I need an end-to-end multi-client/multi-supplier secure storage system, I can build it using various bits and pieces but it feels overcomplex - am I missing a trick?
Specifically I need to offer multiple clients VPN-secured, secure file transfer into a secure filesystem (as in encrypted on the disk/over fibre) then served out, again via VPN-secured, secure file transfer to a range of other suppliers. No client files can 'mix' at any point and ALL points in the chain must be secure. Oh and it has to be highly resilient, so this must all be clustered/load-balanced. Expecting around 500GB/client/supplier per day, total storage is unlikely to go over 30TB.
My current thought is to use a combination of Checkpoint Virtual Firewalls, 2/3 VMware hosts with lots of NICs connected to the FW, each host connected via Brocade secure FC HBAs to a secure FC SAN box, with each client's VPN tunnel being truncated inside their own VM (which will be clustered using a front-end load balancer), the VMs will then SFTP over the tunnel from the client, drop the files over the secure FC into a dedicated disk-group/LUN/datastore/VMDK chain. Then I'd do the same the other way out to suppliers (except we do apply some DRM as we transmit).
I'd appreciate any suggestions of how to make this simpler, more secure or both.