If you want something from a Tier1 the new Dell R720XD's will take 24x 900GB SAS disks and have 16 cores. If you order it with a SAS6-HBA you can add up to 8 trays of 24 x 900GB SAS disks to provide 194TB of raw space at quite a reasonable cost. Alternatively, you could have a couple of "probe" servers connected to some nice fast SAN backend with redundant controllers. This will provide failover at the probe and storage levels but will cost a fair bit more :) Regards, Andrew On 16/04/2012 11:18 a.m., George Herbert wrote:
On Thu, Apr 12, 2012 at 3:19 PM, Jared Mauch<jared@puck.nether.net> wrote:
You can also look at a machine like this:
http://www.supermicro.com/products/chassis/4U/417/SC417E16-R1400U.cfm
Jared Mauch
On Apr 12, 2012, at 5:47 PM, Matthew Luckie<mjl@luckie.org.nz> wrote:
1) My goal is to store the traffic may be fore ever, and analyze it in the future for security related incidents detected by ids/ips. Take a look at "Building a Time Machine for Efficient Recording and Retrieval of High-Volume Network Traffic"
https://www.usenix.org/conference/imc-05/building-time-machine-efficient-rec... Just FYI, it's somewhat of a tossup on large large arrays with 3.5" and 2.5" models. Equivalent 3.5" units hold 36-48 HDDs, and drive sizes for enterprise SAS drives are 3 TB in 3.5" vs 1 TB in 2.5" now, so you get more per box with 3.5" drives. Also a lot cheaper in the end.
About six months ago I purchased two similar boxes for nearline backups purposes (lower bandwidth) with 3.5" drives; 34 x 3 TB plus a couple of much faster 2.5" 15k boot drives, post-RAID-10-and-hotspare-and-filesystem usable space was about 42 TB. About $22k each. One can go somewhat cheaper than that but the VAR had a good support story and "just fixed it" the next day when a RAID card model didn't quite work out.