双活数据中心与灾备解决方案-技术部分

议程1同城双活技术方案2异地灾备技术方案1第一页，共92页。基于虚拟化技术的业务连续性解决方案概览资源池vSpherevSpherevSphere本地站点灾备站点基于虚拟化层的异步复制基于硬件设备的同异步复制自动化应用切换管理城域集群应用感知的高可用性关键应用零停机保护在线迁移虚拟机，动态调配计算与存储资源VMotionandStorageVMotion高效的数据备份与恢复可通过运行计划与脚本实现自动化操作资源池vSpherevSphereDev/TestDev/TestDev/Test灾难恢复本地高可用数据保护方案特点与应用程序和操作系统无关与硬件设备无关

完善的保护

简单，经济2第二页，共92页。议程1同城双活技术方案2异地灾备技术方案3第三页，共92页。双活数据中心在各个级别上全面保障可用性vMotion&DRS

HA&FT服务器StoragevMotion，StorageDRS存储VMFSVMFS硬件热添加

多网卡绑定

存储多路径组件数据DataReplicationMetroCluster站点4第四页，共92页。双活数据中心总体架构双活存储集群站点A站点B延伸的vSphere集群>200km行为与单个vSphere相同延伸距离最大200KM，通常小于50KM通过VMwareHA与vMotion实现自动的DR保护需要双活存储集群，如EMC的vPlex，NetApp的MetroCluster等5第五页，共92页。计算资源设计第六页，共92页。MakinganApplicationServiceHighlyAvailablevSphereHAvSphereAppHA7第七页，共92页。VMwarevFabric™tcServervSphereAppHA

Policy-basedProtectoff-the-shelfapps8第八页，共92页。FaultTolerancevs.HighAvailabilityFaulttoleranceAbilitytorecoverfromcomponentlossExample:HarddrivefailureHighavailabilityUptimepercentageinoneyearDowntimeinoneyear993.65days99.98.76hours99.9952minutes99.999“fivenines”5minutesX9第九页，共92页。支持多vCPU的容错技术InstantaneousFailover4vCPU4vCPUvSpherePrimarySecondaryFastCheckpointingFTsupportforupto4vCPUsProtectionforhighperformance,multi-vCPUVMsNew,morescalabletechnology:fastcheck-pointingtokeepprimaryandsecondaryinsyncOverviewProtectmission-critical,high-performanceapplicationsregardlessofOSContinuousavailability:zerodowntime,zerodatalossforinfrastructurefailuresFullyautomatedresponseBenefits10第十页，共92页。Targetingcross-continentaldistances–upto100msRTTsMaintainstandardvMotionguaranteesLeaderinVMflexibility功能简介PermanentmigrationsbetweendatacentersDisasteravoidance(DA)DR/DAtestingMulti-siteloadbalancingFollowthesunBenefits长距离vMotionvSphere6.0支持跨三层网络和跨vCenterServer的vMotions11第十一页，共92页。vCenterAvailabilityRunvCenterServerapplicationinaVMRunvCenterServerdatabaseinaVMRunbothinsameVM?ProtectwithvSphereHAvCenterandDBVMrestartprioritysettoHighEnableguestOSandAppmonitoringAppHAcanprotectSQLServerdatabaseBackupvCenterServerVManddatabaseImage-levelbackupforvCenterServerVMApp-levelbackupusingagentfordatabasebackup12第十二页，共92页。网络资源设计第十三页，共92页。双活数据中心网络架构物理二层(裸光纤)逻辑二层

层叠网络/VPN二层分段VMVMVM二层分段VMVMVM二层网络扩展的二层网络(二层内容在

数据中心互连

链路上传递)站点A站点B二层网络14第十四页，共92页。NSXvSphereMulti-SiteUseCasesNSXforvSpheresupports3differentMulti-SiteDeploymentModelsVXLANwithStretchedClusters(vSphereMetroStorageCluster)VXLANwithSeparateClustersL2VPNAllsolutionsprovideL2extensionoveranL3network,enablingworkload&IPmobilitywithouttheneedtostretchVLANsLocalegressissupported,howeveritdoesaddcomplexityTheappropriatedeploymentmodelwilldependoncustomerrequirementsandtheirenvironment第十五页，共92页。NSX利用层叠网络实现双活数据中心双活存储

vSphere城域存储集群数据存储1数据存储2vCenterServer三层

网络站点A站点BVM1VM2VM3逻辑交换机A

/24VM4VM5逻辑交换机B

/24分布式逻辑路由器站点A

边界网关上联网络A站点B

边界网关上联网络B16第十六页，共92页。VMwareNSXMulti-SiteSingleVC,StretchedClusterSolutionDetailRequiresasupportedvSphereMetroStorageClusterconfigurationInavMSCdeployment,storageisActive/Activeandspansbothsites.ExamplesofActive/Activestorageare:EMCVPLEX,NetAppMetroCluster

(seeVMwareHCLformoreinformation)StretchedclusterssupportLivevMotionofworkloadsUseL3forallVMkernelnetworks:Management,vMotion,IPStorageAllmanagementcomponentssuchasvCenterServer,NSXManagerandControllersarelocatedinSiteALatencyandbandwidthrequirementsaredictatedbyvMSCstoragevendor,eg10msRTTforVPLEXwhichalsoalignswithvMotionusingEnterprisePlusvMSCenablesdisasteravoidanceandbasicDisasterRecovery(withouttheorchestrationortestingcapabilitiesofSRM)LossofeitherNSXComponentsortheDatacenterInterconnectwillresultsinafallbacktodataplanebasedlearningusingexistingnetworkstate.ThereforethereisnooutagetodataforwardingandwithoutvCenterServer,therearenoVMprovisioningormigrationoperationsNSXandvMSCarecomplimentarytechnologiesthatfitasweetspotforNSX(SinglevCenterServer)第十七页，共92页。VMwareNSXMulti-SiteSingleVC,StretchedClusterVMwareESXiVMwareESXiVMwareESXiVMwareESXiSiteASiteBStretchedWorkloadClusterVMwareESXiVMwareESXiVMwareESXiVMwareESXiSiteASiteBStretchedEdgeClusterClusterConfigurationvMSCenablesstretchedclustersacrosstwophysicalsitesInanNSXdeploymentManagement,EdgeandWorkloadclustersareallstretchedUndernormalconditionsallManagementComponentsruninaSiteAandareprotectedbyvSphereHATheyareautomaticallyrestartedatSiteBintheeventofasiteoutage.ThemanagementnetworkisnotstretchedandmustbeenabledonSiteBaspartoftherecoveryrunbookDependentondesign,NSXEdgeServicesGatewaysareeitheractiveinbothsitesorasinglesiteandcanalsoleverageHAVMsintheWorkloadClustersare

automaticallyrecoveredVMwareESXiVMwareESXiVMwareESXiVMwareESXiSiteASiteBvCenterServerStretchedManagementCluster18第十八页，共92页。VMwareNSXMulti-SiteSingleVC,StretchedClusterInavMSCenvironment,DRSisusedtobalanceresourceutilization,providesiteaffinity,improvedavailabilityandensureoptimaltrafficflowUseShouldrules,ratherthanMustasthisallowsvSphereHAtotakeprecedenceExampleDRSGroups,RulesandSettingsforNSXEdges:第十九页，共92页。VMwareNSXMulti-SiteSingleVC,StretchedClusterNSXConfiguration(Option1-Preferred)TransportZonespansbothSitesandVXLANLogicalSwitchesprovideL2connectivitytoVMsDistributedLogicalRoutingisusedforallVMstoprovideconsistentdefaultgatewayvMACLocalEgressisprovidedbyusingseparateUplinkLIFsandEdgeGWspersite.HostsonSiteAhaveDLRdefaultgatewayconfiguredviaSiteAEdgeGWusingnet-vdrCLI.WhileSiteBDLRdefaultgatewayisviaSiteBEdgeGWCaveat:DynamicRoutingcannotbeenabledonDLR,orastaticroutesetviaNSXManagerNSXEdgeGatewayswillhaveastaticrouteforanynetworksdirectlyconnectedtoDLR.ConsistentIP

addressingwillsimplifyroutingbyallowingasupernettobeusedDFWprovidesvNICpolicyenforcementindependentoftheVMslocationVM1VM2VM3WebLogicalSwitch

/24SiteASiteBDistributedLogicalRouterVM4VM5AppLogicalSwitch

/24SiteANSX

EdgeGWSiteBNSX

EdgeGWVM6VM7DBLogicalSwitch

/24InternalLIFs.1第二十页，共92页。VMwareNSXMulti-SiteSingleVC,StretchedClusterNSXConfiguration(Option2)AsperOption1TransportZonespansbothSitesandVXLANLogicalSwitchesprovideL2connectivityforVMsNSXEdgeGatewaysaredeployedpersitewiththesameinternalIPaddressNSXDFWL2EthernetRulesaredefinedtoblockARPtotheremoteGWusingMACSets,whichprovidesLocalEgressasonlythesitelocalEdgeGWislearnt.FutureenhancementplannedtoenableESXihostobjectforDFW*Caveats:TrafficflowbetweenapplicationtiersmaybeasymmetriciftheyaresplitacrosssitesandDRSrulesaren’tusedDoesnotleverageDistributedLogicalRoutingandislimitedto10vNICsperEdgevMotionwillresultinnetworkinterruptionasVMARPcacheentryforsitespecificGWneedstotimeoutCanbeusedifOption1isn’tafit(eg,requireDynamicRoutingorvSphere5.1support)SiteASiteBVM1VM2VM3VM3SiteANSX

EdgeGWSiteBNSX

EdgeGW第二十一页，共92页。VMwareNSXMulti-SiteSingleVC,SeparateClusters(2)Datastore1Datastore2vCenterServerL3NetworkSiteASiteBVM1VM2VM3LogicalSwitchA

/24VM4VM5LogicalSwitchB

/24DistributedLogicalRouterSiteANSX

EdgeGWUplinkNetASiteBNSX

EdgeGWUplinkNetBStoragevMotionRequiredfor

VMMobility22第二十二页，共92页。VMwareNSXMulti-SiteSingleVC,SeparateClustersSolutionDetailSeparatevSphereClustersareusedateachsite,thereforeDRSrules&groupsarenotrequiredStorageislocaltoasiteEnhancedvMotion(simultaneousvMotionandsvMotion)canprovidelivevMotionwithoutsharedstorageUseL3forallVMkernelnetworks:Management,vMotion,IPStorageAllmanagementcomponentssuchasvCenterServer,NSXManagerandControllersarelocatedinSiteASupportedlatencyrequirementforEnhancedvMotionis100msRTT(vSphere6).vMotionrequires250MbpsofbandwidthperconcurrentvMotionThissolutionprovidesDisasterAvoidancewherelivevMotionissupported,byenablingworkloadstobemovedproactivelybetweensitesDoesnotprovideautomatedDisasterRecovery第二十三页，共92页。VMwareNSXMulti-SiteSingleVC,SeparateClustersVMwareESXiManagementClusterVMwareESXiSiteAvCenterServerClusterConfigurationClustersdonotspanbeyondaphysicalsiteAllManagementComponentsruninSiteA,andwillnotbeautomaticallyrecoveredintheeventofasiteoutage.StoragereplicationtoastandbyClusterinSiteBandamanualrecoveryprocesscouldbeimplementedSeparateEdgeandWorkloadsClustersareusedpersiteNSXEdgeServicesGatewaysareactiveinasinglesite,withHAislocaltothesiteWorkloadsareactiveacrossbothsitesandcanoptionallysupportlivevMotionDRSaffinityrulesforworkloadsarenotrequiredVMwareESXiEdgeClusterAVMwareESXiSiteAVMwareESXiVMwareESXiSiteBEdgeClusterBVMwareESXiWorkloadClusterAVMwareESXiSiteAVMwareESXiVMwareESXiSiteBWorkloadClusterB24第二十四页，共92页。VMwareNSXMulti-SiteSingleVC,SeparateClustersNSXConfigurationOption1withDistributedLogicalRoutingisunchangedfromStretchedClusterconfigurationandisstillrecommendedForoption2,asvCenterobjectsarenotsharedwecanleverageNSXDFWL2EthernetRuleswithascopeoftheDatacentertoprovideLocalEgress.asonlythesitelocalEdgeGWislearnt.NoenhancementsrequiredSamecaveatswithOption2forStretchedClustersalsoapplySiteASiteBVM1VM2VM3VM3SiteANSX

EdgeGWSiteBNSX

EdgeGW第二十五页，共92页。ToLocalEgress/Ingressornotto..Asafirststep,askthecustomeriftheyhavestatefulservicesfortrafficenteringandexitingtheDatacenter?ThisisgenerallythecaseandifsotheywillrequireasolutiontoprovideLocalIngressfortheirapplications.Eg,NATGSLBAnycastLISP,RHIetcIftheycanaddressthis,thenaMulti-SiteNSXsolutionprovidingLocalEgressisagoodfitIftheydonot,otherquestionstoaskare:Dotheyhavehighbandwidthbetweensites?andisreducingoperationalcomplexityagoal?AnactiveNSXEdgeGatewayatonesite,withfailovertothesecondarysitemaymeetthecustomersrequirementsandismuchsimplerthanprovidingLocalEgress&Ingress第二十六页，共92页。VMwareNSXMulti-SiteL2VPN(3)Datastore1Datastore2vCenterServerSiteAorOnPremSiteBorOffPremVM1VM2NetworkA/24SiteANSX

EdgeGWSiteAUplinkNetworkvCenterServerVM3VM4NetworkB

/24SiteBNSX

EdgeGWSiteBUplinkNetworkSSLSSLL3Network27第二十七页，共92页。存储资源设计第二十八页，共92页。存储需求SiteASite

BDarkFiber<=200kmMetroClusterAggrXPlex0AggrYPlex1AggrYPlex0DWDMDWDMAggrXPlex1时延要求：vSphere要求RTT<100ms存储同步复制要求RTT<5ms29第二十九页，共92页。MetroStorage的两种实现方式：Uniform与Non-Uniform30第三十页，共92页。vSphereMetroStorageCluster工作原理vSphereHAClusterStretchedacross

campus

ormetroareavMSCCertifiedStorageMetroClusterPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSArraybasedsynchronousreplicationPlex0Plex031第三十一页，共92页。vSphereMetroStorageCluster工作原理StandardvMotionofVirtualMachinesvMotionvMSCCertifiedStorageMetroClusterPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSArraybasedsynchronousreplicationPlex0vSphereHAClusterPlex032第三十二页，共92页。vSphereMetroStorageCluster工作原理vSphereHAClusterStoragetakeovervMSCCertifiedStorageMetroClusterPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1Plex0Plex0Plex0APPOSAPPOSAPPOSAPPOSAPPOSAPPOSSiteshutdown

formaintenance33第三十三页，共92页。vSphereMetroStorageCluster工作原理vSphereHAClustervMSCCertifiedStorageMetroClusterPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex0Plex0APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1Plex0Automatic

resyncMaintenanceperformed,siterestored34第三十四页，共92页。vSphereMetroStorageCluster工作原理vSphereHAClustervMSCCertifiedStorageNetAppMetroClusterPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex0Plex0APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1Plex0StandardvMotion

toreturnVMsAccessreturned35第三十五页，共92页。存储设备选型兼容性网站：http六类MetroClusterStorage1,iSCSI2,FC3,NFS4,iSCSI-SVD5,FC-SVD6,NFS-SVD36第三十六页，共92页。EMCVPLEXforStretchedMetroClustersRoadmapStretchedvSphereClusterSiteA(Active)SiteB(Active)<10ms,IPorFCvCenterEstablishedVPLEXActive-ActiveSolutionInstantvMotionacrossdistanceVMwareHAautomaticallyrestartsVMsateithersiteforsystemorsitefailureBalanceworkloadsacrossbothsiteswithVMwareDRSSupportsVMwareFToutoftheboxAdditionalflexibilityofVPLEXMetroDoesn’tRequireFCCross-ConnectChooseIPorFCConnectivitybetweensitesThirdSite–IPconnectivitytoWitnessVMNoSPOF–IfyouloseaDirector,nolossofaccessatanysiteVPLEXVPLEXDualSiteDRSDualSiteHAInstantvMotionSiteC(OptionalWitness)VPLEXDistributedVirtualVolumes37第三十七页，共92页。StretchedStoragewithIBMSANVolumeControllerSinglesystemimageacrosstwositesprovidessinglepaneofglassmanagementforday-to-daystoragemanagementactivitySimplifymanagementofyourenvironmentatsametimeasdeployingactive-activestorageBaseduponarichandmatureplatformProvideReal-timeCompression,EasyTier,Non-disruptivemigrations,Longdistancereplication40,000enginesinstalledworldwide,11yearsfieldexperience250+storagedevicessupportedtoprovideback-endcapacityRetainyourexistinginvestmentinstoragedevicesKeepflexibilityforthefutureActivequorumdeviceenablesautomaticfailoverNoexternalmanagementsoftwarePreventssplit-brainSupportsrecoveryincaseoffullunplannedsitefailurescenariosQuorumStoragePool1StoragePool2Site1Site1Site2Site2Site3SVCStretchedCluster38第三十八页，共92页。来自存储厂商的参考指南ImplementingVMwarevSphereMetroStorageClusterwithHPLeftHandMulti-Sitestorage

ImplementingvSphereMetroStorageClusterusingHP3PARPeerPersistence

DeployVMwarevSphereMetroStorageClusteronHitachiVirtualStoragePlatform

IBMSANandSVCStretchedClusterandVMwareSolutionImplementation

VMwarevSphere5.5vMotiononEMCVPLEXMetro

39第三十九页，共92页。VSANforMetroCluster2015Q3

(计划)SiteAFaultDomainAFaultDomainBFaultDomainCVirtualSANClusterSiteCSIteBvmdkwitnessvmdkvmdkwitnessvmdk从机架感知升级到站点感知：1，迷你容错站点专用于witness2，优先从本地站点读取数据以提升性能40第四十页，共92页。议程1同城双活技术方案2异地灾备技术方案41第四十一页，共92页。RTO,RPO,andMTDRecoveryTimeObjective(RTO)HowlongitshouldtaketorecoverRecoveryPointObjective(RPO)AmountofdatalossthatcanbeincurredMaximumTolerableDowntime(MTD)DowntimethatcanoccurbeforesignificantlossisincurredExamples:Financial,reputation42第四十二页，共92页。TheThreeBuildingBlocksForDisasterRecoveryvSphereVirtualSANEcosystemVDPAdvancedvSphereReplicationSiteRecoveryManagerVMwareArray-basedBackupcopiesExternalStorageStorageComputeBackupandRecoveryReplicationDROrchestration43第四十三页，共92页。异地(同城)灾备解决方案总体架构44第四十四页，共92页。异地(同城)灾备解决方案——多种映射关系主备式切换双活切换双向切换双活数据中心ProductionRecoveryProductionRecoveryProductionProduction最常见的场景花销较大灾备架构主要用于测试，开发和培训等非生产应用有效降低开销两个站点均有生产应用每个站点为对方提供容灾支持两个站点的应用可以跨站点自由移动计划内事件零停机限制在城域范围内Site1Site2Production45第四十五页，共92页。网络资源设计第四十六页，共92页。“Protected”Site“Recovery”SiteStorageStorageVMFS/NFSVMFS/NFSStorageVMFS/NFSVMFS/NFSReplicationSRMwithNSXforvSphereNSXManagerNSXControllerClustervCenter+SRMvCACNSXManagerNSXControllerClustervCenter+SRMvCACFirewallRules&SecurityGroups47第四十七页，共92页。SRMwithNSXforvSphereWhathasbeenvalidatedSRMcanmapVMsfromoneVXLANLogicalSwitchonthePrimarySitetoadifferentLogicalSwitchontheRecoverySiteTheseLogicalSwitchescanbeconnectedtopre-createdNSXDistributedLogicalRoutersorNSXEdgeServicesGWsPlaceholderVMscanbeaddedtoSecurityGroupsandinaDRevent,whentheseVMsbecomeactivetheyareprotectedbyDFWDynamicRoutingcanbeusedtoadvertisenetworksontheprimarysite.Usingmetric/weightthesenetworkscanbere-advertisedontherecoverysiteifthereisasitefailoverThismapsverycloselytothevCACdeploymentmodelforpre-creatednetworkswhichisusedforproductionworkloads.Test/Devworkloadsusingon-demandnetworkingdonottypicallyrequireDRCurrentlybeingtestedAutomatesynchronizationofNSXDistributedFirewallRulesetandSecurityGroupsbetweentwoNSXManagersTieintoSRM,soatthetimeVMsareaddedtoaProtectionGrouptheplaceholderVMsareautomaticallyaddedtotheappropriateSecurityGroupsWorkingcloselywithEMCaspartoftheirEnterprisePrivateCloudReferenceArchitectureprojectto

turnthisintoaproductizedsolutionincludingvCAC第四十八页，共92页。LogicalArchitectureView/24/28NoNetworkReaddressing(DynamicRouting)VXLANVXLANVLANVLANvCenter+SRMvCenter+SRMDistributedLogicalRouterDynamicRouting(OSPF,BGP)PrimaryVMsPlaceholderVMsDistributedLogicalRouterDynamicRouting(OSPF,BGP)Pre-createdLogical

SwitchesandEdgesStorageReplicationVMFSVMFS“Protected”Site“Recovery”Site49第四十九页，共92页。PrimaryVMsSRMwithNSXforvSphere/24/28NoNetworkReaddressing(DynamicRouting)VXLANVXLANVLANVLANvCenter+SRMvCenter+SRMDynamicRouting(OSPF,BGP)PrimaryVMsPlaceholderVMsDistributedLogicalRouterDistributedLogicalRouterDynamicRouting(OSPF,BGP)SG-Prod-01SG-Dev-01SG-Prod-01SG-Dev-01SiteANSXEdgeGWSiteBNSXEdgeGW50第五十页，共92页。SRMwithNSXforvSphereCurrentChallengesBoththeprimaryandrecoverysitesneedtobepreparedforNSXinandnetworksneedtobecreatedonbothsitesfortheSRMmappingDynamicallycreatednetworksandport-groupsontheprotectedsitearenotcreatedontherecoverysiteautomaticallyandwillneedtobedonemytheadministratorDRsiteconfigurationverificationandremediationprocessestomaintainsynchronizationiscurrentandmatchingonboththesitesServicecomposerfeaturesaredependentonUUIDandVDSuniqueidentity’s(currentlynotsupported)OutoftheBoxsupportfromSRMFutureDevelopmentScopeAcceptablePreparationstep,shouldbepartofarunbookAutomateSRMPort-GroupmappingviaVCO.AutomatesynchronizationofNSXDistributedFirewallRulesetandSecurityGroupsbetweentwoNSXManagersusingVCOworkflowsandtheNSX-VCOpluginEnhanceVCOtosupport2-waysynchronization.InvestigatingremovalofserviceComposerVDSthumbprintdependenciesTieintoSRM,soatthetimeVMsareaddedtoaProtectionGrouptheplaceholderVMsareautomaticallyaddedtotheappropriateSecurityGroups(Q2-2015)51第五十一页，共92页。“Protected”Site“Recovery”SiteStorageStorageVMFS/NFSVMFS/NFSVMFS/NFSNSXWorkflowforManualSynchronizationStep1:Admindeploysalogical

switchontheprimarysiteStep2:Admindeploysalogical

switchontherecoverysiteStep3:AdmindeploysaDLR

ontheprimarysiteStep4:AdmindeploysaDLR

ontherecoverysiteWhenanobjectiscreatedontheprimarySite,thesameobjectneedstobedeployed

ontherecoverysitetomaintainconsistency

Duplicatenetworksegmentsandsubnets

canexistonboththeprotectedandthe

recoverysite,thisistomaintainIPaddresses52第五十二页，共92页。“Protected”Site“Recovery”SiteStorageStorageVMFS/NFSVMFS/NFSVMFS/NFSNSXVCOWorkflowforSynchronizationAdmindeploysalogicalswitchontheprimarysiteVCOworkflowistriggeredto

replicateobjecttorecoverysiteNewobjectiscreatedonthe

recoverysiteAdmindeploysaDLRonthe

primarysiteVCOworkflowistriggeredto

replicateobjecttorecoverysiteNewobjectiscreatedonthe

recoveryScheduledSyncprocessvalidatesProtectedsitewithrecoverysiteAnydifferencesareremediatedScheduledSyncprocessvalidatesProtectedsitewithrecoverysiteAnydifferencesareremediated53第五十三页，共92页。存储资源设计第五十四页，共92页。软件定义存储在BC/DR解决方案中的独特价值55vSphereStoragePolicy-BasedMgmtVirtualSAN基于存储策略的管理SAN/NAS虚拟卷管理VirtualDatastoreVirtualDatastore低成本的存储解决方案快速，面向应用的置备不依赖硬件便于采用非对称设计不需要管理LUNs,Vols在线变更策略无需数据迁移第五十五页，共92页。数据保护方案设计第五十六页，共92页。DataProtectionTechniques57HIGHLOWSLOWFASTPotentialforDataLoss(RPO)TimetoRecover(RTO)SynchronousReplicationTapeBackupAsynchronousReplicationSnapshotsDiskBackupHowmuchdatacanyouaffordtolose?Howlongcanyouaffordtobewithoutthedataorservice?第五十七页，共92页。DataProtectionUseCases58RTOTypical

RPORetentionUseCasesSynchronousReplicationSub-minute/instantZerodatalossNoneLivemigrationHighavailabilityApplicationmobilityAsynchronousReplicationMinutestohoursMinutestohoursDaysHWfailureSite/disasterrecoveryPlannedmigrationCorruption/datalossSnapshotsSecondstominutesMinutestohoursDaysTest/dev/labCloningPatching/maintenanceCorruption/datalossBackupHoursDailyWeeklyMonthlyYearlyMonths+Corruption/datalossFilerecoveryLong-termretentionComplianceApplicationintegration第五十八页，共92页。选择正确的数据保护方案59基于阵列

的复制

vSphere

复制技术vSphere

数据保护可实现零数据丢失存储合作伙伴解决方案RPO同步分钟小时天RPO从15分钟到24小时基于虚拟机层，虚拟机级别RPO最小1天备份数据复制可实现

自动化

灾难恢复第五十九页，共92页。VDP&VDPAdvancedSimple,EfficientBackupandReplicationwithPredictableRecoveryvSpherededuplicateddataVMFS,NFS,VSANstorageVDPAdvWhatisit?vSphereDataProtectionisabackupandreplicationsolutionforsimplifyingandoptimizingdataprotectioninvSphereenvironmentsKeyFeaturesAgent-less,disk-basedvirtualmachinebackupsApplication-aware,granular,agent-based

dataprotectionforphysicalandvirtualapplicationsEnd-to-endintegrationwithvSphereandmanagedthroughvSphereWebClientSingle-steprecoverySelf-serviceFile-LevelRecoveryPoweredbyEMCAvamar60第六十页，共92页。4xMoreStorage-efficientand6xFasterforRecoveryUniquevariable-lengthdedupe~$60KsavingsonstorageTCOperyear4xSource:ESGLabValidationReport–vSphereDataProtection,February20136xUniqueCBTRestoretechnologyRecoverVMstoproductioninminutes"Forrealbackups,VMwareoffersvSphereDataProtection(VDP)[…]thededuplicationlevelsareamazing”TrevorPott-TheRegister第六十一页，共92页。ManagewithEase:aSimpleWaytoHandleBackupsManagedthroughvSphereWebClientDeployedasvirtualapplianceWizard-drivenOne-steprecoveryEnd-userFile-LevelRecovery(FLR)“UsingvSphereDataProtectionallowsustohavethemanageabilitythatwedidn’thavebefore.[…]thiswasano-brainerforus.”SeniorITArchitect,LargeEnterpriseComputerServicesSource:TechValidate.TVID:07A-32C-7F262第六十二页，共92页。DataProtection(BackupandRestore)Agents?NoAgents?–Both!Noagentsformajorityofworkloads–keepitsimpleAgentsforcertainappsvSphereDataProtection(VDP)AdvancedBackupandrecoveryforVMware,fromVMwareBasedonproven,matureEMCAvamar™Agent-lessVMbackupandrestoreAgentsforgranulartier-1applicationprotection63第六十三页，共92页。ApplicationAwarenessforMission-CriticalApps

BackupforVirtualandPhysicalApplicationsInVDPAdvancedOnlyAgentsforExchange,SQL,SharePointDatabase-levelbackupandrecoveryforExchange,SQL,SharePointMailbox-levelrecoveryforExchangeBackupfornon-virtualizedExchange,SQL,SharePointappsSupportforMSExchangeDAGs,SQLServerClustersKeyBenefitsApplicationconsistencyClient-sidededuplicationGranularbackupandrestoreLogmanagementvSphereVirtualPhysical64第六十四页，共92页。VDPAdvanced–KeepInMind…EngineeredforSMBenvironmentsUsesVADP–VMsnapshots,CBTUtilizesWindowsVSSinVMwareToolsWorksfinewithHA,notwithFTRDM–virtualyes,physicalnoIsitDR?Maybe–dependsonRTO,RPONeedsreplicationoffsite,right?–seeBCO2629andBCO2760BestPracticesPrepopulateDNS,alwaysuseFQDNManageVMsnapshotsAvoiddeployingtoslowstorageDonotpower-off,alwaysshutdowngracefullyDonotschedulebackupsduringmaintenancewindow65第六十五页，共92页。数据复制方式的选择66解决方案提供商成本可管理性性能vSphere

复制技术支持低端存储设备不需要购买额外的复制组件(vSphere包含免费的数据复制功能)虚拟机级别的控制，颗粒度好在vCenter中直接管理15分钟的RPOs文件级一致性基于存储的

复制技术需要购买中高端存储需要购买额外的复制组件基于LUN来配置复制需要存储管理员配合管理支持同步复制支持大数据量应用级一致性第六十六页，共92页。vSphereReplication(VR)

Hypervisor-basedReplicationforvSphereVMs67vSphereSiteAvSpherevSphereReplicationSANNASVirtualSANVirtualSANNASSANSiteBMultiplepoint-in-timeIncludedwithvSphereEssentialsPlusorhighereditionsSolutionDescriptionVRisVMware’sproprietarytechnologyforhypervisor-basedreplicationofvSpherevirtualmachinesKeyFeaturesVM-centric,storage-independentFlexibleRPO(15min.to24hrs.)MPIT(1)recovery(upto24replicas)Network-efficient“light-weightdelta”replicationKeyBenefitsSimplifiesreplicationofvirtualmachinesReducesstorageandbandwidthinvestmentsIntegratedwiththeVMwareproductstackIncludedwithvSphere(2)atnoadditionalcost第六十七页，共92页。Full/initialSyncStartfreshorwithseedviaphysicalmediaComparesdiskIDsCalculateschecksumofallblocksatsource&targetExchangesandcompareschecksumstodeterminedeltaReplicatesallchangedblocksnecessarytoalignvirtualdisksDeltasyncWritestrackedbyvSCSIfilterdriver,whichispartoftheESXhostTracksnewblocksastheyarewrittenBitmapofchangedblocksismaintainedbetweenreplicationsEachreplicacorrespondstoalightweightdeltaDuringasyncchangedblocksarereadandsenttothetargetNoVMstun&verylittleIOpenaltyvSphereReplication–HowitWorks68第六十八页，共92页。vSphereReplicationProvidesTheMostFlexibleVMProtection69FlexibleRPOenablesprotectionaccordingtoappneedsandavailablebandwidthMPITrecover