双活数据中心与灾备解决方案技术部分

双活数据中心与灾备解决方案技术部分第1页/共94页议程1同城双活技术方案2异地灾备技术方案2第2页/共94页基于虚拟化技术的业务连续性解决方案概览资源池vSpherevSpherevSphere本地站点灾备站点基于虚拟化层的异步复制基于硬件设备的同异步复制自动化应用切换管理城域集群应用感知的高可用性关键应用零停机保护在线迁移虚拟机，动态调配计算与存储资源VMotionandStorageVMotion高效的数据备份与恢复可通过运行计划与脚本实现自动化操作资源池vSpherevSphereDev/TestDev/TestDev/Test灾难恢复本地高可用数据保护方案特点与应用程序和操作系统无关与硬件设备无关

完善的保护

简单，经济3第3页/共94页议程1同城双活技术方案2异地灾备技术方案4第4页/共94页双活数据中心在各个级别上全面保障可用性vMotion&DRS

HA&FT服务器StoragevMotion，StorageDRS存储VMFSVMFS硬件热添加

多网卡绑定

存储多路径组件数据DataReplicationMetroCluster站点5第5页/共94页双活数据中心总体架构双活存储集群站点A站点B延伸的vSphere集群>200km行为与单个vSphere相同延伸距离最大200KM，通常小于50KM通过VMwareHA与vMotion实现自动的DR保护需要双活存储集群，如EMC的vPlex，NetApp的MetroCluster等6第6页/共94页计算资源设计第7页/共94页MakinganApplicationServiceHighlyAvailablevSphereHAvSphereAppHA8第8页/共94页VMwarevFabric™tcServervSphereAppHA

Policy-basedProtectoff-the-shelfapps9第9页/共94页FaultTolerancevs.HighAvailabilityFaulttoleranceAbilitytorecoverfromcomponentlossExample:HarddrivefailureHighavailabilityUptimepercentageinoneyearDowntimeinoneyear993.65days99.98.76hours99.9952minutes99.999“fivenines”5minutesX10第10页/共94页支持多vCPU的容错技术InstantaneousFailover4vCPU4vCPUvSpherePrimarySecondaryFastCheckpointingFTsupportforupto4vCPUsProtectionforhighperformance,multi-vCPUVMsNew,morescalabletechnology:fastcheck-pointingtokeepprimaryandsecondaryinsyncOverviewProtectmission-critical,high-performanceapplicationsregardlessofOSContinuousavailability:zerodowntime,zerodatalossforinfrastructurefailuresFullyautomatedresponseBenefits11第11页/共94页Targetingcross-continentaldistances–upto100msRTTsMaintainstandardvMotionguaranteesLeaderinVMflexibility功能简介PermanentmigrationsbetweendatacentersDisasteravoidance(DA)DR/DAtestingMulti-siteloadbalancingFollowthesunBenefits长距离vMotionvSphere6.0支持跨三层网络和跨vCenterServer的vMotions12第12页/共94页vCenterAvailabilityRunvCenterServerapplicationinaVMRunvCenterServerdatabaseinaVMRunbothinsameVM?ProtectwithvSphereHAvCenterandDBVMrestartprioritysettoHighEnableguestOSandAppmonitoringAppHAcanprotectSQLServerdatabaseBackupvCenterServerVManddatabaseImage-levelbackupforvCenterServerVMApp-levelbackupusingagentfordatabasebackup13第13页/共94页网络资源设计第14页/共94页双活数据中心网络架构物理二层(裸光纤)逻辑二层

层叠网络/VPN二层分段VMVMVM二层分段VMVMVM二层网络扩展的二层网络(二层内容在

数据中心互连

链路上传递)站点A站点B二层网络15第15页/共94页NSXvSphereMulti-SiteUseCasesNSXforvSpheresupports3differentMulti-SiteDeploymentModelsVXLANwithStretchedClusters(vSphereMetroStorageCluster)VXLANwithSeparateClustersL2VPNAllsolutionsprovideL2extensionoveranL3network,enablingworkload&IPmobilitywithouttheneedtostretchVLANsLocalegressissupported,howeveritdoesaddcomplexityTheappropriatedeploymentmodelwilldependoncustomerrequirementsandtheirenvironment第16页/共94页NSX利用层叠网络实现双活数据中心双活存储

vSphere城域存储集群数据存储1数据存储2vCenterServer三层

网络站点A站点BVM1VM2VM3逻辑交换机A

/24VM4VM5逻辑交换机B

/24分布式逻辑路由器站点A

边界网关上联网络A站点B

边界网关上联网络B17第17页/共94页VMwareNSXMulti-SiteSingleVC,StretchedClusterSolutionDetailRequiresasupportedvSphereMetroStorageClusterconfigurationInavMSCdeployment,storageisActive/Activeandspansbothsites.ExamplesofActive/Activestorageare:EMCVPLEX,NetAppMetroCluster

(seeVMwareHCLformoreinformation)StretchedclusterssupportLivevMotionofworkloadsUseL3forallVMkernelnetworks:Management,vMotion,IPStorageAllmanagementcomponentssuchasvCenterServer,NSXManagerandControllersarelocatedinSiteALatencyandbandwidthrequirementsaredictatedbyvMSCstoragevendor,eg10msRTTforVPLEXwhichalsoalignswithvMotionusingEnterprisePlusvMSCenablesdisasteravoidanceandbasicDisasterRecovery(withouttheorchestrationortestingcapabilitiesofSRM)LossofeitherNSXComponentsortheDatacenterInterconnectwillresultsinafallbacktodataplanebasedlearningusingexistingnetworkstate.ThereforethereisnooutagetodataforwardingandwithoutvCenterServer,therearenoVMprovisioningormigrationoperationsNSXandvMSCarecomplimentarytechnologiesthatfitasweetspotforNSX(SinglevCenterServer)第18页/共94页VMwareNSXMulti-SiteSingleVC,StretchedClusterVMwareESXiVMwareESXiVMwareESXiVMwareESXiSiteASiteBStretchedWorkloadClusterVMwareESXiVMwareESXiVMwareESXiVMwareESXiSiteASiteBStretchedEdgeClusterClusterConfigurationvMSCenablesstretchedclustersacrosstwophysicalsitesInanNSXdeploymentManagement,EdgeandWorkloadclustersareallstretchedUndernormalconditionsallManagementComponentsruninaSiteAandareprotectedbyvSphereHATheyareautomaticallyrestartedatSiteBintheeventofasiteoutage.ThemanagementnetworkisnotstretchedandmustbeenabledonSiteBaspartoftherecoveryrunbookDependentondesign,NSXEdgeServicesGatewaysareeitheractiveinbothsitesorasinglesiteandcanalsoleverageHAVMsintheWorkloadClustersare

automaticallyrecoveredVMwareESXiVMwareESXiVMwareESXiVMwareESXiSiteASiteBvCenterServerStretchedManagementCluster19第19页/共94页VMwareNSXMulti-SiteSingleVC,StretchedClusterInavMSCenvironment,DRSisusedtobalanceresourceutilization,providesiteaffinity,improvedavailabilityandensureoptimaltrafficflowUseShouldrules,ratherthanMustasthisallowsvSphereHAtotakeprecedenceExampleDRSGroups,RulesandSettingsforNSXEdges:第20页/共94页VMwareNSXMulti-SiteSingleVC,StretchedClusterNSXConfiguration(Option1-Preferred)TransportZonespansbothSitesandVXLANLogicalSwitchesprovideL2connectivitytoVMsDistributedLogicalRoutingisusedforallVMstoprovideconsistentdefaultgatewayvMACLocalEgressisprovidedbyusingseparateUplinkLIFsandEdgeGWspersite.HostsonSiteAhaveDLRdefaultgatewayconfiguredviaSiteAEdgeGWusingnet-vdrCLI.WhileSiteBDLRdefaultgatewayisviaSiteBEdgeGWCaveat:DynamicRoutingcannotbeenabledonDLR,orastaticroutesetviaNSXManagerNSXEdgeGatewayswillhaveastaticrouteforanynetworksdirectlyconnectedtoDLR.ConsistentIP

addressingwillsimplifyroutingbyallowingasupernettobeusedDFWprovidesvNICpolicyenforcementindependentoftheVMslocationVM1VM2VM3WebLogicalSwitch

/24SiteASiteBDistributedLogicalRouterVM4VM5AppLogicalSwitch

/24SiteANSX

EdgeGWSiteBNSX

EdgeGWUplinkNetA/29UplinkALIFUplinkNetB/29UplinkBLIFVM6VM7DBLogicalSwitch

/24InternalLIFs.1第21页/共94页VMwareNSXMulti-SiteSingleVC,StretchedClusterNSXConfiguration(Option2)AsperOption1TransportZonespansbothSitesandVXLANLogicalSwitchesprovideL2connectivityforVMsNSXEdgeGatewaysaredeployedpersitewiththesameinternalIPaddressNSXDFWL2EthernetRulesaredefinedtoblockARPtotheremoteGWusingMACSets,whichprovidesLocalEgressasonlythesitelocalEdgeGWislearnt.FutureenhancementplannedtoenableESXihostobjectforDFW*Caveats:TrafficflowbetweenapplicationtiersmaybeasymmetriciftheyaresplitacrosssitesandDRSrulesaren’tusedDoesnotleverageDistributedLogicalRoutingandislimitedto10vNICsperEdgevMotionwillresultinnetworkinterruptionasVMARPcacheentryforsitespecificGWneedstotimeoutCanbeusedifOption1isn’tafit(eg,requireDynamicRoutingorvSphere5.1support)SiteASiteBVM1VM2VM3VM3SiteANSX

EdgeGWSiteBNSX

EdgeGWLogicalSwitch

/24第22页/共94页VMwareNSXMulti-SiteSingleVC,SeparateClusters(2)Datastore1Datastore2vCenterServerL3NetworkSiteASiteBVM1VM2VM3LogicalSwitchA

/24VM4VM5LogicalSwitchB

/24DistributedLogicalRouterSiteANSX

EdgeGWUplinkNetASiteBNSX

EdgeGWUplinkNetBStoragevMotionRequiredfor

VMMobility23第23页/共94页VMwareNSXMulti-SiteSingleVC,SeparateClustersSolutionDetailSeparatevSphereClustersareusedateachsite,thereforeDRSrules&groupsarenotrequiredStorageislocaltoasiteEnhancedvMotion(simultaneousvMotionandsvMotion)canprovidelivevMotionwithoutsharedstorageUseL3forallVMkernelnetworks:Management,vMotion,IPStorageAllmanagementcomponentssuchasvCenterServer,NSXManagerandControllersarelocatedinSiteASupportedlatencyrequirementforEnhancedvMotionis100msRTT(vSphere6).vMotionrequires250MbpsofbandwidthperconcurrentvMotionThissolutionprovidesDisasterAvoidancewherelivevMotionissupported,byenablingworkloadstobemovedproactivelybetweensitesDoesnotprovideautomatedDisasterRecovery第24页/共94页VMwareNSXMulti-SiteSingleVC,SeparateClustersVMwareESXiManagementClusterVMwareESXiSiteAvCenterServerClusterConfigurationClustersdonotspanbeyondaphysicalsiteAllManagementComponentsruninSiteA,andwillnotbeautomaticallyrecoveredintheeventofasiteoutage.StoragereplicationtoastandbyClusterinSiteBandamanualrecoveryprocesscouldbeimplementedSeparateEdgeandWorkloadsClustersareusedpersiteNSXEdgeServicesGatewaysareactiveinasinglesite,withHAislocaltothesiteWorkloadsareactiveacrossbothsitesandcanoptionallysupportlivevMotionDRSaffinityrulesforworkloadsarenotrequiredVMwareESXiEdgeClusterAVMwareESXiSiteAVMwareESXiVMwareESXiSiteBEdgeClusterBVMwareESXiWorkloadClusterAVMwareESXiSiteAVMwareESXiVMwareESXiSiteBWorkloadClusterB25第25页/共94页VMwareNSXMulti-SiteSingleVC,SeparateClustersNSXConfigurationOption1withDistributedLogicalRoutingisunchangedfromStretchedClusterconfigurationandisstillrecommendedForoption2,asvCenterobjectsarenotsharedwecanleverageNSXDFWL2EthernetRuleswithascopeoftheDatacentertoprovideLocalEgress.asonlythesitelocalEdgeGWislearnt.NoenhancementsrequiredSamecaveatswithOption2forStretchedClustersalsoapplySiteASiteBVM1VM2VM3VM3SiteANSX

EdgeGWSiteBNSX

EdgeGWLogicalSwitch

/24第26页/共94页ToLocalEgress/Ingressornotto..Asafirststep,askthecustomeriftheyhavestatefulservicesfortrafficenteringandexitingtheDatacenter?ThisisgenerallythecaseandifsotheywillrequireasolutiontoprovideLocalIngressfortheirapplications.Eg,NATGSLBAnycastLISP,RHIetcIftheycanaddressthis,thenaMulti-SiteNSXsolutionprovidingLocalEgressisagoodfitIftheydonot,otherquestionstoaskare:Dotheyhavehighbandwidthbetweensites?andisreducingoperationalcomplexityagoal?AnactiveNSXEdgeGatewayatonesite,withfailovertothesecondarysitemaymeetthecustomersrequirementsandismuchsimplerthanprovidingLocalEgress&Ingress第27页/共94页VMwareNSXMulti-SiteL2VPN(3)Datastore1Datastore2vCenterServerSiteAorOnPremSiteBorOffPremVM1VM2NetworkA/24SiteANSX

EdgeGWSiteAUplinkNetworkvCenterServerVM3VM4NetworkB

/24SiteBNSX

EdgeGWSiteBUplinkNetworkSSLSSLL3Network28第28页/共94页存储资源设计第29页/共94页存储需求SiteASite

BDarkFiber<=200kmMetroClusterAggrXPlex0AggrYPlex1AggrYPlex0DWDMDWDMAggrXPlex1时延要求：vSphere要求RTT<100ms存储同步复制要求RTT<5ms30第30页/共94页MetroStorage的两种实现方式：Uniform与Non-Uniform31第31页/共94页vSphereMetroStorageCluster工作原理vSphereHAClusterStretchedacross

campus

ormetroareavMSCCertifiedStorageMetroClusterPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSArraybasedsynchronousreplicationPlex0Plex032第32页/共94页vSphereMetroStorageCluster工作原理StandardvMotionofVirtualMachinesvMotionvMSCCertifiedStorageMetroClusterPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSArraybasedsynchronousreplicationPlex0vSphereHAClusterPlex033第33页/共94页vSphereMetroStorageCluster工作原理vSphereHAClusterStoragetakeovervMSCCertifiedStorageMetroClusterPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1Plex0Plex0Plex0APPOSAPPOSAPPOSAPPOSAPPOSAPPOSSiteshutdown

formaintenance34第34页/共94页vSphereMetroStorageCluster工作原理vSphereHAClustervMSCCertifiedStorageMetroClusterPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex0Plex0APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1Plex0Automatic

resyncMaintenanceperformed,siterestored35第35页/共94页vSphereMetroStorageCluster工作原理vSphereHAClustervMSCCertifiedStorageNetAppMetroClusterPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex0Plex0APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1Plex0StandardvMotion

toreturnVMsAccessreturned36第36页/共94页存储设备选型兼容性网站：http:///comp_guide2/search.php六类MetroClusterStorage1,iSCSI2,FC3,NFS4,iSCSI-SVD5,FC-SVD6,NFS-SVD37第37页/共94页EMCVPLEXforStretchedMetroClustersRoadmapStretchedvSphereClusterSiteA(Active)SiteB(Active)<10ms,IPorFCvCenterEstablishedVPLEXActive-ActiveSolutionInstantvMotionacrossdistanceVMwareHAautomaticallyrestartsVMsateithersiteforsystemorsitefailureBalanceworkloadsacrossbothsiteswithVMwareDRSSupportsVMwareFToutoftheboxAdditionalflexibilityofVPLEXMetroDoesn’tRequireFCCross-ConnectChooseIPorFCConnectivitybetweensitesThirdSite–IPconnectivitytoWitnessVMNoSPOF–IfyouloseaDirector,nolossofaccessatanysiteVPLEXVPLEXDualSiteDRSDualSiteHAInstantvMotionSiteC(OptionalWitness)VPLEXDistributedVirtualVolumes38第38页/共94页StretchedStoragewithIBMSANVolumeControllerSinglesystemimageacrosstwositesprovidessinglepaneofglassmanagementforday-to-daystoragemanagementactivitySimplifymanagementofyourenvironmentatsametimeasdeployingactive-activestorageBaseduponarichandmatureplatformProvideReal-timeCompression,EasyTier,Non-disruptivemigrations,Longdistancereplication40,000enginesinstalledworldwide,11yearsfieldexperience250+storagedevicessupportedtoprovideback-endcapacityRetainyourexistinginvestmentinstoragedevicesKeepflexibilityforthefutureActivequorumdeviceenablesautomaticfailoverNoexternalmanagementsoftwarePreventssplit-brainSupportsrecoveryincaseoffullunplannedsitefailurescenariosQuorumStoragePool1StoragePool2Site1Site1Site2Site2Site3SVCStretchedCluster39第39页/共94页来自存储厂商的参考指南ImplementingVMwarevSphereMetroStorageClusterwithHPLeftHandMulti-Sitestorage/V2/GetPDF.aspx%2F4AA4-0955ENW.pdf

ImplementingvSphereMetroStorageClusterusingHP3PARPeerPersistence/V2/GetPDF.aspx%2F4AA4-7734ENW.pdf

DeployVMwarevSphereMetroStorageClusteronHitachiVirtualStoragePlatform/assets/pdf/deploy-vmware-vsphere-metro-storage-cluster-on-hitachi-vsp.pdf

IBMSANandSVCStretchedClusterandVMwareSolutionImplementation/redbooks/pdfs/sg248072.pdf

VMwarevSphere5.5vMotiononEMCVPLEXMetro/files/pdf/techpaper/vplex-metro-vmotion-vsphere55-perf.pdf

40第40页/共94页VSANforMetroCluster2015Q3

(计划)SiteAFaultDomainAFaultDomainBFaultDomainCVirtualSANClusterSiteCSIteBvmdkwitnessvmdkvmdkwitnessvmdk从机架感知升级到站点感知：1，迷你容错站点专用于witness2，优先从本地站点读取数据以提升性能41第41页/共94页议程1同城双活技术方案2异地灾备技术方案42第42页/共94页RTO,RPO,andMTDRecoveryTimeObjective(RTO)HowlongitshouldtaketorecoverRecoveryPointObjective(RPO)AmountofdatalossthatcanbeincurredMaximumTolerableDowntime(MTD)DowntimethatcanoccurbeforesignificantlossisincurredExamples:Financial,reputation43第43页/共94页TheThreeBuildingBlocksForDisasterRecoveryvSphereVirtualSANEcosystemVDPAdvancedvSphereReplicationSiteRecoveryManagerVMwareArray-basedBackupcopiesExternalStorageStorageComputeBackupandRecoveryReplicationDROrchestration44第44页/共94页异地(同城)灾备解决方案总体架构45第45页/共94页异地(同城)灾备解决方案——多种映射关系主备式切换双活切换双向切换双活数据中心ProductionRecoveryProductionRecoveryProductionProduction最常见的场景花销较大灾备架构主要用于测试，开发和培训等非生产应用有效降低开销两个站点均有生产应用每个站点为对方提供容灾支持两个站点的应用可以跨站点自由移动计划内事件零停机限制在城域范围内Site1Site2Production46第46页/共94页网络资源设计第47页/共94页“Protected”Site“Recovery”SiteStorageStorageVMFS/NFSVMFS/NFSStorageVMFS/NFSVMFS/NFSReplicationSRMwithNSXforvSphereNSXManagerNSXControllerClustervCenter+SRMvCACNSXManagerNSXControllerClustervCenter+SRMvCACFirewallRules&SecurityGroups48第48页/共94页SRMwithNSXforvSphereWhathasbeenvalidatedSRMcanmapVMsfromoneVXLANLogicalSwitchonthePrimarySitetoadifferentLogicalSwitchontheRecoverySiteTheseLogicalSwitchescanbeconnectedtopre-createdNSXDistributedLogicalRoutersorNSXEdgeServicesGWsPlaceholderVMscanbeaddedtoSecurityGroupsandinaDRevent,whentheseVMsbecomeactivetheyareprotectedbyDFWDynamicRoutingcanbeusedtoadvertisenetworksontheprimarysite.Usingmetric/weightthesenetworkscanbere-advertisedontherecoverysiteifthereisasitefailoverThismapsverycloselytothevCACdeploymentmodelforpre-creatednetworkswhichisusedforproductionworkloads.Test/Devworkloadsusingon-demandnetworkingdonottypicallyrequireDRCurrentlybeingtestedAutomatesynchronizationofNSXDistributedFirewallRulesetandSecurityGroupsbetweentwoNSXManagersTieintoSRM,soatthetimeVMsareaddedtoaProtectionGrouptheplaceholderVMsareautomaticallyaddedtotheappropriateSecurityGroupsWorkingcloselywithEMCaspartoftheirEnterprisePrivateCloudReferenceArchitectureprojectto

turnthisintoaproductizedsolutionincludingvCAC第49页/共94页LogicalArchitectureView/24/28/24/28NoNetworkReaddressing(DynamicRouting)VXLANVXLANVLANVLANvCenter+SRMvCenter+SRMDistributedLogicalRouterDynamicRouting(OSPF,BGP)PrimaryVMsPlaceholderVMsDistributedLogicalRouterDynamicRouting(OSPF,BGP)Pre-createdLogical

SwitchesandEdgesStorageReplicationVMFSVMFS“Protected”Site“Recovery”Site50第50页/共94页PrimaryVMsSRMwithNSXforvSphere/24/28/24/28NoNetworkReaddressing(DynamicRouting)VXLANVXLANVLANVLANvCenter+SRMvCenter+SRMDynamicRouting(OSPF,BGP)PrimaryVMsPlaceholderVMsDistributedLogicalRouterDistributedLogicalRouterDynamicRouting(OSPF,BGP)SG-Prod-01SG-Dev-01SG-Prod-01SG-Dev-01SiteANSXEdgeGWSiteBNSXEdgeGW51第51页/共94页SRMwithNSXforvSphereCurrentChallengesBoththeprimaryandrecoverysitesneedtobepreparedforNSXinandnetworksneedtobecreatedonbothsitesfortheSRMmappingDynamicallycreatednetworksandport-groupsontheprotectedsitearenotcreatedontherecoverysiteautomaticallyandwillneedtobedonemytheadministratorDRsiteconfigurationverificationandremediationprocessestomaintainsynchronizationiscurrentandmatchingonboththesitesServicecomposerfeaturesaredependentonUUIDandVDSuniqueidentity’s(currentlynotsupported)OutoftheBoxsupportfromSRMFutureDevelopmentScopeAcceptablePreparationstep,shouldbepartofarunbookAutomateSRMPort-GroupmappingviaVCO.AutomatesynchronizationofNSXDistributedFirewallRulesetandSecurityGroupsbetweentwoNSXManagersusingVCOworkflowsandtheNSX-VCOpluginEnhanceVCOtosupport2-waysynchronization.InvestigatingremovalofserviceComposerVDSthumbprintdependenciesTieintoSRM,soatthetimeVMsareaddedtoaProtectionGrouptheplaceholderVMsareautomaticallyaddedtotheappropriateSecurityGroups(Q2-2015)52第52页/共94页“Protected”Site“Recovery”SiteStorageStorageVMFS/NFSVMFS/NFSVMFS/NFSNSXWorkflowforManualSynchronizationStep1:Admindeploysalogical

switchontheprimarysiteStep2:Admindeploysalogical

switchontherecoverysiteStep3:AdmindeploysaDLR

ontheprimarysiteStep4:AdmindeploysaDLR

ontherecoverysiteWhenanobjectiscreatedontheprimarySite,thesameobjectneedstobedeployed

ontherecoverysitetomaintainconsistency

Duplicatenetworksegmentsandsubnets

canexistonboththeprotectedandthe

recoverysite,thisistomaintainIPaddresses53第53页/共94页“Protected”Site“Recovery”SiteStorageStorageVMFS/NFSVMFS/NFSVMFS/NFSNSXVCOWorkflowforSynchronizationAdmindeploysalogicalswitchontheprimarysiteVCOworkflowistriggeredto

replicateobjecttorecoverysiteNewobjectiscreatedonthe

recoverysiteAdmindeploysaDLRonthe

primarysiteVCOworkflowistriggeredto

replicateobjecttorecoverysiteNewobjectiscreatedonthe

recoveryScheduledSyncprocessvalidatesProtectedsitewithrecoverysiteAnydifferencesareremediatedScheduledSyncprocessvalidatesProtectedsitewithrecoverysiteAnydifferencesareremediated54第54页/共94页存储资源设计第55页/共94页软件定义存储在BC/DR解决方案中的独特价值56vSphereStoragePolicy-BasedMgmtVirtualSAN基于存储策略的管理SAN/NAS虚拟卷管理VirtualDatastoreVirtualDatastore低成本的存储解决方案快速，面向应用的置备不依赖硬件便于采用非对称设计不需要管理LUNs,Vols在线变更策略无需数据迁移第56页/共94页数据保护方案设计第57页/共94页DataProtectionTechniques58HIGHLOWSLOWFASTPotentialforDataLoss(RPO)TimetoRecover(RTO)SynchronousReplicationTapeBackupAsynchronousReplicationSnapshotsDiskBackupHowmuchdatacanyouaffordtolose?Howlongcanyouaffordtobewithoutthedataorservice?第58页/共94页DataProtectionUseCases59RTOTypical

RPORetentionUseCasesSynchronousReplicationSub-minute/instantZerodatalossNoneLivemigrationHighavailabilityApplicationmobilityAsynchronousReplicationMinutestohoursMinutestohoursDaysHWfailureSite/disasterrecoveryPlannedmigrationCorruption/datalossSnapshotsSecondstominutesMinutestohoursDaysTest/dev/labCloningPatching/maintenanceCorruption/datalossBackupHoursDailyWeeklyMonthlyYearlyMonths+Corruption/datalossFilerecoveryLong-termretentionComplianceApplicationintegration第59页/共94页选择正确的数据保护方案60基于阵列

的复制

vSphere

复制技术vSphere

数据保护可实现零数据丢失存储合作伙伴解决方案RPO同步分钟小时天RPO从15分钟到24小时基于虚拟机层，虚拟机级别RPO最小1天备份数据复制可实现

自动化

灾难恢复第60页/共94页VDP&VDPAdvancedSimple,EfficientBackupandReplicationwithPredictableRecoveryvSpherededuplicateddataVMFS,NFS,VSANstorageVDPAdvWhatisit?vSphereDataProtectionisabackupandreplicationsolutionforsimplifyingandoptimizingdataprotectioninvSphereenvironmentsKeyFeaturesAgent-less,disk-basedvirtualmachinebackupsApplication-aware,granular,agent-based

dataprotectionforphysicalandvirtualapplicationsEnd-to-endintegrationwithvSphereandmanagedthroughvSphereWebClientSingle-steprecoverySelf-serviceFile-LevelRecoveryPoweredbyEMCAvamar61第61页/共94页4xMoreStorage-efficientand6xFasterforRecoveryUniquevariable-lengthdedupe~$60KsavingsonstorageTCOperyear4xSource:ESGLabValidationReport–vSphereDataProtection,February20136xUniqueCBTRestoretechnologyRecoverVMstoproductioninminutes"Forrealbackups,VMwareoffersvSphereDataProtection(VDP)[…]thededuplicationlevelsareamazing”TrevorPott-TheRegister第62页/共94页ManagewithEase:aSimpleWaytoHandleBackupsManagedthroughvSphereWebClientDeployedasvirtualapplianceWizard-drivenOne-steprecoveryEnd-userFile-LevelRecovery(FLR)“UsingvSphereDataProtectionallowsustohavethemanageabilitythatwedidn’thavebefore.[…]thiswasano-brainerforus.”SeniorITArchitect,LargeEnterpriseComputerServicesSource:TechValidate.TVID:07A-32C-7F263第63页/共94页DataProtection(BackupandRestore)Agents?NoAgents?–Both!Noagentsformajorityofworkloads–keepitsimpleAgentsforcertainappsvSphereDataProtection(VDP)AdvancedBackupandrecoveryforVMware,fromVMwareBasedonproven,matureEMCAvamar™Agent-lessVMbackupandrestoreAgentsforgranulartier-1applicationprotection64第64页/共94页ApplicationAwarenessforMission-CriticalApps

BackupforVirtualandPhysicalApplicationsInVDPAdvancedOnlyAgentsforExchange,SQL,SharePointDatabase-levelbackupandrecoveryforExchange,SQL,SharePointMailbox-levelrecoveryforExchangeBackupfornon-virtualizedExchange,SQL,SharePointappsSupportforMSExchangeDAGs,SQLServerClustersKeyBenefitsApplicationconsistencyClient-sidededuplicationGranularbackupandrestoreLogmanagementvSphereVirtualPhysical65第65页/共94页VDPAdvanced–KeepInMind…EngineeredforSMBenvironmentsUsesVADP–VMsnapshots,CBTUtilizesWindowsVSSinVMwareToolsWorksfinewithHA,notwithFTRDM–virtualyes,physicalnoIsitDR?Maybe–dependsonRTO,RPONeedsreplicationoffsite,right?–seeBCO2629andBCO2760BestPracticesPrepopulateDNS,alwaysuseFQDNManageVMsnapshotsAvoiddeployingtoslowstorageDonotpower-off,alwaysshutdowngracefullyDonotschedulebackupsduringmaintenancewindow66第66页/共94页数据复制方式的选择67解决方案提供商成本可管理性性能vSphere

复制技术支持低端存储设备不需要购买额外的复制组件(vSphere包含免费的数据复制功能)虚拟机级别的控制，颗粒度好在vCenter中直接管理15分钟的RPOs文件级一致性基于存储的

复制技术需要购买中高端存储需要购买额外的复制组件基于LUN来配置复制需要存储管理员配合管理支持同步复制支持大数据量应用级一致性第67页/共94页vSphereReplication(VR)

Hypervisor-basedReplicationforvSphereVMs68vSphereSiteAvSpherevSphereReplicationSANNASVirtualSANVirtualSANNASSANSiteBMultiplepoint-in-timeIncludedwithvSphereEssentialsPlusorhighereditionsSolutionDescriptionVRisVMware’sproprietarytechnologyforhypervisor-basedreplicationofvSpherevirtualmachinesKeyFeaturesVM-centric,storage-independentFlexibleRPO(15min.to24hrs.)MPIT(1)recovery(upto24replicas)Network-efficient“light-weightdelta”replicationKeyBenefitsSimplifiesreplicationofvirtualmachinesReducesstorageandbandwidthinvestmentsIntegratedwiththeVMwareproductstackIncludedwithvSphere(2)atnoadditionalcost第68页/共94页Full/initialSyncStartfreshorwithseedviaphysicalmediaCom