In order to meet the requirements for performance, maintainability, and horizontal scalability, the solution is built using a VxRail V670F 5-node cluster. This V Series VxRail is a 2U platform with Nvidia GPU support. It is also configured with all flash drives for optimal performance. The full specification is available here. The design testing was performed with three nodes that were dedicated to video processing while running three market-leading applications simultaneously. Milestone XProtect Systems provided the VMS functionality for our solution and Ipsotek and BriefCam provided the CV functionality products. In a full production environment, there are going to be trade-offs that need to be considered when designing the initial placement and any use of automation for maintaining reliable operations. This guide describes what we validated in our lab environment. Please consult with all software suppliers and any system integrators prior to implementing a production-grade safety and security system.
The base Hardware specs are as follows:
|CPU||2 x Intel(R) Xeon(R) Gold 6354 CPU @ 3.00 GHz (72 vCPU)|
|GPU||2 x A40 48 GB Nvidia GPU|
The following table describes the networks that are configured as part of the validated design:
|vSphere Management||Used by ESXi for host management.|
|vMotion||Used by ESXi for vMotion.|
|vSAN||Used by ESXi for vSAN traffic.|
|User||Used for user access to applications running on the VxRail.|
|Camera||The camera network isolates camera traffic so only specific applications receive video streams.|
|Storage||To optimize performance, application access to data storage is gained using a storage-only network.|
By configuring separate networks for the different traffic types, we get an additional layer of security and performance improvements.
- VMware vSAN for virtual machine disks, and Milestone Tier 1 storage
- Dell PowerScale for VMS video archiving
vSAN for VM local disks
The Dell VxRail cluster was configured with vSAN datastores that are available for local disk mapping by all the VMs running on the cluster. The vSAN storage was configured with a RAID 5 storage policy to provide fault tolerance for all the applications writing to vSAN storage. This protection level maximizes the storage capacity while providing protection against a node failure.
The vSAN storage was used for all disks needed by Milestone Systems XProtect, Ipsotek, and BriefCam VMs including the operating system and any local file locations. This includes all processing and management VMs needed by each of the software solutions.
The vSAN was also used for Milestone Systems Tier 1 storage. This storage is written to vSAN storage and then archived to PowerScale long term storage.
PowerScale for bulk video stream archive
Dell PowerScale is used to store large volumes of video data that must be safely retained based on the needs of the customer. An A3000 PowerScale appliance was used in this design for the video stream archive. Shares on the PowerScale A3000 were set up as Continuous Availability (CA) shares. The SMB network protocol is used between the Milestone Systems XProtect and the PowerScale A3000. File shares are defined as CA shares and use the SMB3 Witness protocol. The witness protocol enhances client failover for SMB3 CA shares. Witness notifies the Expansion Server when a PowerScale node becomes unavailable without the need to wait for the SMB3 connection time out. Other PowerScale models including the A2000 can be used with this solution. This storage is also responsible for responding to requests for retrieving historic video data for analysis by CV applications.
For more information about Dell storage options with Milestone, see Configuration Best Practices-Dell EMC storage solution with Milestone XProtect Corporate.
The high-level architecture is as follows:
This design augments the HA support provided by each application by placing selected VMs and services for each vendor across the cluster. Some components of a complete VMS and CV solution, such as the cameras and Control Room shown the previous image are not described in this design document, but can easily be integrated with the solution.