Highlighted
zthiel
1 Nickel

How does SmartConnect DNS work? And SIP details?

Trying to do some research related to SmartConnect. I understand the majority of how it works, however I have a question pertaining to the traffic flow. I'll try and lay this out, I'm more so looking as to how the communication flows.

All devices below are segmented via firewall:

Laptop1 (10.2.26.50)

DNSserver1 (10.1.9.200)

IsilonNAS1 SIP (10.1.8.200)

Is this correct?

Laptop1 makes a content request sitting on the IsilonNAS1, DNS request goes from Laprop1 to DNSserver1, then DNSserver1 makes a request to IsilonNAS1, all over DNS\53. Does the Laptop1 ever make DNS queries directly at IsilonNAS1?

Is the SIP the same as the management IP address of the cluster? Can the SIP reside on a different network than the management network?

Labels (3)
0 Kudos
7 Replies
AdamFox
2 Iron

Re: How does SmartConnect DNS work? And SIP details?

You have the flow down well.  The only servers who should be talking to the SIP are DNS servers. Clients should not be talking to that address.  Any client who does would just connect to the node that is running the SmartConnect service (usually the node with the lowest LNN with a network connection on that subnet).

There really isn't a specific management IP unless you define one.  It's just not something officially defined in OneFS.

With respect to the placement of a SIP, what really matters is where the DNS servers live.  Each subnet *can* have a SIP but it's not required.  Each IP Pool needs to have a SmartConnect subnet defined, but that can be it's own subnet or another one.  So it's entirely possible to have one SIP for the entire cluster even if that cluster has multiple subnets that don't route to each other.  As long as the DNS servers that need to talk to the cluster can do so, that's all that is required.  A SIP can hand out addresses from any IP pool to which is is assigned.  So if you have a "management" subnet and that's where the DNS servers are connected, then the SIP on that management subnet can server IPs for any subnet on the cluster.  Whether you need multiple SIPs or not really depends on your network design.  The cluster can accommodate most designs these days, especially in 8.0+

Hope this helps.  There's a lot wrapped up in those questions, but I figured I'd give it a first shot.

0 Kudos
zthiel
1 Nickel

Re: How does SmartConnect DNS work? And SIP details?

I am really hesitant about having another "DNS" device on our network. I am on the security team and not directly involved with the product installation from the "use" standpoint. Is this all mandatory to have implemented?

0 Kudos
AdamFox
2 Iron

Re: How does SmartConnect DNS work? And SIP details?

It's not mandatory, but if you don't use the SIP, you will be required to manually balance the front-end client connections on your cluster.  How easy this is will depend on the # of clients connecting to your cluster.   If it helps, this is not a fully implemented DNS server.  It will only answer simple A record lookups for the names of the SmartConnect zones so there's not much it can do from a security standpoint.  You could always put the SIP on a private VLAN that only your DNS servers can reach if you're really concerned.  Bad actors can't exploit what they can't reach.

0 Kudos

Re: How does SmartConnect DNS work? And SIP details?

It's not really a DNS "device". It is only authoritative for itself, meaning the SmartConnect zone names that you delegate to it in DNS.  But if you want the cluster to function properly, it has to make the decisions about where to send the traffic, based upon which nodes are up, the load on each node, etc.  It also then has the ability to control failover.  I get that the first time many customers see SmartConnect they get very confused, and from time to time there is some resistance, but I've never seen a customer not implement it in the end. 

I would strongly suggest you read this guide:

EMC Isilon External Network Connectivity Guide: Routing, Network Topologies, and Best Practices for ...

Disclaimer; I did write a substantial amount of it.

~Chris

0 Kudos
zthiel
1 Nickel

Re: How does SmartConnect DNS work? And SIP details?

Is\can the SIP IP be different than the Isilon management IP?

0 Kudos

Re: How does SmartConnect DNS work? And SIP details?

Isilon doesn’t have a management IP or management network. It’s managed in-band from any IP or interface in the system access zone. Read the document I linked to above this response, it has a section on that topic specifically.

Killabyte
1 Copper

Re: How does SmartConnect DNS work? And SIP details?

Hi guys have a simple setup in which all clients will be in the same subnet. I want to avoid having another machine in the network as a DNS is. Im using the Isilon's SIP as DNS for clients as they are not going away from the local network (no internet access available for them), so the client's resolvers will request by name to the sip and it will answer with an IP From the pool. The real concern is that it is working only for round robin policy, and it does balance load but If i select throughput or CPU load, the sip will send all traffic to the first node. Any ideas about that?
0 Kudos