Multi-Protocol With VAST (Views & View Policies)

This video from VAST Data Customer Education provides a deep dive into security flavors and their critical role in enabling true multi-protocol access on a VAST cluster. For storage administrators managing diverse client environments, this explanation is key to understanding how VAST ensures consistent data access and permissioning across NFS, SMB, and S3. We begin by defining VAST’s approach to multi-protocol, which allows data written via one protocol to be seamlessly accessed and modified by any other, without the use of performance-inhibiting gateways. A core enabler of this is VAST’s architecture, which stores all permissions in a protocol-independent format. The central part of this tutorial focuses on the four security flavors and their unique permissioning models:

• NFS Flavor: A traditional POSIX model governed by owner, group, and other permissions. This flavor is ideal when NFS is your primary protocol for permission management.

• SMB Flavor: An NTFS-style model with full ACLs and inheritance rules. This is the preferred choice for environments where SMB is the primary protocol for setting and managing permissions.

• Mixed Last Wins: A flexible, “catch-all” flavor that allows any protocol to modify permissions. While this offers maximum flexibility, we discuss the need for careful management to avoid unintended permission changes due to protocol differences.

• S3 Native: The most unique model, where permissions are controlled via S3 Identity Policies (JSON syntax, similar to AWS). We explain how these policies provide a highly granular and scalable method of managing access that applies not only to S3 but also to NFS and SMB clients.

The video clarifies how to choose the right security flavor for your needs, emphasizing that the decision should align with your primary permission management model, rather than forcing a multi-protocol consideration from the outset. This tutorial equips VAST Data operators with the technical knowledge to select and configure the optimal security flavor for their specific storage networking environment.