Home › Monthly Archives › July 2010

Update: IBM DS4000/5000 replication on big LUNs works again with hotfix firmware

A couple of weeks ago, I posted about my issues with replication of >2TB LUNs on IBM SANs not working correctly using Enhanced Remote Mirroring. Well, IBM got me to install some hotfix firmware (version 07.60.40.00), and the problem appears to be resolved, though I’m still having issues with Flash Copies of one of the affected mirror LUNs showing up to Windows as an empty, uninitialized disk. I’m getting married in a week and am too busy polishing documentation before I take 2 weeks off to open yet another case with IBM. C’est la vie.

They’re probably going to kill me for calling this “hotfix firmware,” since I was assured this firmware was GA but not uploaded to the website because of some release engineering red tape. (Whatever, guys, I can’t download it without calling you, so it’s a hotfix as far as I’m concerned.)

Anyway, if you’re having this issue or are planning on replicating large LUNs with IBM Enhanced Remote Mirroring, contact your IBM support engineers and request that they send you firmware >=07.60.40.00.

Recovering a deleted logical drive on an IBM Midrange Storage SAN

First, some keyword spam so this turns up to people who need it: this should apply to all IBM Midrange Series Storage SANs including the DS3200, DS3300, DS3400, DS3950, DS4000, DS4100, DS4200, DS4300, DS4400, DS4500, DS4700, DS4800, DS5020, DS5100, and DS5300. (Whew.)

SANs are important, mission-critical pieces of storage hardware, and as we all know, it’s important to manage change in the environment. However, sometimes mistakes happen — sooner or later, someone is going to delete the wrong LUN. IBM doesn’t really make clear how to recover this without technical support involved, and I can understand why — it’s an important thing to get right.

However, especially late at night when IBM’s Remote Support Center runs on a skeleton crew and can take a few hours to turn around a ticket, we can’t always rely on a timely response from IBM support in order to recover the disk. Since this is a largely undocumented procedure, I’m going to put it out there in the hopes that it helps someone else.

When doing advanced work, I tend to work from the command line using the SMcli utility. However, you can also run scripts in the graphical Storage Manager application. The functionality is oddly hidden in the root window of the DS Storage Manager 10 client, on the screen where you choose your SAN to manage. To access it, right-click your SAN and click “Execute Script.” The script editor window will open. (It would make a lot more sense to put this functionality into the Advanced menu of one of the managed SANs.)

The command-line reference guide for IBM Midrange Storage (LSI) SANs makes mention of the recover logicalDrive command:

recover logicalDrive (drive=(enclosureID,drawerID,slotID) |
Drives=(enclosureID1,drawerID1,slotID1 ... enclosureIDn,drawerIDn,slotIDn) |
array=ArrayName)
[newArray=arrayName]
userLabel="logicalDriveName"
capacity=logicalDriveCapacity
offset=offsetValue
raidLevel=(0 | 1 | 3 | 5 | 6)
segmentSize=segmentSizeValue
[owner=(a | b)
cacheReadPrefetch=(TRUE | FALSE)]

However, it doesn’t tell you where to get the LUN sizes, segment sizes, offsets and other numbers that you need to facilitate a successful recovery. Well, luckily, there’s a couple of places you can turn it up.

If you’ve collected support data recently, you can look inside the support bundle .zip and locate a file called recoveryProfile.csv. If you don’t have a support bundle handy, you might still be in luck — the DS Storage Manager application keeps a copy in its program directory, and you can usually find it at C:\Program Files\IBM_DS\client\data\recovery, ending in _Recovery_Profile.csv and named for the SAN you’re managing. Look at all the lines beginning with Volume, and locate the one that contains the LU name that you’re looking for. It should look like this:

Volume,600A0B80006E09620000BC914BF14835,My_LU,600A0B800047F5F20000BC914BF146C2,512,805306368000,393216000,65536,1,1

As far as I can tell, the fields are:

  • Object type (volume, volume group, etc.)
  • Volume NAA ID
  • Volume name
  • Owning array NAA ID
  • Block size (typically 512; this might be 4096 on SSD or high-capacity disks with 4k blocks, but I have none of these to test with)
  • LUN size in bytes
  • Starting offset; on this LUN the unit appears to be (bytes / 2048) but I can’t figure out why
  • Segment size in bytes
  • Two integers/booleans I haven’t identified

You can take this information and feed it right back into that recover logicalDrive command from the guide:

SMcli -n My_SAN -p My_Password -c 'recover logicalDrive array=My_Array userLabel="My_LU" capacity=805306368000 offset=393216000 raidLevel=5 segmentSize=64;'

Note that the segment size needs to be converted from bytes into kilobytes.

One thing I haven’t figured out is how to preserve the old NAA ID on the LUNs, if this is at all possible. This generally isn’t important, but notably can cause problems with signaturing in VMware.

Expect a follow-up post on restoring an entire physical array.

Replication of LUNs >2TB on IBM DS4000/DS5000 SANs flat-out doesn’t work

…but it says it does. It even reports that the mirroring completed successfully and that the volume status is “Synchronized” when the remote end in fact contains nothing but garbage data.

This is the result of what was described to me as a regression in a bad firmware release, but it’s unclear to me from my discussions with IBM exactly how far back this issue goes. I’m grateful that we didn’t find this in the middle of a production DR failover, but it’s completely ridiculous that an enterprise storage vendor allows such a serious data loss issue into a real release.

This is supposed to be fixed in a firmware update already GA’d but not on the website yet, but I’m awfully hesitant to actually use these large LUNs until IBM hashes out their support for them a little further. I’m not looking to be burned with the exact same thing with a different premium feature.

Practical VMFS signatures

VMFS is a pretty cool (if relatively undocumented) filesystem, and VMFS volumes were designed with one particular quirk that’s both a blessing and a curse — when you create the volume, ESX writes a few pieces of information to the disk signature on the volume that helps it identify the volume and figure out what to do with it. Each volume contains a UUID used to uniquely identify it when multiple volumes with the same name are presented, but each volume also registers one of three unique identifiers to the volume — the Network Addressing Authority (NAA) ID, an Extended Unique Identifier (EUI), or, on storage subsystems that don’t support either of the other two identifiers, a LUN number. If you’re interested in the low-level nitty-gritty of it, Ubiquitous Talk published a really great blog entry on VMFS on-disk signatures that you should read.

This decision was made because most people run VMware off of Fibre Channel or iSCSI SAN, where you may do something like taking a copy-on-write snapshot of a VMFS volume and presenting it back to the host as a read-only volume. ESX compares the identifier presented by the LUN to the one written to the disk signature, the one that it expects to see. If they mismatch, it’s assumed that it’s not the original LUN and that it’s a copy. Sometimes this isn’t the case, and your underlying storage has actually changed, either because you made a copy to another LUN or because you’re trying to mount a replicated copy on another SAN at your disaster recovery site. In these cases, to mount the volume as a normal writable volume, you need to resignature it, which re-writes all of the above information to the disk. Since this information includes the UUID, and ESX uses that UUID to reference virtual machines in its inventory, you’ll need to manually re-add all of the virtual machines back to your cluster. This is one of those annoying things that Site Recovery Manager was designed to automate (see TechTarget article).

ESX 3.5 used to automatically mount and present the volume as a read-only snapshot with a new unique name. If you wanted to resignature the volume, you would set the advanced setting LVM.EnableResignature to 1, and you would rescan for volumes. This had the unfortunate consequence of re-signaturing all volumes, even if you only intended to resignature one of them. A new esxcfg-volume command was added to perform this operation, and VMware changed the default behavior in the GUI so that if a volume is detected as a snapshot, you have to manually add the storage, at which time you’ll be prompted about whether you want to mount the volume as a snapshot or if you want to resignature it.

Problem 1: Cloned boot LUNs don’t boot

As of ESX 4, the service console resides in a VMDK on a VMFS volume, so you can run into major issues if you boot from SAN and fail your boot LUNs over to your DR site, because the filesystem used to store your service console is subject to the exact same signaturing issues as other VMFS volumes. The boot LUNs on each server need to be manually resignatured, which is covered by Get VIRTical and VMware KB 1012874.

Problem 2: Non-contiguous extents don’t resignature (right now)

A couple of weeks ago, I ran into a rather significant and nasty regression in vSphere 4. I had taken a 500GB VMFS volume, added a second 500GB extent, and then I had grown each of the volumes by 250GB. As a result, the first LUN occupied 0-500GB and 1000-1250GB in the VMFS volume, while the second LUN occupied 500-1000GB and 1250-1500GB. Notice that the second disk’s start is before the first disk’s end (and this should be fine in any reasonable logical volume manager).

This worked fine for months. When I failed over to our DR site, the volume was detected as a snapshot and I couldn’t resignature because esxcfg-volume thought the LUNs overlapped:


[root@esx01 ~]# esxcfg-volume -l
VMFS3 UUID/label: 4bc639b4-21bbc059-d77b-e41f132c2a8a/shared-esxdev
Can mount: No (duplicate extents found)
Can resignature: No (duplicate extents found)
Extent name: naa.600a0b800047f5f20000bc934bf1480e:1 range: 0 - 1279487 (MB)
Extent name: naa.600a0b80006e09620000bc914bf14835:1 range: 511744 - 1535487 (MB)

After going back and forth with VMware for a very long time on this issue, they finally determined it to be a bug in 4.0 that prevents 4.0 from resignaturing the volume. Don’t extend any volumes defined as extents in a VMFS filesystem (VMware’s recommendation is to not use extents at all unless you absolutely need them to extend a VMFS volume beyond 2TB). If this issue bites you, you can get around it by presenting the volume to an ESX 3.5 host, setting LVM.EnableResignature to 1, rescanning/resignaturing, and then presenting the LUNs back to an ESX 4 host. This should hopefully be fixed by 4.1 U1.

As a final aside: it looks like the open-source VMFS driver has similar problems with non-contiguous extents (it throws back garbage data). I haven’t reported that as a bug yet.