How we run iSCSI over the internet
Summary
This article documents how scsipub runs iSCSI targets on the public internet using a per-connection BEAM model, overlay-based writable sessions, and TLS termination with careful certificate rotation. It covers architecture decisions, security considerations, Open-iscsi quirks, and how clustering primitives like multi-LUN and SCSI-3 Persistent Reservations are implemented, plus what remains to be explored at scale.