ECA Deployment Options
For optimal performance, it's recommended to place ECA clusters close to PowerScale clusters to minimize latency between the cluster and the ECA instance processing audit logs.
The ECA cluster can be centrally deployed in two configurations:
-
Centralized with NFS Over the WAN In this configuration, a central cluster uses a WAN link to access and mount remote cluster audit data via NFS. This setup is ideal for metro WAN deployments with lower latency.
-
Centralized with Remote Mini ECA Cluster
For scenarios with higher latency links between clusters, this option utilizes a single VM or two VMs for high availability at remote sites. These remote mini clusters collect audit data over a local NFS mount and forward events to the centralized ECA cluster for processing. This configuration is recommended when WAN latency exceeds 10 ms RTT or if the WAN link is slow.tipFor more information, see ECA VM Installation.