Why is TPS supported on fabricpool volumes in FSx but not on-prem ONTAP
Applies to
- ONTAP 9
- FSx
- TPS (Tamper-proof snapshots)
- Snaplock
Answer
- On-prem data is not considered tamper-proof once it is tiered to an object-store.
- Reasons for may be because object-stores can be modified and changed, and the underlying disks in the object-store are outside ONTAP's visibility and protection.
- ONTAP will only support the feature on FabricPool volumes if the volume doesn't have any blocks tiered to the object-store and the tiering policy is set to “none”.
- However, unlike on-prem ONTAP platforms, the ONTAP instance and object-store in FSx is fully managed and is not accessible.
- This allows snaplock compliance and the ability to support Tamper-proof Snapshot Locking.