双活数据中心与灾备解决方案技术部分

双活数据中心与灾备解决方案技术部分议程1同城双活技术方案2异地灾备技术方案2基于虚拟化技术的业务连续性解决方案概览3资源池vSpherevSpherevSphere本地站点灾备站点基于虚拟化层的异步复制基于硬件设备的同异步复制自动化应用切换管理城域集群应用感知的高可用性关键应用零停机保护在线迁移虚拟机，动态调配计算与存储资源VMotionandStorageVMotion高效的数据备份与恢复可通过运行计划与脚本实现自动化操作资源池vSpherevSphereDev/TestDev/TestDev/Test灾难恢复本地高可用数据保护方案特点与应用程序和操作系统无关与硬件设备无关

完善的保护

简单，经济议程1同城双活技术方案2异地灾备技术方案4双活数据中心在各个级别上全面保障可用性5vMotion&DRS

HA&FT服务器StoragevMotion，StorageDRS存储VMFSVMFS硬件热添加

多网卡绑定

存储多路径组件数据DataReplicationMetroCluster站点双活数据中心总体架构6双活存储集群站点A站点B延伸的vSphere集群>200km行为与单个vSphere相同延伸距离最大200KM，通常小于50KM通过VMwareHA与vMotion实现自动的DR保护需要双活存储集群，如EMC的vPlex，NetApp的MetroCluster等计算资源设计MakinganApplicationServiceHighlyailablevSphereHAvSphereAppHA8VMwarevFabric™tcServervSphereAppHA

9Policy-basedProtectoff-the-shelfappsFaultTolerancevs.HighailabilityFaulttoleranceAbilitytorecoverfromponentlossExample:HarddrivefailureHighailability10UptimepercentageinoneyearDowntimeinoneyear993.65days99.98.76hours99.9952minutes99.999“fivenines”5minutesX支持多vCPU的容错技术11InstantaneousFailover4vCPU4vCPUvSpherePrimarySecondaryFastCheckpointingFTsupportforupto4vCPUsProtectionforhighperformance,multi-vCPUVMsNew,morescalabletechnology:fastcheck-pointingtokeepprimaryandsecondaryinsyncOverviewProtectmission-critical,high-performanceapplicationsregardlessofOSContinuousailability:zerodowntime,zerodatalossforinfrastructurefailuresFullyautomatedresponseBenefitsTargetingcross-continentaldistances–upto100msRTTsMaintainstandardvMotionguaranteesLeaderinVMflexibility功能简介PermanentmigrationsbetweendatacentersDisasteroidance(DA)DR/DAtestingMulti-siteloadbalancingFollowthesunBenefits长距离vMotion12vSphere6.0支持跨三层网络和跨vCenterServer的vMotionsvCenterailabilityRunvCenterServerapplicationinaVMRunvCenterServerdatabaseinaVMRunbothinsameVM?ProtectwithvSphereHAvCenterandDBVMrestartprioritysettoHighEnableguestOSandAppmonitoringAppHAcanprotectSQLServerdatabaseBackupvCenterServerVManddatabaseImage-levelbackupforvCenterServerVMApp-levelbackupusingagentfordatabasebackup13网络资源设计双活数据中心网络架构15物理二层(裸光纤)逻辑二层

层叠网络/VPN二层分段VMVMVM二层分段VMVMVM二层网络扩展的二层网络(二层内容在

数据中心互连

链路上传递)站点A站点B二层网络NSXvSphereMulti-SiteUseCasesNSXforvSpheresupports3differentMulti-SiteDeploymentModelsVXLANwithStretchedClusters(vSphereMetroStorageCluster)VXLANwithSeparateClustersL2VPNAllsolutionsprovideL2extensionoveranL3network,enablingworkload&IPmobilitywithouttheneedtostretchVLANsLocalegressissupported,howeveritdoesaddplexityTheappropriatedeploymentmodelwilldependoncustomerrequirementsandtheirenvironmentNSX利用层叠网络实现双活数据中心17双活存储

vSphere城域存储集群数据存储1数据存储2vCenterServer三层

网络站点A站点BVM1VM2VM3逻辑交换机A

172.16.10.0/24VM4VM5逻辑交换机B

172.16.20.0/24分布式逻辑路由器站点A

边界网关上联网络A站点B

边界网关上联网络BVMwareNSXMulti-SiteSingleVC,StretchedClusterSolutionDetailRequiresasupportedvSphereMetroStorageClusterconfigurationInavMSCdeployment,storageisActive/Activeandspansbothsites.ExamplesofActive/Activestorageare:EMCVPLEX,NetAppMetroCluster

(seeVMwareHCLformoreinformation)StretchedclusterssupportLivevMotionofworkloadsUseL3forallVMkernelnetworks:Management,vMotion,IPStorageAllmanagementponentssuchasvCenterServer,NSXManagerandControllersarelocatedinSiteALatencyandbandwidthrequirementsaredictatedbyvMSCstoragevendor,eg10msRTTforVPLEXwhichalsoalignswithvMotionusingEnterprisePlusvMSCenablesdisasteroidanceandbasicDisasterRecovery(withouttheorchestrationortestingcapabilitiesofSRM)LossofeitherNSXponentsortheDatacenterInterconnectwillresultsinafallbacktodataplanebasedlearningusingexistingnetworkstate.ThereforethereisnooutagetodataforwardingandwithoutvCenterServer,therearenoVMprovisioningormigrationoperationsNSXandvMSCareplimentarytechnologiesthatfitasweetspotforNSX(SinglevCenterServer)VMwareNSXMulti-SiteSingleVC,StretchedCluster19VMwareESXiVMwareESXiVMwareESXiVMwareESXiSiteASiteBStretchedWorkloadClusterVMwareESXiVMwareESXiVMwareESXiVMwareESXiSiteASiteBStretchedEdgeClusterClusterConfigurationvMSCenablesstretchedclustersacrosstwophysicalsitesInanNSXdeploymentManagement,EdgeandWorkloadclustersareallstretchedUndernormalconditionsallManagementponentsruninaSiteAandarevSphereHATheyareautomaticallyrestartedatSiteBintheeventofasiteoutage.ThemanagementnetworkisnotstretchedandmustbeenabledonSiteBaspartoftherecoveryrunbookDependentondesign,NSXEdgeServicesGatewaysareeitheractiveinbothsitesorasinglesiteandcanalsoleverageHAVMsintheWorkloadClustersare

automaticallyrecoveredVMwareESXiVMwareESXiVMwareESXiVMwareESXiSiteASiteBvCenterServerStretchedManagementClusterVMwareNSXMulti-SiteSingleVC,StretchedClusterInavMSCenvironment,DRSisusedtobalanceresourceutilization,providesiteaffinity,improvedailabilityandensureoptimaltrafficflowUseShouldrules,ratherthanMustasthisallowsvSphereHAtotakeprecedenceExampleDRSGroups,RulesandSettingsforNSXEdges:VMwareNSXMulti-SiteSingleVC,StretchedClusterNSXConfiguration(Option1-Preferred)TransportZonespansbothSitesandVXLANLogicalSwitchesprovideL2connectivitytoVMsDistributedLogicalRoutingisusedforallVMstoprovideconsistentdefaultgatewayvMACLocalEgressisprovidedbyusingseparateUplinkLIFsandEdgeGWspersite.HostsonSiteAheDLRdefaultgatewayconfiguredviaSiteAEdgeGWusingnet-vdrCLI.WhileSiteBDLRdefaultgatewayisviaSiteBEdgeGWCeat:DynamicRoutingcannotbeenabledonDLR,orastaticroutesetviaNSXManagerNSXEdgeGatewayswillheastaticrouteforanynetworksdirectlyconnectedtoDLR.ConsistentIP

addressingwillsimplifyroutingbyallowingasupernettobeusedDFWprovidesvNICpolicyenforcementindependentoftheVMslocationVM1VM2VM3WebLogicalSwitch

172.16.10.0/24SiteASiteBDistributedLogicalRouterVM4VM5AppLogicalSwitch

172.16.20.0/24SiteANSX

EdgeGW192.168.10.1SiteBNSX

EdgeGW192.168.20.1UplinkNetA192.168.10.0/29UplinkALIF192.168.10.2UplinkNetB192.168.20.0/29UplinkBLIF192.168.20.2VM6VM7DBLogicalSwitch

172.16.30.0/24InternalLIFs.1VMwareNSXMulti-SiteSingleVC,StretchedClusterNSXConfiguration(Option2)AsperOption1TransportZonespansbothSitesandVXLANLogicalSwitchesprovideL2connectivityforVMsNSXEdgeGatewaysaredeployedpersitewiththesameinternalIPaddressNSXDFWL2EthernetRulesaredefinedtoblockARPtotheremoteGWusingMACSets,whichprovidesLocalEgressasonlythesitelocalEdgeGWislearnt.FutureenhancementplannedtoenableESXihostobjectforDFW*Ceats:TrafficflowbetweenapplicationtiersmaybeasymmetriciftheyaresplitacrosssitesandDRSrulesaren’tusedDoesnotleverageDistributedLogicalRoutingandislimitedto10vNICsperEdgevMotionwillresultinnetworkinterruptionasVMARPcacheentryforsitespecificGWneedstotimeoutCanbeusedifOption1isn’tafit(eg,requireDynamicRoutingorvSphere5.1support)SiteASiteBVM1VM2VM3VM3SiteANSX

EdgeGW192.168.10.1SiteBNSX

EdgeGW192.168.10.1LogicalSwitch

192.168.10.0/24VMwareNSXMulti-SiteSingleVC,SeparateClusters(2)23Datastore1Datastore2vCenterServerL3NetworkSiteASiteBVM1VM2VM3LogicalSwitchA

172.16.10.0/24VM4VM5LogicalSwitchB

172.16.20.0/24DistributedLogicalRouterSiteANSX

EdgeGWUplinkNetASiteBNSX

EdgeGWUplinkNetBStoragevMotionRequiredfor

VMMobilityVMwareNSXMulti-SiteSingleVC,SeparateClustersSolutionDetailSeparatevSphereClustersareusedateachsite,thereforeDRSrules&groupsarenotrequiredStorageislocaltoasiteEnhancedvMotion(simultaneousvMotionandsvMotion)canprovidelivevMotionwithoutsharedstorageUseL3forallVMkernelnetworks:Management,vMotion,IPStorageAllmanagementponentssuchasvCenterServer,NSXManagerandControllersarelocatedinSiteASupportedlatencyrequirementforEnhancedvMotionis100msRTT(vSphere6).vMotionrequires250MbpsofbandwidthperconcurrentvMotionThissolutionprovidesDisasteroidancewherelivevMotionissupported,byenablingworkloadstobemovedproactivelybetweensitesDoesnotprovideautomatedDisasterRecoveryVMwareNSXMulti-SiteSingleVC,SeparateClusters25VMwareESXiManagementClusterVMwareESXiSiteAvCenterServerClusterConfigurationClustersdonotspanbeyondaphysicalsiteAllManagementponentsruninSiteA,andwillnotbeautomaticallyrecoveredintheeventofasiteoutage.StoragereplicationtoastandbyClusterinSiteBandamanualrecoveryprocesscouldbeimplementedSeparateEdgeandWorkloadsClustersareusedpersiteNSXEdgeServicesGatewaysareactiveinasinglesite,withHAislocaltothesiteWorkloadsareactiveacrossbothsitesandcanoptionallysupportlivevMotionDRSaffinityrulesforworkloadsarenotrequiredVMwareESXiEdgeClusterAVMwareESXiSiteAVMwareESXiVMwareESXiSiteBEdgeClusterBVMwareESXiWorkloadClusterAVMwareESXiSiteAVMwareESXiVMwareESXiSiteBWorkloadClusterBVMwareNSXMulti-SiteSingleVC,SeparateClustersNSXConfigurationOption1withDistributedLogicalRoutingisunchangedfromStretchedClusterconfigurationandisstillrmendedForoption2,asvCenterobjectsarenotsharedwecanleverageNSXDFWL2EthernetRuleswithascopeoftheDatacentertoprovideLocalEgress.asonlythesitelocalEdgeGWislearnt.NoenhancementsrequiredSameceatswithOption2forStretchedClustersalsoapplySiteASiteBVM1VM2VM3VM3SiteANSX

EdgeGW192.168.10.1SiteBNSX

EdgeGW192.168.10.1LogicalSwitch

192.168.10.0/24ToLocalEgress/Ingressornotto..Asafirststep,askthecustomeriftheyhestatefulservicesfortrafficenteringandexitingtheDatacenter?ThisisgenerallythecaseandifsotheywillrequireasolutiontoprovideLocalIngressfortheirapplications.Eg,NATGSLBAnycastLISP,RHIetcIftheycanaddressthis,thenaMulti-SiteNSXsolutionprovidingLocalEgressisagoodfitIftheydonot,otherquestionstoaskare:Dotheyhehighbandwidthbetweensites?andisreducingoperationalplexityagoal?AnactiveNSXEdgeGatewayatonesite,withfailovertothesecondarysitemaymeetthecustomersrequirementsandismuchsimplerthanprovidingLocalEgress&IngressVMwareNSXMulti-SiteL2VPN(3)28Datastore1Datastore2vCenterServerSiteAorOnPremSiteBorOffPremVM1VM2NetworkA172.16.10.0/24SiteANSX

EdgeGWSiteAUplinkNetworkvCenterServerVM3VM4NetworkB

172.16.10.0/24SiteBNSX

EdgeGWSiteBUplinkNetworkSSLSSLL3Network存储资源设计存储需求30SiteASite

BDarkFiber<=200kmMetroClusterAggrXPlex0AggrYPlex1AggrYPlex0DWDMDWDMAggrXPlex1时延要求：vSphere要求RTT<100ms存储同步复制要求RTT<5msMetroStorage的两种实现方式：Uniform与Non-Uniform31vSphereMetroStorageCluster工作原理32vSphereHAClusterStretchedacrosscampus

ormetroareavMSCCertifiedStorageMetroClusterPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSArraybasedsynchronousreplicationPlex0Plex0vSphereMetroStorageCluster工作原理33StandardvMotionofVirtualMachinesvMotionvMSCCertifiedStorageMetroClusterPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSArraybasedsynchronousreplicationPlex0vSphereHAClusterPlex0vSphereMetroStorageCluster工作原理34vSphereHAClusterStoragetakeovervMSCCertifiedStorageMetroClusterPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1Plex0Plex0Plex0APPOSAPPOSAPPOSAPPOSAPPOSAPPOSSiteshutdown

formaintenancevSphereMetroStorageCluster工作原理35vSphereHAClustervMSCCertifiedStorageMetroClusterPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex0Plex0APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1Plex0Automatic

resyncMaintenanceperformed,siterestoredvSphereMetroStorageCluster工作原理36vSphereHAClustervMSCCertifiedStorageNetAppMetroClusterPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex0Plex0APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1Plex0StandardvMotion

toreturnVMsAccessreturned存储设备选型37兼容性网站：六类MetroClusterStorage1,iSCSI2,FC3,NFS4,iSCSI-SVD5,FC-SVD6,NFS-SVDEMCVPLEXforStretchedMetroClustersEstablishedVPLEXActive-ActiveSolutionInstantvMotionacrossdistanceVMwareHAautomaticallyrestartsVMsateithersiteforsystemorsitefailureBalanceworkloadsacrossbothsiteswithVMwareDRSSupportsVMwareFToutoftheboxAdditionalflexibilityofVPLEXMetroDoesn’tRequireFCCross-ConnectChooseIPorFCConnectivitybetweensitesThirdSite–IPconnectivitytoWitnessVMNoSPOF–IfyouloseaDirector,nolossofaccessatanysite38RoadmapStretchedvSphereClusterSiteA(Active)SiteB(Active)<10ms,IPorFCvCenterVPLEXVPLEXDualSiteDRSDualSiteHAInstantvMotionSiteC(OptionalWitness)VPLEXDistributedVirtualVolumesStretchedStoragewithIBMSANVolumeControllerSinglesystemimageacrosstwositesprovidessinglepaneofglassmanagementforday-to-daystoragemanagementactivitySimplifymanagementofyourenvironmentatsametimeasdeployingactive-activestorageBaseduponarichandmatureplatformProvideReal-timepression,EasyTier,Non-disruptivemigrations,Longdistancereplication40,000enginesinstalledworldwide,11yearsfieldexperience250+storagedevicessupportedtoprovideback-endcapacityRetainyourexistinginvestmentinstoragedevicesKeepflexibilityforthefutureActivequorumdeviceenablesautomaticfailoverNoexternalmanagementsoftwarePreventssplit-brainSupportsrecoveryincaseoffullunplannedsitefailurescenarios39QuorumStoragePool1StoragePool2Site1Site1Site2Site2Site3SVCStretchedCluster来自存储厂商的参考指南40ImplementingVMwarevSphereMetroStorageClusterwithHPLeftHandMulti-Sitestorage

ImplementingvSphereMetroStorageClusterusingHP3PARPeerPersistence

DeployVMwarevSphereMetroStorageClusteronHitachiVirtualStoragePlatform

IBMSANandSVCStretchedClusterandVMwareSolutionImplementation

VMwarevSphere5.5vMotiononEMCVPLEXMetro

VSANforMetroCluster2015Q3

(计划)41SiteAFaultDomainAFaultDomainBFaultDomainCVirtualSANClusterSiteCSIteBvmdkwitnessvmdkvmdkwitnessvmdk从机架感知升级到站点感知：1，迷你容错站点专用于witness2，优先从本地站点读取数据以提升性能议程1同城双活技术方案2异地灾备技术方案42RTO,RPO,andMTDRecoveryTimeObjective(RTO)HowlongitshouldtaketorecoverRecoveryPointObjective(RPO)AmountofdatalossthatcanbeincurredMaximumTolerableDowntime(MTD)DowntimethatcanoccurbeforesignificantlossisincurredExamples:Financial,reputation43TheThreeBuildingBlocksForDisasterRecovery44vSphereVirtualSANEcosystemVDPAdvancedvSphereReplicationSiteRecoveryManagerVMwareArray-basedBackupcopiesExternalStorageStorageputeBackupandRecoveryReplicationDROrchestration异地(同城)灾备解决方案总体架构45异地(同城)灾备解决方案——多种映射关系46主备式切换双活切换双向切换双活数据中心ProductionRecoveryProductionRecoveryProductionProduction最常见的场景花销较大灾备架构主要用于测试，开发和培训等非生产应用有效降低开销两个站点均有生产应用每个站点为对方提供容灾支持两个站点的应用可以跨站点自由某著名企业计划内事件零停机限制在城域范围内Site1Site2Production网络资源设计“Protected”Site“Recovery”SiteStorageStorageVMFS/NFSVMFS/NFSStorageVMFS/NFSVMFS/NFSReplicationSRMwithNSXforvSphere48NSXManagerNSXControllerClustervCenter+SRMvCACNSXManagerNSXControllerClustervCenter+SRMvCACFirewallRules&SecurityGroupsSRMwithNSXforvSphereWhathasbeenvalidatedSRMcanmapVMsfromoneVXLANLogicalSwitchonthePrimarySitetoadifferentLogicalSwitchontheRecoverySiteTheseLogicalSwitchescanbeconnectedtopre-createdNSXDistributedLogicalRoutersorNSXEdgeServicesGWsPlaceholderVMscanbeaddedtoSecurityGroupsandinaDRevent,whentheseVMsbeactivetheyareDFWDynamicRoutingcanbeusedtoadvertisenetworksontheprimarysite.Usingmetric/weightthesenetworkscanbere-advertisedontherecoverysiteifthereisasitefailoverThismapsverycloselytothevCACdeploymentmodelforpre-creatednetworkswhichisusedforproductionworkloads.Test/Devworkloadsusingon-demandnetworkingdonottypicallyrequireDRCurrentlybeingtestedAutomatesynchronizationofNSXDistributedFirewallRulesetandSecurityGroupsbetweentwoNSXManagersTieintoSRM,soatthetimeVMsareaddedtoaProtectionGrouptheplaceholderVMsareautomaticallyaddedtotheappropriateSecurityGroupsWorkingcloselywithEMCaspartoftheirEnterprisePrivateCloudReferenceArchitectureprojectto

turnthisintoaproductizedsolutionincludingvCACLogicalArchitectureView50192.168.0.0/24192.168.0.12.2.2.22.2.2.0/28192.168.0.0/243.3.3.0/28NoNetworkReaddressing(DynamicRouting)VXLANVXLANVLANVLANvCenter+SRMvCenter+SRMDistributedLogicalRouterDynamicRouting(OSPF,BGP)PrimaryVMsPlaceholderVMs192.168.10.2192.168.10.1192.168.0.13.3.3.3DistributedLogicalRouterDynamicRouting(OSPF,BGP)192.168.10.2192.168.10.1Pre-createdLogical

SwitchesandEdgesStorageReplicationVMFSVMFS“Protected”Site“Recovery”SitePrimaryVMsSRMwithNSXforvSphere51192.168.0.0/242.2.2.0/28192.168.0.0/243.3.3.0/28NoNetworkReaddressing(DynamicRouting)VXLANVXLANVLANVLANvCenter+SRMvCenter+SRMDynamicRouting(OSPF,BGP)PrimaryVMsPlaceholderVMs192.168.0.1DistributedLogicalRouter192.168.10.2192.168.0.13.3.3.3DistributedLogicalRouterDynamicRouting(OSPF,BGP)192.168.10.2192.168.10.1SG-Prod-01SG-Dev-01SG-Prod-01SG-Dev-012.2.2.2192.168.10.1SiteANSXEdgeGWSiteBNSXEdgeGWSRMwithNSXforvSphere52CurrentChallengesBoththeprimaryandrecoverysitesneedtobepreparedforNSXinandnetworksneedtobecreatedonbothsitesfortheSRMmappingDynamicallycreatednetworksandport-groupsontheprotectedsitearenotcreatedontherecoverysiteautomaticallyandwillneedtobedonemytheadministratorDRsiteconfigurationverificationandremediationprocessestomaintainsynchronizationiscurrentandmatchingonboththesitesServiceposerfeaturesaredependentonUUIDandVDSuniqueidentity’s(currentlynotsupported)OutoftheBoxsupportfromSRMFutureDevelopmentScopeAcceptablePreparationstep,shouldbepartofarunbookAutomateSRMPort-GroupmappingviaVCO.AutomatesynchronizationofNSXDistributedFirewallRulesetandSecurityGroupsbetweentwoNSXManagersusingVCOworkflowsandtheNSX-VCOpluginEnhanceVCOtosupport2-waysynchronization.InvestigatingremovalofserviceposerVDSthumbprintdependenciesTieintoSRM,soatthetimeVMsareaddedtoaProtectionGrouptheplaceholderVMsareautomaticallyaddedtotheappropriateSecurityGroups(Q2-2015)“Protected”Site“Recovery”SiteStorageStorageVMFS/NFSVMFS/NFSVMFS/NFSNSXWorkflowforManualSynchronization53Step1:Admindeploysalogical

switchontheprimarysiteStep2:Admindeploysalogical

switchontherecoverysiteStep3:AdmindeploysaDLR

ontheprimarysiteStep4:AdmindeploysaDLR

ontherecoverysiteWhenanobjectiscreatedontheprimarySite,thesameobjectneedstobedeployed

ontherecoverysitetomaintainconsistency

Duplicatenetworksegmentsandsubnets

canexistonboththeprotectedandthe

recoverysite,thisistomaintainIPaddresses“Protected”Site“Recovery”SiteStorageStorageVMFS/NFSVMFS/NFSVMFS/NFSNSXVCOWorkflowforSynchronization54AdmindeploysalogicalswitchontheprimarysiteVCOworkflowistriggeredto

replicateobjecttorecoverysiteNewobjectiscreatedonthe

recoverysiteAdmindeploysaDLRonthe

primarysiteVCOworkflowistriggeredto

replicateobjecttorecoverysiteNewobjectiscreatedonthe

recoveryScheduledSyncprocessvalidatesProtectedsitewithrecoverysiteAnydifferencesareremediatedScheduledSyncprocessvalidatesProtectedsitewithrecoverysiteAnydifferencesareremediated存储资源设计软件定义存储在BC/DR解决方案中的独特价值56vSphereStoragePolicy-BasedMgmtVirtualSAN基于存储策略的管理SAN/NAS虚拟卷管理VirtualDatastoreVirtualDatastore低成本的存储解决方案快速，面向应用的置备不依赖硬件便于采用非对称设计不需要管理LUNs,Vols在线变更策略无需数据迁移数据保护方案设计DataProtectionTechniques58HIGHLOWSLOWFASTPotentialforDataLoss(RPO)TimetoRecover(RTO)SynchronousReplicationTapeBackupAsynchronousReplicationSnapshotsDiskBackupHowmuchdatacanyouaffordtolose?Howlongcanyouaffordtobewithoutthedataorservice?DataProtectionUseCases59RTOTypical

RPORetentionUseCasesSynchronousReplicationSub-minute/instantZerodatalossNoneLivemigrationHighailabilityApplicationmobilityAsynchronousReplicationMinutestohoursMinutestohoursDaysHWfailureSite/disasterrecoveryPlannedmigrationCorruption/datalossSnapshotsSecondstominutesMinutestohoursDaysTest/dev/labCloningPatching/maintenanceCorruption/datalossBackupHoursDailyWeeklyMonthlyYearlyMonths+Corruption/datalossFilerecoveryLong-termretentionplianceApplicationintegration选择正确的数据保护方案60基于阵列

的复制

vSphere

复制技术vSphere

数据保护可实现零数据丢失存储合作伙伴解决方案RPO同步分钟小时天RPO从15分钟到24小时基于虚拟机层，虚拟机级别RPO最小1天备份数据复制可实现

自动化

灾难恢复VDP&VDPAdvancedSimple,EfficientBackupandReplicationwithPredictableRecovery61vSpherededuplicateddataVMFS,NFS,VSANstorageVDPAdvWhatisit?vSphereDataProtectionisabackupandreplicationsolutionforsimplifyingandoptimizingdataprotectioninvSphereenvironmentsKeyFeaturesAgent-less,disk-basedvirtualmachinebackupsApplication-aware,granular,agent-baseddataprotectionforphysicalandvirtualapplicationsEnd-to-endintegrationwithvSphereandmanagedthroughvSphereWebClientSingle-steprecoverySelf-serviceFile-LevelRecoveryPoweredbyEMCamar4xMoreStorage-efficientand6xFasterforRecoveryUniquevariable-lengthdedupe~$60KsingsonstorageTCOperyear4xSource:ESGLabValidationReport–vSphereDataProtection,February20136xUniqueCBTRestoretechnologyRecoverVMstoproductioninminutes"Forrealbackups,VMwareoffersvSphereDataProtection(VDP)[…]thededuplicationlevelsareamazing”TrevorPott-TheRegisterManagewithEase:aSimpleWaytoHandleBackups63ManagedthroughvSphereWebClientDeployedasvirtualapplianceWizard-drivenOne-steprecoveryEnd-userFile-LevelRecovery(FLR)“UsingvSphereDataProtectionallowsustohethemanageabilitythatwedidn’thebefore.[…]thiswasano-brainerforus.”SeniorITArchitect,LargeEnterpriseputerServicesSource:TechValidate.TV-7F2DataProtection(BackupandRestore)Agents?NoAgents?–Both!Noagentsformajorityofworkloads–keepitsimpleAgentsforcertainappsvSphereDataProtection(VDP)AdvancedBackupandrecoveryforVMware,fromVMwareBasedonproven,matureEMCamar™Agent-lessVMbackupandrestoreAgentsforgranulartier-1applicationprotection64ApplicationAwarenessforMission-CriticalApps

BackupforVirtualandPhysicalApplications65InVDPAdvancedOnlyAgentsforExchange,SQL,SharePointDatabase-levelbackupandrecoveryforExchange,SQL,SharePointMailbox-levelrecoveryforExchangeBackupfornon-virtualizedExchange,SQL,SharePointappsSupportforMSExchangeDAGs,SQLServerClustersKeyBenefitsApplicationconsistencyClient-sidededuplicationGranularbackupandrestoreLogmanagementvSphereVirtualPhysicalVDPAdvanced–KeepInMind…EngineeredforSMBenvironmentsUsesVADP–VMsnapshots,CBTUtilizesWindowsVSSinVMwareToolsWorksfinewithHA,notwithFTRDM–virtualyes,physicalnoIsitDR?Maybe–dependsonRTO,RPONeedsreplicationoffsite,right?–seeBCO2629andBCO2760

66BestPracticesPrepopulateDNS,alwaysuseFQDNManageVMsnapshotsoiddeployingtoslowstorageDonotpower-off,alwaysshutdowngracefullyDonotschedulebackupsduringmaintenancewindow数据复制方式的选择67解决方案提供商成本可管理性性能vSphere

复制技术支持低端存储设备不需要购买额外的复制组件(vSphere包含免费的数据复制功能)虚拟机级别的控制，颗粒度好在vCenter中直接管理15分钟的RPOs文件级一致性基于存储的

复制技术需要购买中高端存储需要购买额外的复制组件基于LUN来配置复制需要存储管理员配合管理支持同步复制支持大数据量应用级一致性vSphereReplication(VR)

Hypervisor-basedReplicationforvSphereVMs68vSphereSiteAvSpherevSphereReplicationSANNASVirtualSANVirtualSANNASSANSiteBMultiplepoint-in-timeIncludedwithvSphereEssentialsPlusorhighereditionsSolutionDescriptionVRisVMware’sproprietarytechnologyforhypervisor-basedreplicationofvSpherevirtualmachinesKeyFeaturesVM-centric,storage-independentFlexibleRPO(15min.to24hrs.)MPIT(1)recovery(upto24replicas)Network-efficient“light-weightdelta”replicationKeyBenefitsSimplifiesreplicationofvirtualmachinesReducesstorageandbandwidthinvestmentsIntegratedwiththeVMwareproductstackIncludedwithvSphere(2)atnoadditionalcostFull/initialSyncStartfreshorwithseedviaphysicalmediaparesdiskIDsCalculateschecksumofallblocksatsource&targetExchangesandpareschecksumstodeterminedeltaReplicatesallchangedblocksnecessarytoalignvirtualdisksDeltasyncWritestrackedbyvSCSIfilterdriver,whichispartoftheESXhostTracksnewblocksastheyarewrittenBitmapofchangedblocksismaintainedbetweenreplicationsEachreplicacorrespondstoalightweightdeltaDuringasyncchangedblocksarereadandsenttothetargetNoVMstun&verylittleIOpenaltyvSphereReplication–HowitWorks69vSphereReplicationProvidesTheMostFlexibleVMProtection70FlexibleRPOenablesprotectionaccordingtoappneedsandailablebandwidthMPITrecoveryensuresrecoverabilityincaseofdatacorruptionVM-centricreplicationsimplifiesmanagementStorage-independenceeliminatesneedformatchingstorageacrosssourceandtargetFourStepsforFullRecovery

71Right-click,select“Recover”SelectatargetfolderSelectatargetresourceClickFinishWillvalidateyourchoicesasyougoRetainHistoricalReplicas

72vSpher