雙活數(shù)據(jù)中心與災(zāi)備解決方案-技術(shù)部分

議程1同城雙活技術(shù)方案2異地災(zāi)備技術(shù)方案1第一頁(yè)，共92頁(yè)。基于虛擬化技術(shù)的業(yè)務(wù)連續(xù)性解決方案概覽資源池vSpherevSpherevSphere本地站點(diǎn)災(zāi)備站點(diǎn)基于虛擬化層的異步復(fù)制基于硬件設(shè)備的同異步復(fù)制自動(dòng)化應(yīng)用切換管理城域集群應(yīng)用感知的高可用性關(guān)鍵應(yīng)用零停機(jī)保護(hù)在線遷移虛擬機(jī)，動(dòng)態(tài)調(diào)配計(jì)算與存儲(chǔ)資源VMotionandStorageVMotion高效的數(shù)據(jù)備份與恢復(fù)可通過(guò)運(yùn)行計(jì)劃與腳本實(shí)現(xiàn)自動(dòng)化操作資源池vSpherevSphereDev/TestDev/TestDev/Test災(zāi)難恢復(fù)本地高可用數(shù)據(jù)保護(hù)方案特點(diǎn)與應(yīng)用程序和操作系統(tǒng)無(wú)關(guān)與硬件設(shè)備無(wú)關(guān)

完善的保護(hù)

簡(jiǎn)單，經(jīng)濟(jì)2第二頁(yè)，共92頁(yè)。議程1同城雙活技術(shù)方案2異地災(zāi)備技術(shù)方案3第三頁(yè)，共92頁(yè)。雙活數(shù)據(jù)中心在各個(gè)級(jí)別上全面保障可用性vMotion&DRS

HA&FT服務(wù)器StoragevMotion，StorageDRS存儲(chǔ)VMFSVMFS硬件熱添加

多網(wǎng)卡綁定

存儲(chǔ)多路徑組件數(shù)據(jù)DataReplicationMetroCluster站點(diǎn)4第四頁(yè)，共92頁(yè)。雙活數(shù)據(jù)中心總體架構(gòu)雙活存儲(chǔ)集群站點(diǎn)A站點(diǎn)B延伸的vSphere集群>200km行為與單個(gè)vSphere相同延伸距離最大200KM，通常小于50KM通過(guò)VMwareHA與vMotion實(shí)現(xiàn)自動(dòng)的DR保護(hù)需要雙活存儲(chǔ)集群，如EMC的vPlex，NetApp的MetroCluster等5第五頁(yè)，共92頁(yè)。計(jì)算資源設(shè)計(jì)第六頁(yè)，共92頁(yè)。MakinganApplicationServiceHighlyAvailablevSphereHAvSphereAppHA7第七頁(yè)，共92頁(yè)。VMwarevFabric?tcServervSphereAppHA

Policy-basedProtectoff-the-shelfapps8第八頁(yè)，共92頁(yè)。FaultTolerancevs.HighAvailabilityFaulttoleranceAbilitytorecoverfromcomponentlossExample:HarddrivefailureHighavailabilityUptimepercentageinoneyearDowntimeinoneyear993.65days99.98.76hours99.9952minutes99.999“fivenines”5minutesX9第九頁(yè)，共92頁(yè)。支持多vCPU的容錯(cuò)技術(shù)InstantaneousFailover4vCPU4vCPUvSpherePrimarySecondaryFastCheckpointingFTsupportforupto4vCPUsProtectionforhighperformance,multi-vCPUVMsNew,morescalabletechnology:fastcheck-pointingtokeepprimaryandsecondaryinsyncOverviewProtectmission-critical,high-performanceapplicationsregardlessofOSContinuousavailability:zerodowntime,zerodatalossforinfrastructurefailuresFullyautomatedresponseBenefits10第十頁(yè)，共92頁(yè)。Targetingcross-continentaldistances–upto100msRTTsMaintainstandardvMotionguaranteesLeaderinVMflexibility功能簡(jiǎn)介PermanentmigrationsbetweendatacentersDisasteravoidance(DA)DR/DAtestingMulti-siteloadbalancingFollowthesunBenefits長(zhǎng)距離vMotionvSphere6.0支持跨三層網(wǎng)絡(luò)和跨vCenterServer的vMotions11第十一頁(yè)，共92頁(yè)。vCenterAvailabilityRunvCenterServerapplicationinaVMRunvCenterServerdatabaseinaVMRunbothinsameVM?ProtectwithvSphereHAvCenterandDBVMrestartprioritysettoHighEnableguestOSandAppmonitoringAppHAcanprotectSQLServerdatabaseBackupvCenterServerVManddatabaseImage-levelbackupforvCenterServerVMApp-levelbackupusingagentfordatabasebackup12第十二頁(yè)，共92頁(yè)。網(wǎng)絡(luò)資源設(shè)計(jì)第十三頁(yè)，共92頁(yè)。雙活數(shù)據(jù)中心網(wǎng)絡(luò)架構(gòu)物理二層(裸光纖)邏輯二層

層疊網(wǎng)絡(luò)/VPN二層分段VMVMVM二層分段VMVMVM二層網(wǎng)絡(luò)擴(kuò)展的二層網(wǎng)絡(luò)(二層內(nèi)容在

數(shù)據(jù)中心互連

鏈路上傳遞)站點(diǎn)A站點(diǎn)B二層網(wǎng)絡(luò)14第十四頁(yè)，共92頁(yè)。NSXvSphereMulti-SiteUseCasesNSXforvSpheresupports3differentMulti-SiteDeploymentModelsVXLANwithStretchedClusters(vSphereMetroStorageCluster)VXLANwithSeparateClustersL2VPNAllsolutionsprovideL2extensionoveranL3network,enablingworkload&IPmobilitywithouttheneedtostretchVLANsLocalegressissupported,howeveritdoesaddcomplexityTheappropriatedeploymentmodelwilldependoncustomerrequirementsandtheirenvironment第十五頁(yè)，共92頁(yè)。NSX利用層疊網(wǎng)絡(luò)實(shí)現(xiàn)雙活數(shù)據(jù)中心雙活存儲(chǔ)

vSphere城域存儲(chǔ)集群數(shù)據(jù)存儲(chǔ)1數(shù)據(jù)存儲(chǔ)2vCenterServer三層

網(wǎng)絡(luò)站點(diǎn)A站點(diǎn)BVM1VM2VM3邏輯交換機(jī)A

/24VM4VM5邏輯交換機(jī)B

/24分布式邏輯路由器站點(diǎn)A

邊界網(wǎng)關(guān)上聯(lián)網(wǎng)絡(luò)A站點(diǎn)B

邊界網(wǎng)關(guān)上聯(lián)網(wǎng)絡(luò)B16第十六頁(yè)，共92頁(yè)。VMwareNSXMulti-SiteSingleVC,StretchedClusterSolutionDetailRequiresasupportedvSphereMetroStorageClusterconfigurationInavMSCdeployment,storageisActive/Activeandspansbothsites.ExamplesofActive/Activestorageare:EMCVPLEX,NetAppMetroCluster

(seeVMwareHCLformoreinformation)StretchedclusterssupportLivevMotionofworkloadsUseL3forallVMkernelnetworks:Management,vMotion,IPStorageAllmanagementcomponentssuchasvCenterServer,NSXManagerandControllersarelocatedinSiteALatencyandbandwidthrequirementsaredictatedbyvMSCstoragevendor,eg10msRTTforVPLEXwhichalsoalignswithvMotionusingEnterprisePlusvMSCenablesdisasteravoidanceandbasicDisasterRecovery(withouttheorchestrationortestingcapabilitiesofSRM)LossofeitherNSXComponentsortheDatacenterInterconnectwillresultsinafallbacktodataplanebasedlearningusingexistingnetworkstate.ThereforethereisnooutagetodataforwardingandwithoutvCenterServer,therearenoVMprovisioningormigrationoperationsNSXandvMSCarecomplimentarytechnologiesthatfitasweetspotforNSX(SinglevCenterServer)第十七頁(yè)，共92頁(yè)。VMwareNSXMulti-SiteSingleVC,StretchedClusterVMwareESXiVMwareESXiVMwareESXiVMwareESXiSiteASiteBStretchedWorkloadClusterVMwareESXiVMwareESXiVMwareESXiVMwareESXiSiteASiteBStretchedEdgeClusterClusterConfigurationvMSCenablesstretchedclustersacrosstwophysicalsitesInanNSXdeploymentManagement,EdgeandWorkloadclustersareallstretchedUndernormalconditionsallManagementComponentsruninaSiteAandareprotectedbyvSphereHATheyareautomaticallyrestartedatSiteBintheeventofasiteoutage.ThemanagementnetworkisnotstretchedandmustbeenabledonSiteBaspartoftherecoveryrunbookDependentondesign,NSXEdgeServicesGatewaysareeitheractiveinbothsitesorasinglesiteandcanalsoleverageHAVMsintheWorkloadClustersare

automaticallyrecoveredVMwareESXiVMwareESXiVMwareESXiVMwareESXiSiteASiteBvCenterServerStretchedManagementCluster18第十八頁(yè)，共92頁(yè)。VMwareNSXMulti-SiteSingleVC,StretchedClusterInavMSCenvironment,DRSisusedtobalanceresourceutilization,providesiteaffinity,improvedavailabilityandensureoptimaltrafficflowUseShouldrules,ratherthanMustasthisallowsvSphereHAtotakeprecedenceExampleDRSGroups,RulesandSettingsforNSXEdges:第十九頁(yè)，共92頁(yè)。VMwareNSXMulti-SiteSingleVC,StretchedClusterNSXConfiguration(Option1-Preferred)TransportZonespansbothSitesandVXLANLogicalSwitchesprovideL2connectivitytoVMsDistributedLogicalRoutingisusedforallVMstoprovideconsistentdefaultgatewayvMACLocalEgressisprovidedbyusingseparateUplinkLIFsandEdgeGWspersite.HostsonSiteAhaveDLRdefaultgatewayconfiguredviaSiteAEdgeGWusingnet-vdrCLI.WhileSiteBDLRdefaultgatewayisviaSiteBEdgeGWCaveat:DynamicRoutingcannotbeenabledonDLR,orastaticroutesetviaNSXManagerNSXEdgeGatewayswillhaveastaticrouteforanynetworksdirectlyconnectedtoDLR.ConsistentIP

addressingwillsimplifyroutingbyallowingasupernettobeusedDFWprovidesvNICpolicyenforcementindependentoftheVMslocationVM1VM2VM3WebLogicalSwitch

/24SiteASiteBDistributedLogicalRouterVM4VM5AppLogicalSwitch

/24SiteANSX

EdgeGWSiteBNSX

EdgeGWVM6VM7DBLogicalSwitch

/24InternalLIFs.1第二十頁(yè)，共92頁(yè)。VMwareNSXMulti-SiteSingleVC,StretchedClusterNSXConfiguration(Option2)AsperOption1TransportZonespansbothSitesandVXLANLogicalSwitchesprovideL2connectivityforVMsNSXEdgeGatewaysaredeployedpersitewiththesameinternalIPaddressNSXDFWL2EthernetRulesaredefinedtoblockARPtotheremoteGWusingMACSets,whichprovidesLocalEgressasonlythesitelocalEdgeGWislearnt.FutureenhancementplannedtoenableESXihostobjectforDFW*Caveats:TrafficflowbetweenapplicationtiersmaybeasymmetriciftheyaresplitacrosssitesandDRSrulesaren’tusedDoesnotleverageDistributedLogicalRoutingandislimitedto10vNICsperEdgevMotionwillresultinnetworkinterruptionasVMARPcacheentryforsitespecificGWneedstotimeoutCanbeusedifOption1isn’tafit(eg,requireDynamicRoutingorvSphere5.1support)SiteASiteBVM1VM2VM3VM3SiteANSX

EdgeGWSiteBNSX

EdgeGW第二十一頁(yè)，共92頁(yè)。VMwareNSXMulti-SiteSingleVC,SeparateClusters(2)Datastore1Datastore2vCenterServerL3NetworkSiteASiteBVM1VM2VM3LogicalSwitchA

/24VM4VM5LogicalSwitchB

/24DistributedLogicalRouterSiteANSX

EdgeGWUplinkNetASiteBNSX

EdgeGWUplinkNetBStoragevMotionRequiredfor

VMMobility22第二十二頁(yè)，共92頁(yè)。VMwareNSXMulti-SiteSingleVC,SeparateClustersSolutionDetailSeparatevSphereClustersareusedateachsite,thereforeDRSrules&groupsarenotrequiredStorageislocaltoasiteEnhancedvMotion(simultaneousvMotionandsvMotion)canprovidelivevMotionwithoutsharedstorageUseL3forallVMkernelnetworks:Management,vMotion,IPStorageAllmanagementcomponentssuchasvCenterServer,NSXManagerandControllersarelocatedinSiteASupportedlatencyrequirementforEnhancedvMotionis100msRTT(vSphere6).vMotionrequires250MbpsofbandwidthperconcurrentvMotionThissolutionprovidesDisasterAvoidancewherelivevMotionissupported,byenablingworkloadstobemovedproactivelybetweensitesDoesnotprovideautomatedDisasterRecovery第二十三頁(yè)，共92頁(yè)。VMwareNSXMulti-SiteSingleVC,SeparateClustersVMwareESXiManagementClusterVMwareESXiSiteAvCenterServerClusterConfigurationClustersdonotspanbeyondaphysicalsiteAllManagementComponentsruninSiteA,andwillnotbeautomaticallyrecoveredintheeventofasiteoutage.StoragereplicationtoastandbyClusterinSiteBandamanualrecoveryprocesscouldbeimplementedSeparateEdgeandWorkloadsClustersareusedpersiteNSXEdgeServicesGatewaysareactiveinasinglesite,withHAislocaltothesiteWorkloadsareactiveacrossbothsitesandcanoptionallysupportlivevMotionDRSaffinityrulesforworkloadsarenotrequiredVMwareESXiEdgeClusterAVMwareESXiSiteAVMwareESXiVMwareESXiSiteBEdgeClusterBVMwareESXiWorkloadClusterAVMwareESXiSiteAVMwareESXiVMwareESXiSiteBWorkloadClusterB24第二十四頁(yè)，共92頁(yè)。VMwareNSXMulti-SiteSingleVC,SeparateClustersNSXConfigurationOption1withDistributedLogicalRoutingisunchangedfromStretchedClusterconfigurationandisstillrecommendedForoption2,asvCenterobjectsarenotsharedwecanleverageNSXDFWL2EthernetRuleswithascopeoftheDatacentertoprovideLocalEgress.asonlythesitelocalEdgeGWislearnt.NoenhancementsrequiredSamecaveatswithOption2forStretchedClustersalsoapplySiteASiteBVM1VM2VM3VM3SiteANSX

EdgeGWSiteBNSX

EdgeGW第二十五頁(yè)，共92頁(yè)。ToLocalEgress/Ingressornotto..Asafirststep,askthecustomeriftheyhavestatefulservicesfortrafficenteringandexitingtheDatacenter?ThisisgenerallythecaseandifsotheywillrequireasolutiontoprovideLocalIngressfortheirapplications.Eg,NATGSLBAnycastLISP,RHIetcIftheycanaddressthis,thenaMulti-SiteNSXsolutionprovidingLocalEgressisagoodfitIftheydonot,otherquestionstoaskare:Dotheyhavehighbandwidthbetweensites?andisreducingoperationalcomplexityagoal?AnactiveNSXEdgeGatewayatonesite,withfailovertothesecondarysitemaymeetthecustomersrequirementsandismuchsimplerthanprovidingLocalEgress&Ingress第二十六頁(yè)，共92頁(yè)。VMwareNSXMulti-SiteL2VPN(3)Datastore1Datastore2vCenterServerSiteAorOnPremSiteBorOffPremVM1VM2NetworkA/24SiteANSX

EdgeGWSiteAUplinkNetworkvCenterServerVM3VM4NetworkB

/24SiteBNSX

EdgeGWSiteBUplinkNetworkSSLSSLL3Network27第二十七頁(yè)，共92頁(yè)。存儲(chǔ)資源設(shè)計(jì)第二十八頁(yè)，共92頁(yè)。存儲(chǔ)需求SiteASite

BDarkFiber<=200kmMetroClusterAggrXPlex0AggrYPlex1AggrYPlex0DWDMDWDMAggrXPlex1時(shí)延要求：vSphere要求RTT<100ms存儲(chǔ)同步復(fù)制要求RTT<5ms29第二十九頁(yè)，共92頁(yè)。MetroStorage的兩種實(shí)現(xiàn)方式：Uniform與Non-Uniform30第三十頁(yè)，共92頁(yè)。vSphereMetroStorageCluster工作原理vSphereHAClusterStretchedacross

campus

ormetroareavMSCCertifiedStorageMetroClusterPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSArraybasedsynchronousreplicationPlex0Plex031第三十一頁(yè)，共92頁(yè)。vSphereMetroStorageCluster工作原理StandardvMotionofVirtualMachinesvMotionvMSCCertifiedStorageMetroClusterPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSArraybasedsynchronousreplicationPlex0vSphereHAClusterPlex032第三十二頁(yè)，共92頁(yè)。vSphereMetroStorageCluster工作原理vSphereHAClusterStoragetakeovervMSCCertifiedStorageMetroClusterPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1Plex0Plex0Plex0APPOSAPPOSAPPOSAPPOSAPPOSAPPOSSiteshutdown

formaintenance33第三十三頁(yè)，共92頁(yè)。vSphereMetroStorageCluster工作原理vSphereHAClustervMSCCertifiedStorageMetroClusterPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex0Plex0APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1Plex0Automatic

resyncMaintenanceperformed,siterestored34第三十四頁(yè)，共92頁(yè)。vSphereMetroStorageCluster工作原理vSphereHAClustervMSCCertifiedStorageNetAppMetroClusterPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex0Plex0APPOSAPPOSAPPOSAPPOSAPPOSAPPOSPlex1Plex0StandardvMotion

toreturnVMsAccessreturned35第三十五頁(yè)，共92頁(yè)。存儲(chǔ)設(shè)備選型兼容性網(wǎng)站：http六類(lèi)MetroClusterStorage1,iSCSI2,FC3,NFS4,iSCSI-SVD5,FC-SVD6,NFS-SVD36第三十六頁(yè)，共92頁(yè)。EMCVPLEXforStretchedMetroClustersRoadmapStretchedvSphereClusterSiteA(Active)SiteB(Active)<10ms,IPorFCvCenterEstablishedVPLEXActive-ActiveSolutionInstantvMotionacrossdistanceVMwareHAautomaticallyrestartsVMsateithersiteforsystemorsitefailureBalanceworkloadsacrossbothsiteswithVMwareDRSSupportsVMwareFToutoftheboxAdditionalflexibilityofVPLEXMetroDoesn’tRequireFCCross-ConnectChooseIPorFCConnectivitybetweensitesThirdSite–IPconnectivitytoWitnessVMNoSPOF–IfyouloseaDirector,nolossofaccessatanysiteVPLEXVPLEXDualSiteDRSDualSiteHAInstantvMotionSiteC(OptionalWitness)VPLEXDistributedVirtualVolumes37第三十七頁(yè)，共92頁(yè)。StretchedStoragewithIBMSANVolumeControllerSinglesystemimageacrosstwositesprovidessinglepaneofglassmanagementforday-to-daystoragemanagementactivitySimplifymanagementofyourenvironmentatsametimeasdeployingactive-activestorageBaseduponarichandmatureplatformProvideReal-timeCompression,EasyTier,Non-disruptivemigrations,Longdistancereplication40,000enginesinstalledworldwide,11yearsfieldexperience250+storagedevicessupportedtoprovideback-endcapacityRetainyourexistinginvestmentinstoragedevicesKeepflexibilityforthefutureActivequorumdeviceenablesautomaticfailoverNoexternalmanagementsoftwarePreventssplit-brainSupportsrecoveryincaseoffullunplannedsitefailurescenariosQuorumStoragePool1StoragePool2Site1Site1Site2Site2Site3SVCStretchedCluster38第三十八頁(yè)，共92頁(yè)。來(lái)自存儲(chǔ)廠商的參考指南ImplementingVMwarevSphereMetroStorageClusterwithHPLeftHandMulti-Sitestorage

ImplementingvSphereMetroStorageClusterusingHP3PARPeerPersistence

DeployVMwarevSphereMetroStorageClusteronHitachiVirtualStoragePlatform

IBMSANandSVCStretchedClusterandVMwareSolutionImplementation

VMwarevSphere5.5vMotiononEMCVPLEXMetro

39第三十九頁(yè)，共92頁(yè)。VSANforMetroCluster2015Q3

(計(jì)劃)SiteAFaultDomainAFaultDomainBFaultDomainCVirtualSANClusterSiteCSIteBvmdkwitnessvmdkvmdkwitnessvmdk從機(jī)架感知升級(jí)到站點(diǎn)感知：1，迷你容錯(cuò)站點(diǎn)專(zhuān)用于witness2，優(yōu)先從本地站點(diǎn)讀取數(shù)據(jù)以提升性能40第四十頁(yè)，共92頁(yè)。議程1同城雙活技術(shù)方案2異地災(zāi)備技術(shù)方案41第四十一頁(yè)，共92頁(yè)。RTO,RPO,andMTDRecoveryTimeObjective(RTO)HowlongitshouldtaketorecoverRecoveryPointObjective(RPO)AmountofdatalossthatcanbeincurredMaximumTolerableDowntime(MTD)DowntimethatcanoccurbeforesignificantlossisincurredExamples:Financial,reputation42第四十二頁(yè)，共92頁(yè)。TheThreeBuildingBlocksForDisasterRecoveryvSphereVirtualSANEcosystemVDPAdvancedvSphereReplicationSiteRecoveryManagerVMwareArray-basedBackupcopiesExternalStorageStorageComputeBackupandRecoveryReplicationDROrchestration43第四十三頁(yè)，共92頁(yè)。異地(同城)災(zāi)備解決方案總體架構(gòu)44第四十四頁(yè)，共92頁(yè)。異地(同城)災(zāi)備解決方案——多種映射關(guān)系主備式切換雙活切換雙向切換雙活數(shù)據(jù)中心ProductionRecoveryProductionRecoveryProductionProduction最常見(jiàn)的場(chǎng)景花銷(xiāo)較大災(zāi)備架構(gòu)主要用于測(cè)試，開(kāi)發(fā)和培訓(xùn)等非生產(chǎn)應(yīng)用有效降低開(kāi)銷(xiāo)兩個(gè)站點(diǎn)均有生產(chǎn)應(yīng)用每個(gè)站點(diǎn)為對(duì)方提供容災(zāi)支持兩個(gè)站點(diǎn)的應(yīng)用可以跨站點(diǎn)自由移動(dòng)計(jì)劃內(nèi)事件零停機(jī)限制在城域范圍內(nèi)Site1Site2Production45第四十五頁(yè)，共92頁(yè)。網(wǎng)絡(luò)資源設(shè)計(jì)第四十六頁(yè)，共92頁(yè)。“Protected”Site“Recovery”SiteStorageStorageVMFS/NFSVMFS/NFSStorageVMFS/NFSVMFS/NFSReplicationSRMwithNSXforvSphereNSXManagerNSXControllerClustervCenter+SRMvCACNSXManagerNSXControllerClustervCenter+SRMvCACFirewallRules&SecurityGroups47第四十七頁(yè)，共92頁(yè)。SRMwithNSXforvSphereWhathasbeenvalidatedSRMcanmapVMsfromoneVXLANLogicalSwitchonthePrimarySitetoadifferentLogicalSwitchontheRecoverySiteTheseLogicalSwitchescanbeconnectedtopre-createdNSXDistributedLogicalRoutersorNSXEdgeServicesGWsPlaceholderVMscanbeaddedtoSecurityGroupsandinaDRevent,whentheseVMsbecomeactivetheyareprotectedbyDFWDynamicRoutingcanbeusedtoadvertisenetworksontheprimarysite.Usingmetric/weightthesenetworkscanbere-advertisedontherecoverysiteifthereisasitefailoverThismapsverycloselytothevCACdeploymentmodelforpre-creatednetworkswhichisusedforproductionworkloads.Test/Devworkloadsusingon-demandnetworkingdonottypicallyrequireDRCurrentlybeingtestedAutomatesynchronizationofNSXDistributedFirewallRulesetandSecurityGroupsbetweentwoNSXManagersTieintoSRM,soatthetimeVMsareaddedtoaProtectionGrouptheplaceholderVMsareautomaticallyaddedtotheappropriateSecurityGroupsWorkingcloselywithEMCaspartoftheirEnterprisePrivateCloudReferenceArchitectureprojectto

turnthisintoaproductizedsolutionincludingvCAC第四十八頁(yè)，共92頁(yè)。LogicalArchitectureView/24/28NoNetworkReaddressing(DynamicRouting)VXLANVXLANVLANVLANvCenter+SRMvCenter+SRMDistributedLogicalRouterDynamicRouting(OSPF,BGP)PrimaryVMsPlaceholderVMsDistributedLogicalRouterDynamicRouting(OSPF,BGP)Pre-createdLogical

SwitchesandEdgesStorageReplicationVMFSVMFS“Protected”Site“Recovery”Site49第四十九頁(yè)，共92頁(yè)。PrimaryVMsSRMwithNSXforvSphere/24/28NoNetworkReaddressing(DynamicRouting)VXLANVXLANVLANVLANvCenter+SRMvCenter+SRMDynamicRouting(OSPF,BGP)PrimaryVMsPlaceholderVMsDistributedLogicalRouterDistributedLogicalRouterDynamicRouting(OSPF,BGP)SG-Prod-01SG-Dev-01SG-Prod-01SG-Dev-01SiteANSXEdgeGWSiteBNSXEdgeGW50第五十頁(yè)，共92頁(yè)。SRMwithNSXforvSphereCurrentChallengesBoththeprimaryandrecoverysitesneedtobepreparedforNSXinandnetworksneedtobecreatedonbothsitesfortheSRMmappingDynamicallycreatednetworksandport-groupsontheprotectedsitearenotcreatedontherecoverysiteautomaticallyandwillneedtobedonemytheadministratorDRsiteconfigurationverificationandremediationprocessestomaintainsynchronizationiscurrentandmatchingonboththesitesServicecomposerfeaturesaredependentonUUIDandVDSuniqueidentity’s(currentlynotsupported)OutoftheBoxsupportfromSRMFutureDevelopmentScopeAcceptablePreparationstep,shouldbepartofarunbookAutomateSRMPort-GroupmappingviaVCO.AutomatesynchronizationofNSXDistributedFirewallRulesetandSecurityGroupsbetweentwoNSXManagersusingVCOworkflowsandtheNSX-VCOpluginEnhanceVCOtosupport2-waysynchronization.InvestigatingremovalofserviceComposerVDSthumbprintdependenciesTieintoSRM,soatthetimeVMsareaddedtoaProtectionGrouptheplaceholderVMsareautomaticallyaddedtotheappropriateSecurityGroups(Q2-2015)51第五十一頁(yè)，共92頁(yè)?！癙rotected”Site“Recovery”SiteStorageStorageVMFS/NFSVMFS/NFSVMFS/NFSNSXWorkflowforManualSynchronizationStep1:Admindeploysalogical

switchontheprimarysiteStep2:Admindeploysalogical

switchontherecoverysiteStep3:AdmindeploysaDLR

ontheprimarysiteStep4:AdmindeploysaDLR

ontherecoverysiteWhenanobjectiscreatedontheprimarySite,thesameobjectneedstobedeployed

ontherecoverysitetomaintainconsistency

Duplicatenetworksegmentsandsubnets

canexistonboththeprotectedandthe

recoverysite,thisistomaintainIPaddresses52第五十二頁(yè)，共92頁(yè)?！癙rotected”Site“Recovery”SiteStorageStorageVMFS/NFSVMFS/NFSVMFS/NFSNSXVCOWorkflowforSynchronizationAdmindeploysalogicalswitchontheprimarysiteVCOworkflowistriggeredto

replicateobjecttorecoverysiteNewobjectiscreatedonthe

recoverysiteAdmindeploysaDLRonthe

primarysiteVCOworkflowistriggeredto

replicateobjecttorecoverysiteNewobjectiscreatedonthe

recoveryScheduledSyncprocessvalidatesProtectedsitewithrecoverysiteAnydifferencesareremediatedScheduledSyncprocessvalidatesProtectedsitewithrecoverysiteAnydifferencesareremediated53第五十三頁(yè)，共92頁(yè)。存儲(chǔ)資源設(shè)計(jì)第五十四頁(yè)，共92頁(yè)。軟件定義存儲(chǔ)在BC/DR解決方案中的獨(dú)特價(jià)值55vSphereStoragePolicy-BasedMgmtVirtualSAN基于存儲(chǔ)策略的管理SAN/NAS虛擬卷管理VirtualDatastoreVirtualDatastore低成本的存儲(chǔ)解決方案快速，面向應(yīng)用的置備不依賴硬件便于采用非對(duì)稱(chēng)設(shè)計(jì)不需要管理LUNs,Vols在線變更策略無(wú)需數(shù)據(jù)遷移第五十五頁(yè)，共92頁(yè)。數(shù)據(jù)保護(hù)方案設(shè)計(jì)第五十六頁(yè)，共92頁(yè)。DataProtectionTechniques57HIGHLOWSLOWFASTPotentialforDataLoss(RPO)TimetoRecover(RTO)SynchronousReplicationTapeBackupAsynchronousReplicationSnapshotsDiskBackupHowmuchdatacanyouaffordtolose?Howlongcanyouaffordtobewithoutthedataorservice?第五十七頁(yè)，共92頁(yè)。DataProtectionUseCases58RTOTypical

RPORetentionUseCasesSynchronousReplicationSub-minute/instantZerodatalossNoneLivemigrationHighavailabilityApplicationmobilityAsynchronousReplicationMinutestohoursMinutestohoursDaysHWfailureSite/disasterrecoveryPlannedmigrationCorruption/datalossSnapshotsSecondstominutesMinutestohoursDaysTest/dev/labCloningPatching/maintenanceCorruption/datalossBackupHoursDailyWeeklyMonthlyYearlyMonths+Corruption/datalossFilerecoveryLong-termretentionComplianceApplicationintegration第五十八頁(yè)，共92頁(yè)。選擇正確的數(shù)據(jù)保護(hù)方案59基于陣列

的復(fù)制

vSphere

復(fù)制技術(shù)vSphere

數(shù)據(jù)保護(hù)可實(shí)現(xiàn)零數(shù)據(jù)丟失存儲(chǔ)合作伙伴解決方案RPO同步分鐘小時(shí)天RPO從15分鐘到24小時(shí)基于虛擬機(jī)層，虛擬機(jī)級(jí)別RPO最小1天備份數(shù)據(jù)復(fù)制可實(shí)現(xiàn)

自動(dòng)化

災(zāi)難恢復(fù)第五十九頁(yè)，共92頁(yè)。VDP&VDPAdvancedSimple,EfficientBackupandReplicationwithPredictableRecoveryvSpherededuplicateddataVMFS,NFS,VSANstorageVDPAdvWhatisit?vSphereDataProtectionisabackupandreplicationsolutionforsimplifyingandoptimizingdataprotectioninvSphereenvironmentsKeyFeaturesAgent-less,disk-basedvirtualmachinebackupsApplication-aware,granular,agent-based

dataprotectionforphysicalandvirtualapplicationsEnd-to-endintegrationwithvSphereandmanagedthroughvSphereWebClientSingle-steprecoverySelf-serviceFile-LevelRecoveryPoweredbyEMCAvamar60第六十頁(yè)，共92頁(yè)。4xMoreStorage-efficientand6xFasterforRecoveryUniquevariable-lengthdedupe~$60KsavingsonstorageTCOperyear4xSource:ESGLabValidationReport–vSphereDataProtection,February20136xUniqueCBTRestoretechnologyRecoverVMstoproductioninminutes"Forrealbackups,VMwareoffersvSphereDataProtection(VDP)[…]thededuplicationlevelsareamazing”TrevorPott-TheRegister第六十一頁(yè)，共92頁(yè)。ManagewithEase:aSimpleWaytoHandleBackupsManagedthroughvSphereWebClientDeployedasvirtualapplianceWizard-drivenOne-steprecoveryEnd-userFile-LevelRecovery(FLR)“UsingvSphereDataProtectionallowsustohavethemanageabilitythatwedidn’thavebefore.[…]thiswasano-brainerforus.”SeniorITArchitect,LargeEnterpriseComputerServicesSource:TechValidate.TVID:07A-32C-7F262第六十二頁(yè)，共92頁(yè)。DataProtection(BackupandRestore)Agents?NoAgents?–Both!Noagentsformajorityofworkloads–keepitsimpleAgentsforcertainappsvSphereDataProtection(VDP)AdvancedBackupandrecoveryforVMware,fromVMwareBasedonproven,matureEMCAvamar?Agent-lessVMbackupandrestoreAgentsforgranulartier-1applicationprotection63第六十三頁(yè)，共92頁(yè)。ApplicationAwarenessforMission-CriticalApps

BackupforVirtualandPhysicalApplicationsInVDPAdvancedOnlyAgentsforExchange,SQL,SharePointDatabase-levelbackupandrecoveryforExchange,SQL,SharePointMailbox-levelrecoveryforExchangeBackupfornon-virtualizedExchange,SQL,SharePointappsSupportforMSExchangeDAGs,SQLServerClustersKeyBenefitsApplicationconsistencyClient-sidededuplicationGranularbackupandrestoreLogmanagementvSphereVirtualPhysical64第六十四頁(yè)，共92頁(yè)。VDPAdvanced–KeepInMind…EngineeredforSMBenvironmentsUsesVADP–VMsnapshots,CBTUtilizesWindowsVSSinVMwareToolsWorksfinewithHA,notwithFTRDM–virtualyes,physicalnoIsitDR?Maybe–dependsonRTO,RPONeedsreplicationoffsite,right?–seeBCO2629andBCO2760BestPracticesPrepopulateDNS,alwaysuseFQDNManageVMsnapshotsAvoiddeployingtoslowstorageDonotpower-off,alwaysshutdowngracefullyDonotschedulebackupsduringmaintenancewindow65第六十五頁(yè)，共92頁(yè)。數(shù)據(jù)復(fù)制方式的選擇66解決方案提供商成本可管理性性能vSphere

復(fù)制技術(shù)支持低端存儲(chǔ)設(shè)備不需要購(gòu)買(mǎi)額外的復(fù)制組件(vSphere包含免費(fèi)的數(shù)據(jù)復(fù)制功能)虛擬機(jī)級(jí)別的控制，顆粒度好在vCenter中直接管理15分鐘的RPOs文件級(jí)一致性基于存儲(chǔ)的

復(fù)制技術(shù)需要購(gòu)買(mǎi)中高端存儲(chǔ)需要購(gòu)買(mǎi)額外的復(fù)制組件基于LUN來(lái)配置復(fù)制需要存儲(chǔ)管理員配合管理支持同步復(fù)制支持大數(shù)據(jù)量應(yīng)用級(jí)一致性第六十六頁(yè)，共92頁(yè)。vSphereReplication(VR)

Hypervisor-basedReplicationforvSphereVMs67vSphereSiteAvSpherevSphereReplicationSANNASVirtualSANVirtualSANNASSANSiteBMultiplepoint-in-timeIncludedwithvSphereEssentialsPlusorhighereditionsSolutionDescriptionVRisVMware’sproprietarytechnologyforhypervisor-basedreplicationofvSpherevirtualmachinesKeyFeaturesVM-centric,storage-independentFlexibleRPO(15min.to24hrs.)MPIT(1)recovery(upto24replicas)Network-efficient“l(fā)ight-weightdelta”replicationKeyBenefitsSimplifiesreplicationofvirtualmachinesReducesstorageandbandwidthinvestmentsIntegratedwiththeVMwareproductstackIncludedwithvSphere(2)atnoadditionalcost第六十七頁(yè)，共92頁(yè)。Full/initialSyncStartfreshorwithseedviaphysicalmediaComparesdiskIDsCalculateschecksumofallblocksatsource&targetExchangesandcompareschecksumstodeterminedeltaReplicatesallchangedblocksnecessarytoalignvirtualdisksDeltasyncWritestrackedbyvSCSIfilterdriver,whichispartoftheESXhostTracksnewblocksastheyarewrittenBitmapofchangedblocksismaintainedbetweenreplicationsEachreplicacorrespondstoalightweightdeltaDuringasyncchangedblocksarereadandsenttothetargetNoVMstun&verylittleIOpenaltyvSphereReplication–HowitWorks68第六十八頁(yè)，共92頁(yè)。vSphereReplicationProvidesTheMostFlexibleVMProtection69FlexibleRPOenablesprotectionaccordingtoappneedsandavailablebandwidthMPITrecover