Can Ceph replace Storage Spaces Direct in a Hyper-V cluster?
If your Hyper-V cluster keeps its VM disks on Storage Spaces Direct (S2D) and a Windows Server renewal or hardware refresh is forcing a decision, Ceph is the main open-source replacement for S2D, and it fits best inside a Proxmox VE cluster. Ceph is a distributed storage system licensed under LGPL-2.1 or LGPL-3, with no paid edition from the project itself, so the software cost is zero while hardware, support and staff time carry the expense. The trade-offs are real: Ceph is a different system to operate than S2D, it needs more deliberate node, drive and network planning, and a Hyper-V cluster does not become a Ceph cluster by swapping the hypervisor alone.
Before you commit, confirm three things in your own environment: how much usable capacity you need after replication, whether your drives and network can follow the Ceph hardware recommendations (a dedicated drive per OSD, bonded links across two switches, and enterprise-class SSDs for metadata), and whether your team can run cephadm or Rook day to day. Ceph's hardware guidance also says to size memory for peak use and to benchmark before buying, because no two clusters are alike. Check the active releases on the Ceph releases page and plan around the end-of-life dates listed there.
The rest of this page covers the decisions in that order: node and network sizing, replication versus erasure coding, running Ceph inside a Proxmox VE cluster, and moving VM disks off Cluster Shared Volumes. Ask any integrator for a written scope that names the hardware baseline, the failure domains they will design for, and the disk migration method, so you can compare the quote against what your cluster actually needs.
Which Storage Spaces Direct capabilities Ceph covers and where it differs
This table maps the main Storage Spaces Direct capabilities to their Ceph equivalents and marks where the match is partial or missing. Read each row as a question to answer in your own environment, since gaps in Windows-integrated management and SMB access shape most migration work.
| Capability | Storage Spaces Direct | Ceph equivalent and difference |
|---|---|---|
| Pooled software-defined storage | Pools local drives across Hyper-V hosts into one storage pool | Ceph pools OSD disks across hosts into RADOS pools, with placement set per pool rather than per volume |
| Mirror and parity resiliency | Two-way or three-way mirror, and parity layouts for capacity | Replicated pools and erasure-coded pools; erasure coding saves capacity but adds CPU and latency cost, so confirm the profile with a benchmark |
| Failure domains | Fault domains set by server, chassis or rack | CRUSH rules define failure domains such as host, rack or row; the rule must be written and tested for your layout |
| Cluster Shared Volumes | CSV presents one shared volume to many Hyper-V nodes | No direct equivalent; VM disks move to RBD images consumed by Proxmox VE or another KVM host, and CephFS covers shared file access |
| Tiering with SSD and HDD | Automatic tiering between SSD and HDD inside the pool | No automatic tiering; use device classes and separate pools, or place WAL and DB on SSDs for HDD-based OSDs |
| SMB3 file access | Native SMB3 shares for Windows clients and applications | No direct SMB3 equivalent; CephFS uses its own protocol, and SMB access needs a gateway such as Samba, which you must size and test |
| Storage Replica or stretch clustering | Storage Replica for stretched clusters and asynchronous replication | Multisite options exist for RGW and RBD mirroring; confirm stretch and multisite behavior for the target release before design |
| Management and deployment | Windows Admin Center, PowerShell and Failover Cluster Manager | cephadm deploys cluster services as containers; Rook is the path for Kubernetes; the Ceph Dashboard offers SAML 2.0 or OAuth2 single sign-on under documented conditions |
Ceph, Proxmox VE with Ceph, and Rook: which option fits
Choose this option when storage should run on its own hosts, separate from the hypervisors that consume it. cephadm deploys Ceph as containers, bootstraps a single-node cluster with one Monitor and one Manager, and then adds hosts and services. It was introduced in v15.2.0 (Octopus) and does not support older releases, and the actively maintained branches are Squid (19.2.x) and Tentacle (20.2.x). The cephadm documentation describes the bootstrap and host-add workflow.
- Fit: storage grows separately from compute, and one Ceph cluster can serve several hypervisor clusters.
- Requirements: a dedicated drive per OSD, shared SSDs for WAL and DB on HDD-based OSDs, enterprise-class SSDs for metadata, and bonded network links across two switches.
- Operations: you run a second cluster with its own upgrades, Monitors, network and on-call duties.
- Lifecycle: plan upgrades around the estimated end-of-life dates for Squid and Tentacle on the Ceph releases page.
- Sizing: size memory for peak use, not calm periods, and benchmark before buying.
Check which Ceph release your hypervisor platform supports, and confirm that its storage integration works with that release before you buy hardware.
Choose this option when the platform team already runs Kubernetes and wants storage managed through the same declarative tooling as the rest of the estate. The cephadm documentation points to Rook as the alternative way to deploy Ceph on Kubernetes. The CNCF Rook project page lists Rook as a Graduated project since October 7, 2020, which indicates project maturity but does not confirm that it fits your storage profile.
- Fit: container platforms where storage classes, volumes and the Ceph cluster are reconciled through Kubernetes objects.
- Requirements: Kubernetes nodes with dedicated drives, the same hardware rules as standalone Ceph, and staff who can operate both Ceph and Kubernetes.
- Shared failure domain: a fault in the Kubernetes control plane or networking also affects storage operations, so both layers need joint incident runbooks.
- Workload scope: Windows Server Hyper-V VMs do not move onto Kubernetes storage automatically, so define which workloads the Rook cluster serves before the design starts.
- Skills: the team must understand Ceph failure handling as well as Kubernetes upgrades and scheduling.
Confirm the Ceph release that your Rook version deploys and the Kubernetes versions it supports before you choose this path.
Choose this option when the same servers should run both virtual machines and storage. It is the closest match to a Storage Spaces Direct hyperconverged cluster. Proxmox VE is licensed under the GNU AGPL v3, supports Ceph RBD and CephFS as network storage, and manages clusters through one web interface. High availability requires at least three cluster nodes, shared storage for guests, redundant hardware and watchdog-based fencing, as described in the Proxmox VE High Availability guide.
- Fit: clusters that want one management interface for compute and storage, with fewer separately operated systems.
- Requirements: at least three nodes for reliable quorum, watchdog-based fencing, and the same drive, SSD and network rules that apply to standalone Ceph.
- Trade-off: compute and storage share each host's CPU, memory and failure domain, so Ceph recovery work competes with VM workloads.
- Memory: size each node for peak Ceph and VM demand, because storage recovery can spike during a node failure.
- Support tiers: Proxmox VE subscription tiers differ in support and enterprise repository access, not in software features, so ask which tier covers the Ceph nodes.
Confirm the Ceph release that your Proxmox VE version supports and test node failure and recovery in a non-production cluster before moving production VM disks.
How to size nodes and networks for Ceph versus Storage Spaces Direct
Sizing a Ceph cluster to replace Storage Spaces Direct starts with the OSD layout, because Ceph expects one dedicated drive per OSD and does not share a disk between a Windows volume and a storage daemon. Plan the drive count per node first, then the CPU and memory that the OSDs need. The Ceph hardware recommendations also advise that HDD-based OSDs move their write-ahead log (WAL) and database (DB) onto shared SSDs, so each node needs SSD capacity sized for the DB and WAL of every HDD behind it. Enterprise-class SSDs are the recommended choice for metadata, and a consumer drive that fails under sustained sync writes is a common reason a pilot underperforms. Where S2D used a cache tier and capacity tier of drives in each node, the equivalent decision in Ceph is which devices hold the data, which hold the DB and WAL, and which are left out of the layout entirely.
Memory has to be sized for peak load, not for an idle cluster. The Ceph hardware recommendations say to size memory for peak use and to benchmark before buying, because no two clusters are alike. Recovery after a node failure, a rebalance or a scrub is the usual peak, so the node must absorb that work without starving the guest workloads running on Proxmox VE. On the network side, bond the links across two switches so that a single switch failure does not isolate a node, and separate the public and cluster traffic where the design allows it. Confirm the switch and NIC models, their bonding modes and their throughput with the vendor and in a test before you order hardware.
Replication and erasure coding trade capacity efficiency against write performance and recovery behavior. Replicated pools store full copies, which costs more raw capacity but gives lower write latency and faster recovery for small objects. Erasure-coded pools store less overhead but spend more CPU and network on each write and on rebuilds. Choose the pool type per workload, with VM disks normally on replicated RBD pools and bulk data possibly on erasure-coded pools. Build a short benchmark with your own VM profile, measure write latency and rebuild time from a simulated node loss, and use those results to set the node count, drive count and bond speed in the quote you request.
Where Ceph changes operations, skills and risk
Replacing Storage Spaces Direct with Ceph moves storage work from Windows administration to Linux and Ceph operations. The cards below cover the skills, quorum and network needs, release lifecycle, recovery tooling, access controls and in-cluster traffic protection that change with that move. Each one is a decision or check to make before the cluster goes into production.
Linux and Ceph skill set
Storage Spaces Direct is administered through Windows Server tooling that most Hyper-V teams already know. Ceph is run with cephadm, which manages the cluster as containers, and the day-to-day work covers OSD replacement, pool design, placement and health warnings. Ask who on your team will own Ceph on-call duties and whether that person can rebuild a failed OSD without vendor help.
Three nodes for Proxmox HA quorum
Proxmox VE high availability needs at least three cluster nodes for reliable quorum, shared storage for guests, and watchdog-based fencing so a failed node is reset before its guests restart elsewhere. Ceph does not remove these requirements. Plan the node count and the redundant network paths together, and confirm that a single switch failure cannot isolate enough nodes to lose quorum.
Ceph release lifecycle and upgrades
Two Ceph releases are actively maintained: Squid, with an estimated end of life of October 31, 2026, and Tentacle, with an estimated end of life of June 1, 2027. Squid is still supported today but will reach end of life within months, so new clusters should start on Tentacle. Budget planned upgrades on a fixed schedule and test each one in a lab cluster before production.
Monitoring and recovery tooling
Storage Spaces Direct health is watched through Windows and Failover Cluster tools. A Ceph cluster needs its own alerting on OSD state, placement group health, capacity and monitor quorum, plus a tested procedure for OSD replacement and backfill. Confirm which metrics you will export, who receives alerts, and how long a rebuild is expected to take on your hardware before you commit to a recovery target.
Ceph Dashboard single sign-on
The Ceph Dashboard supports single sign-on through SAML 2.0. OAuth2 is available only when cephadm runs the Management Gateway and OAuth2 Proxy services. Choose the method your identity provider supports, map administrator roles before go-live, and remove local dashboard accounts that bypass your central access review.
Messenger v2 secure mode
Ceph messenger v2 listens on port 3300 and offers a secure mode that encrypts all traffic after authentication with AES-GCM and adds integrity checks. This protects in-cluster traffic between monitors, OSDs and clients on shared networks. Confirm that secure mode is enabled on every daemon, check that clients and older components negotiate it, and document where the cluster and public networks run.
Moving VM disks off Cluster Shared Volumes to Ceph
This sequence moves each workload's disks from Cluster Shared Volumes to Ceph storage in Proxmox VE in an order that keeps backups verified and rollback possible until Storage Spaces Direct is retired. Each step ends with a check that the next one depends on.
Inventory clusters, volumes and workloads
The Hyper-V administrator lists every clustered role, its owning node, every Cluster Shared Volume it uses, and the VM disk paths, checkpoints and dependencies between VMs, such as domain controllers, databases and application tiers. Export the inventory to CSV so the list can be reviewed by the application owners before any move is scheduled. The step is done when every VM has a named owner, a target order and a confirmed backup, and the application owners have signed off the list in writing.
Build and benchmark the Ceph cluster
The infrastructure team builds the Ceph cluster on hardware sized against the Ceph hardware recommendations, with a dedicated drive per OSD, enterprise-class SSDs for metadata, bonded network links across two switches, and memory sized for peak use. Benchmark the cluster under a load that resembles the production workload before any VM disk is copied, since the project advises benchmarking because no two clusters are alike. The step is done when the benchmark results are recorded against the agreed targets and a failed-disk and failed-node test has been run successfully.
Add Ceph as Proxmox storage
Proxmox VE nodes are joined into a cluster and the Ceph RBD pool is registered as shared storage for guest disks, so every node can reach the same volumes. Confirm that the cluster has at least three nodes for reliable quorum and that high availability fencing is configured before any clustered workload depends on it. The step is done when a test disk can be created, started on a second node and removed cleanly, with the pool's health reported as normal.
Export and convert VHDX disks
Export each VM with the Hyper-V export process described in the Hyper-V export guide, merge checkpoints where the migration guidance calls for it, and convert VHDX files into a format the Proxmox import tooling accepts. Check free space on the staging volume before conversion, because conversion needs room for both the source and the output. The step is done when each disk has a checksum recorded at export and a successful conversion log.
Import disks with qm disk import
Create an empty VM shell on Proxmox VE with matching firmware, machine type and CPU settings, then attach each converted disk to Ceph storage with qm disk import on the Proxmox node. Follow the Hyper-V migration guide for Generation 2 and UEFI settings, and compare the imported disk size and boot order with the Hyper-V inventory. The step is done when every disk appears on the target storage with the expected size and the VM configuration matches the inventory row.
Switch Windows guests to VirtIO drivers
Install the VirtIO storage and network drivers in each Windows guest while it still boots from the original controller, then change the disk and network adapter to VirtIO devices in the Proxmox configuration. Windows guests that cannot load the storage driver will fail to boot, so the driver step must finish before the controller is changed. The step is done when each guest boots from Ceph-backed VirtIO disks and reports the expected driver versions.
Test boot, networking and application health
Start each migrated VM in an isolated VLAN or test network, then verify boot, time sync, domain membership where applicable, VLAN tagging, DNS and the application's own health checks. Compare results against the inventory and record any differences, such as changed MAC addresses that affect licensing or firewall rules. The step is done when the application owner confirms the test results in writing and no open defects block the cutover.
Cut over clustered workloads in order
Move workloads in the dependency order from the inventory, starting with infrastructure services such as DNS and directory roles, then databases, then application tiers. Take a fresh backup and confirm it can be restored before each cutover, and keep the Hyper-V source VM in a powered-off state until the rollback window closes. The step is done when each workload has a documented cutover time, a verified backup and an owner's acceptance note.
Decommission Storage Spaces Direct after verified backups
Retire the Cluster Shared Volumes only after every workload runs on Ceph and the backup platform has restored a sample of VMs from the new environment. Remove the Hyper-V cluster roles, wipe the S2D disks under a documented procedure and update the asset register and runbooks. The step is done when the backup restore tests have passed, the S2D pool is removed from the cluster, and the change record is signed by the infrastructure owner.
Questions buyers ask before replacing Storage Spaces Direct
What drives the total cost of replacing Storage Spaces Direct with Ceph?
The total is driven by hardware, network, Proxmox VE subscriptions and the labor to build and run Ceph. Hardware is the largest one-time item: Ceph needs a dedicated drive per OSD, and HDD-based OSDs add shared SSDs for WAL and DB, plus enterprise-class SSDs for metadata. Network costs include bonded links across two switches. Proxmox VE is free to use, but its subscriptions are priced per occupied physical CPU socket per year: the Community tier is 120 euros, Basic 370 euros, Standard 550 euros and Premium 1,100 euros, according to the Proxmox VE pricing page. Every tier has the same features, so the choice is about support entitlements and enterprise repository access. Ceph itself has no paid edition from the project. Ask a quote to separate one-time hardware and migration work from recurring labor, subscriptions and support.
How long does a pilot take compared with a production Ceph cluster?
A pilot and a production cluster differ mainly in scope, redundancy and testing, so their durations are not interchangeable. A pilot usually proves node sizing, replication settings and VM disk moves on a few hosts. Production adds the three-node minimum for Proxmox VE high availability, redundant hardware, watchdog-based fencing, backup, monitoring and documented runbooks. The Ceph hardware recommendations advise benchmarking before buying because no two clusters are alike, so a pilot should include workload tests. The duration depends on hardware lead times, the number of VMs and how many clustered workloads must move. Ask for a fixed-scope plan with phases and written acceptance criteria before work starts.
What skills must the internal team supply for a Ceph and Proxmox VE cluster?
The team needs working knowledge of Linux administration, Ceph and networking. On the Linux side, operators manage Debian-based Proxmox VE hosts, storage pools, the cluster file system and updates. For Ceph, they need to understand OSD layout, monitors, managers, replication, placement and recovery, and how cephadm deploys services as containers. Networking skills cover bonded links, VLANs for public and cluster traffic, and switch redundancy. Staff should also know how to size memory for peak use, not calm periods, and how to monitor the Ceph Dashboard and cluster health. Ask whether the skills will be hired, trained or contracted, and whether the plan includes handover documentation and training.
Can our team run the Ceph migration without an outside partner?
A team with strong Linux, storage and network skills can often run a Ceph cluster itself, but the risk sits in the first failure, not the first build. Ceph recovery, OSD replacement, network faults and Proxmox VE fencing under load all need practice. Teams that lack this experience usually benefit from an outside plan, a build review and a runbook tested before go-live. DeployOpen plans, implements, hardens, backs up, documents and supports self-hosted open-source platforms inside the client's own infrastructure, and most engagements are fixed-scope. Some teams take only a design review, others want a full build. Decide by comparing your staff's time and recent experience with the scope of the work.
Does Ceph meet our performance needs for virtual machine disks?
Ceph can serve VM disks well when the hardware matches the workload, but it has no universal performance answer. Performance depends on drive class, OSD-to-drive layout, WAL and DB placement, network bandwidth, replication or erasure coding choice and memory. Ceph's guidance is to benchmark before buying, because no two clusters are alike. Write-heavy databases generally need the most attention to latency, and replicated pools are usually simpler to tune for VM storage than erasure-coded pools. Ask for a benchmark run on your own VM mix, measuring IOPS, latency and rebuild behavior during a failed-drive test, before committing to a node count.
Can Ceph cover our SSD and HDD tiers and the Storage Spaces Direct volume layout?
Ceph can separate device classes, so SSD and HDD pools can be defined and mapped to different workloads. It does not reproduce Storage Spaces Direct volumes one-for-one, so the layout must be redesigned. Storage Spaces Direct uses resiliency settings such as mirror or parity on Cluster Shared Volumes. Ceph uses pools with replicated or erasure-coded rules, and VM disks are stored as RBD images that Proxmox VE attaches as storage. Plan which VMs go to which pool, how much capacity each pool needs, and how failures are tolerated. Confirm this mapping in your design review, because a mismatch often appears only when disks are moved.
How do we handle Windows guest licenses after Hyper-V is removed?
Replacing the storage layer does not change Windows guest licensing, and this is the point buyers most often misread. Windows Server licenses on guest virtual machines remain your obligation after the hypervisor changes, and they are separate from the host decision. Ask your licensing advisor or Microsoft channel partner to confirm what your current agreement covers for guests that move to Proxmox VE, and whether Software Assurance or subscription terms affect the move. The Proxmox VE subscription covers the hypervisor hosts, not the Windows guests. Put the remaining guest licenses in your cost model as a recurring line, separate from storage and host costs.
Keeping Windows workloads running while storage moves
The safest way to move off Storage Spaces Direct is to run the old Hyper-V cluster and the new Proxmox VE and Ceph cluster side by side until each workload has been moved and verified. The two clusters should share nothing at the storage layer. Keep the Hyper-V cluster and its Cluster Shared Volumes untouched while you build the Ceph cluster on separate hardware, and confirm that the network path between them (for example, the routing and firewall rules for SMB, NFS or iSCSI if you use a temporary bridge) is documented and can be removed cleanly. Move one VM group at a time, starting with stateless or low-impact Windows servers, and keep a tested rollback path to the Hyper-V copy until the new copy has run through a full backup and restore cycle.
Windows guests carry their own dependencies, and most of them outlive the hypervisor change. Confirm the Windows Server licensing that still applies to each guest, because the Proxmox VE subscription covers the hypervisor host, not the Windows guests inside it. On the driver side, Windows guests on KVM typically need the VirtIO drivers installed before the disk controller is switched, so plan a test boot on a clone. Check the backup agent too: any agent or snapshot-based backup tied to Hyper-V integration services or the Volume Shadow Copy path must be replaced or reconfigured before the old cluster is retired, and you should verify that restores work on the new platform rather than assuming they do.
Decide service by service which Windows roles move with the VMs and which stay put. Active Directory domain controllers are usually better moved one at a time with replication health checked after each step, and at least one domain controller should remain available outside the migration window, so confirm your replication topology and FSMO role holders first. SMB file shares generate the most sensitive data movement, so schedule a final sync with users disconnected and confirm that share permissions, DFS namespaces and shadow copy schedules come across intact. Each decision needs a named owner and a written check: replication status, share access tests, and restore tests of the moved Windows servers. Confirm these steps against your own Windows Server versions and any Hyper-V features your estate depends on.
How to run a Ceph pilot before committing hardware
A pilot turns Ceph sizing assumptions into measured results on your own workloads, so the hardware purchase rests on tested behavior for performance, failure handling and recovery. It ends with a written go or no-go decision that the infrastructure, security and operations owners have all signed.
Define workloads and performance targets
Start by listing the Hyper-V workloads that would move to Ceph, such as SQL Server, file services, domain controllers and general application servers, and record how each one uses storage: read and write mix, block sizes, peak hours and latency sensitivity. The infrastructure lead and the application owners agree on targets in writing, including acceptable latency during peak use and the data protection level each workload needs. Done when every workload has a named owner and a measurable target that the pilot can test.
Select and document the test cluster
Choose a small set of servers that match the hardware you are considering, with a dedicated drive per OSD, enterprise-class SSDs for metadata and bonded network links across two switches, as the Ceph hardware recommendations describe. Record the CPU, memory, drive models, NIC and switch configuration, and the Ceph release, such as the Squid or Tentacle branch that is actively maintained at the time. Confirm with your hardware vendor and Ceph support path that the chosen release and components are supported together. Done when the bill of materials and the version baseline are documented and reviewed.
Deploy the pilot cluster with cephadm
Use cephadm to bootstrap the pilot cluster, adding hosts and services in the same way the production cluster will be built, so the runbooks you write are the ones you will use later. The platform engineer records every deviation from the planned design, such as network or drive substitutions, because each one changes the results. Done when the cluster reports healthy, all monitors and managers are running, and the build steps are captured as repeatable procedures.
Benchmark against the workload targets
Run benchmarks that reflect the workload profiles from the first step rather than generic synthetic numbers, and repeat each test enough times to see variation. Memory should be measured under peak conditions, not idle ones, because the Ceph hardware recommendations advise sizing for peak use. Compare results with the targets and note where the cluster falls short, which may point to a different drive, network or memory choice. Done when a signed results sheet shows each workload against its target, with the test conditions recorded.
Test failure and recovery drills
Simulate realistic faults in a controlled window: take a host offline, fail a drive, partition a network link and restore it, and watch how Ceph rebalances and how long client I/O is affected. Include a planned maintenance drain so the operations team learns the procedure before it is needed. Measure recovery behavior against the targets, and confirm that the application owners see the outcome they agreed to accept. Done when each drill has a logged result, a timeline and a follow-up action for anything outside the agreed tolerance.
Validate security and access controls
Confirm that the security configuration matches the requirements: enable the messenger v2 secure mode so post-authentication traffic is encrypted, restrict Dashboard access, and check how single sign-on would integrate with your identity provider. Review administrative accounts and who can change pools and cluster settings. The security lead signs off on the findings, and any gap becomes a documented risk with an owner. Done when the security review is recorded and no open item blocks the production design.
Set go or no-go criteria and decide
Before the pilot begins, agree on the criteria that will decide the outcome, covering benchmark results, drill outcomes, operational effort and the team's readiness to run Ceph. Review the evidence against those criteria with the CIO or infrastructure head and record the decision. A no-go is a valid result and should name what would change the answer, such as different hardware, a different Ceph release or more operator training. Done when the signed decision record exists and, if the answer is go, the production purchase is scoped from the tested configuration.
Running Ceph alongside the rest of the suite
Ceph does not run alone in a virtualization estate. Identity, backup, management and monitoring each need a decision before cutover, and each one can quietly reintroduce a dependency on the Windows stack you are leaving. The cards below name the integration points to settle and what to confirm with each vendor or in your own environment.
Active Directory for Windows guests
Windows guests keep joining Active Directory whether the hosts run Hyper-V or Proxmox VE, because the hypervisor does not hold guest identity. The Proxmox VE user management model covers administration of the hosts and the web interface, but it is separate from domain logon inside Windows VMs. Confirm which accounts need domain membership, how time sync reaches guests after the hypervisor changes, and whether any service accounts depend on Hyper-V integration services.
Backup with Proxmox Backup Server
Proxmox Backup Server is named as a storage target for Proxmox VE, so backups can land on a dedicated appliance instead of the Ceph pool that also serves running VMs. Keep backup data on separate failure domains from the production cluster, and test restores of a Windows VM with its domain state intact. Confirm retention policy, offsite copies, and whether your current Hyper-V backup product's job history must be kept for audit.
Management through Proxmox VE and Ceph Dashboard
Proxmox VE manages the hypervisor cluster, while the Ceph Dashboard manages the storage cluster, and each has its own login path. The Ceph Dashboard supports single sign-on through SAML 2.0, and through OAuth2 only when cephadm runs the Management Gateway and OAuth2 Proxy services. Decide early whether administrators use local accounts, your identity provider, or both, and confirm which SSO method your Ceph release supports before you design the access model.
Monitoring the hyperconverged stack
Hyperconverged storage fails in ways a hypervisor alarm alone will not show, such as OSD latency, degraded placement groups and slow recovery traffic on bonded links. Monitor the Ceph health state, OSD and network utilization, and the Proxmox VE cluster quorum as separate signals, and route them to the same on-call process. Confirm which exporters your monitoring platform supports for Ceph and Proxmox VE, and set alert thresholds from your own benchmark results.
How DeployOpen scopes a storage replacement
DeployOpen plans, implements, hardens and documents the Ceph and Proxmox VE environment inside your own infrastructure, whether that is your cloud accounts, data centers or an air-gapped network. Most engagements are fixed-scope: the scope, deliverables and timeline are agreed in writing before any work starts, so the decisions that drive cost are visible before a purchase order is raised. For a storage replacement, that written scope should name the node count, the drive layout (one drive per OSD, with WAL and DB placement on shared SSDs where HDD-based OSDs are used), the network design with bonded links across two switches, the chosen replication or erasure coding profile, and the Proxmox VE subscription tier for each socket.
The scope also determines what gets handed over. Expect the written deliverables to cover the cephadm or Rook deployment method, the Proxmox VE cluster and high availability configuration, the failure-domain and fencing settings, backup procedures for VM disks and Ceph pools, and the runbooks your operations team will use after go-live. Ask for the acceptance tests to be written into the scope as well, such as a planned node failure during load and a documented recovery time. Because Ceph sizing depends on benchmarks run against your workload, confirm early whether the scope includes a benchmark phase and who supplies the test hardware. After go-live, ongoing support, upgrades and continuous testing are available as retainers, which are billed separately from the fixed-scope project. Ceph and Proxmox VE both ship on a release cadence that needs planning, and the Ceph Tentacle and Squid release lines each have a published estimated end of life, so an upgrade plan belongs in the retainer conversation from the start. Ask each vendor or partner for a written quote that separates one-time project work from recurring retainer and subscription costs.
How DeployOpen works on this
DeployOpen plans, implements, hardens, documents and supports self-hosted open-source platforms inside your own infrastructure, including Ceph storage for Hyper-V migrations. We start with a written scope that fixes the node count, network design, replication choice and handover deliverables before any build work begins.
How we scope
- Inventory current Storage Spaces Direct volumes, CSV usage, VM disk sizes and growth expectations.
- Agree the replication or erasure coding choice, failure domains and capacity targets in the written scope.
- Define the Proxmox VE or other hypervisor integration points, network topology and cutover order for workloads.
How we build
- Deploy Ceph with cephadm or Rook on hardware sized against Ceph hardware recommendations, with a dedicated drive per OSD.
- Configure bonded network links across two switches and separate public and cluster traffic as the design requires.
- Test node failure, network loss and recovery behavior in a non-production environment before any VM disk moves.
How we hand over
- Deliver runbooks for cluster health checks, OSD replacement, capacity expansion and Ceph upgrades.
- Document the architecture, configuration, backup approach and evidence of each test run in a handover pack.
- Train your operations staff on daily checks and the escalation path defined in the written scope.
How we support
- Engagements are fixed-scope, with scope, deliverables and timelines agreed in writing before work starts.
- Ongoing support, upgrades and continuous testing are available as a retainer after handover.
- Confirm with DeployOpen during scoping which Ceph release line, support window and patch cadence your retainer covers.

