SecurityBrief Asia - Technology news for CISOs & cybersecurity decision-makers
Story image
VAST Data announces largest software release to date
Fri, 24th Feb 2023
FYI, this story is more than a year old

VAST Data has launched the 4.6 and 4.7 versions of its software, marking the largest software release to date for the AI data platform company.

The update comes as VAST has expanded its R&D team to around 300. The new release is the summation of six months’ work from the team as it continues to develop VAST’s operating system (OS) and includes a range of features.

VAST Data Catalog

The VAST Catalog is an extension of the Element Store, which now makes it possible for VAST clusters to catalogue each and every file and object written into an extensible tabular format, which enables data users to further enrich and tag data with additional user-defined context (in the form data which is recorded in new columns) and to query upon massive datasets at any level of scale.

Now users and administrators can tap into a tool that provides global insight into their vast reserves of data with a fully synthesised and synchronised data catalogue that requires no integration and where the catalogue is never out of sync with your datastore, the company states.

The company states, the VAST Catalog will enable a number of new applications of VAST OS:

  • VAST administrators will leverage the Catalog for capacity management and chargeback
  • Backup and archive applications can use a new differential to traverse the namespace even faster, resulting in faster backups and the application of rapid data migration
  • Applications can replace POSIX (portable operating system interface) functions with SQL statements to see rapid accelerations for mundane POSIX operations

Policy-based quality of service

With this new release, VAST is extending its QOS (quality of service) offering beyond the Pools concept previously introduced, and is now offering an additional ability to create different service plans that sets min/max limits on bandwidth and IOPS (input/output operations per second) per each VAST User or View (VAST’s term for a share, export or bucket) such that service providers (public and private cloud) can contain ‘noisy neighbours’.

User-Level views, in particular, are a big step forward for a number of VAST’s service provider partners who have been stuck with the more limited approaches, the company states.

Enterprise key management

Consistent with the above service provider focus, VAST is now applying the same thinking to external key management by supporting KMIP (key management interoperability protocol) 1.2.

This standard key vault interface API allows users to connect the most popular EKM systems to VAST Clusters so that:

  • Tenants can bring and manage their own unique encryption keys
  • Tenants can rotate their keys with any regularity they’d like
  • Customers can exert control over how they encrypt while still saving on infrastructure

To start, VAST is offering support for Thales CypherTrust and IBM Key Protect. In the future, the company will look to expand this support matrix according to customers’ priorities.

Global snapshots and global clones

VAST’s Element Store has always featured a fine-grained approach to implementing Snapshots. Snapshots are reserved without taking performance away from the application; they are fine-grained data reservation operations with byte-level granularity and customers can flexibly take hundreds of thousands of snapshots at any namespace depth with as little as 15-second granularity.

With VAST, there are never partitions or volumes to worry about. Each VAST server accesses the same global dataset thanks to its Disaggregated, Shared-Everything (DASE) architecture.

Starting with this new release, VAST clusters now also support the ability to share and extend snapshots to multiple remote clusters. Each remote site can mount another site’s snapshots and even make clones of this data to turn a snapshot into a read/write View. This capability lays the foundation for other work VAST will unveil, relating to building a global namespace from edge to cloud.

Uplink with ML-informed

Capacity Prediction Uplink is VAST’s global, cloud-based fleet management consoles designed to make it easy for customers to manage all of their VAST clusters from a single pane of glass.

With the power of elastic computing (which comes from the cloud) and some sprinkling of Python-based ML (machine learning) libraries, customers can now become much smarter about the data utilisation trends within their clusters and take advantage of capacity predictions so that they can keep ahead of demand.

Uplink now provides a one-click (tuneable) prediction basis and a prediction horizon that is built on a time-series database and made available as a capacity estimation tool. ML also helps the system understand how to normalise against data trend anomalies that would otherwise confuse a classic statistical model, making for more accurate capacity predictions.

More zero-trust security work

While zero-trust is a critical capability for VAST as it becomes the foundation for leading cloud service providers, it’s equally important to government and enterprise customers who are constantly swimming upstream to keep their infrastructure maximally secure.

In addition to supporting KMIP/EKM, VAST is also extending the zero-trust agenda by announcing support for:

  • TLS-Based Access for NFS (network file system), arguably an easier method of providing in-flight encryption
  • PseudoFS, now allowing NFS 4.1 customers limit access to subsets of directories
  • Rocky Linux for VAST OS, moving beyond CentOS to enable compliance, STIG (security technical implementation guides), and FIPS (Federal information processing standard) S3 Audit, adding to the NFS and SMB (server message block) audit already supported

VAST’s Kubernetes CSI update

VAST’s CSI (container storage interface) now supports different storage classes for persistent and ephemeral volumes and Helm Charts are now provided for easier implementation of VAST’s CSI, all helping to make it easier to power on-premises and private computing clouds with VAST.