业务永续-数据中心的业务连续性规划与设计.ppt

1、业务永续数据中心的业务连续性规划与设计,客户需求,这个世界比过去有着更多的风险,环境在不断变化 风险接触范围在不断扩大 全球及区域间的依存关系在不断增大 供应链每时每刻都存在中断的风险 业务中断将导致更大的影响 宕机可能导致更大的财务影响 宕机可能对品牌造成伤害 宕机可能导致数据失去完整性 更繁杂的规范 产业和监管标准在不断变化 产业分工在地理分布上更趋分散 每个国家都可能有自己相应的规范 更多的灾害 经济危机、恐怖主义、飓风、地震、 停电、火灾和疾病的大规模威胁,灾难的分类,每年的发生频率,每次发生的结果 (单次发生损失) （美元）,1,000 100 10 1 1/10 1/100 1/1

2、,000 1/10,000 1/100,000,1美元10美元100美元1千美元1万美元10万美元100万美元1000万美元1亿美元,病毒,蠕虫,磁盘故障,组件故障,电源故障,常见,不常见,低,高,自然灾害,应用中断,数据损坏,网络问题,建筑火灾,恐怖行动/国内动荡,与可用性相关的,与恢复相关的,业务连续运营,业务连续性问题和挑战,更多的业务在线 更多的应用和数据增长的需要,更多复杂的系统 更少的恢复时间窗口 更小的对停机时间的容忍度,备份与恢复 vs. HA高可用 重新运行批处理日终作业 手动的应用与数据的恢复 丢失数据 最好的意图 vs. RTO, RPO, SLA规范的设计 ,收入和利润

3、受损失 负面的社会影响 罚款和罚金 涉及法律依从及会计的问题 员工的劳动强度和费用 对日常的业务规划和运作产生影响 ,60%的客户正在关注如何提高可用性 接近50%的客户希望有显著的安全提升 超过25%的客户希望实施高可用集群,业务延续运性之考虑Consideration for Business Continuity,Fault-tolerant hardware, redundancy, automatic detection and isolation, predictive analysis, call-home,Real-time replication of data over m

4、etropolitan and/or continental distances,Automated protection against unplanned outages with meeting recovery point and recovery time objectives,高可靠性 High Availability,数据复制 Data Replication,灾备技术 Disaster Recovery,业务延续运性 Business Continuity,IBM Power Systems高可用性解决方案,HA和DR 的差别,High Availability,自动的接管

5、一般适用发生在本地的错误 针对物理设备的保护 服务器 硬盘 适配器卡 网络 针对致命的软件错误的保护 操作系统 数据库 应用 服务,基本,可用性,无,数据丢失,恢复点目标,Data Currency,Latest,持续可用性,数据传输 （每个交易的价值）,可用水平,恢复时间目标,和,缩短的,计划内,停机时间,Availability Level,SAN 磁盘,备份服务,多服务器,解决方案,iSeries,single-server,单服务器,solutions,解决方案,备份,周- 日,场外,存储,RAID-5,日志,组合,磁盘,镜像,SAN,AIX, Linux,Intel 群集,连续数据,

6、复制群集,可切换集群,在线,维护,CUoD,高速,磁带,LPAR,TSM,BCRS,SWA,支持业务连续性与灾备的系统组件,面向开放平台的高可用(High Availability)解决方案的架构,Availability by 应用 按照高可用的要求来设计应用架构 Availability by 中间件 DB2 HADR、WAS 集群, CICS 集群 Oracle RAC Availability by 操作系统 AIX LVM 镜像、HACMP for AIX Availability by 硬件冗余 服务器 冗余的处理器 / I/O适配器卡/ 电源 / 内置磁盘RAID技术保护 外置磁

7、盘, I/O 总线、SAN 交换机、LAN、LAN 交换机 冗余的部件 磁盘 RAID 多路径(Multi-Path)软件（SDD、RDAC) 通过磁盘复制的可用性 FlashCopy, Metro/Global mirror 网络,Hardware Power Systems ( RAS ) Live Partition Mobility,Power Systems Software PowerHA PowerHA/XD,Application,Operating System AIX, I Live Application Mobility,IBM Power Systems High A

8、vailability Solution,Impact of Maint on Availability,IT Availability 24 x 7,Time for Planned Maintenance,Is this you? Your users demand continuous availability (24x7),Do you agree? As IT availability approaches 24x7, top-notch maintenance practices become more critical,Is this your problem? As IT av

9、ailability approaches 24x7, the time for maintenance work approaches zero!,The Power Systems High Availability Solution can show you how POWER6 processors and AIX 6 help to address the maintenance crunch! Learn how Live Partition Mobility, Live Application Mobility, Workload Partitions and PowerHA c

10、an enable non-disruptive maintenance anytime!,Do you want more availability and less work on weekends?,High Availability Hardware - Reliability, Availability and Serviceability,IBM Power Systems RAS架构,Processor Instruction Retry Alternate Processor Recovery First Failure Data Capture DDR Chipkill me

11、mory Bit-steering/redundant memory Service Processor Failover* Dynamic Firmware Maintenance* Hot I/O Drawer Add* I/O error handling extended beyond base PCI adapter ECC extended to inter-chip connections for the fabric/processor buses Memory and L3 Cache soft scrubbing Hardware Assisted L2 interval.

12、*.clock.100 printf(“Number of reads = %dn”, count); count = 0;,# countreads.v 404Number of reads = 22Number of reads = 0Number of reads = 1Number of reads = 17.,Formatted I/O,User,Kernel,Probe Location,User Process Code,Some thread hits probe point (1),Branches to probe code (2),Probe code (3),Retur

13、ns to probe point (4),Thread continues execution(5),Trace Consumer,Trace File,or,Trace Output,Trace Buffers,E-code,“Vue” probe code example,The AIX answer to Solaris dtrace,This information is intended only for IBM sellers and Business Partners,AIX V6.1 Workload Partitions (WPAR),Virtualized AIX ope

14、rating system environments within a single AIX image Each WPAR shares the single AIX operating system but can be separately managed Applications and users inside a WPAR cannot affect resources outside the WPAR Each WPAR can have a regulated share of processor, memory and other resources Two types of

15、 WPAR System WPARs have separate security and appear like a completely separate OS Application WPARs are manageability wrappers around a single application,What is it?,This information is intended only for IBM sellers and Business Partners,AIX V6.1 Live Application Mobility,The capability to relocat

16、e a running Workload Partition from one system to another without restarting the application The application running inside the WPAR resumes running after the relocation is complete Works with systems based on POWER4, POWER5 and POWER6 processors Requires the IBM Workload Partitions Manager for AIX

17、Manual or automatic, policy based relocation,What is it?,操作系统停机时间调查: AIX是业界最稳定的操作系统(27个国家400个用户),The Yankee Group “2007-2008 Global Server Operating Systems Reliability Survey” as quoted in “Windows Server: The New King of Downtime” by Mark Joseph Edwards at March 5, 2008 and in ,Win2000,Win2003,RHE

18、L,Solaris,HP-UX,SUSE,AIX,We are here!,This information is intended only for IBM sellers and Business Partners,According to a recent Yankee Group study* of 400 Windows, Linux and UNIX users, AIX was the most reliable server operating system: “IBMs AIX achieved the highest level of reliability, with c

19、orporate enterprises reporting an average of only 36 minutes of downtime per server in a 12-month period”,* Source: “Unix, Linux Uptime and Reliability Increase; Patch Management Woes Plague Windows” 2008 Yankee Group Research, Inc. All rights reserved,AIX is “Most Reliable”,High Availability System

20、 Software - PowerHA- PowerHA/XD,IBM PowerHA,PowerHA for AIX,PowerHA Cluster Management Monitors, detects and reacts to events Establishes a heartbeat between the systems Enables automatic switch-over IBM shared storage clustering Can enable near-continuous application service Helps eliminate impact

21、of planned & unplanned outages Ease of use for HA operations PowerHA managing integrated IBM data resiliency Logical Volume Manager (LVM) Shared switchable disk topology XD (optional feature of PowerHA) GLVM (Global LVM) AIX based replication over IP Metro Mirror IBM storage based synchronous mirror

22、ing SVC IBM DS8000 Smart Assists Application deployment and configuration,34,PowerHA for AIX V5.5,PowerHA V5.5 Features Simplified Management Manage multiple clusters from a single graphical user interface Can run on a server outside of the cluster Support for TCP/V6 connections to clients New focus

23、 on IPV6 from US government PowerHA/XD V5.5 Disaster Recovery Global Logical Volume Manager* Global Logical Volume Manager (GLVM) asynchronous mode mirroring Asynchronous mode enables geographic dispersion San Volume Controller Global Mirror Asynchronous replication for geographic dispersion,*GLVM A

24、synchronous mode generally available March 2009,Shared storage clustering Topology,Network Clients,Serial Heartbeat,Power Cluster Node,Power Cluster Node,IP Network,Service & Standby Network Adapters,Shared Disk,IP Heartbeats,Switched Disk Cluster (Local only),本地存储双机LVM 基于AIX功能（软件免费） 完全冗余，无切换中断时间 特别

25、适合24X7环境 存储可靠性几何级提高 双存储可轮流定期修整维护,PowerHA/XD (HACMP/XD) 延伸PowerHA的概念到更远的距离,利用 SVC or DS8000/DS6000/ESS镜像技术,Router,Router,DS8/6/ESS Mirroring,Primary ESS/DS,Secondary ESS/DS,生产站点,恢复站点,SVC,SVC,SVC Mirroring or,GLVM Mirroring,利用 Global Logical Volume Manager (GLVM) 技术,IBM AIX Multi System Data Resilienc

26、y,PowerHA for AIX,Strategic building block for IBM AIX High Availability and Disaster Recovery solutions Integrated and optimized with IBM AIX Cluster Resources,Switched Disk Storage agnostic LVM mirrored copy of data HA (Local only),Switched Disk Cluster,Basic San Copy Services,Metrol Mirror Boot F

27、rom SAN DR/Tape Backup DR only,FlashCopy,Global Mirror,高可用性整体解决方案,数据库服务器,高可用性的实现层次,高性能高可靠性的并行文件系统 - GPFS,什么是GPFS,集群: 可以扩展至4096节点，高速、稳定地通讯，单点管理与控制； 共享磁盘：可以从集群中的任一节点直接访问磁盘上的数据； 并行访问：所有节点访问所有磁盘的数据流并行实现；,IBM为AIX和Linux集群系统设计的共享磁盘的并行文件系统,为什么要用GPFS并行文件系统,应用需求: 多个节点访问同一个数据文件或数据库 高性能文件访问 故障恢复 文件系统需求: 可访问：从任一

28、节点访问所有文件； 动态扩展：能动态地增加或减少节点与存储； 文件唯一存在：使得在集群环境中的应用开发更加容易； 高容量：TB级文件，PB级的文件系统，测试过2PB； 高吞吐率：单文件的访问可达GB/s，现最高记录为102GB/s； 数据并行访问：并行访问单个文件或多个文件； 可靠和容错：当某个节点、磁盘或连接出现问题时，仍然可以提供服务；,GPFS的主要优势,高性能 条带化文件读写提高并发访问性能，实测带宽可达数百GB 智能预取机制和客户端数据缓存机制降低读写延迟 分布式的元数据服务器和字节锁管理 可自定义数据块大小可，从16K到4M NSD支持InfiniBand RDMA 高可用性 仲裁

29、管理和自动故障切换 支持多路径磁盘访问，每块逻辑盘可支持8个NSD Server 支持元数据和用户数据的复制功能 在不停止服务的情况下可以动态加入和移除节点或磁盘，支持在线升级 支持日志功能，实现系统快速恢复,高可扩展性 支持最大299 字节的文件系统和20亿个文件 支持数千个节点的集群系统 支持不同存储、网络、处理器和操作系统 易管理 自动在各个节点间同步配置文件和系统信息 可在集群内任何一个节点上完成对GPFS的管理任务，命令将在所有节点上生效 管理网络和数据网络可以分开 其他 支持信息生命周期管理 支持CNFS 支持快照功能和数据备份 提供DMAPI,GPFS和其它网络文件系统的本质区别

30、,客户机/服务器方式,SAN文件系统方式,X,X,GPFS的两种基本配置,SAN 组织方式,NSD 组织方式,Database Applications DB2 Oracle RAC SAP,Grid Applications Scientific Computing Life Sciences Analytics,Web Applications Email services Web Server Farm Online Data Storage,Digital Media Animation Broadcasting Video Surveillance,Highly Available Scalable File Storage User File storage Multi-Site installations Disaster Recovery,GPFS 适用于多种应用,Oracle RAC 10g/11g的典型架构,不同级别的IT业务延续性方案及技术Tiers of IT Business Continuit