re: iSCSI over WAN

ravi brounstein

unread,

Mar 9, 2011, 6:00:57 PM3/9/11

to open-iscsi, ra...@deusmachine.com

Hey there,

I have seen many places offering iSCSI storage over WAN.

Currently I am using openfiler, and my question is what must be done
to make iSCSI work in this way?

Currently what I experience is that the iSCSI target shows up as the
LAN address (I am behind NAT) so it fails to connect at the WAN
address.

ravi brounstein

unread,

Mar 10, 2011, 3:24:44 PM3/10/11

to Paul Koning, open-...@googlegroups.com

the server side is NAT actually. soi am hitting snags as it scans the wan ip, finds the target, but as a NAT ip (local) not WAN ... so when I try to connect it fails.

Thank You,

Ravi Brounstein
Helpdesk Team
Deus Machine, LLC
http://www.deusmachine.com
Tel. 877.840.6024 x 101

On Mar 10, 2011, at 12:13 PM, "Paul Koning" <paul_...@dell.com> wrote:

> iSCSI over WAN doesn't make much sense.
>
> You're right, the discovery machinery sends IP addresses, which won't work if the target is behind NAT. If you can tell the client to connect directory to a configured target IP address, that might work.
>
> It sounds like your client side has NAT; I don't see why that would be a problem.
>
> Still, you might want to change to some other protocol that's optimized for WAN use. While in theory nothing prevents iSCSI from working there, it was certainly never considered a reasonable scenario.
>
> paul

Paul Koning

unread,

Mar 10, 2011, 3:26:36 PM3/10/11

to ravi brounstein, open-...@googlegroups.com

You might try supplying the target IP address manually instead of using the one obtained by discovery.

paul

Paul Koning

unread,

Mar 10, 2011, 3:12:58 PM3/10/11

to open-...@googlegroups.com, ra...@deusmachine.com

iSCSI over WAN doesn't make much sense.

You're right, the discovery machinery sends IP addresses, which won't work if the target is behind NAT. If you can tell the client to connect directory to a configured target IP address, that might work.

It sounds like your client side has NAT; I don't see why that would be a problem.

Still, you might want to change to some other protocol that's optimized for WAN use. While in theory nothing prevents iSCSI from working there, it was certainly never considered a reasonable scenario.

paul

On Mar 9, 2011, at 6:00 PM, ravi brounstein wrote:

Jonathan Murray

unread,

Mar 11, 2011, 2:59:31 PM3/11/11

to open-...@googlegroups.com, ravi brounstein, Paul Koning

Could this be a port forwarding issue? If the iscsi device lives
outside the LAN, would it be possible to forward port 3260 at the
router to allow the connection?

Jonathan

> --
> You received this message because you are subscribed to the Google Groups "open-iscsi" group.
> To post to this group, send email to open-...@googlegroups.com.
> To unsubscribe from this group, send email to open-iscsi+...@googlegroups.com.
> For more options, visit this group at http://groups.google.com/group/open-iscsi?hl=en.
>
>

Ulrich Windl

unread,

Mar 14, 2011, 9:49:12 AM3/14/11

to open-iscsi

>>> ravi brounstein <ravib1...@gmail.com> schrieb am 10.03.2011 um 00:00 in
Nachricht <644dd091-314c-402b...@18g2000prd.googlegroups.com>:

> Hey there,
>
> I have seen many places offering iSCSI storage over WAN.
>
> Currently I am using openfiler, and my question is what must be done
> to make iSCSI work in this way?

I'd say you need a VPN (transport-layer encryption).

NISMO1968

unread,

Mar 15, 2011, 3:48:18 AM3/15/11

to open-iscsi

It probably does not make much sense to you but to people doing async
replication over slow connection (WAN) to solve disaster recovery
problem it does make a lot of sense. Names like Double-Take and
StarWind come to mind.

-ichiro

Reply all

Reply to author

Forward