NetApp Storage Configurations

Overview

NetApp ONTAP arrays are enterprise-grade storage systems that integrate with Private Cloud Director through the NetApp storage driver. They support iSCSI, Fibre Channel (FC), and NFS connectivity protocols to accommodate varied performance and deployment needs.

NetApp ONTAP arrays feature thin provisioning, deduplication, and compression. Deduplication and compression are enabled by default and require no special configuration in the storage backend or volume type.

Select a protocol below to view the complete configuration steps for your environment.

NetApp ONTAP - iSCSI

NetApp ONTAP iSCSI provides block storage connectivity for enterprise workloads using standard Ethernet infrastructure.

Prerequisites

Before you configure the iSCSI backend, complete these requirements:

• Verify that the hypervisor operating system is not SAN-booted.

• Configure iSCSI connectivity between all hosts and the NetApp array.

• Configure a Storage Virtual Machine (SVM) with the iSCSI protocol enabled.

• Create a dedicated NetApp volume (vvol) on the SVM aggregate for the OpenStack storage pool. Size the volume at 1 TiB or larger, depending on your use case.

• Obtain vsadmin or equivalent credentials with edit access on the SVM.

• Grant LUN provisioning permissions to the specified user.

Retrieve the SVM SSL certificate

iSCSI requires HTTPS connectivity to the NetApp array. Run the following command on each storage node to export the SVM's public SSL certificate:

openssl s_client -showcerts -connect <SVM_HOSTNAME>:443 </dev/null 2>/dev/null | openssl x509 -outform PEM > /opt/pf9/etc/pf9-cindervolume-base/conf.d/netapp_cert.pem
chown pf9:pf9group /opt/pf9/etc/pf9-cindervolume-base/conf.d/netapp_cert.pem
chmod 644 /opt/pf9/etc/pf9-cindervolume-base/conf.d/netapp_cert.pem

Replace <SVM_HOSTNAME> with your SVM management LIF hostname or IP address.

Configure multipathing

Install the required multipathing packages on all hypervisors and storage nodes:

apt install lsscsi sg3-utils multipath-tools scsitools

Create or update /etc/multipath.conf with the following configuration. Exclude your local disk from multipathing to prevent conflicts:

defaults {
    user_friendly_names no
    find_multipaths yes
}

blacklist {
    wwid <WWID_OF_LOCAL_DISK>
}

To find the WWID of your local disk, run:

/lib/udev/scsi_id -gud /dev/sda

Restart the multipath service:

systemctl restart multipath-tools

Configure LVM filtering

LVM filtering prevents the host agent from hanging while running LVM commands. By default, LVM scans all devices, including multipath devices. Configure LVM to scan only local disks.

Add the following lines to /etc/lvm/lvm.conf, replacing /dev/sda with your local disk device:

filter = [ "a|^/dev/sda[1-9]|", "r|.*|" ]
global_filter = [ "a|^/dev/sda[1-9]|", "r|.*|" ]

Update the initramfs and reboot the host:

update-initramfs -u -k all
reboot

Configure compute for multipathing

Add the following line to /opt/pf9/etc/nova/conf.d/nova_override.conf and restart pf9-ostackhost:

[libvirt]
iscsi_use_multipath = true

Configure pool name filtering

By default, the NetApp storage driver selects all volumes under the SVM as storage pools and creates LUNs on any volume in that SVM. If your SVM contains volumes used by other workloads, such as Kubernetes persistent volumes, this can cause data corruption.

Always specify netapp_pool_name_search_pattern to restrict storage to dedicated NetApp volumes. This parameter accepts a regular expression to match one or more volume names.

# Single volume
netapp_pool_name_search_pattern = (cinder_vol1)

# Multiple volumes across aggregates
netapp_pool_name_search_pattern = (cinder_n1_vol1|cinder_n2_vol1)

To verify which NetApp volumes belong to your storage pool, run:

cinder --insecure get-pools --detail

Volume backend configuration

[netapp_iscsi_backend]
volume_driver = cinder.volume.drivers.netapp.common.NetAppDriver
volume_backend_name = netapp_iscsi
netapp_storage_protocol = iscsi
netapp_storage_family = ontap_cluster
netapp_transport_type = https
netapp_server_hostname = <SVM_HOSTNAME>
netapp_server_port = 443
netapp_login = <SVM_ADMIN_USER>
netapp_password = <SVM_ADMIN_PASSWORD>
netapp_vserver = <SVM_NAME>
netapp_ssl_cert_path = /opt/pf9/etc/pf9-cindervolume-base/conf.d/netapp_cert.pem
netapp_use_legacy_client = true
netapp_certificate_host_validation = false
netapp_pool_name_search_pattern = <VOLUME_PATTERN>
use_multipath_for_image_xfer = true
# Thin provisioning: set to 'disabled' for space efficiency, 'enabled' to reserve full LUN space
netapp_lun_space_reservation = disabled
netapp_driver_reports_provisioned_capacity = true
image_upload_use_cinder_backend = true
reserved_percentage = 20
max_over_subscription_ratio = 1.0

Optional parameters

Enable image-volume caching when you use a storage backend for image storage. Caching stores converted images locally on each storage host, which reduces image transfer time for subsequent volume creation requests. This is recommended for environments with a single images node and multiple storage nodes.

image_volume_cache_enabled = true
image_volume_cache_max_count = 50
image_volume_cache_max_size_gb = 200

Special considerations

• SnapMirror replication can be used for disaster recovery.

NetApp ONTAP - Fibre Channel

NetApp ONTAP - NFS