Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 663
  • Last Modified:

Server 2008 R2 Auditing - Hardware requirements?

Hi Guys

I'm looking to upgrade a client from Server 2003 to 2008 R2 (or I may use 2012 if it's compatible with their database - database is simple program and does not use sql).
I'll be running 1x server with 2x visualized server installs.
(1x domain controller, 1x terminal server - not running in-house exchange)
Hardware most likely: Dell server box: 2x 2ghz Xeon processors, 24-32GB ram, sas raid0 for OS, sas raid5 for data.

I would like to enable auditing for login's, file access, file changes etc. I'm not sure of the load that Auditing will put on the hardware as I've never used it before.

How much impact should auditing have on my server hardware? Do I need to over budget on the hardware spec? Do I need a separate server box just for auditing?

Any help/pointers would be greatly appreciated.

Kind Regards
Aaron
0
moncomp
Asked:
moncomp
  • 2
  • 2
1 Solution
 
DavidCommented:
RAID0?  No. Totally unacceptable.  RAID1, RAID10, or RAID5/6, or any mix.  Anything but RAID0.

Your bottleneck will be I/O, not CPU or memory.  You have a baseline now, so use it.  I assume auditing is turned off on the client's system.  So exactly what do they have now, and is end-user perspective that it is too slow, just right, or plenty fast.  Run perfmon and look at the I/O queue depth, throughput, and I/Os per second.

You can't make an informed decision on what somebody needs based on what little information you supplied.  Use the end-user's own performance details to be the baseline.
0
 
Sitaram PamarthiCommented:
Aaron, In my experience I haven't noticed any significant impact on IO/CPU/Memory when auditing is enabled. It is fairly decent and haven't imposed any problems even on high end systems with SQL and heavy IO.
0
 
moncompAuthor Commented:
Hi dlethe

Thanks for your reply :)
I'll try to answer as best I can.

Currently they have an old 2003 SBS server with 10x users. Auditing is not enabled on that server. Server is currently not overloaded cpu/ram or I/O.
The server is quite old so it will be phased out and a new server will be put in. On the new server the client is asking for auditing to be enabled help track who has accessed what and when. I figure 10x users, small file share, small database share program and no exchange shouldn't require a lot of I/O.

For the new server I was going to use Raid0 for the Hyper-V OS install and then raid5 for the VM machines.

I did not realize that Raid0 for the Hyper-V OS would cause I/O issues.
Would you recommend having Raid1 for the Hyper-V OS or Raid5/6/10? I thought Raid0 had better performance than Raid1 but less redundancy, only if used for the Hyper-V OS (not the VM machines)?

For the VM machine partitions which would you recommend Raid5/6/10, based upon such a small network?

Kind Regards
Aaron
0
 
DavidCommented:
I don't recommend RAID0 for anything other than video streaming HDTV or data capture.  If you want speed, then RAID1 is nearly twice as fast as RAID0 in real-world testing on reads.  Why? Because every byte of data is in two places, and the O/S + hardware can load balance.

I also don't recommend RAID5, I go with RAID6 due to the extra redundancy.  Specifically, I prefer RAID6 for database, and a pair of SSDs in a RAID1 configuration for O/S, swap, and scratch table space.  

Auditing is typically statistically insignificant amount of overhead.
0
 
moncompAuthor Commented:
Hi dlethe

That really makes good sense. Thanks for your help :)

Kind Regards
Aaron
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now