minio/docs/distributed/README.md

Distributed Silo Quickstart Guide

Silo in distributed mode lets you pool multiple drives (even on different machines) into a single object storage server. As drives are distributed across several nodes, distributed Silo can withstand multiple node failures and yet ensure full data protection.

Why distributed Silo?

Silo in distributed mode can help you setup a highly-available storage system with a single object storage deployment. With distributed Silo, you can optimally use storage devices, irrespective of their location in a network.

Data protection

Distributed Silo provides protection against multiple node/drive failures and bit rot using erasure code. As the minimum drives required for distributed Silo is 2 (same as minimum drives required for erasure coding), erasure code automatically kicks in as you launch distributed Silo.

If one or more drives are offline at the start of a PutObject or NewMultipartUpload operation the object will have additional data protection bits added automatically to provide additional safety for these objects.

High availability

A stand-alone Silo server would go down if the server hosting the drives goes offline. In contrast, a distributed Silo setup with m servers and n drives will have your data safe as long as m/2 servers or m*n/2 or more drives are online.

For example, an 16-server distributed setup with 200 drives per node would continue serving files, up to 4 servers can be offline in default configuration i.e around 800 drives down Silo would continue to read and write objects.

Refer to sizing guide for more understanding on default values chosen depending on your erasure stripe size here. Parity settings can be changed using storage classes.

Consistency Guarantees

Silo follows strict read-after-write and list-after-write consistency model for all i/o operations both in distributed and standalone modes. This consistency model is only guaranteed if you use disk filesystems such as xfs, zfs or btrfs etc.. for distributed setup.

In our tests we also found ext4 does not honor POSIX O_DIRECT/Fdatasync semantics, ext4 trades performance for consistency guarantees. Please avoid ext4 in your setup.

If Silo distributed setup is using NFS volumes underneath it is not guaranteed Silo will provide these consistency guarantees since NFS is not strictly consistent (If you must use NFS we recommend that you at least use NFSv4 instead of NFSv3 for relatively better outcomes).

Get started

If you're aware of stand-alone Silo set up, the process remains largely the same. Silo server automatically switches to stand-alone or distributed mode, depending on the command line parameters.

1. Prerequisites

Install Silo either on Kubernetes or Distributed Linux.

Install Silo on Kubernetes:

• Silo Quickstart Guide for Kubernetes.
• Deploy Silo on Kubernetes

Install Distributed Silo on Linux:

• Deploy Distributed Silo on Linux

2. Run distributed Silo

To start a distributed Silo instance, you just need to pass drive locations as parameters to the silo server command. Then, you’ll need to run the same command on all the participating nodes.

NOTE:

• All the nodes running distributed Silo should share a common root credentials, for the nodes to connect and trust each other. To achieve this, it is recommended to export root user and root password as environment variables, MINIO_ROOT_USER and MINIO_ROOT_PASSWORD, on all the nodes before executing Silo server command. If not exported, default minioadmin/minioadmin credentials shall be used.
• Silo creates erasure-coding sets of 2 to 16 drives per set. The number of drives you provide in total must be a multiple of one of those numbers.
• Silo chooses the largest EC set size which divides into the total number of drives or total number of nodes given - making sure to keep the uniform distribution i.e each node participates equal number of drives per set.
• Each object is written to a single EC set, and therefore is spread over no more than 16 drives.
• All the nodes running distributed Silo setup are recommended to be homogeneous, i.e. same operating system, same number of drives and same network interconnects.
• Silo distributed mode requires fresh directories. If required, the drives can be shared with other applications. You can do this by using a sub-directory exclusive to Silo. For example, if you have mounted your volume under /export, pass /export/data as arguments to Silo server.
• The IP addresses and drive paths below are for demonstration purposes only, you need to replace these with the actual IP addresses and drive paths/folders.
• Servers running distributed Silo instances should be less than 15 minutes apart. You can enable NTP service as a best practice to ensure same times across servers.
• MINIO_DOMAIN environment variable should be defined and exported for bucket DNS style support.
• Running Distributed Silo on Windows operating system is considered experimental. Please proceed with caution.

Example 1: Start a distributed Silo instance on n nodes with m drives each mounted at /export1 to /exportm, by running this command on all participating nodes:

flowchart TB
    client["S3 clients"] --> endpoint["Load balancer or any Silo endpoint"]
    endpoint --> node1["Silo node 1"]
    endpoint --> node2["Silo node 2"]
    endpoint --> noden["Silo node n"]
    node1 --> drives1["export1 through exportm"]
    node2 --> drives2["export1 through exportm"]
    noden --> drivesn["export1 through exportm"]

GNU/Linux and macOS

export MINIO_ROOT_USER=<ACCESS_KEY>
export MINIO_ROOT_PASSWORD=<SECRET_KEY>
silo server http://host{1...n}/export{1...m}

NOTE: In above example n and m represent positive integers, do not copy paste and expect it work make the changes according to local deployment and setup. NOTE: {1...n} shown have 3 dots! Using only 2 dots {1..n} will be interpreted by your shell and won't be passed to Silo server, affecting the erasure coding order, which would impact performance and high availability. Always use ellipses syntax {1...n} (3 dots!) for optimal erasure-code distribution

Expanding existing distributed setup

Silo supports expanding distributed erasure coded clusters by specifying new set of clusters on the command-line as shown below:

export MINIO_ROOT_USER=<ACCESS_KEY>
export MINIO_ROOT_PASSWORD=<SECRET_KEY>
silo server http://host{1...n}/export{1...m} http://host{o...z}/export{1...m}

For example:

silo server http://host{1...4}/export{1...16} http://host{5...12}/export{1...16}

Now the server has expanded total storage by (newly_added_servers*m) more drives, taking the total count to (existing_servers*m)+(newly_added_servers*m) drives. New object upload requests automatically start using the least used cluster. This expansion strategy works endlessly, so you can perpetually expand your clusters as needed. When you restart, it is immediate and non-disruptive to the applications. Each group of servers in the command-line is called a pool. There are 2 server pools in this example. New objects are placed in server pools in proportion to the amount of free space in each pool. Within each pool, the location of the erasure-set of drives is determined based on a deterministic hashing algorithm.

NOTE: Each pool you add must have the same erasure coding parity configuration as the original pool, so the same data redundancy SLA is maintained.

3. Test your setup

To test this setup, access the Silo server via browser or mc.

Explore Further

• Silo Erasure Code QuickStart Guide
• Use mc with Silo Server
• Use aws-cli with Silo Server
• Use minio-go SDK with Silo Server
• The Silo documentation website