewand establish connections, and receive centralized configurationinformation.

Genetec SV-16 and SV-32 appliancesGenetec SV-16 and SV-32 are IP video physical security appliances composed of theDell EMC software preloaded on a small form factor (SFF) Windows 7 Embeddedcomputer.

The SV-16v2 compact fixed-hardware appliance is designed to accommodate up to 16cameras, or up to 4 MB/s (32 Mb/s) total throughput. The SV-32v1 can handle up to32 cameras, or up to 8 MB/s (64 Mb/s) total throughput.

If an Dell EMC iSCSI storage array is already available, or is being considered for thesite, then that storage array may have enough remaining overhead to support videofrom the SV-16v2 or SV-32v1.

RSA SecurIDThis section describes the security benefits of RSA® SecurID®. In this solution, isinstalled with an RSA-secured domain, increasing Windows and Security Centersecurity.

RSA authentication uses constantly changing RSA tokens to enhance the user'sSecurity Center experience by providing a single login structure for accessing multipleSecurity Center applications.

RSA SecurID two-factor authenticationRSA SecurID two-factor authentication is based on something you know, a passwordor personal identification number (PIN), and something you have, an authenticator.

This combination provides much more reliable user authentication than reusablepasswords alone.

To access resources protected by the RSA SecurID system, users combine theirsecret PIN with the codes generated by their RSA SecurID authenticators. The resultis a unique, one-time-use passcode that is used to positively identify, or authenticate,the user. If the RSA SecurID system validates the code, the user is granted access tothe protected resource. If it is not recognized, the user is denied access.

RSA SecurID two-factor authentication is based on something you know -a passwordor personal identification number (PIN) -and something you have-an authenticator.

Solution components

Genetec SV-16 and SV-32 appliances 15

RSA SecurID applianceThe RSA SecurID Appliance includes the RSA Authentication Manager, the enginebehind the industry-leading two-factor user authentication technology, in anintegrated, rack-mountable hardware appliance.

Used with RSA SecurID authenticators, the RSA SecurID Appliance validates theidentities of users before granting access to critical company resources. Additionally,the system logs all transactions and user activities, allowing administrators to use it asan auditing, accounting, and compliance tool.

With quick setup times, a web-based management interface, streamlined credentialdeployment, and user self-service, you can gain greater cost savings and improvedsecurity.

RSA, Active Directory, and DNS must be integrated before integrating with SecurityCenter.

Credentialing methodsThe RSA SecurID Appliance supports authenticators in a variety of form factors.

From the traditional hardware authenticators to software-based authenticators thatinstall on PCs and smart phones to the SecurID On-demand Authenticator thatdelivers one-time codes using Short Message Service (SMS) or email. All of thesecredentials are centrally managed from a common interface.

Deployment and maintenanceThe RSA SecurID Appliance is designed so that a customer can be up and running in aslittle as 30 minutes.

The built-in web server and web-based GUI provide access to the straightforwardsetup and management console from any web browser.

In addition to the primary setup, common tasks manageable through the web interfaceinclude:

l Adding users and assigning authenticators

l Installing and configuring agents

l Viewing the activity monitor

l Specifying the location of backup files

Native LDAP integration enables the RSA SecurID Appliance to point to a singleauthoritative data store in real time for user and group information. Both the Base andEnterprise editions of the RSA Authentication Manager software include RSACredential Manager. The RSA Credential Manager is a completely integrated softwaremodule that enables user self-service (Base and Enterprise) and workflow provisioning(Enterprise only) to dramatically speed the onboarding of users to their credentials.

Solution components


CHAPTER 4

Sizing the solution

This chapter provides information to enable you to quickly determine the correctstorage array based on your customer's bandwidth requirements.

l Block storage (SAN, local)..................................................................................18l File storage (NAS)..............................................................................................21l Servers.............................................................................................................. 22l Genetec SV-16 and SV-32 servers..................................................................... 25l ESXi host class servers...................................................................................... 25l Bandwidth sizing guidelines................................................................................26

Sizing the solution 17

Block storage (SAN, local)We conducted validation tests to determine how Genetec works with Dell EMC blockand local storage arrays.

UnityWe conducted the validation tests to determine how Genetec works with Unity™

storage arrays.

A Genetec Archiver supports up to 37.5 MB/s (300 Mb/s) and up to 300 cameras.

The test results shown in the following table are based on a conservative model toensure that the constant-bandwidth video traffic is unaffected during a single storageprocessor (SP) maintenance cycle, disk rebuild, or similar performance-intensiveevents.

Table 2 Dell EMC Unity strorage array results

Array RAID Disks No. ofarchivers

Bandwidth (MB/s) Maximum(RAW)

Perarchiver

ArrayiSCSI

Array FC

Unity300 6 80 8 37.5 300 330 2.34 PB

6 150 15 37.5 562 618

Unity400 a 6 120 12 37.5 450 495 3.9 PB

6 250 24 37.5 900 989

Unity500 6 64 7 37.5 262 288 7.8 PB

6 104 13 37.5 488 536

6 240 30 37.5 1125 1136

6 500 40 37.5 1500 1649

Unity600 6 100 13 37.5 488 536.8 9.7 PB

6 200 30 37.5 750 825

6 400 40 37.5 1500 1650

6 500 50 37.5 1875 2063

6 600 50 37.5 1875 2062

6 1000 50 37.5 1875 2062

a. These values are extrapolated from Dell EMC Surveillance Lab test results.

Sizing the solution


SC seriesThe test results are based on a model in which the constant-bandwidth surveillancevideo traffic remained unaffected during select storage failure scenarios, such as diskrebuild, and failing network paths.

We performed the following tests to ensure a worst-case scenario for all sizingparameters:

l Disk drive failures

l Storage controller failures

l NIC failures

We performed all tests using 5 Mb/s cameras.

The following tables provide bandwidth-sizing guidelines based on our test results.

Table 3 Dell EMC SC series storage array results

Array RAID Disks Bandwidth(MB/s)

No. ofrecorders

SC %utilization

Maximum(RAW)

No. Size Perarchiver

ArrayiSCSI

SC5020 6 (8+2) 70 8 TB 37.5 262 7 35 2 PB

Note

All disk drives are NL-SAS 7200 RPM unless otherwise noted.

VNX and VNXeWe conducted the validation tests to determine how Genetec works with VNX andVNXe storage arrays.

A Genetec Archiver supports up to 37.5 MB/s (300 Mb/s) and up to 300 cameras.

The test results shown in the following table are based on a conservative model toensure that the constant-bandwidth video traffic is unaffected during a single storageprocessor (SP) maintenance cycle, disk rebuild, or similar performance-intensiveevents.

Table 4 EMC VNX-VSS100 storage array results

Storageprotocol

Array Array BW(MB/s)

RAIDtype

LUN BW(MB/s)

Utilization(percent)

Disks Maximum(RAW)

LUN SP

iSCSI VNX-VSS100 300 (2 port GbE) 6 (6+2) 37.5 80 16 90 360 TB

6 (14+2) 37.5 80 21

Our results are based on 4 port 1 GbE adapters, which achieved a bandwidth of 300MB/s. The 2 port test was conducted using only 2 ports of a 4 port GbE adapter.

Sizing the solution

SC series 19

Table 5 EMC VNX/VNXe storage array results

Storage protocol Array Array BW (MB/s) Disks Maximum (RAW)

iSCSI VNXe1600* 300 35 400 TB

300 200

VNXe3200* 210 120 500 TB

210 150

VNX5200 446 75 500 TB

VNX5400* 536 120 1 PB

536 250

VNX5600* 616 120 2 PB

985 240

985 500

VNX5800* 739 120 3 PB

1182 240

1774 360

1774 750

VNX7600* 887 120 4 PB

1419 240

2128 360

2838 480

2838 1000

VNX8000* 1064 120 6 PB

1703 240

2554 360

3405 480

3405 600

3405 1000

* These values are extrapolated from Dell EMC Surveillance Lab test results.

Symmetrix VMAXWe tested the Symmetrix VMAX as part of the server sizing test.

The test was functional in scope and was not intended to maximize the capabilities ofthe Symmetrix VMAX storage array or provide extensive benchmarking. The followingtable displays the results.

Sizing the solution


Table 6 Symmetrix VMAX results

Array Array bandwidth LUN bandwidth(MB/s)

Storage protocol

VMAX N/A 37.5 FC

File storage (NAS)The Dell EMC Surveillance Lab conducted validation tests to determine how Genetecworks with Dell EMC file storage clusters.

To maximize performance for surveillance workloads, the Dell EMC Surveillance Labrecommends the following best practices:

l Use two SSD system drives per node in clusters where it is supported, such as theNL-Series

l Cluster utilization not to exceed 70 percent capacity

Isilon node and clusterThe test results are based on a model in which the constant-bandwidth surveillancevideo traffic remained unaffected during a single node maintenance cycle, disk rebuild,SP failure, or non-disruptive upgrade.

Sizing guidelines are based on a combination of storage capacity and per nodebandwidth. When sizing a cluster, make sure to evaluate the number of servers thatwrite and read from nodes in addition to overall storage capacity.

We used 1 GbE interfaces with no more than two SMB connections per interface. A 10GbE interface can accommodate up to four Archiver connections at the maximumGenetec-supported values.

We performed all tests with a per-camera bandwidth of 4 Mb/s, so a single Archiverthat handles 37.5 MB/s can support 75 such cameras.

We performed all tests with node or drive failures in place in the cluster (for example,with Isilon FlexProtect™ running) to ensure a worst-case scenario for all sizingparameters.

Note


The following table provides bandwidth-sizing guidelines based on our test results.

Table 7 Dell EMC Isilon node and cluster (SMB) test results

Cluster OneFSversion

Archivers pernode

Bandwidth (MB/s) Drives Size MaximumCluster Raw

Per node Per host

A200 8.1 a 1 37.5 37.5 4 TB b 17 PB

A2000 8.1 a 1 37.5 37.5 10 TB 28 PB

2 75 37.5 10 TB

Sizing the solution

File storage (NAS) 21

Table 7 Dell EMC Isilon node and cluster (SMB) test results (continued)

Cluster OneFSversion

Archivers pernode

Bandwidth (MB/s) Drives Size MaximumCluster Raw

Per node Per host

HD400 8.1 a 1 37.5 37.5 6 TB 50.9 PB

2 75 37.5 6 TB

8.0.x 1 37.5 37.5 6 TB

2 75 37.5 6 TB

3 112.5 37.5 6 TB

NL410 8.1 a 1 37.5 37.5 4 TB 30.2 PB

2 75 37.5 4 TB

8.0.x 1 37.5 37.5 4 TB

2 75 37.5 4 TB

3 112.5 37.5 4 TB

X410 7.2.x 1 37.5 37.5 1 TB 20.7 PB

2 75 37.5 1 TB

3 112.5 37.5 1 TB

NL400 7.0.x 1 37.5 37.5 1 TB 30.2 PB

2 40 20 1 TB

4 40 10 1 TB

a. See Dell EMC Storage with Genetec Security Center Configuration Guide for additional information regarding OneFS 8.1installations.

b. Uses SATA drives.

Note

All disk drives are NL-SAS 7200 RPM unless otherwise noted.

ServersWe conducted functional tests to determine how Genetec works with Dell EMCservers.

Dell EMC PowerEdge serversThe test results are based on a model in which the constant-bandwidth surveillancevideo traffic remained unaffected during select storage failure scenarios, such as diskrebuild, failing processors, and failing network paths.

We performed all tests with disk drive failures, node failures, storage process failuresor NIC failures to ensure a worst-case scenario for all sizing parameters.

Multi-Archiver tests were conducted with a single instance of Security Center runningmultiple Archiver services.

Sizing the solution


We used 10 GbE interfaces with up to four Archiver connections at the maximumGenetec supported values. We performed all tests with a per Archiver bandwidth of37.5 MB/s with a combination of 1 Mb/s and 5 Mb/s cameras.

Dell EMC recommends using RAID 6 with local storage to accommodate the diskrebuild duration. For example, in the Dell EMC Surveillance Lab, a disk rebuild in a 16 x10 TB disk system takes at least 36 hours to complete when 10TB of data and 37.5MB/s of write are in place.

The following tables provide bandwidth-sizing guidelines based on our test results.

Table 8 Dell EMC PowerEdge server with local storage

R740xd R730xd

Security CenterVersion

5.7 5.5 5.5 5.5

No. of Archiver rolesper server

3 1 1 2

Drive type NL-SAS NL-SAS NL-SAS NL-SAS

No. of drives X Drivesize TB

14 X 10 16 x 4 15 x 10 14 x 10

RAID 6 6 (16 x 4) 6 (15 x 10) 10

Hot spare 1 0 1 1

Total write BW perserver (MB/s)

112.5 37.5 37.5 75

Total IOPS 800 - - -

Disk rebuild duration(Days)

11 12 11 10.5

Video data storage Local Local Local Local

RAM (GB) 64 64 64 64

Nic speed 2X10 Gb 2X10 Gb 2X10 Gb 2X10 Gb

CPU CoresProcessorGHz

2 X 12Intel Xeon Gold61262.60

2 X 12Intel Xeon E5-2650 v42.20

Note

All tests performedon local storage are Genetec certified.

Table 9 Dell EMC PowerEdge server with external storage

R740 R730xd R630 a R530 R430

Security CenterVersion

5.7 5.5 5.5 5.5 5.5

Write BW (MB/s) 37.5 75 75 37.5 37.5

Sizing the solution

Dell EMC PowerEdge servers 23

Table 9 Dell EMC PowerEdge server with external storage (continued)

R740 R730xd R630 a R530 R430

Archivers per host 2 2 1 1 1

Video data storage HD400,NL410

HD400,NL410

HD400,NL410

HD400,NL410

HD400,NL410

RAM (GB) 64 64 64 64 64

Nic speed 10 Gb 10 Gb 10 Gb 10 Gb 10 Gb


2 X 12Intel XeonGold 61262.60

2 X 12Intel XeonE5-2650 v42.20



2 X 6Intel XeonCPUE5-2640 v42.40

a. These values are extrapolated from Dell EMC Surveillance Lab test results.

Note

Servers that are used for external storage must meet Genetec's minimumrequirements.

Dell EMC PowerEdge FX chassisThe PowerEdge FX architecture is based on a modular, building-block concept thatmakes it easy for enterprises to focus processing resources where needed.

The FX2 is a 2U rack-based, converged computing platform that combines the densityand efficiencies of blades with the simplicity and cost advantages of rack-basedsystems. The FX2 hosts flexible blocks of server and storage resources while providingoutstanding efficiencies through shared power, networking, I/O, and managementwithin the chassis itself.

Server blocks

Server sled options are FC830, FC640, FC630, FC430.

Storage block

The PowerEdge FD332 storage block provides dense, highly scalable, directattached storage for most FX infrastructures (it does not support the FM120microserver). It is a critical component of the FX architecture, enabling future-ready scale out infrastructures that bring storage closer to compute foraccelerated processing.

IO Blocks

The FX2 chassis comes with 1Gb or 10Gb pass through IO modules, or optional IOaggregator modules. The FN410s, FN410t, and the FN2210s are powerful IOaggregators that provide plug and play network switch Layer 2 functions.

For more details about the FX chassis, see the Dell Products page. For networkingbest practices, see the Dell EMC Surveillance Networking Reference Architecture.

FX2 Chassis

Storage Block used FD332

Sizing the solution


http://www.emc.com/collateral/technical-documentation/h16965-dellemc-storage-ra-network.pdf

FX2 Chassis

Video Data storage Local, FD332

Drive type and Size SAS, 14 X 1.2 TB

RAID Used 6

Server block used FC640


2 X 12Intel Xeon Gold 61262.60

RAM GB 64

Network speed 2 X 10 Gb

Security Center Version 5.7

No. of Archivers per server 2

Write BW per Archiver 37.5

Total Write BW per server (MB/s) 75

Total Read (MBps) 15

Genetec SV-16 and SV-32 serversThe Genetec SV-16 and SV-32 are small form factor, fixed-configuration appliancesintended for low bandwidth. with a maximum of 16 and 32 cameras respectively.

The following table shows the testing results for maximum bandwidth and maximumnumber of cameras for the Genetec SV-16v2 and SV-32v1 appliances.

Table 10 Appliance test results

Array Bandwidth(MB/s)

Maximumcameras

SV-16v2 Any Dell EMCstorage

4 16

SV-32v1 Any Dell EMCstorage

8 32

ESXi host class serversThe ESXi host can run on various host classes (processor chips) across multipleservers. For more information about server comparisons, see the Dell EMC serverstested section of the Dell EMC Surveillance Validation Matrix.

Sizing the solution

Genetec SV-16 and SV-32 servers 25

HTTPS://WWW.EMC.COM/COLLATERAL/WHITE-PAPERS/H14530-EMC-VIDEO-SURVEILLANCE-VALIDATIONS.PDF

Bandwidth sizing guidelinesAll solution tests were performed in a lab environment. The storage system, cameras,and VLANs in the lab environment were dedicated to these tests.

Connections to the storage system under test conditions were restricted to SecurityCenter Archiver, monitoring, and web management stations. Expect some variancebetween the lab results and a production environment.

Sizing the solution


CHAPTER 5

Testing and validation

This chapter describes the testing used to validate this solution.

l Test objectives...................................................................................................28l Test parameters.................................................................................................28l Tests conducted................................................................................................ 28l Storage bandwidth and configuration................................................................. 31l SV-16 and SV-32................................................................................................32l SV-16 and SV-32 scenario 2...............................................................................32

Testing and validation 27

Test objectivesMany factors must be considered when designing your solution.

The Dell EMC Surveillance Lab tests focus on storage-related factors with thefollowing objectives:

l Determine the bandwidth for various Dell EMC storage arrays using FC and iSCSI.

l Determine the bandwidth for various Dell EMC storage clusters using SMB.

l Determine the best configuration parameters for Isilon and VNX storage options.

l Determine best video storage performance requirements for use with Isilon scale-out storage clusters and VNX storage arrays.

l Determine the maximum bandwidth with multiple Archivers.

l Determine all factors with a lab-controlled failure, such as disabling a storageprocessor, rebuilding disks, removing a node, or network path failures.

Test parametersAll test parameters and scenarios reflect standard production behavior for GenetecSecurity Center under storage-intensive conditions, including typical storagefunctions and failures. We followed best practices for recovery and break-fix issuesfor normal situations that might arise in a standard production environment.

We used the following parameters to perform the tests:

l All test measurements were based on active failure scenarios. Failure scenariosinclude drive failures and recovery, forced Isilon node failures, and storageprocessor failures. These scenarios generally caused background jobs to run, suchas Isilon's FlexProtect. Testing with these realistic scenarios helps ensure asuccessful implementation that is able to withstand various types of failures.

l The IP network (Layer 2) is a flat, high-availability network with plenty of capacity,which enabled us to focus on the products we were testing.

l All tests assumed uniform distribution of bandwidth from the Genetec Archiver.

Tests conductedWe ran tests with the SmartConnect™ configuration in place and the SMB shares weremounted using the SmartConnect zone name.

Video playback testAs video is being written to the storage, video is simultaneously recalled or reviewed ata rate equal to 20 percent of the write rate. Tests are run with the SmartConnect™

configuration in place and the SMB shares are mounted using the SmartConnect zonename.

The review did not affect the write rate, video quality, or result in dropped video.



Disk failure testA single disk failure is the most common failure affecting storage systems today.When a disk fails, that disk is removed and replaced. The replacement disk is thenreconstructed.

The Unity and SC block storage arrays were protected using RAID with hot sparedisks. For the test, disk failure scenarios were induced and the data rebuild to the hotspare disks was observed with effect to write bandwidth.

The Isilon cluster was protected using a +2 protection scheme that allows for twosimultaneous disk failures. For the test, two disks are failed and then recovered. TheSmartFail process started and the CPU utilization of the node increased with noobserved effect to the write streams.

NIC failure test

The Unity and SC block storage arrays were configured with multiple paths to therecorders using Microsoft MPIO. Multiple NICs were configured with the recordersand controllers for redundancy. The Unity and SC series hard NIC failure test removesone nic cable from the array. Recorders that were configured with multipathingreconnected to the volume across another available path. To reduce the reconnectiontime and eliminate video loss, adjust the TCP retransmission timers. For moreinformation, see the Dell EMC Storage with Genetec Security Center ConfigurationGuide.

The Isilon hard NIC failure test removes one NIC cable from the active node that wasinvolved in active recording. After the NIC failure, writing to the same node failed.When the network fails, the server must recognize the failure, then it must establish anew connection. Also, when the network fails TCP socket connections are left openand remain open on the cluster until Isilon's OneFS forces them closed, which allowsthe server to continue writing.

We can force the open TCP sockets to close for a duration of less than 2 minutes byreducing the TCP keep idle and TCP keep interval timeout to the optimumvalues recommended by Isilon Engineering.

To reduce the video loss duration due to the TCP Socket Open condition, set thepersistent values in the sysctl.config file as follows to reduce the impact durationtime significantly:

isi_sysctl_clusternet.inet.tcp.keepidle=61000 isi_sysctl_clusternet.inet.tcp.keepintvl=5000

Refer to the KB Article 89232, Configuring sysctls and making sysctl changes persistthrough node and cluster reboots and upgrades for further information about how toconfigure these parameters.

Note

NIC failure impact can be overcome by using NIC aggregation in Active/PassiveFailure aggregation mode, which is explained in the next test case. Connectivity to thenodes that are not affected by the network outage continues to be availablethroughout the test scenario and no impact was observed.


Disk failure test 29

https://www.emc.com/collateral/white-papers/h13476-emc-storage-genetec-sec-center-configuration-wp.pdf


http://support.emc.com/kb/89232

Unity and SC arrays

NIC Failure test with NIC aggregation in Active/PassiveThe hard NIC failure test with Active/Passive aggregation was run by removing theactive NIC port cable. After the network failure, writing to the same node continuedand the NIC that was passive was immediately changed to the active NIC. The NICfailure caused no apparent loss.

TCP transmission timers can be adjusted to reduce the reconnection times during Nicfailures on recorders that use Microsoft MPIO. For more information, see the DellEMC Storage with Genetec Security Center Configuration Guide.

Note

NIC aggregation in Active/Passive mode remedies only a network disconnection/NICfailure that happens on the Isilon node or the corresponding switch port where it isconnected.

Node poweroff testAn unexpected single node hard failure was simulated, which causes the servers thatwere writing to that node to reconnect to a new node.

During the tests, the servers on the failed node reconnected to a new node, but didnot start writing again for an aggregate (reconnect and start writing) duration of up to52 seconds while waiting for writing to the SMB share to be re-started.

Also, the removal or addition of a node causes an interrupt to the cluster. Therefore,video servers writing to the other nodes might experience a short interruption. Theduration of the interruption can be reduced by modifying the OneFS environmentvariables.

The following changes are required to modify the remove or add node interruption:

declare -i COUNT MDSBASE=10000COUNT=$((1.01 * $BASE))MDS=$(($BASE * 0.75))isi_sysctl_cluster kern.maxvnodes=$BASEisi_sysctl_cluster kern.minvnodes=$BASEisi_sysctl_cluster efs.lin.lock.initiator.lazy_queue_goal=$COUNTisi_sysctl_cluster efs.ref.initiator.lazy_queue_goal=$COUNTisi_sysctl_cluster efs.mds.block_lock.initiator.lazy_queue_goal=$MDSisi_sysctl_cluster efs.bam.datalock.initiator.lazy_queue_goal=$MDS

Note

During an abrupt failure of a node, the recorders writing to that node reconnect toSmartConnect and can buffer the video during reconnection. Data tat was alreadywritten to the disk cannot be recovered which can range from about 4 to 5 seconds.

WARNING

If running a mixed workload, these changes can adversely affect the otherworkloads that might be present on the cluster.





Storage bandwidth and configurationThe purpose of the storage bandwidth test was to evaluate video storage and itsapplication to the various Dell EMC storage arrays and nodes.

Additional tests evaluated ESXi host hardware in relationship to virtual CPU settingsand the resulting bandwidths. We also conducted tests on the Genetec SecurityCenter SV-16v2 and SV-32v1 appliances and RSA SecurID.During all the tests, we assumed that Genetec Security Center is correctly configuredaccording to Genetec's best practices and operates within the bandwidth, cameracount, and other Genetec parameters.

Procedure

1. Configured video storage for a Dell EMC storage system.

2. Configured Genetec Archivers

3. Set up camera simulators (traffic generators) to produce a traffic load to eachGenetec Archiver at the desired bandwidth.

4. Verified that motion detection was in the On state for all cameras.

5. Evaluated the network and video storage to ensure an error-free environmentat the induced bandwidth.

6. Introduced storage device errors including:

l Disk failures and rebuilds on VNX and VNXe arrays

l Use of only one VNX or VNXe storage processor

l Disk failures and rebuilds on Isilon nodes

l Initiation of Isilon node failures and recoveries

l Initiation of Isilon node removals (downsizing a cluster)

l Initiation of Isilon node additions (scaling up)

l NIC failures with active/active and active/passive configurations

7. Captured the storage system and host statistics.

8. Based on the test results:

l If no issues were detected, incremented the bandwidth.

l If issues were detected, decreased the bandwidth.

This procedure was repeated until the maximum error-free bandwidth wasdetermined.

Results

Archivers for the storage protocol to be tested (FC, iSCSI, SMB2).

The test results associated with the previous procedure, for each tested Dell EMCstorage array or cluster, are presented in Dell EMC Storage with Genetic SecurityCenter Configuration Guide. The test results provide information about the maximumexpected bandwidth per array or node, the disk configuration, as well asrecommendations for various configuration parameters derived from extensivetesting.


Storage bandwidth and configuration 31

SV-16 and SV-32We tested the SV-16v2 and SV-32v1 preloaded Genetec Security Center applicationsstack against the Genetec bandwidth and camera specifications.

Procedure

1. Configured the target storage array.

2. Applied a camera load representing the maximum allowed SV-16 or SV-32bandwidth.

3. Determined the optimum LUN or share performance within the scope of theSV-16 or SV-32 operating parameters.

4. Tested with the maximum number of cameras allowed in an SV-16 or SV-32environment.

Results

Test results are provided in the Configuring the SV-16 and SV-32 section of thisdocument.

SV-16 and SV-32 scenario 2We verified the granularity of user permissions indicated by the users' Security Centeraccess rights to the Config Tool and Securtiy Desk clients.

Procedure

1. Removed the user from the Security Center Group in Active Directory.

2. Logged in to the Windows domain using an RSA passcode created by combininga PIN with a token generated by an RSA authenticator.

3. Double-clicked the Security Center client icon to start the application.

4. Selected the Use Windows credentials option and pressed Enter.

Results

The user successfully accesses the Windows domain but is denied access to theSecurity Center client application.



CHAPTER 6

Conclusion

This chapter summarizes the testing for this solution.

l Summary............................................................................................................34

Conclusion 33

SummaryThe Dell EMC Surveillance Lab performed comprehensive testing with GenetecSecurity Center against a large number of VNX and VNXe arrays and Isilon clusters.

In addition to these performance tests, we conducted tests to illustrate the use ofRSA SecurID user authentication.

Depending on the implementation needs, you can use Dell EMC storage for GenetecSecurity Center.

The Genetec architecture and product suite allows extreme scaling from a fewcameras to tens of thousands of cameras using Dell EMC storage.

We demonstrated how RSA SecurID seamlessly provides enhanced user logon andpermission capabilities.

We tested the SV-16v2 and SV-32v1, intended as standalone back-office systems oras edge appliances for more robust video surveillance implementations. The lowbandwidth, low camera count SV-16v2 and SV-32v1 were tested at their maximumbandwidth and camera count levels without issues.

Note


EMC VNX arraysThe use of storage pools to create LUNs within the EMC VNX arrays greatly simplifiesthe configuration and increases the performance when compared to traditional block-level storage. Either iSCSI or FC can be implemented. FC performs better than iSCSI.

Dell EMC Unity arraysThe use of storage pools to create LUNs within the Dell EMC Unity arrays greatlysimplifies the configuration and increases the performance when compared totraditional block-level storage. Either iSCSI or FC can be implemented. FC performsbetter than iSCSI.

EMC VNX-VSS arraysThe VNX Video Surveillance Storage (VSS) is a storage solution that is purpose builtto meet the unique demands of the video surveillance environment.

We found that this high availability, low-cost array performs comparably to otherarrays in the VNX family.

EMC VNXe arraysAn iSCSI-connected VNXe array, implemented with storage pools, provides a cost-effective implementation while maintaining the expected performance. Many mid-sized deployments can use VNXe.

Low-bandwidth implementations can use a NAS-connected VNXe, but ideally NASimplementations should be based on Dell EMC Isilon scale-out storage.

Conclusion


Dell EMC Isilon scale-out storageDell EMC Isilon scale-out storage is ideal for midtier and enterprise customers. AnIsilon cluster is based on independent nodes working seamlessly together to present asingle file system to all users.

Licensed SmartQuotas options can be configured so that each Archiver view of thestorage is based on the assigned quota and not the entire file system. We recommendusing SmartQuotas with Genetec Security Center as a best practice.

Conclusion

Dell EMC Isilon scale-out storage 35

Conclusion


dell emc dell emc storage with genetec security center … · dell emc storage with genetec...

Documents