Everpure introduced two key concepts to its Purity operating environment for multitenancy:
-
Realms: For delegated administrative control.
-
Servers: For isolated data access.
Realms and Servers can be used individually or in combination to achieve true secure multitenant storage with the most agility and optionality for Purity users. FlashBlade//S500 simplifies multitenancy networking using Servers for isolated data access. Each server requires a data ingress IP and provides an isolated network space for data access management. Servers encapsulate network and identity information, allowing for unique network interfaces, filesystem exports, and authentication accounts (Active Directory/LDAP/NIS), independent of the authentication configuration of the parent FlashBlade//S500.
Diagram 1 illustrates the aforementioned multitenancy concepts of Realms and Servers. Server 1 is within Realm 1 and therefore a Realm 1 administrator only sees File Systems within their Realm. Server 1 and Server 2 are on two different subnets and VLANs. File systems on Server 1 are exposed to clients via Everpure file system exports. A client accessing data via Server 2 VLAN connections cannot view and do not have access to the file systems on Server 1 due to network isolation and discrete identity domains. Similarly, a client accessing data via the Server 1 connection cannot view, and does not have access to, the file systems on Server 2.
Diagram 1. Multitenancy isolated domains and client networks