implementing the witness protocol in samba
play

Implementing the Witness protocol in Samba Gnther Deschner - PowerPoint PPT Presentation

Sep 15, 2022 •374 likes •836 views

Implementing the Witness protocol in Samba Gnther Deschner <gd@samba.org> (Red Hat / Samba Team) About Samba and RedHat Currently 7 Samba Team members inside RedHat Creators and users of Samba technology for authentication

  1. Implementing the Witness protocol in Samba Günther Deschner <gd@samba.org> (Red Hat / Samba Team)

  2. About Samba and RedHat  Currently 7 Samba Team members inside RedHat  Creators and users of Samba technology for authentication and storage solutions  Me: 11 years Samba Team member, 8 years RedHat (Samba Maintainer, Identity, Storage) <gd@samba.org> 2015, Slide 2

  3. Agenda  Witness?  Failover in SMB1/SMB2  Failover in SMB1/SMB2 with CTDB  Failover in SMB3  The Witness Protocol  Roadmap for Witness support in Samba  Further reading & Q/A <gd@samba.org> 2015, Slide 3

  4. Witness ?  New DCE/RPC Service to „witness“ availability of other services, in particular SMB3 connection  Prompt and explicit notifications about failures in highly available systems  Allows Continous Availability of SMB shares in clustered environments  Controlled way of dealing with reconnects instead of detecting failures due to timeouts  Available with SMB3 <gd@samba.org> 2015, Slide 4

  5. Failover in SMB1/SMB2  Uncontrolled, clients detect unavailability by running into timeouts or by using keep alive mechanisms  Clients reconnect after TCP/IP connection timeout  Slow, unreliable, unpredictable  Not all applications deal with stale connections good enough <gd@samba.org> 2015, Slide 5

  6. Failover in SMB1/SMB2 Node 1 Node 1 SMB Client SMB3 server SMB2 server Node 2 Node Client is connected to Node 1 SMB3 server SMB2 server Node 3 SMB3 server SMB2 server 3 Node Windows Cluster <gd@samba.org> 2015, Slide 6

  7. Failover in SMB1/SMB2 Node 1 Node 1 SMB Client SMB3 server SMB2 server Node 2 Node Client is connected to Node 1 SMB3 server SMB2 server SMB Server on Node 1 fails, client does not notice the failure yet. Node 3 SMB3 server SMB2 server 3 Node Windows Cluster <gd@samba.org> 2015, Slide 7

  8. Failover in SMB1/SMB2 Node 1 Node 1 SMB Client SMB3 server SMB2 server Node Node 2 Client is connected to Node 1 SMB3 server SMB2 server SMB Server on Node 1 fails, client does not notice the failure yet. Node 3 Client tries to use connection, SMB3 server SMB2 server runs into timeout. 3 Node Windows Cluster <gd@samba.org> 2015, Slide 8

  9. Failover in SMB1/SMB2 Node 1 Node 1 Client SMB3 server SMB2 server S M B Node Node 2 Client is connected to Node 1 SMB3 server SMB2 server SMB Server on Node 1 fails, client does not notice the failure yet. Node 3 Client tries to use connection, SMB3 server SMB2 server runs into timeout. Finally Client reconnects to Node 2 3 Node Windows Cluster <gd@samba.org> 2015, Slide 9

  10. Failover in SMB1/SMB2 with CTDB  In a Samba cluster with CTDB the cluster usually is aware of failures before the client is  In case of failure CTDB can proactively route the clients to another node  With CTDB the cluster coordinates the failover, not the client <gd@samba.org> 2015, Slide 10

  11. Failover in SMB1/SMB2 with CTDB  CTDB uses Tickle ACKs to speedup recovery  Tickle ACKs are TCP ACK packets with invalid sequence and acknowledge numbers  They cause a TCP connection to be recognized as been disrupted, Client reconnects immediately  The Tickle ACK mechanism has been discovered by Tridge in 2007 while working on CTDB  The Cluster Resource Manager project pacemaker also provides a Tickle ACK implementation (as part of the portblock resource agent) <gd@samba.org> 2015, Slide 11

  12. Failover in SMB1/SMB2 with CTDB Node 1 Node 1 SMB Client SMB3 server SMB2 server witness server CTDB server Node 2 Node Client is connected to Node 1 SMB3 server SMB2 server witness server CTDB server Node 3 SMB3 server SMB2 server witness server CTDB server 3 Node CTDB Cluster <gd@samba.org> 2015, Slide 12

  13. Failover in SMB1/SMB2 with CTDB Node 1 Node 1 SMB Client SMB3 server SMB2 server witness server CTDB server Node 2 Node Client is connected to Node 1 SMB3 server SMB2 server SMB Server on Node 1 fails witness server CTDB server Node 3 SMB3 server SMB2 server witness server CTDB server 3 Node CTDB Cluster <gd@samba.org> 2015, Slide 13

  14. Failover in SMB1/SMB2 with CTDB Node 1 Node 1 SMB Client SMB3 server SMB2 server witness server CTDB server Node Node 2 Client is connected to Node 1 SMB2 server SMB3 server SMB Server on Node 1 fails witness server CTDB server CTDB notices the failure and IP Node 3 takeover is started SMB2 server SMB3 server witness server CTDB server 3 Node CTDB Cluster <gd@samba.org> 2015, Slide 14

  15. Failover in SMB1/SMB2 with CTDB Node 1 Node 1 SMB Client SMB3 server SMB2 server witness server CTDB server Node Node 2 Client is connected to Node 1 SMB2 server SMB3 server SMB Server on Node 1 fails witness server CTDB server CTDB notices the failure and IP Node 3 takeover is started to Node 2 SMB2 server SMB3 server witness server CTDB server 3 Node CTDB Cluster <gd@samba.org> 2015, Slide 15

  16. Failover in SMB1/SMB2 with CTDB Node 1 Node 1 SMB Client SMB3 server SMB2 server Tickle-ACK witness server CTDB server Node Node 2 Client is connected to Node 1 SMB2 server SMB3 server SMB Server on Node 1 fails witness server CTDB server CTDB notices the failure and IP Node 3 takeover is started to Node 2 SMB3 server SMB2 server Node 2 sends Tickle ACK witness server CTDB server 3 Node CTDB Cluster <gd@samba.org> 2015, Slide 16

  17. Failover in SMB1/SMB2 with CTDB Node 1 Node 1 Client SMB3 server SMB2 server SMB witness server CTDB server Node 2 Node Client is connected to Node 1 SMB3 server SMB2 server SMB Server on Node 1 fails witness server CTDB server CTDB notices the failure and IP Node 3 takeover is started to Node 2 SMB2 server SMB3 server Node 2 sends Tickle ACK witness server CTDB server 3 Node CTDB Cluster Client reconnects to Node 2 <gd@samba.org> 2015, Slide 17

  18. Failover in SMB3  SMB3 provides new feature SMB Transparent Failover: Persistent handles ● Continous availability ● Witness service ●  Faster recovery from unplanned node failures  Allow planned and controlled migration of clients to other Cluster nodes <gd@samba.org> 2015, Slide 18

  19. Failover in SMB3 Node 1 Node 1 SMB Client SMB3 server SMB3 server witness server witness server Node Node 2 SMB3 server SMB3 server witness server witness server Node 3 SMB3 server SMB3 server witness server witness server 3 Node Windows Cluster <gd@samba.org> 2015, Slide 19

  20. Failover in SMB3 Node 1 Node 1 SMB Client SMB3 server SMB3 server GetInterfaceList witness server witness server Node Node 2 SMB3 server SMB3 server Node1 Node2 * witness server witness server Node3 * Node 3 * usable for witness registration SMB3 server SMB3 server witness server witness server 3 Node Windows Cluster <gd@samba.org> 2015, Slide 20

  21. Failover in SMB3 Node 1 Node 1 SMB Client SMB3 server SMB3 server witness server witness server Register/RegisterEx Node Node 2 SMB3 server SMB3 server witness server witness server Node 3 SMB3 server SMB3 server witness server witness server 3 Node Windows Cluster <gd@samba.org> 2015, Slide 21

  22. Failover in SMB3 Node 1 Node 1 SMB Client SMB3 server SMB3 server AsyncNotify request witness server witness server Node Node 2 SMB3 server SMB3 server witness server witness server Node 3 SMB3 server SMB3 server witness server witness server 3 Node Windows Cluster <gd@samba.org> 2015, Slide 22

  23. Failover in SMB3 Node 1 Node 1 SMB Client SMB3 server SMB3 server AsyncNotify request witness server witness server Node Node 2 SMB3 server SMB3 server witness server witness server Node 3 SMB3 server SMB3 server witness server witness server 3 Node Windows Cluster <gd@samba.org> 2015, Slide 23

  24. Failover in SMB3 Node 1 Node 1 SMB Client SMB3 server SMB3 server witness server witness server AsyncNotify reply Node Node 2 SMB3 server SMB3 server witness server witness server Node 3 SMB3 server SMB3 server witness server witness server 3 Node Windows Cluster <gd@samba.org> 2015, Slide 24

  25. Failover in SMB3 Node 1 Node 1 Client SMB3 server SMB3 server witness server witness server SMB Node Node 2 SMB3 server SMB3 server witness server witness server Node 3 SMB3 server SMB3 server witness server witness server 3 Node Windows Cluster <gd@samba.org> 2015, Slide 25

  26. Wait. So why a new protocol ?  Witness is not only about failover when unexpected failures occur  Witness allows to programmatically control the client  Administrators can use witness to control the client use of server ressources (loadbalancing, planned server maintainence) <gd@samba.org> 2015, Slide 26

  27. The witness interface  Surprisingly short spec (only 47 pages)  Version 1, SMB 3.0 (Windows 2012, Windows 8)  Version 2, SMB 3.02 (Windows 2012 R2, Windows 8.1)  Only 5 opcodes in the interface: ● _witness_GetInterfaceList ● _witness_Register ● _witness_Unregister ● _witness_AsyncNotify ● _witness_RegisterEx (witness version 2) <gd@samba.org> 2015, Slide 27

Download Presentation
Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend

Samba Witness Protection Programming Samuel Cabrero scabrero@suse.com David Disseldorp

Samba Witness Protection Programming Samuel Cabrero scabrero@suse.com David Disseldorp

Samba Witness Protection Programming Samuel Cabrero scabrero@suse.com David Disseldorp ddiss@samba.org Agenda Clustered Samba Witness Protocol Demo Outlook Clustered Samba Samba File and print server SMB / CIFS, SMB2

428 views • 40 slides
Speeding up Samba by backing up Experiences in implementing and optimizing Active Directory

Speeding up Samba by backing up Experiences in implementing and optimizing Active Directory

Speeding up Samba by backing up Experiences in implementing and optimizing Active Directory features in Samba What has been done in the last year? Samba 4.9 Password and membership change auditing LMDB back-end (semi-experimental)

1.06k views • 49 slides
Samba in the Enterprise : Samba 3.0 and beyond By Jeremy Allison jra@samba.org

Samba in the Enterprise : Samba 3.0 and beyond By Jeremy Allison jra@samba.org

Samba in the Enterprise : Samba 3.0 and beyond By Jeremy Allison jra@samba.org jeremy.allison@hp.com Where we are now : Samba 2.2 The current Samba is a credible replacement for a Windows server providing file and

529 views • 19 slides
SMB3 in Samba Multi-Channel and Beyond Michael Adam Red Hat / samba.org 2016-04-20 agenda

SMB3 in Samba Multi-Channel and Beyond Michael Adam Red Hat / samba.org 2016-04-20 agenda

SMB3 in Samba Multi-Channel and Beyond Michael Adam Red Hat / samba.org 2016-04-20 agenda History of SMB History of Samba SMB 2+ SMB 2+ in Samba SMB3 Multi-Channel Outlook: SMB3 over RDMA Outlook: SMB3 Clustering/Witness Outlook: SMB3

573 views • 56 slides
DFS Replication A client implementation for Samba Samuel Cabrero SUSE Labs Samba team

DFS Replication A client implementation for Samba Samuel Cabrero SUSE Labs Samba team

DFS Replication A client implementation for Samba Samuel Cabrero SUSE Labs Samba team scabrero@suse.com Agenda 1. Introduction 2. DFS-R Configuration 3. Protocol overview 1. Retrieving updates 2. Processing updates 3. Installing updates

781 views • 34 slides
First Witness Security DCJS 11-14998 540-442-0086 First Witness Security First Witness Security

First Witness Security DCJS 11-14998 540-442-0086 First Witness Security First Witness Security

First Witness Security DCJS 11-14998 540-442-0086 First Witness Security First Witness Security is Veteran owned company (USMC) in business for 25 years. Rodney Dixon, the owner has worked in high-tech fields ever since the Military. The

278 views • 26 slides
Windows Search Protocol &amp; Samba Noel Power noel.power@suse.com Agenda Overview

Windows Search Protocol &amp; Samba Noel Power noel.power@suse.com Agenda Overview

Windows Search Protocol &amp; Samba Noel Power noel.power@suse.com Agenda Overview History Some WSP protocol info Approach to a WIP Implementation Demo Questions 2 Windows Search (some background) Overview Windows

555 views • 40 slides
Samba Computer Center, CS, NCTU Network-based File Sharing FTP (File Transfer Protocol)

Samba Computer Center, CS, NCTU Network-based File Sharing FTP (File Transfer Protocol)

Samba Computer Center, CS, NCTU Network-based File Sharing FTP (File Transfer Protocol) NFS (UNIX-based) mountd is responsible for mount request nfsd and nfsiod Applikation Based on RPC SMB CIFS (Microsoft) Common

554 views • 31 slides
Samba and the road to Python3 Noel Power SUSE/Samba team noel.power@suse.com npower@samba.org

Samba and the road to Python3 Noel Power SUSE/Samba team noel.power@suse.com npower@samba.org

Samba and the road to Python3 Noel Power SUSE/Samba team noel.power@suse.com npower@samba.org Agenda Reasons to move to Python3 What is supported in what release Some history of the porting effort Challenges Lessons learned

815 views • 19 slides
The Important Details Of Windows Authentication Stefan Metzmacher &lt;metze@samba.org&gt; Samba

The Important Details Of Windows Authentication Stefan Metzmacher &lt;metze@samba.org&gt; Samba

The Important Details Of Windows Authentication Stefan Metzmacher &lt;metze@samba.org&gt; Samba Team / SerNet 2017-05-04 https://samba.org/~metze/presentations/2017/SambaXP/ Topics Windows Domains, Forests and Trusts Netlogon Secure

497 views • 34 slides
SMB3 Multi-Channel in Samba ... Now Really! Michael Adam Red Hat / samba.org sambaXP -

SMB3 Multi-Channel in Samba ... Now Really! Michael Adam Red Hat / samba.org sambaXP -

SMB3 Multi-Channel in Samba ... Now Really! Michael Adam Red Hat / samba.org sambaXP - 2016-05-11 Introduction SMB - mini history SMB: created around 1983 by Barry Feigenbaum, IBM SMB in Lan Manager: around 1990 SMB in Windows for

1.29k views • 58 slides
Tools for the Vagabonding Samba Developer sambaXP 2015 Michael Adam Samba Team / Red Hat May

Tools for the Vagabonding Samba Developer sambaXP 2015 Michael Adam Samba Team / Red Hat May

Tools for the Vagabonding Samba Developer sambaXP 2015 Michael Adam Samba Team / Red Hat May 21, 2015 We use a lot of VMs and containers for testing and building Samba. The setup and maintenance of these machines requires a lot of work. How

351 views • 20 slides
Samba's AD DC: Samba 4.2 and Beyond Presented by Andrew Bartlett of Catalyst // 2014-09 About me

Samba's AD DC: Samba 4.2 and Beyond Presented by Andrew Bartlett of Catalyst // 2014-09 About me

Samba's AD DC: Samba 4.2 and Beyond Presented by Andrew Bartlett of Catalyst // 2014-09 About me Andrew Bartlett Samba T eam member since 2001 Working on the AD DC since 2006 These views are my own, but I do with to thank:

856 views • 36 slides
Faking a Failover Over the Top With Samba Clusters Christopher R. Hertel Samba Team May 2017

Faking a Failover Over the Top With Samba Clusters Christopher R. Hertel Samba Team May 2017

Faking a Failover Over the Top With Samba Clusters Christopher R. Hertel Samba Team May 2017 Introductions Introductor a t i o n a r y e s q u e n e s s e si s m Me: Samba Team Elder SMB Wizard with: The opinions expressed are my

874 views • 21 slides
Status of SMB2 and SMB3 development in Samba SDC 2012 Michael Adam obnox@samba.org Samba Team /

Status of SMB2 and SMB3 development in Samba SDC 2012 Michael Adam obnox@samba.org Samba Team /

Status of SMB2 and SMB3 development in Samba SDC 2012 Michael Adam obnox@samba.org Samba Team / SerNet 2012-09-17 Hi there! Oh ... ... please interrupt with questions! Michael Adam SMB2+ in Samba (3 / 20) SMB2 in Samba Only SMB 2.0

1.35k views • 75 slides
Samba and the road to 100,000 users Presented by Andrew Bartlet Samba Team - Catalyst / / SambaXP

Samba and the road to 100,000 users Presented by Andrew Bartlet Samba Team - Catalyst / / SambaXP

Samba and the road to 100,000 users Presented by Andrew Bartlet Samba Team - Catalyst / / SambaXP 2017 Andrew Bartlet Samba developer since 2001 Working on the AD DC since soon afuer the start of the 4.0 branch, since 2004! Driven to

664 views • 44 slides
Plug-N-Pwned: Comprehensive Vulnerability Analysis of OBD-II Dongles as A New Over-the-Air Attack

Plug-N-Pwned: Comprehensive Vulnerability Analysis of OBD-II Dongles as A New Over-the-Air Attack

Plug-N-Pwned: Comprehensive Vulnerability Analysis of OBD-II Dongles as A New Over-the-Air Attack Surface in Automotive IoT Haohuang Wen 1 , Qi Alfred Chen 2 , Zhiqiang Lin 1 1 Ohio State University 2 University of California, Irvine USENIX

278 views • 26 slides
Nanocrafter Xylem vs. r pl r lv r pl r lv r pl r lv + d - d - d + d BLIND BLIND RATINGS

Nanocrafter Xylem vs. r pl r lv r pl r lv r pl r lv + d - d - d + d BLIND BLIND RATINGS

Nanocrafter Xylem vs. r pl r lv r pl r lv r pl r lv + d - d - d + d BLIND BLIND RATINGS BLIND RATINGS CHOICE Compute desired win rate using players rating BLIND RATINGS Compute desired win rate using players rating Compute

670 views • 51 slides
Semantic Modeling with Frames Rainer Osswald &amp; Wiebke Petersen Department of Linguistics and

Semantic Modeling with Frames Rainer Osswald &amp; Wiebke Petersen Department of Linguistics and

Semantic Modeling with Frames Rainer Osswald &amp; Wiebke Petersen Department of Linguistics and Information Science Heinrich-Heine-Universit at D usseldorf ESSLLI 2018 Introductory Course Sofia University 06. 08. 10. 08. 2018 SFB

921 views • 59 slides
Why the AI? Andrew J. Perrin April 27, 2007 Andrew J. Perrin () Why the AI? April 27, 2007 1

Why the AI? Andrew J. Perrin April 27, 2007 Andrew J. Perrin () Why the AI? April 27, 2007 1

Why the AI? Andrew J. Perrin April 27, 2007 Andrew J. Perrin () Why the AI? April 27, 2007 1 / 7 We have a problem. 1 Long-term increase in mean grades across the university 2 Substantial and growing systematic inequality in grading patterns

462 views • 7 slides
Earl Warren Middle School Interim Housing Start Date: 4/20/2015 Completion Date 8/24/2015

Earl Warren Middle School Interim Housing Start Date: 4/20/2015 Completion Date 8/24/2015

Earl Warren Middle School Interim Housing Start Date: 4/20/2015 Completion Date 8/24/2015 As of 8/13/15 Earl Warren Middle School Interim Housing Start Date: 4/20/2015 Est. Completion Date 8/24/2015 As of 8/3/15 Earl Warren Middle

126 views • 11 slides
Identity and Streams Interim, Washington DC Martin Thomson Stream Isolation A receiver

Identity and Streams Interim, Washington DC Martin Thomson Stream Isolation A receiver

W3C stuff Identity and Streams Interim, Washington DC Martin Thomson Stream Isolation A receiver should soon be able to distinguish between streams that are isolated at the source and regular streams Sending Receiving peerIdentity

382 views • 10 slides
Case Law Update Part 2 5 th November 2020 Cornerstone Barristers Planning Week 2020 Planning

Case Law Update Part 2 5 th November 2020 Cornerstone Barristers Planning Week 2020 Planning

Case Law Update Part 2 5 th November 2020 Cornerstone Barristers Planning Week 2020 Planning Week 2020 Tuesday 3rd - 10am - Case Law Update - Part 1 Speakers: Ryan Kohli, Emma Dring, John Fitzsimons; Introduction: Josef Cannon available

511 views • 36 slides
ACRS MEETING WITH THE U.S. NUCLEAR REGULATORY COMMISSION June 5, 2008 William J. Shack

ACRS MEETING WITH THE U.S. NUCLEAR REGULATORY COMMISSION June 5, 2008 William J. Shack

ACRS MEETING WITH THE U.S. NUCLEAR REGULATORY COMMISSION June 5, 2008 William J. Shack OVERVIEW Accomplishments Since our last meeting w ith the Commission on June 7, 2007, w e issued 29 Reports: Topics included: Review and

757 views • 55 slides

More recommend