If you’re unfamiliar, PVS (Citrix Provisioning Server) is a vDisk deployment mechanism available for use within a XenDesktop or XenApp environment that uses streaming for image delivery. Shared read-only vDisks are streamed to virtual or physical targets in which users can access random pooled or static desktop sessions. Random desktops are reset to a pristine state between logoffs while users requiring static desktops have their changes persisted within a Personal vDisk pinned to their own desktop VM. Any changes that occur within the duration of a user session are captured in a write cache. This is where the performance demanding write IOs occur and where PVS offers a great deal of flexibility as to where those writes can occur. Write cache destination options are defined via PVS vDisk access modes which can dramatically change the performance characteristics of your VDI deployment. While PVS does add a degree of complexity to the overall architecture, since its own infrastructure is required, it is worth considering since it can reduce the amount of physical computing horsepower required for your VDI desktop hosts. The following diagram illustrates the relationship of PVS to Machine Creation Services (MCS) in the larger architectural context of XenDesktop. Keep in mind also that PVS is frequently used to deploy XenApp servers as well.

PVS 7.1 supports the following write cache destination options (from Link):

• Cache on device hard drive - Write cache can exist as a file in NTFS format, located on the target-device’s hard drive. This write cache option frees up the Provisioning Server since it does not have to process write requests and does not have the finite limitation of RAM.
• Cache on device hard drive persisted (experimental phase only) - The same as Cache on device hard drive, except cache persists. At this time, this write cache method is an experimental feature only, and is only supported for NT6.1 or later (Windows 7 and Windows 2008 R2 and later).
• Cache in device RAM - Write cache can exist as a temporary file in the target device’s RAM. This provides the fastest method of disk access since memory access is always faster than disk access.
• Cache in device RAM with overflow on hard disk - When RAM is zero, the target device write cache is only written to the local disk. When RAM is not zero, the target device write cache is written to RAM first.
• Cache on a server - Write cache can exist as a temporary file on a Provisioning Server. In this configuration, all writes are handled by the Provisioning Server, which can increase disk IO and network traffic.
• Cache on server persistent - This cache option allows for the saving of changes between reboots. Using this option, after rebooting, a target device is able to retrieve changes made from previous sessions that differ from the read only vDisk image.

Many of these were available in previous versions of PVS, including cache to RAM, but what makes v7.1 more interesting is the ability to cache to RAM with the ability to overflow to HDD. This provides the best of both worlds: extreme RAM-based IO performance without the risk since you can now overflow to HDD if the RAM cache fills. Previously you had to be very careful to ensure your RAM cache didn’t fill completely as that could result in catastrophe. Granted, if the need to overflow does occur, affected user VMs will be at the mercy of your available HDD performance capabilities, but this is still better than the alternative (BSOD).

Results

Even when caching directly to HDD, PVS shows lower IOPS/ user numbers than MCS does on the same hardware. We decided to take things a step further by testing a number of different caching options. We ran tests on both Hyper-V and ESXi using our standard 3 user VM profiles against LoginVSI’s low, medium, high workloads. For reference, below are the standard user VM profiles we use in all Dell Wyse Datacenter enterprise solutions:

We tested three write caching options across all user and workload types: cache on device HDD, RAM + Overflow (256MB) and RAM + Overflow (512MB). Doubling the amount of RAM cache on more intensive workloads paid off big netting a near host IOPS reduction to 0. That’s almost 100% of user generated IO absorbed completely by RAM. We didn’t capture the IOPS generated in RAM here using PVS, but as the fastest medium available in the server and from previous work done with other in-RAM technologies, I can tell you that 1600MHz RAM is capable of tens of thousands of IOPS, per host. We also tested thin vs thick provisioning using our high end profile when caching to HDD just for grins. Ironically, thin provisioning outperformed thick for ESXi, the opposite proved true for Hyper-V. To achieve these impressive IOPS number on ESXi it is important to enable intermediate buffering (see links at the bottom). I’ve highlighted the more impressive RAM + overflow results in red below. Note: IOPS per user below indicates IOPS generation as observed at the disk layer of the compute host. This does not mean these sessions generated close to no IOPS.

For Hyper-V we observed a similar story and did not enabled intermediate buffering at the recommendation of Citrix. This is important! Citrix strongly recommends to not use intermediate buffering on Hyper-V as it degrades performance. Most other numbers are well inline with the ESXi results, save for the cache to HDD numbers being slightly higher.

Implications

So what does it all mean? If you’re already a PVS customer this is a no brainer, upgrade to v7.1 and turn on “cache in device RAM with overflow to hard disk” now. Your storage subsystems will thank you. The benefits are clear in both ESXi and Hyper-V alike. If you’re deploying XenDesktop soon and debating MCS vs PVS, this is a very strong mark in the “pro” column for PVS. The fact of life in VDI is that we always run out of CPU first, but that doesn’t mean we get to ignore or undersize for IO performance as that’s important too. Enabling RAM to absorb the vast majority of user write cache IO allows us to stretch our HDD subsystems even further, since their burdens are diminished. Cut your local disk costs by 2/3 or stretch those shared arrays 2 or 3x. PVS cache in RAM + overflow allows you to design your storage around capacity requirements with less need to overprovision spindles just to meet IO demands (resulting in wasted capacity).

References:

DWD Enterprise Reference Architecture

http://support.citrix.com/proddocs/topic/provisioning-7/pvs-technology-overview-write-cache-intro.html 

When to Enable Intermediate Buffering for Local Hard Drive Cache

*Updated 5/16/14 – Sync just announced a new Vault feature that allows you to keep some files in the cloud that you don’t want to sync down to devices.

Previously, I took a look at another promising secure cloud storage provider called Tresorit, currently my default, which you can read about here. Toronto based Sync.com (currently in beta) looks to be going after the same market during a poignant time of concern over privacy and data security. Ever more more relevant as Dropbox just updated their TOS so more users will be looking for a more secure offering. Due to the NSA’s ability to snoop data “on the wire” as well as within US datacenters, sadly, this is also a time where considering cloud storage providers outside of US soil is a good thing.

“Zero Knowledge” Architecture

Sync.com uses what they call a zero knowledge storage environment, meaning that they have no knowledge of nor ability to access the files you upload.  Just like Tresorit, Sync.com provides a cloud encryption solution, meaning neither solution encrypts your files on local disk, only files sent up to and stored in the cloud as they leave your PC.  

There is a degree of trust one has to be willing to accept with these solutions as we really have no way to definitely prove that what is stored in the cloud is actually encrypted. Nor are we privy to the security standards or mechanisms in place in these datacenters to keep our data secure. That said, Sync.com expresses interest on their website to make their client software open source so greater transparency will come when that happens.

Sync.com does not provide a detailed white paper like Tresorit does but they do describe their methods.  Pretty straight-forward stuff. Your Sync.com account password protects your private key (AES-256), this key is used to encrypt a “file unlock key” for every file you upload to the cloud. File transfer and authentication happens via SSL. Authentication strings are SHA256 (never clear) and stored in their database as a salted BCRYPT-hashed string immune to rainbow table lookups. This is their claim, I can’t speak to the validity of this. 

Looks like the packaging of private key-encrypted file unlock keys with each encrypted file is what enables Sync.com to provide access to your files via a web portal (unlike Tresorit). This is closer to the LastPass method which also provides a web portal for that offering. I created a quickie diagram that illustrates their method below.

Just like Dropbox, Sync.com ultimately rides on the Amazon infrastructure but uses the Elastic Computing service (EC2), instead of S3, and keeps many local processes running at all times. Three most notably are the taskbar process, several dispatch instances and a watch master process. Interestingly, one of the dispatch processes keeps a persistent connection to a Network Solutions domain which also receives the majority of all bytes sent into the Sync.com cloud. All files added to any Sync.com folder locally get pushed up to this netfirms.com address first. It’s unclear to me what happens from there. Dropbox file uploads establish connections directly to AWS as well as Dropbox servers. Sync.com appears to be proxying all file uploads to an unknown location.

Keeping processes alive with persistent connections to the cloud definitely enables speedy syncs, up and down. Tresorit still uses the timed sync approach where at specified times its processes are spun up, connections to the cloud made, files synced, then connections and processes torn down. Not as speedy to sync, but there are no persistent connections.

Sync.com Client

User accounts are created via the download and install of the sync.com client. There is no way to log into the web portal until the client has been installed and account created first. Just like Tresorit, Sync.com provides a 5GB free account which is much larger than Dropbox’s 2GB. They don’t specifically mention a file size limit so to test I uploaded a 600MB file then a 3.7GB file, they both went. This could be a byproduct of the beta so uncertain if this will stick around but if so, this could be very promising.

The basic functionality of Sync.com is exactly like that of Dropbox: one folder whose contents gets synced up and down. Drop in files or folders and they get uploaded to the cloud and other Sync.com clients. The software client itself is very reminiscent of earlier versions of the Dropbox client.

They do provide a more mobile-friendly up/down limiter for those who presumably would run up against mobile data limits, although there is currently no mobile client. Curious that they would include this here in the desktop client.

The one key point of differentiation here is that in the client preferences they provide a progress tab showing any activity and estimated time remaining. Neither Dropbox nor Tresorit do this.

The right-click system tray menu is almost identical to Tresorit’s.

Web Portal

From a local PC capabilities perspective, that’s about it. All other functions, including sharing, happen from the web portal. Considering that Tresorit does not currently have a web portal, this is a pretty big deal.

The aesthetic and design of the web portal clearly took many queues from box.net although the Sync.com team managed to make it much cleaner and more intuitive.

Navigation and file operation are fairly predictable along with the expected ability to upload files to the web portal directly. You don’t have to use the desktop client to create new files. At this time folders cannot be uploaded to the portal, but more than one file can be selected and added to the upload queue. Cool!

Box.net and Dropbox offer a nice online photo viewer with Box’s offering heads and shoulders ahead of the other two. Sync.com’s implementation follows pretty close to what Dropbox has in play.

Sharing

Something else that occurs via the web portal is sharing which can be done in a few different ways. The simplest method happens via Secure Links which enables the secure public sharing of single files or folders. This sharing method is probably best suited to blind read-only sharing amongst larger groups. First select the file or folder to create a public link for by clicking the chain icon next to a given item.

You’ll then receive a pop-up with the link URL that you can opt whether or not to include the link password in the URL itself or leave it separated.

Other more precise ways to share content involve explicit sharing to people you specify.  Clicking the “Create a share” button will create a new folder and allow you to invite specific people via email addresses. The people invitation part is mandatory, no invited people = no share, but you can invite only yourself to test.

The third way to share is by clicking the plus sign next to any existing file or folder and enable sharing directly.

The same sharing dialog will appear which, again, requires the entering of someone else's email address to create the share.

Once shares are created, they can be managed either from the top level sharing link or via the “Manage Share” dialog next to any shared item.

Sharing management is simple and provides almost everything you need. Member status, permissions, ability to re-invite or invite new as well as stop sharing. Permissions need to be a bit more robust here to include ideally read-only and editing levels.

Mobile Client

As of this writing there is no Sync.com mobile client which will be a deal breaker to some but this is obviously coming. Sync.com states in their blog that they will simul-release clients for both Android and IOS but that was printed July of last year. The web portal does work on the mobile device, however, and even has a nice photo viewer functionality. 

What Sync.com does well

• Files synced to the cloud are encrypted in transit (SSL) and at rest in the Sync.com datacenter (AES-256).
• Very large file limits or none at all (>550MB and 3.7GB verified on my free account, but this could and likely will change)
• The ability to store, access and share encrypted files via a web portal is a big deal, no one else in the business can do this today!
• Split-brain: Ability to host some files in the cloud only that don’t have to be sync’d down to clients.
• Multi-client subfolder sync (Have to check since Box has struggled with this)
• 5GB free accounts with 500MB referrals, no indication of limits
• Robust and granular sharing options
• Robust and well-known compute backend (Amazon EC2)
• Persistent cloud connections and watcher processes = near instant file syncs
• 30-day file history to restore deleted or previous file versions

Where Sync.com falls short

• Amazon EC2 is a flexible compute service for web services, not a storage service like Amazon S3. Where is Sync.com actually storing our data? 
• No mobile Android or IOS client yet, but they say this is coming soon in their blog.
• No mobile client = no camera uploads
• Web portal provides upload ability for multi-select individual files only, not entire folders like Box does.
• Single bucket root folder like Dropbox. I like Tresorit’s approach of multiple root folders residing anywhere you like better. Sync the folders you like on the clients you like, save local space if you need to.   
• No LAN sync like Dropbox but seems they have the framework to make this a reality at some point.
• No MS Office mobile previews like Box.net but this too could be accomplished.

Watch this space!

The Sync.com team has clearly tried to preserve the best of what makes Dropbox great while incorporating some other useful features, the likes used by Box.net, while also providing data security in the cloud. The current climate of public technology will make this a requirement soon, no longer merely a luxury. This will leave the cloud storage pioneers (Dropbox) left to retool and scramble as they figure out how to make their now very mature offerings more secure, if they hope to survive. There’s too much good competition appearing in this space with nothing really compelling that will keep people using a less secure service. Building this type of offering with security as a focus first is absolutely the right approach and one that will pay dividends for companies like Tresorit and Sync.com.  After a few days using Sync.com there’s really not much to dislike. There are a few key features I’d like to see before I consider (another) switch. Tresorit better hurry up with their web portal or they will be outdone here. Hopefully Sync.com will offer some of us beta testers a 50GB+ opportunity soon. :-)

Feel free to use my referral link if you want to check out Sync.com with some free bonus space: here.

References:

Sync.com Privacy

Sync.com Blog

Check out my other cloud storage posts as well:

• Sync.com
• Box.net

*Updated 3/24/14

Part of living on the bleeding edge of technology is always looking for that better mouse trap. Needs and circumstances change along with the climate we live in, these things drive evolutionary product innovations and robust competition.  No service or offering is perfect so there are always concessions to be made but as long as you aren’t stepping backwards, technological change can be a good thing. I previously wrote about a potential shift from Dropbox to Box, but due to a fatal flaw in the Box offering I moved away from that ledge. (With the Box.net Sync v4 client, this is purportedly fixed, finally, although I haven’t tested. Even still, Box  = unsecure cloud storage since they encrypt contents with private keys they own. Tresorit started with a very strong launch but is now imposing limits that make the offer much less compelling. Read on for more info.

So what’s wrong with Dropbox? Honestly, not much, it is the feature/ functionality yard stick that all other cloud storage providers measure themselves against. The 2 big pain points I see are free storage space and security. It has become relatively easy to get 50GB on competing platforms, so Dropbox providing a meager 2GB with opportunities to increase it to ~20GB with referrals on the high side, is paltry. That said, Tresorit looks to be matching the 16GB possible extra referral space which will net them 3GB more total in the end. Secondly, beyond SSL + 2-factor authentication to access your Dropbox, you are on your own for securing your contents which ultimately reside in the Amazon S3 cloud. Although Dropbox claims to encrypt your files in the S3 cloud, this has proven to be exploitable and remains a problem for them today. Tresorit looks hopeful on solving both of these problems while providing the majority of the interesting features native to Dropbox.

What is Tresorit?

Tresorit is another contender in the cloud storage category with a heavy emphasis on security. Security is the first and foremost consideration of Tresorit, not an afterthought (see the whitepaper link at the bottom). A quick overview of the related nomenclature before we go deeper:

Tresorit (“Treasure It”) is the holistic cloud storage solution centered around protecting personal data in transit and at rest in the cloud.

Tresors are individual folders that have been client-side encrypted and synced up to the cloud.

The technique employed here is very similar to what LastPass does where all data is encrypted client side using a strong secret password and only the encrypted data is sent up to the cloud using secure channels. Tresorit never has your password so only you or those you explicitly share with can unencrypt your data via the Tresorit client. The communication channels use SSL/TLS but the security of this solution does not depend upon it as your data package itself is encrypted. Shared Tresors are decrypted client-side to the people you have expressly allowed access. Important to note that your files are not encrypted locally at rest on disk, they are only encrypted when synced up to the cloud.

Everything happens via the Tresorit client which must be installed on your PC or mobile device. There is no web portal to log into. Account registration and referral processing also happen via the client. Once installed, start creating new Tresors by connecting to any folder anywhere in your local file system. This is one of the cool things about Tresorit: many buckets, not just one like Dropbox. Although I have admittedly grown accustomed to keeping all things cloud in a single folder. Each Tresor will then be encrypted and sent up to the cloud.

Tresorit also handles selective syncing very intuitively: all Tresors disconnected by default. You choose what to sync on which clients simply by choosing to connect to the Tresor you would like to pull down on a given device. I have a 70GB account which is nearly 4x what my Dropbox account is so it is nice that I can selectively connect/disconnect those buckets as I see fit. Dropbox provides selective sync for top-level folders 1 level below the root Dropbox folder. Functionally no different, but Tresorit’s method is cleaner.

Any Tresor can be securely shared with anyone you like with 3 simple permissions to attach to each invitee.  

Any Tresor can be individually disconnected or deleted from the cloud or sync stopped. This is an improvement over the Dropbox offering. Sync can also be disabled globally too, of course. Disconnecting a Tresor from the PC or deleting a Tresor from the cloud does not delete the files locally.

On the mobile side, Tresorit also supports seamless mobile camera uploads, just like Dropbox, which is an awesome feature. Not having a web portal to access your files, however, not only requires you to install Tresorit but to connect and download a full Tresor before you can manipulate any files within it. If you have a space limited device this can prove challenging for obvious reasons. If you have an Anrdoid or IOS device, the Tresorit client on those platforms will allow more granular manipulation without having to first download a full Tresor. You can delete individual files or send a file which will trigger a download, but for that file only. It seems like the same functionality should be eventually brought to the desktop client as well at some point.

New Features (*updated 3/24/14)

Encrypted links allow you to securely share any individual file in any Tresor. Free users are limited in both the number of links that can be created but also how many times each can be downloaded. Not tremendously different than Dropbox’s sharing mechanism but secure and severely more limited.

File activity can now be viewed from within the Tresorit desktop or mobile client. Encrypted links can be generated for the latest version of any active file, however deleted or prior versions cannot be viewed or retrieved.

Plans

There are paid plan options just like all of these types of services but keep in mind the limitations of the free version (which have sadly increased in Q1 of 2014). New limitations have been introduced around the number of devices you can use, monthly traffic, bandwidth speeds and the number of people you can share with (down to 5 from 10). The device limit alone is now a deal breaker for me, maybe not for you. 

Disconnected Tresor sync

To prove that Tresorit could handle a net new file within an incomplete Tresor sync from a disconnected Tresor I performed the following test:

• Disconnect a Tresor folder with incomplete content (only 50% downloaded from the cloud)
• Uninstalled Tresorit client on same PC, reinstalled
• Added new file to existing directory structure 3 folder levels deep (still not synced)
• Connect the Tresor, sync

This performed flawlessly. The PC that had the Tresor with the 50% sync picked up where it left off (despite the Tresorit client being uninstalled/ reinstalled) and successfully pushed up the new file to the other PCs connected to the same Tresor. This is logical and exactly how it should work. Box couldn’t do this (maybe still can’t) which was their fatal flaw and why I felt compelled to test this here.

The one issue that popped up during this test was the fact that when reinstalling the client, it automatically logged into the same account with no prompt for credentials. This is obviously a serious problem if you ever wanted to install Tresorit at a friend or family member’s house to access a file, then uninstall thinking your account is safe. I contacted Tresorit about this and they said the issue will be resolved in the next release. As a precaution, manually logging out of the client before uninstalling would be a prudent step to protect your account.

What Tresorit does well

• Auto-encrypt and sync any folder anywhere on your Mac/PC to the cloud. (not just a single bucket like Dropbox)
• Multi-client sub-folder sync
• Granular selective folder sync enabled by default
• 5GB space for free users (>2x more than Dropbox), bonus referrals of 16GB, opportunities to get 50GB+ (Gone for now)
• Robust mobile client for Android/IOS that includes camera uploads, selective local caching, and passcode lockout
• Actual support! – That’s right, you can open a support request with Tresorit and actually expect an email back in a reasonable time. The staff seems genuinely interested in helping.

Where Tresorit falls short

• Limitations – Number of devices that can access an account, download, bandwidth and sharing.
• No web portal: Tresorit provides no web portal through which you can access your files. If this is possible with LastPass, also client-side encrypted, it should be possible here.
• Full folder download required: Full Tresor download is required to manipulate files on the PC client. Mobile client provides more granularity being able to access, delete or send individual files without downloading full Tresor folder. This applies to sharing as well which is a hassle to have to download 100% of all files in a given Tresor.
• No deleted files protection: There is no mechanism to retrieve deleted files today but the activity mechanism, currently in beta, may be an indication this is coming.
• No device management: There is no way to manage the multiple devices you have permitted to access your Tresorit account. If you lost your phone, for example, the only recourse you have right now is changing your password.
• No MS Office file previews: There is no mobile MS Office file preview which is something only Box does right now. I really like this feature and hope it makes it in at some point.
• 500GB file limits + 20 top-level folder max on free accounts
• There is no way (that I see) to change the master password once it’s been set (As of v0.8.100.133, there is!)
• No LAN sync – very nice Dropbox feature if you use multiple PCs as it copies bit via the LAN faster than pulling everything down from the cloud.
• Timed syncs – Tresorit syncs appear to operate on a timed schedule so are not change aware nor are they instantaneous. Opening the client manually will trigger the sync operation.
• No password recovery – This could go in either bucket really depending on where you stand. Bottom line, if you forget your password, kiss your Tresorit account and all data within goodbye.
• Camera uploads are broken on Android as of 1/5/14. This worked for a short time on a previous build but the Tresorit team appears to be struggling with this one. I’ve re-enabled my Dropbox account for this purpose alone until this gets sorted out. As of 2/21/14, this is working for me!

Off to a good start at first, now wait and see

After several days months of exclusive Tresorit use across multiple devices, I really have no didn’t have too many complaints. The majority of the core features I need are there. PC client syncs are not as snappy as they should be. Dropbox clients keep a persistent connection open to dropbox.com and all other LAN sync clients, so file changes sync almost immediately. Tresorit uses timed syncs which establish and tear down the sync session every time. To force a local sync early, you have to actually open the client which triggers an update operation. I don’t like this. On the other hand, I do feel like my data is secure and I have a huge storage footprint that I can grow further with referrals. This I like. New limitations introduced in 2014 have me rethinking how far I can go with Tresorit now. Of course, if a fatal flaw rears its head, I’ll tuck my tail and crawl back to Dropbox but so far I have no reason to see that happening. Working across several devices daily, I live in my cloud storage so this is important to me and having it secure without taking additional steps is a huge bonus. I’m now debating my options which include Box, Dropbox, Tresorit and Sync.

Feel free to use my referral link if you want to check out Tresorit with some free bonus space: Link

Resources:

Tresorit White Paper: Link

Contrary to popular attempts to convince you otherwise – the PC is not dead. Fewer novice-level users may actually require a PC these days thanks to smart phones and tablets but I’m not quite ready to concede to “app store” style games and pecking out emails with my index fingers pressed on smudgy glass as my only means. I have smart phones, a tablet, several laptops, and yet I still find myself wanting and using a PC more than the others combined. Multi-displays serving rich graphics rendered from a discrete GPU, Chrome with 50 tabs opened at once, a few RDP sessions, streaming audio, RARs unpacked and copied in seconds, Visio, PowerPoint, Premier Pro, the latest DX11 game titles…you get the picture. Some things just work better with a mouse and keyboard and honestly, unless Minority Report ever becomes a reality (via Kinnect perhaps?) this will probably always be the case. My current PC is still humming along just fine with a 4-year old Windows 7 build on what was then, top of the line hardware. Ivy Bridge is here now, parts are more efficient, use less power, and are faster than ever. Time to upgrade.

Parts Selection

Now that I decided mATX was the way to go, it was time to assemble the Bill of Materials. Case selection was not an easy feat and I usually find myself just ahead of the curve, wanting what’s just about to come out. My last few ATX builds have been using Lian-Li cases which are high quality, aluminum, artful designs that do tend to cost more. Silverstone is another manufacturer of like ilk creating some of the highest reviewed products in this space. Taiwan seems to have the high-end PC case market cornered between these two companies.

I looked at a lot of cases over the course of several days seeking the smallest most functional mATX case I could find. I based my decision between 2 cases: The PC-V355B by Lian-Li and the Sugo SG09 by SilverStone. Lian-Li’s case is the closest thing out there to the Node 304 in looks, trouble is there are fitment limitations and design problems. The biggest restriction is the CPU cooler height at 100mm which rules out any high performance tower style cooler. Some people have reported that the motherboard once installed, does not sit flush to the IO shield in the back.  Another problem is that the PSU perches over the motherboard without even a shelf to support it! TweakTown’s review of this case highlighted that using a larger ATX PSU actually caused the rear of the case to flex. Not good. Shame because she’s pretty.

SilverStone on the other hand, created a case that is not only smaller but has no restrictions on CPU coolers or GPU lengths plus supports ATX sized PSUs in a proper shelf. The SG09 has received high praise from just about every review I read. Space efficient, quality construction, free flowing and small. Exactly what I’m looking for. The largest point of contention with the SG09 are its looks. At first glance I didn’t like it either. That front panel is actually plastic made to look like brushed aluminum. I can honestly say that I’ve stared at this thing so long now that it has really grown on me. SilverStone announced at CES a premature successor to the SG09 called the SG10. It’s essentially the same case with a flatly-styled aluminum front panel. Initially I was holding out for the SG10 which is rumored to ship some time in April 2013. The more I looked at the 2 cases the more I liked the SG09 and less so the SG10. I’m also not afraid to modify this thing if it ever bothers me. Functionally this case is very close to mATX perfection which at the end of the day is what matters most.

I didn’t find building in the SG09 terribly difficult, but I’ve been doing this for a while. Careful part selection is of utmost importance and having patience working in tight spaces is key. There is a big warning right on the box to dissuade novice builders.

For my power supply, considering this SFF build in a tight space, I chose a 140mm modular PSU from Silverstone: ST55F. Gold efficiency, clean power, fully modular, with a max of 600 watts, this PSU should provide everything I need and more. I also purchased the SilverStone PP05 short cable kit which, in hindsight, is still a good idea but I should have gone with a fewer higher quality PP07 cables instead. I used maybe 2 or 3 cables from the PP05 kit leaving the others to waste. Space is at a premium so the less you have to tuck inside of tight spaces the better! The review site JonnyGuru.com does an incredibly detailed job reviewing power supplies so definitely stop there first to check out any PSU contenders.

CPU, RAM and Mobo

I’ve long since abandoned AMD as the economy play in the CPU market for Intel who continues to have very little competition in the high-end CPU space. Ivy Bridge is no exception and is the smallest (22nm) most powerful hyperthreaded quad-core yet, with power consumption under 80 watts. More and more functionality is going on-chip with this “Tick” in Intel’s Tick-Tock cycle, getting a die shrink and enhanced graphics capabilities. I debated my CPU choice considering even the 3570 as clock cycles really don’t matter today as much as they once did. Overclockability, cores, cache, power consumption and instructions are all notable considerations but my decision was ultimately made up for me by price. 4 years ago I got an amazing deal on my 1st gen Core-i7 920 CPU from MicroCenter locally, this time around MicroCenter again did not disappoint. They were selling the high end 3770K CPU (K=unlocked) for $100 less than NewEgg, who are really the last bastion of online PC parts. The lesser chips that I was considering were more expensive than this high performer. This was really a no brainer.

The 3770K provides a ton of performance right out of the box. Pushing this chip further will be an easy albeit potentially unnecessary task.

CPU cooling is an area that has a lot of very good data to help make your selection, if opting to buy into the after-market. The stock Intel coolers are marginally ok, barely. If any overclocking is to be attempted at all, an after-market cooler should be a serious consideration. Noctua is one of my favorite brands of cooler with somewhat expensive but highly effective products including some of the best fans around. The NH-D14 is a MASSIVE cooler that is pretty much top dog right now. It occupies a tremendous amount of real estate so low profile RAM is a must in SFF. It’s also $80. For a fraction of that cost ($35), the Cooler Master Hyper 212 Evo delivers impressive results stacking well against its pricier counterparts and was my choice for this build. It is a somewhat rawer product with a direct contact style sleeve where the CPU rests directly against the flattened copper pipes of the cooler. Some minor prep work was required on the 212 Evo before installation, namely filling the cracks between the pipes with Arctic Silver 5.

I also replaced the cheapy Cooler Master fan with a high quality Noctua for silent operation and high performance. Here it is installed in the SG09. There is plenty of clearance for DIMMs with taller heat spreaders.

For motherboards, I’ve bought into the Asus high end for a very long time and have never been disappointed. Performance, value, stability, and longevity are all traits I’ve come to expect from Asus. ASRock has ramped up as a worthy competitor along with Gigabyte with many good reviews and satisfied customers, but at the $200 price point I felt no need to stray from Asus who has only left me satisfied in the past. The Maximus V Gene is the Asus answer for the high-end mATX z77 chipset market. Overclocking, customization, features, performance… everything I could want is in this board and for less than many of its high-end competitors.

Memory is another area of agony with so many choices on the market. One thing was clear at the outset: I wanted a 32GB 1600Mhz DDR3 kit (4 x 8GB). When building SFF the size of the heat sink on the RAM is a key consideration especially if you plan to run an after market CPU cooler. I wanted a kit with tight timings (CAS 8 or CAS 9), low voltage (1.35v) and a low profile to sit unobstructed in the DIMM channels. The Crucial Ballistix Tactical and Sport VLP products fit this bill perfectly. The Tactical LP DIMMs (CAS8) in yellow would have been my first choice but there was a lack of third-party supply for this build and buying directly from Crucial for much more really negated the value for these modules. I ended up going with the 32GB VLP kit (CAS9) in black and have absolutely no regrets. All head-to-head reviews peg these kits very close in performance with a slight edge going to the Tactical LP for overclocking. The Tactical LPs also have a slightly taller heat spreader and carry a higher price premium. The VLP (Very Low Profile) sit almost flush to the DIMM channels providing zero obstruction for any CPU cooler. These modules are seriously low profile and with Micron chips under the hood, you can absolutely trust their performance and longevity.

Both run very tight timings at the stock 1.35v and offer a couple of XMP profiles to boost performance. There are other modules on the market that will clock higher but for me, these are perfect. The VLP modules clock in at 800Mhz out of the box with a very attractive 9-9-9-24 at a 2T command rate.

Data

MLC SSD prices continue to become more attractive with loads of available performance. At a minimum, running an SSD for your OS disk is a worthy investment. For this build I’m running 3 disks: 1 x 128GB SSD for OS, 1 x 64GB SSD for apps/scratch, 1 x 1TB 7.2K SATA for data. I have an external NAS array for backup and greater data capacity. My OS disk is the highly acclaimed Samsung Pro 840 SATA 6Gb/s that boasts random reads up to 97K IOPS and sequential reads/writes up to 530/390 MB/s, respectively. In other words, pretty damn fast.

For scratch and application files I’m reusing my Kingston SSDnow+ drive and for data I got a new Seagate Constellation ES drive. Any drive worth buying will have a warranty of at least 5 years. Those with 2 tend to wear out faster from my experience.

All hard drives are mounted cleverly behind the motherboard in the SG09. Up to 2 x 3.5” drives or 4 x 2.5” drives. Having done away with optical media a very long time ago, this new PC will not be getting a DVD/BR drive which must be slot loader style in this case anyway.

Graphics

Although the Ivy Bridge CPU now includes a more powerful on-chip graphics processor, it’s better suited to mobile devices or applications with less graphical demand. I opted to continue to run a discrete GPU for high performance graphics. The GTX 670 is a very good high/middle-end card that many benchmarks have pegged near the 680. I chose the 670 over the closely-spec’d 660Ti due to its 256-bit memory architecture which is stunted on the 660 at 192-bit and as a result offers less memory bandwidth. Most of the other specs are almost identical. Near term you would probably not notice much in the way of a severe performance difference but long game, the 670 has longer legs and more headroom. If the price is close, the 670 is the way to go.

Build Summary

As far as sourcing parts goes, it found it interesting that Amazon and NewEgg are really the only reasonable places online to source parts anymore. Sure TigerDirect is out there (compusa) but I found their prices to be generally not competitive. I suppose this does reflect the current state of the custom PC today with fewer builders perhaps but there are still a plethora of available parts. As a long time customer of NewEgg, they appear to be doing quite well and have earned top spot as premier parts destination online. Its return and RMA process still leave something to be desired with restocking fees and customer paid return shipping. If Amazon started stocking more PC parts I‘m pretty sure it could push NewEgg out of the game entirely. The only thing I bought from Amazon for this build was the PSU, consequently. MicroCenter provided the CPU and Pro 840, everything else was cheaper with coupons, shipped free, and tax free from NewEgg.

Windows 8, or…bust?

There’s a lot to like about Windows 8: settings sync between devices, new windows explorer, task manager, file copy/ pause operations, power savings, memory savings, oops reset, and some increased security. There’s a lot not to like about Win8: start screen, devalued search, hot corners, separate UIs to update and manage, a device with no touch negates many of the new improvements. I’ve run every version of Win8 since the first preview release. I’ve had a lot of time to digest it, watch the changes, read the white papers, blogs and get accustomed to the UI(s). I’m sad to say that Win8 will be the first new Windows OS ever that I will not be installing on my new PC. It just doesn’t make sense to me. The majority of the under the hood changes to Win8 deal with optimizing the OS for portability, which is fine, but I’m not overly concerned with less RAM consumption or new sleep modes on my PC. I am sure that Win8 is an amazing product on a proper touch enabled device a la the Surface or Dell XPS 12.

Win8 is a dual-personality OS with 2 distinct UIs each with its own set of applications. Metro apps run sandboxed much like Android or IOS and silently suspend or terminate in the background, much the same way. After a long time forcing myself to adapt, I’ve come to the conclusion that metro just isn’t for me on a desktop PC with a keyboard and mouse. I’m not interested in live tiles or apps from an app store, nor do I want to hover over hotspots or drag windows via mechanisms designed for touch. The new Start screen is essentially an exploded version of the Start menu, but now the search functionality has been handicapped. You can still push the windows key, type cmd and hit enter but if you’re searching for something there are more clicks involved now between the apps, settings, and files sub categories. Windows7 start search is far superior in this regard. Metro (formerly known as) is an interface designed for touch, period. So I resigned myself to “live on the desktop side”, I installed Classic Shell and enabled booting to the desktop which brought back the familiar feel of Win7. Start search is still severely lacking with Classic Shell in place and I’ve had a few application compatibility problems as well. Win8 just doesn’t feel like an upgrade, especially having to make so many concessions to live with it. The user experience overall has gotten worse, not better, in my opinion for non-touch enabled devices. Win8 will likely be the new Vista (which I never had a problem with personally) and Microsoft has some time to watch the market before making their next move. They hedged their bets between tablets and PCs with Win8 and have managed to give each group enough of what they need. If this tablet thing fizzles into a fad, no problem, out comes the full blown desktop, if the PC dies completely metro will be primary. I’ll continue to run Win8 on my laptop, but my new powerhouse desktop will be getting a fresh build of Win7 SP1.

Final Thoughts

Overall I am extremely pleased with my new Ivy Bridge build in the SG09. One of the few aesthetically bothering items is that the ST55-F PSU in the SG09 sits off-center to the left so you can see the PSU logo off behind the case logo. Also the bar of stickers on the right side of the face of the PSU are somewhat distracting. The use of 90-degree sata connectors should be avoided in this case as they can interfere with the closing of the top lid. SATA “6Gb” cables came with the V Gene board but tests show there is no performance difference whatsoever between these and SATA cables from years ago. The 6Gb cables do have locking mechanisms on the ends which are a nice touch.

The OS installation was a marvel all unto its own taking 5 minutes flat from start to finish. Reboots are a literal 10 seconds from click to logon screen. In complete stock form this rig is a beast. I plan to overclock a bit once the TIM has broken in on the CPU but the need to do so is really minimal. It will be for fun more than anything.

From a power consumption perspective, this PC has yet to break 200w of usage, even during peak graphical or CPU intensive operations. For anyone wondering if 550w in a SFX PSU will be enough, yes it will! I have light fixtures that consume more power than this PC! It is also very quiet with all fans operating normally. There is a fan switch in the rear of the case to boost all RPMs to high which does kick up the noise a bit. Between this build and my old rig it’s almost like my office is too quiet now. :-)

Temperatures are so far better than average from what I’ve read, with the CPU idling ~33-34 Celsius. This will get better as the Artic Silver 5 sets in.

I don’t have any other performance benchmark data at this point (other than my 7.9 Windows user experience score) so I’ll just leave it that this thing is FAST and was well worth the upgrade. Faster, quieter, smaller, less power consumed = mission accomplished.

From:

To: