Re: Trevor.. these are nice boxes, but..
To be honest; it worries me...but less so than it probably should, were I a "proper" storage wonk. The truth is that I don't trust "dual controller" systems as the be-all and end-all of high availability either. Dual PSU, dual controller…but that still leaves a mobo, CPU, RAM and other widgets inside those boxes that are single points of failure.
The lack of real-time block-level replication is the thing that ultimately makes me twitchy.
Even if I were to go out and buy an expensive storage array from EMC, Netapp or otherwise, I wouldn't sleep at night unless everything was backed up. Ultimately, that means block-level replication between two storage devices bonded in a cluster using MPIO against at least two switches into two separate controllers on each relevant host.
And then I will still take backups with something like a Unitrends box. (HA is not backup!)
So what does the lack of a second controller in this circumstance really mean? If it fails you are down. That's a bummer. It is swappable; you can always keep a spare on hand. You could also keep a spare Drobo on hand, and just swap the disks, but that's getting into "byzantine" territory.
So my take on this is "do no use the Drobo for anything that requires HA storage." Also: "make sure you buy a second controller card and keep it on the shelf." For the majority of my workloads, I don't need HA storage. A half-hour's downtime – even at the height of the year – isn't the end of the world. I also keep backups of everything, so even if the whole thing were to vanish in a puff of smoke – a possibility for any storage array, no matter the vendor – I can recover.
I don't have a problem rolling this out to client sites to prove "scratch space" LUNs for creatives. I also have one going into service as the "volume shadow copy" LUN provider for a pair of physical servers on a client site. (That one has no SSDs; it's just a giant box of storage.)
Like any storage, it is a question of fitness for purpose. The lack of a second controller wouldn't bother me if Drobo were to add block-level replication; I'd rather have two completely separate units in lock-step than I would a single unit with various "redundant" bits.
The dual controller part would take Drobo doing some reengineering to solve. Block-level replication could be done with a software update. Until Drobo make that choice, I feel they are locking themselves out of a wider market that would otherwise give them serious consideration.