业务永续-数据中心的业务连续性规划与设计.ppt

业务永续数据中心的业务连续性规划与设计,客户需求,这个世界比过去有着更多的风险,环境在不断变化风险接触范围在不断扩大全球及区域间的依存关系在不断增大供应链每时每刻都存在中断的风险业务中断将导致更大的影响宕机可能导致更大的财务影响宕机可能对品牌造成伤害宕机可能导致数据失去完整性更繁杂的规范产业和监管标准在不断变化产业分工在地理分布上更趋分散每个国家都可能有自己相应的规范更多的灾害经济危机、恐怖主义、飓风、地震、停电、火灾和疾病的大规模威胁,灾难的分类,每年的发生频率,每次发生的结果(单次发生损失)（美元）,1,0001001011/101/1001/1,0001/10,0001/100,000,1美元10美元100美元1千美元1万美元10万美元100万美元1000万美元1亿美元,病毒,蠕虫,磁盘故障,组件故障,电源故障,常见,不常见,低,高,自然灾害,应用中断,数据损坏,网络问题,建筑火灾,恐怖行动/国内动荡,与可用性相关的,与恢复相关的,业务连续运营,业务连续性问题和挑战,更多的业务在线更多的应用和数据增长的需要,更多复杂的系统更少的恢复时间窗口更小的对停机时间的容忍度,备份与恢复vs.HA高可用重新运行批处理日终作业手动的应用与数据的恢复丢失数据最好的意图vs.RTO,RPO,SLA规范的设计,收入和利润受损失负面的社会影响罚款和罚金涉及法律依从及会计的问题员工的劳动强度和费用对日常的业务规划和运作产生影响,60%的客户正在关注如何提高可用性接近50%的客户希望有显著的安全提升超过25%的客户希望实施高可用集群,业务延续运性之考虑ConsiderationforBusinessContinuity,Fault-toleranthardware,redundancy,automaticdetectionandisolation,predictiveanalysis,call-home,Real-timereplicationofdataovermetropolitanand/orcontinentaldistances,Automatedprotectionagainstunplannedoutageswithmeetingrecoverypointandrecoverytimeobjectives,高可靠性HighAvailability,数据复制DataReplication,灾备技术DisasterRecovery,业务延续运性BusinessContinuity,IBMPowerSystems高可用性解决方案,HA和DR的差别,HighAvailability,自动的接管一般适用发生在本地的错误针对物理设备的保护服务器硬盘适配器卡网络针对致命的软件错误的保护操作系统数据库应用服务,基本,可用性,无,数据丢失,恢复点目标,DataCurrency,Latest,持续可用性,数据传输（每个交易的价值）,可用水平,恢复时间目标,和,缩短的,计划内,停机时间,AvailabilityLevel,SAN磁盘,备份服务,多服务器,解决方案,iSeries,single-server,单服务器,solutions,解决方案,备份,周-日,场外,存储,RAID-5,日志,组合,磁盘,镜像,SAN,AIX,Linux,Intel群集,连续数据,复制群集,可切换集群,在线,维护,CUoD,高速,磁带,LPAR,TSM,BCRS,SWA,支持业务连续性与灾备的系统组件,面向开放平台的高可用(HighAvailability)解决方案的架构,Availabilityby应用按照高可用的要求来设计应用架构Availabilityby中间件DB2HADR、WAS集群,CICS集群OracleRACAvailabilityby操作系统AIXLVM镜像、HACMPforAIXAvailabilityby硬件冗余服务器冗余的处理器/I/O适配器卡/电源/内置磁盘RAID技术保护外置磁盘,I/O总线、SAN交换机、LAN、LAN交换机冗余的部件磁盘RAID多路径(Multi-Path)软件（SDD、RDAC)通过磁盘复制的可用性FlashCopy,Metro/Globalmirror网络,HardwarePowerSystems(RAS)LivePartitionMobility,PowerSystemsSoftwarePowerHAPowerHA/XD,Application,OperatingSystemAIX,ILiveApplicationMobility,IBMPowerSystemsHighAvailabilitySolution,ImpactofMaintonAvailability,ITAvailability24x7,TimeforPlannedMaintenance,Isthisyou?Yourusersdemandcontinuousavailability(24x7),Doyouagree?AsITavailabilityapproaches24x7,top-notchmaintenancepracticesbecomemorecritical,Isthisyourproblem?AsITavailabilityapproaches24x7,thetimeformaintenanceworkapproacheszero!,ThePowerSystemsHighAvailabilitySolutioncanshowyouhowPOWER6processorsandAIX6helptoaddressthemaintenancecrunch!LearnhowLivePartitionMobility,LiveApplicationMobility,WorkloadPartitionsandPowerHAcanenablenon-disruptivemaintenanceanytime!,Doyouwantmoreavailabilityandlessworkonweekends?,HighAvailabilityHardware-Reliability,AvailabilityandServiceability,IBMPowerSystemsRAS架构,ProcessorInstructionRetryAlternateProcessorRecoveryFirstFailureDataCaptureDDRChipkillmemoryBit-steering/redundantmemoryServiceProcessorFailover*DynamicFirmwareMaintenance*HotI/ODrawerAdd*I/OerrorhandlingextendedbeyondbasePCIadapterECCextendedtointer-chipconnectionsforthefabric/processorbusesMemoryandL3CachesoftscrubbingHardwareAssistedL2interval.*.clock.100printf(“Numberofreads=%dn”,count);count=0;,#countreads.v404Numberofreads=22Numberofreads=0Numberofreads=1Numberofreads=17.,FormattedI/O,User,Kernel,ProbeLocation,UserProcessCode,Somethreadhitsprobepoint(1),Branchestoprobecode(2),Probecode(3),Returnstoprobepoint(4),Threadcontinuesexecution(5),TraceConsumer,TraceFile,or,TraceOutput,TraceBuffers,E-code,“Vue”probecodeexample,TheAIXanswertoSolarisdtrace,ThisinformationisintendedonlyforIBMsellersandBusinessPartners,AIXV6.1WorkloadPartitions(WPAR),VirtualizedAIXoperatingsystemenvironmentswithinasingleAIXimageEachWPARsharesthesingleAIXoperatingsystembutcanbeseparatelymanagedApplicationsandusersinsideaWPARcannotaffectresourcesoutsidetheWPAREachWPARcanhavearegulatedshareofprocessor,memoryandotherresourcesTwotypesofWPARSystemWPARshaveseparatesecurityandappearlikeacompletelyseparateOSApplicationWPARsaremanageabilitywrappersaroundasingleapplication,Whatisit?,ThisinformationisintendedonlyforIBMsellersandBusinessPartners,AIXV6.1LiveApplicationMobility,ThecapabilitytorelocatearunningWorkloadPartitionfromonesystemtoanotherwithoutrestartingtheapplicationTheapplicationrunninginsidetheWPARresumesrunningaftertherelocationiscompleteWorkswithsystemsbasedonPOWER4,POWER5andPOWER6processorsRequirestheIBMWorkloadPartitionsManagerforAIXManualorautomatic,policybasedrelocation,Whatisit?,操作系统停机时间调查:AIX是业界最稳定的操作系统(27个国家400个用户),TheYankeeGroup“2007-2008GlobalServerOperatingSystemsReliabilitySurvey”asquotedin“WindowsServer:TheNewKingofDowntime”byMarkJosephE,Win2000,Win2003,RHEL,Solaris,HP-UX,SUSE,AIX,Wearehere!,ThisinformationisintendedonlyforIBMsellersandBusinessPartners,AccordingtoarecentYankeeGroupstudy*of400Windows,LinuxandUNIXusers,AIXwasthemostreliableserveroperatingsystem:“IBMsAIXachievedthehighestlevelofreliability,withcorporateenterprisesreportinganaverageofonly36minutesofdowntimeperserverina12-monthperiod”,*Source:“Unix,LinuxUptimeandReliabilityIncrease;PatchManagementWoesPlagueWindows”2008YankeeGroupResearch,Inc.Allrightsreserved,AIXis“MostReliable”,HighAvailabilitySystemSoftware-PowerHA-PowerHA/XD,IBMPowerHA,PowerHAforAIX,PowerHAClusterManagementMonitors,detectsandreactstoeventsEstablishesaheartbeatbetweenthesystemsEnablesautomaticswitch-overIBMsharedstorageclusteringCanenablenear-continuousapplicationserviceHelpseliminateimpactofplanned&unplannedoutagesEaseofuseforHAoperationsPowerHAmanagingintegratedIBMdataresiliencyLogicalVolumeManager(LVM)SharedswitchabledisktopologyXD(optionalfeatureofPowerHA)GLVM(GlobalLVM)AIXbasedreplicationoverIPMetroMirrorIBMstoragebasedsynchronousmirroringSVCIBMDS8000SmartAssistsApplicationdeploymentandconfiguration,34,PowerHAforAIXV5.5,PowerHAV5.5FeaturesSimplifiedManagementManagemultipleclustersfromasinglegraphicaluserinterfaceCanrunonaserveroutsideoftheclusterSupportforTCP/V6connectionstoclientsNewfocusonIPV6fromUSgovernmentPowerHA/XDV5.5DisasterRecoveryGlobalLogicalVolumeManager*GlobalLogicalVolumeManager(GLVM)asynchronousmodemirroringAsynchronousmodeenablesgeographicdispersionSanVolumeControllerGlobalMirrorAsynchronousreplicationforgeographicdispersion,*GLVMAsynchronousmodegenerallyavailableMarch2009,SharedstorageclusteringTopology,NetworkClients,SerialHeartbeat,PowerClusterNode,PowerClusterNode,IPNetwork,Service&StandbyNetworkAdapters,SharedDisk,IPHeartbeats,SwitchedDiskCluster(Localonly),本地存储双机LVM基于AIX功能（软件免费）完全冗余，无切换中断时间特别适合24X7环境存储可靠性几何级提高双存储可轮流定期修整维护,PowerHA/XD(HACMP/XD)延伸PowerHA的概念到更远的距离,利用SVCorDS8000/DS6000/ESS镜像技术,Router,Router,DS8/6/ESSMirroring,PrimaryESS/DS,SecondaryESS/DS,生产站点,恢复站点,SVC,SVC,SVCMirroringor,GLVMMirroring,利用GlobalLogicalVolumeManager(GLVM)技术,IBMAIXMultiSystemDataResiliency,PowerHAforAIX,StrategicbuildingblockforIBMAIXHighAvailabilityandDisasterRecoverysolutionsIntegratedandoptimizedwithIBMAIXClusterResources,SwitchedDiskStorageagnosticLVMmirroredcopyofdataHA(Localonly),SwitchedDiskCluster,BasicSanCopyServices,MetrolMirrorBootFromSANDR/TapeBackupDRonly,FlashCopy,GlobalMirror,高可用性整体解决方案,数据库服务器,高可用性的实现层次,高性能高可靠性的并行文件系统-GPFS,什么是GPFS,集群:可以扩展至4096节点，高速、稳定地通讯，单点管理与控制；共享磁盘：可以从集群中的任一节点直接访问磁盘上的数据；并行访问：所有节点访问所有磁盘的数据流并行实现；,IBM为AIX和Linux集群系统设计的共享磁盘的并行文件系统,为什么要用GPFS并行文件系统,应用需求:多个节点访问同一个数据文件或数据库高性能文件访问故障恢复文件系统需求:可访问：从任一节点访问所有文件；动态扩展：能动态地增加或减少节点与存储；文件唯一存在：使得在集群环境中的应用开发更加容易；高容量：TB级文件，PB级的文件系统，测试过2PB；高吞吐率：单文件的访问可达GB/s，现最高记录为102GB/s；数据并行访问：并行访问单个文件或多个文件；可靠和容错：当某个节点、磁盘或连接出现问题时，仍然可以提供服务；,GPFS的主要优势,高性能条带化文件读写提高并发访问性能，实测带宽可达数百GB智能预取机制和客户端数据缓存机制降低读写延迟分布式的元数据服务器和字节锁管理可自定义数据块大小可，从16K到4MNSD支持InfiniBandRDMA高可用性仲裁管理和自动故障切换支持多路径磁盘访问，每块逻辑盘可支持8个NSDServer支持元数据和用户数据的复制功能在不停止服务的情况下可以动态加入和移除节点或磁盘，支持在线升级支持日志功能，实现系统快速恢复,高可扩展性支持最大299字节的文件系统和20亿个文件支持数千个节点的集群系统支持不同存储、网络、处理器和操作系统易管理自动在各个节点间同步配置文件和系统信息可在集群内任何一个节点上完成对GPFS的管理任务，命令将在所有节点上生效管理网络和数据网络可以分开其他支持信息生命周期管理支持CNFS支持快照功能和数据备份提供DMAPI,GPFS和其它网络文件系统的本质区别,客户机/服务器方式,SAN文件系统方式,X,X,GPFS的两种基本配置,SAN组织方式,NSD组织方式,DatabaseApplicationsDB2OracleRACSAP,GridApplicationsScientificComputingLifeSciencesAnalytics,WebApplicationsEmailservicesWebServerFarmOnlineDataStorage,DigitalMediaAnimationBroadcastingVideoSurveillance,HighlyAvailableScalableFileStorageUserFilestorageMulti-SiteinstallationsDisasterRecovery,GPFS适用于多种应用,OracleRAC10g/11g的典型架构,不同级别的IT业务延续性方案及技术TiersofITBusinessC