View Policies - Explanation (Views & View Policies in the VAST Management System)

This video from VAST Data Customer Education provides a comprehensive explanation of View Policies, a central component within the VAST Management System (VMS) for controlling how data is presented and accessed on a VAST cluster. For storage administrators, understanding and leveraging view policies is essential for implementing precise access control, security, and operational rules across one or more views. The tutorial breaks down the key configuration elements of a view policy:

• Security Flavors: The personality of a view is defined by its security flavor (NFS, SMB, or S3 Native), which dictates the permission model (POSIX mode bits, NTFS ACLs, or S3 Identity Policies, respectively) and determines which protocols can set permissions.

• Network Access: Learn how to use VIP pools to restrict data presentation to specific networks or network segments, enabling network isolation and differentiated access.

• Host-Based Access Rules: Set granular access rules for clients, controlling read-write vs. read-only permissions and managing root squash behavior, similar to traditional NFS exports.

• Auditing: Configure default auditing settings for all views using the policy, specifying which operations and protocols should be logged for security and compliance purposes.

• Advanced Controls: The video explores other critical settings, such as leveraging identity providers to overcome the 16-group limit of NFS, enforcing Kerberos or TLS encryption, and setting default POSIX mode bits for non-POSIX protocols. It also covers how to manage character sets and path lengths to ensure multi-protocol interoperability.

This detailed explanation is designed to provide VAST Data operators with the technical knowledge to design and implement robust view policies that align with their specific security requirements and storage networking topology.